last executing test programs: 2.542446745s ago: executing program 1 (id=4466): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x2) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="747e3347c90e0dac23a735ea7f2b2e4e9a7a87f8735c07f60c4e278d7b23b062c4404043025debb3ea5be510f608a259c2f0c123e27bbc6e826cf3afdc598e", 0x3f}, {&(0x7f00000001c0)="fc", 0x1}, {&(0x7f0000000200)="a5a450e286819dd7f25f68b47df5b711ac319a15a0ee3c3906bb5956ab60b61f5d91f9104415cc4668d5a132b896735d865d85", 0x33}], 0x3, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x4) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206197bafa7283da60565717c311fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c0a4c8303a0f7fbda34fb8825f80200e3c0aba6"], 0xdd12}], 0x1}, 0x40) (async) getpeername$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x20) 2.522209008s ago: executing program 1 (id=4470): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x2, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r4, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRESDEC=r3, @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x50) 2.521713923s ago: executing program 2 (id=4471): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x8, 0x400, 0x80000000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x3, 0x8000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @broadcast}}}}) 2.519432394s ago: executing program 2 (id=4474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c0000800800034000000000ce0d8c6509391f47de4808e4cfe9e76d94dd8903e8ba70195dffc58f8eacabda5b0ca6327d029fa4be506131276a7702a638d235e35060fa8a10b51c5f4b6f1696c0b6504f8f1f90e7a7c266d6e78e317289abd4b85f45ce3ee31d092681c715a43391eea0f6955d1918a02908678e405e91d48aedfa9fa503"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8800) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f00000003c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x20000005}, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="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") 2.51674829s ago: executing program 1 (id=4476): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0f0c29bd7000070000002300000008000200", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xf}}}]}, 0x3c}}, 0x0) 2.513325946s ago: executing program 2 (id=4477): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) (async) r8 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1a0, 0x4, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe726f70}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x265f3f0b}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6780}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbf1}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x9b, 0xc, "9b2575d6a7de104eddf747c1dae394e58251a8a0683f53dc325b5a694f5f96dd3104831d690361e565a1fc8c755110d4ca8ce191b5c63c07e12ddd9e25b5b6d1605713cf720d707b34a180ebf92cd7406c0229a71b0039a769eebccd3fe9bcc07021b99e3e6ab24230beb4dfae7c0dadfb794767ad60107046cf3d9bc5cb52a8719bfc47540830895304f11c13b070ee8859c4ad75b6c4"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xacffa6f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x1a0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.361494635s ago: executing program 1 (id=4481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000280)=0x8c) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'vlan1\x00', @multicast}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118d00000c0000c797ebc83560ebd7"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.360067967s ago: executing program 3 (id=4482): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r0, 0x0, 0x1a, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r3, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) (async) 2.355280872s ago: executing program 2 (id=4483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048040) 2.327127499s ago: executing program 0 (id=4484): r0 = socket$inet6(0xa, 0x2, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x910, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x22}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) 2.256149306s ago: executing program 2 (id=4485): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) (async) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61c2f}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x6, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340), 0x1000000}, 0x20) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r5 = socket(0x2a, 0x2, 0xfffffffc) (rerun: 32) connect$bt_sco(r5, 0x0, 0x0) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.073619532s ago: executing program 3 (id=4487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000140), 0x4) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r3, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000340)={0x54, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040001}, 0x8844) (async) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xffffffff], [0xffffffff], 'bridge_slave_1\x00', 'dvmrp1\x00', {0xff}, {}, 0x88}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0x8, 0x5], 0x8, 0x30, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @loopback, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x31}, @mcast1], 0xb}}, @common=@ipv6header={{0x28}, {0x10, 0x2e}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @loopback}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0xf7, 0x3}, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x1, {0x8000000000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) (async) recvmsg$can_bcm(r7, &(0x7f00000002c0)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/157, 0x9d}], 0x1, &(0x7f0000000240)}, 0x10162) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) (rerun: 64) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xffffffffffffffff, "0664d2008b95fd21827c7a919f0f41a189bec85f1f495f77fe700377f0222a1c", 0x40, 0x0, 0xc7, 0x3}, 0x3c) 1.83892775s ago: executing program 0 (id=4489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000000)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000095db43f40899a00cdfde16d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r5, &(0x7f0000000800)="468ea009", 0x0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.757369483s ago: executing program 0 (id=4491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x10}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) (async) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmmsg$inet(r5, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="ead0", 0x2}], 0x1}}], 0x1, 0x80) close(r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x400, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {0xc}, {0x8, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) 823.978594ms ago: executing program 2 (id=4494): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x58, &(0x7f00000002c0)=ANY=[@ANYBLOB="9f0fb34289a8aaaaaaaaaabb88a816008100390088480000000005daff0600162100fe800000000000000000000000000029ff020000208075dbe4cfd440de06710000000000000000"], &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) sendto$packet(r0, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x100000000, 0x102, 0xfffeffffffffffff, 0x3, 0x20000000b, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000980), 0xe) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0xf0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000001280), 0x4) r7 = getpid() sendmsg$unix(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x362) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000d40)={&(0x7f0000000080)=0x80000009, 0xb, &(0x7f0000000880), &(0x7f0000000d00)}) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x800) 730.96727ms ago: executing program 3 (id=4496): syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b000000", @ANYRES32], 0x48) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 729.551699ms ago: executing program 4 (id=4497): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/218, 0xda}, {&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/33, 0x21}, {&(0x7f0000002400)=""/154, 0x9a}], 0xa}, 0x10}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002580)=""/180, 0xb4}, {&(0x7f0000002640)=""/42, 0x2a}, {&(0x7f0000002680)=""/80, 0x50}, {&(0x7f0000002700)=""/146, 0x92}, {&(0x7f00000027c0)=""/138, 0x8a}, {&(0x7f0000002880)=""/226, 0xe2}], 0x6, &(0x7f0000002a00)=""/47, 0x2f}, 0xf}, {{&(0x7f0000002a40)=@ax25={{}, [@bcast, @rose, @bcast, @bcast, @rose, @remote, @null, @rose]}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/74, 0x4a}, {&(0x7f0000003b40)=""/42, 0x2a}, {&(0x7f0000003b80)=""/183, 0xb7}, {&(0x7f0000003c40)=""/215, 0xd7}, {&(0x7f0000003d40)=""/241, 0xf1}, {&(0x7f0000003e40)=""/175, 0xaf}], 0x7, &(0x7f0000003f80)=""/234, 0xea}, 0x6}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000004080)=""/169, 0xa9}, {&(0x7f0000004140)=""/3, 0x3}, {&(0x7f0000004180)=""/149, 0x95}], 0x3, &(0x7f0000004280)=""/110, 0x6e}, 0x9}, {{&(0x7f0000004300)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000005680)=[{&(0x7f0000004380)=""/73, 0x49}, {&(0x7f0000004400)=""/223, 0xdf}, {&(0x7f0000004500)=""/116, 0x74}, {&(0x7f0000004580)=""/154, 0x9a}, {&(0x7f0000004640)=""/27, 0x1b}, {&(0x7f0000004680)=""/4096, 0x1000}], 0x6}, 0x20000}, {{0x0, 0x0, &(0x7f0000006840)=[{&(0x7f0000005700)=""/167, 0xa7}, {&(0x7f00000057c0)=""/112, 0x70}, {&(0x7f0000005840)=""/4096, 0x1000}], 0x3}, 0x7}], 0x6, 0x50dcfc3989ccb4a0, &(0x7f0000006a00)) ioctl$int_in(r0, 0x5452, &(0x7f0000006a40)=0xfffffffffffffffa) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xdc05b000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000006a80)=@assoc_value={0x0}, &(0x7f0000006ac0)=0x8) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000006b00)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000006b40), &(0x7f0000006b80)=0xe) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000006bc0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000006c00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000006c80)={@broadcast, @multicast1, 0x0}, &(0x7f0000006cc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006d00)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000006dc0)={'ip6_vti0\x00', &(0x7f0000006d40)={'syztnl2\x00', 0x0, 0x4, 0x2, 0xff, 0x8, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x707, 0x0, 0x6918735f, 0x80000000}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000070c0)={0xffffffffffffffff, 0xe0, &(0x7f0000006fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000006e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000006e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000006ec0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000006f00), &(0x7f0000006f40), 0x8, 0x17, 0x8, 0x8, &(0x7f0000006f80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000007100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000007300)={&(0x7f0000006c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000072c0)={&(0x7f0000007140)={0x158, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000007340)={0x3, 'batadv_slave_0\x00', {0x7}, 0x1ab}) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r10, 0x0, 0x83, &(0x7f0000007500)={'broute\x00', 0x0, 0x4, 0xed, [0x8000000000000000, 0x7, 0x4, 0xfffffffffffffffd, 0x7, 0x4], 0x8, &(0x7f0000007380)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000007400)=""/237}, &(0x7f0000007580)=0x78) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000075c0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000077c0)={r11, 0x9}) connect$inet(r10, &(0x7f00000087c0)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000008e00)={{0x5, 0x6, 0x4, 0x6944, 0x7}, &(0x7f0000008800)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) tee(r2, r12, 0xdad, 0x1) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000008e80)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000008ec0)={0x2931, 0x2458, 0x8, 0x2, 0x6, 0x2, 0x627, 0x7, r3}, &(0x7f0000008f00)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f0000008f40)={r14, 0x1, 0x30}, 0xc) 688.807854ms ago: executing program 1 (id=4498): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0xffffff5f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r5 = socket$kcm(0x10, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0xd, "6f03057a91f875ccf5bd5d"}, {0x0, 0xf, "6253659c41d7cea461f45f9d37"}, {0x0, 0x2}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r9}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r10, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r11}, 0x20) setsockopt(r8, 0x9, 0x9, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x5c}}, 0x8000002) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 632.037688ms ago: executing program 0 (id=4499): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0x4, 0x43, "106ea5cd8ad315ccefa8536b5afd4c144013ff77dba05219b18e46315086ffba1e2e3711bf74e213d329dc65c3dc8a6e9a309259a6ba5e686b9d446c0c8d2b8233fca5"}, 0x4b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, &(0x7f0000000380)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES8=r2, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x844) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x80800) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0x4, 0x43, "106ea5cd8ad315ccefa8536b5afd4c144013ff77dba05219b18e46315086ffba1e2e3711bf74e213d329dc65c3dc8a6e9a309259a6ba5e686b9d446c0c8d2b8233fca5"}, 0x4b) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, &(0x7f0000000380)) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRES8=r2, @ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x844) (async) 423.726456ms ago: executing program 0 (id=4500): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000", 0x38}, {&(0x7f00000004c0)="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", 0xefc}, {&(0x7f0000002440)="695c2769ae3b858d658ad07815e2166a6e87fdc9de", 0x15}], 0x3}, 0x4004000) 422.826132ms ago: executing program 3 (id=4501): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x20004086) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='j\x00', 0x800, &(0x7f00000000c0)={@_ha_fsid={[0x400, 0x3]}, {0x6, 0x2, 0x2, 0x6}}, 0x9dbc, &(0x7f0000000100), &(0x7f0000000140)=0x8}) write$tun(r3, &(0x7f0000000440)={@val, @void, @ipv6=@udp={0x5, 0x6, "001000", 0xb7, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x1d, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xf45}, @jumbo={0xc2, 0x4, 0x4}]}], {0x4e22, 0x4e21, 0x9f, 0x0, @opaque="62b4bdc0598cafe41586ccff73849a32ec6c57e8947d2ad5c2bc08d04e976433b8cd5a79332075e2b5ac4643bcbd34f91f9dd7c39a984d2b02645b5e083fe64a834e19159a0c0d8b7e8ff7fb7ac3c1ac2d1e83c5e3f6c952949f1f261a61501052de3a33901d19dd1b6143d4bcc883d055af3a904cdd385942e2d0123f766bcee004edc707475e3d3140503243ce81f26968f35fa1ae3b"}}}}, 0xe3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x1d, &(0x7f0000000540)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3}, @alu={0x7, 0x0, 0x4, 0x0, 0x7, 0x8, 0xfffffffffffffff4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r3}, 0x94) 395.259128ms ago: executing program 4 (id=4502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000005b00000005005300010000001400040064766d727030000000000000000000000800050004000000108763e39db5af13d3a4f3f43abf87fac3bbf3f973b9978f60d006e653e7cdf047fbda4ebbccf0a6faa09a461ecbbd15a209def54e3d3b61612ddea5c2b40b79e915f59c48e15c8dac38746b1dae0d2c258d0517ef0f951b852e3fc78b9da11928018ad1578e18d155a7abeae9afc8632e64f8ce9126aecf86be41e650cf84ce5feb47"], 0x4c}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8044) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000001308000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r9, 0x0, 0x40804) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x4c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x80) 323.112277ms ago: executing program 0 (id=4503): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be", 0x1}], 0x1}}], 0x1, 0x40) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x11, 0x4) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x14, 0x0, &(0x7f0000000940)="18d26a3d9673399025aae4121e420e3eef774116", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r7, &(0x7f0000000100)}, 0x20) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e23, 0xc207, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x97fe}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) 215.391724ms ago: executing program 4 (id=4504): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set2={{}, {{0x1, 0x3, 0x1}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x0, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff36) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 207.792392ms ago: executing program 4 (id=4505): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x10000, 0xfefffffb, 0xffff0000, 0x80, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x3, 0x6, 0x3, 0xc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r3, 0x0, 0x0, 0x4}, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9fd}, {0x6, 0x11, 0x29d}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002}, 0x4000000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000000000000000000b2d3ebb4d6a11ddc7d287ab2d4a18979075ae6b180e2f0eb2ceef0182de604c3398392486b7e9d126d6de636c85fdf2f4c079b82169719001a09d012d01cc2a6a503e06dac48dd09fb540749ea24f39e52e0b4", @ANYRES32=r2, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) 182.636132ms ago: executing program 1 (id=4506): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a000000000000611161000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$tipc(r8, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r10], 0x44}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711012000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'syz_tun\x00', @random="224d9b67323c"}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010026bd7000fcdbdf25125024e8fa00000018000180140002007465616d5f736c6176655f31000000000800060000001c0022ec46c99a1bd9db64bd6040c6468d5d7502cd943cb62bde9e6060eab26f098ccb58eb0a184ab4a37459fb9e19bbfcf217bec121e227035008ef34b6cbb77790aaca2e3bdd30b222c99accd9bcbd555088fad6c7ed40b3a8cec7e0a5ea3c0660994a2565fa78d70400b311af076c6b3bc159101f29c1127f0164e9"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) 90.187759ms ago: executing program 3 (id=4507): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) (rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) (async, rerun: 32) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x5, 0x4, 0x5, 0x2f, 0xff}) (rerun: 32) syz_emit_ethernet(0x51, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @local, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@generic={0x805, "54e9ee0301850ec755ea94fcfd518dbe20452aae7172a0b11d7911bfd72586438727af058ca1fa8794e627d234b8333d867b0a561308c7c5fb3af80c5294c9"}}}, &(0x7f00000001c0)={0x0, 0x3, [0xc5, 0xe10, 0xaf8, 0x315]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={0xffffffffffffffff, 0x0, 0x1000, 0xfe, &(0x7f0000000200)="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", &(0x7f0000001200)=""/254, 0x0, 0x0, 0x88, 0x87, &(0x7f0000001300)="c94430ff9246476348219f1ff5defb299d44371b6b13f966ef72ac9903b91a4232d117b317ff44cb568c9978103953c7eb551a8798547f5813f781eff7c2fc9cf4ebe81015d408171bd84b76767a91f0c0783f239c1b9bded6565fa9d48badb5b9669618185e81ae06194738ed0f0c7d6a3b0e57761e65d8d050eb39880dc408324386ef469362bb", &(0x7f00000013c0)="59ca2faf7a384d2e48f5918c391ebc05f2b4af08208ac53a0fc447ea1502484302bab9661c94a9b775d3fd2b9e5923b6800cd915a1c23b6a6e8b48f5bc1c97708ec17c042ce860973f2077350bb967a4cd5ed277bfe25e9722773601d2672f104ed3cd85ede035a4a16a13ccfaa484f5657a915456bb7b10194176ae76bb2d020f3f14d3b80dc4", 0x0, 0x0, 0x6}, 0x50) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000001500)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) write(r0, &(0x7f0000001580)="5beb4149f7d08836411a136154730a5b433d118d0200db6731c26c2165133031d4f9a9ad60ab1bd7e84ddf11d252", 0x2e) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x7397f383f5335fc5}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x18, 0x1410, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x20000004) (async) close(r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)={0x12c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5b}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb0}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x917, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x40e}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @private1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @empty, 0x40}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001980)=@nat={'nat\x00', 0x1b, 0x5, 0x518, 0xf0, 0x320, 0xffffffff, 0x0, 0x448, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, &(0x7f0000001900), {[{{@ipv6={@remote, @remote, [0xff000000, 0xff, 0xffffffff], [0xffff00, 0xffffff00, 0xff0000ff, 0xffffffff], 'syz_tun\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x1, 0xf, 0x1}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv4=@empty, @ipv4=@empty, @gre_key=0xf6, @gre_key=0x5}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {'V@', 0x1}}, @common=@ipv6header={{0x28}, {0x20, 0x16}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xf, @ipv4=@rand_addr=0x64010102, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x7fff, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bond0\x00', {0x10000}}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "1909"}}, @common=@hl={{0x28}, {0x1, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x400, 0x3, 0x10001, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) (async) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, &(0x7f0000001f00)={r2, 0x0, 0x4482036e, 0x81, 0xffffffffffffffff, 0x4}) (async, rerun: 64) r5 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000003640)={&(0x7f0000001f40)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001fc0)="1d7e34c83b7c94092b18b13c1f7643f242e4547c44980f1cbc3f83efa8d3bf458ee7c81fa75726566fa705c4f30f4dc4a8ab12960dae2768c518b8a6f35a2a", 0x3f}, {&(0x7f0000002000)="3120f0113c9e58110a28eeb70bbae5c25209477881575b7027cb2fab02e0bbf7bfc158dfbb58ca7bc69909bf17ed89019524a9152947b29e1c983c5f32cf033e516f42c804b8c3aa4daeaa26e766f1a7e11e1e71f994a6166cee559d8e10518ea5576447d1c5f51ebba87d1885f2490383d214bc7bd8afa9f17861dfe0291257015867ee926842aeb40e5f2414b69176b33e7c8159da3372e89297a400039fcc49af8a75a29d542bed73f0a011fba7ccf165bc", 0xb3}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="14254a650e1570970061068d462dd10684e032e3e63c03b8cb6b93e0fe32b95063b7a02dc593057fbab92708780b117e45997b2c3210fb66f5de22f7fc3a969f066098eaa2d703cd39f7f90e04bc9c3429afb75286f461dc282d042d9ba5e5817445f8af73c63631cb75e6817cb7d6d635ea86eafd72b06b34c1d8f22f86b1e5d8937def350f0f3fa27f6545e7f7e4bed8c710f88f2a9f3cf4aeced0b1829e261a76", 0xa2}, {&(0x7f0000003180)="e838927c4a1dc3281d08bb7792c4a9fb5b08b23b96d9d3c647e2462e190d384615d437d1eaef55fa6aa83f0af172ed9997e298c6ed55442c37881596afcbc5223659bce1e1899bbade8bf0d1eb2769d0f4ea361b21c772517ff690d16021e0658c44da3a2542895e4500de401b6c726d67c0c2f0fee15407cce5970692c95c21e57df7f61b0b63bdc6060d022af155f1f5b60c830f63d319a3995d46d5c01122a6d927a300d06e3e33a98c4164055319a958a3c3eaa0196dd79886a7644d28943a46ceb3a5", 0xc5}, {&(0x7f0000003280)="cc872086832bb3ba62bffd9aacbd00108f566043e13ab6ab1794a6251c5864ca7dd532", 0x23}, {&(0x7f00000032c0)="2e1ee2345c51ef4e4e7763ed8b6a17c26947a51581f6b3f46a5722b3eb93fdf906e28170bdb0a2820d68a456d46877496ac90ce705c1e6ee8111fde6106318a87eb40605c620a77ac77e6c311c154f62e2fd8336978592eb25fe1ff6feeb54e7", 0x60}], 0x7, &(0x7f00000033c0)=[{0x28, 0x0, 0x3, "ffd9d9675b6a3d76ecf6d648d532e64f0e38caf76801"}, {0xa0, 0x103, 0x7, "7c21c704186e00412a99bb2b4452d2e8b1e2df50f5132a26ac614d46428c615f591afba1a3f700b8bd6cab543ce53b8689168a28f2abba643d6db077cf9adc2ad5bdb28cca136989415805c978e7463ede1d66da47336497f2123a46859fa0dc1dead727b1f147bfe17ab7c2b4360c220e9bf9bf0d6cc7a77d89844713549f601ddc93535b030521b06e534afe"}, {0x98, 0x3a, 0x9, "3daffae0900f3da427318bad6ccd18b33c329624fec53e7b8cbeef6146dc7a771bc69ad91d07c3e3bfa3e107dd8dc345a84586ec61be622b0ae42648f20c9dc02b4554629ca79d461174461baca3bbf992792e07d14a04d1766c9e1156c64628278caf1c9c79c8963c51d730af1730a8533c61e64c383fcd871339f1b206e3d9f086"}, {0x28, 0x108, 0x0, "184983e38e42d7e1fd6aec502b06220a73ebeaefd9"}, {0xc0, 0x108, 0x9, "095838fe3e7793f3002ee0dd0916d91efe387a2a4c3157e71d80b32bd6e4b030366919e28fe82d46a94365a6ea2015c97ca2e7fdcb65891a96ced9a6805470b9d03013a0ce208a55b6528848ed5e4198a774ac5ec57359f4646b29a3993e7b874bfe83a57735e35068035c975e2aab5c3f67cf8c164de8f097348d1b9ebe6df8a60d5e71219c371ffea39bddf59e2f041026c0c21f969794d464c5abed9622a68f8f97211fb7df3abebabf"}], 0x248}, 0x40000) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000003680)) (async) socketpair(0x1f, 0x5, 0x2, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000003700)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000003740)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000003780)={r8, 0xe9, "9b7966997f5eb2f4d2ea04dc136ac62992628d48ead7e1c52163a4acdd726ae152dfad65caba50b008e5c097bb5dffd01af18cff79a4c3085d9c3af068650eb534a643608fc543dc2f70d20aa2bfc1e5c1b9c07c5ba46a76bac600d15462bd0b7d63658a94500e7f985af0927c5e059fea0bab11feedb7cb3dd1dbabaa08c10018c3bbaf9576b8b27b69ef09e0798235515d4d8627b007cd0f9d27a4579bb7987d7a646db5dbfba5e44b749e04b8ba88f18a071648713173e195e6df775cc228b88cefee38195fceb1bfcacdf76483b964bcda1916e151ab4059f900aff02d962950fce455dac81284"}, &(0x7f0000003880)=0xf1) (async, rerun: 64) ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f00000038c0)) (async, rerun: 64) getpeername$packet(r6, &(0x7f0000003940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003980)=0x14) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xcb, &(0x7f00000039c0)={0x1, 0x0, 0x7, r9, 0x2}, 0xc) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003a40), r7) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000003b80)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003a80)={0x8c, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000003bc0)={0xaa, 0x9, 0x6}) 88.991274ms ago: executing program 4 (id=4508): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) 3.796679ms ago: executing program 4 (id=4509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x21, 0x0, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x40884) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x18, 0x1, 0x4) sendmmsg$inet6(r5, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x805) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) close(r6) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9c", 0xf}, {&(0x7f0000000980)="e865f05c7d89be06", 0x8}], 0x2}}], 0x1, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x53, 0x0, 0xb, 0xa, 0x7ff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) 0s ago: executing program 3 (id=4510): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$pptp(r0, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x100021, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x8, 0x301, 0x0, 0x0, {0x2c565e7ddb736e6a, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30ca0a499bb81053e82e8a73a17a78e91ab78dffe127ebe361f985db1cfa18572bb9181c8161627d2f53033dffe4ed02479237c6da8276a085aec5d18bd0ae66a71c1f934b2b7f2878bebbc2dca991ec5f1b8ccd5a0b64aa5fe74c2975f810a7f9ca6d7e2673889bda75902188517461635a5ee935", @ANYRES8=r1, @ANYRESOCT=r2, @ANYRES8=r0, @ANYRES32=0x0, @ANYRESDEC=r1], 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x0, 0x2, 0xd, 0x4, 0x1}, &(0x7f0000000280)=0x20) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000d0001000000003abc00000000000000", @ANYRES32=r6, @ANYBLOB="b800000000000100"], 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x909, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) kernel console output (not intermixed with test programs): (bridge_slave_0) entered blocking state [ 319.020421][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.093417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.101203][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.121005][T17041] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 319.298646][T17050] __nla_validate_parse: 6 callbacks suppressed [ 319.298666][T17050] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3048'. [ 319.321224][T17049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.328552][T17049] IPv6: NLM_F_CREATE should be set when creating new route [ 319.335866][T17049] IPv6: NLM_F_CREATE should be set when creating new route [ 319.356886][ T50] Bluetooth: hci4: command tx timeout [ 319.463117][T17058] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 319.605671][T17069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 319.696102][T17064] netlink: 'syz.2.3053': attribute type 16 has an invalid length. [ 319.785275][T17080] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 320.133552][T16639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.275483][T16639] veth0_vlan: entered promiscuous mode [ 320.318981][T16639] veth1_vlan: entered promiscuous mode [ 320.418726][T17119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3063'. [ 320.442697][T16639] veth0_macvtap: entered promiscuous mode [ 320.456960][T16639] veth1_macvtap: entered promiscuous mode [ 320.492545][T16639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.510853][T16639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.529811][ T6284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.541056][ T6284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.553743][ T6284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.574363][ T6284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.585144][T17130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3067'. [ 322.942227][T17090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.080681][ T6281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.114218][ T6281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.217501][ T6281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.236830][ T6281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.318322][T17144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3068'. [ 323.497825][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'. [ 323.509231][T17158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3074'. [ 323.583344][T17165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3075'. [ 323.700921][T17162] IPVS: Scheduler module ip_vs_sip not found [ 323.982142][T17180] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3080'. [ 324.034731][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 324.134460][ T4943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.149169][ T4943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.151957][T17178] vlan2: entered allmulticast mode [ 324.180574][ T4943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.199299][ T4943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.208542][ T4943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.247319][T17178] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 324.534165][T17206] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3086'. [ 324.542814][T17202] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20000 [ 324.588278][T17205] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 324.591985][T17206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3086'. [ 324.948365][T17223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3086'. [ 325.172935][T17228] syzkaller1: entered promiscuous mode [ 325.185728][T17228] syzkaller1: entered allmulticast mode [ 325.293241][ T30] audit: type=1107 audit(1778148450.853:71): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Û¥‘Š}Z$U‰ì1T1ºw£Ù`³Ã;ŸzÁë2¨¾„íwJ%sºß¼!%YzÊ>0,«‹áuÄ·˜&«°N-Lûˆ8òj8' [ 325.360493][T17246] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3092'. [ 325.387057][T17243] tipc: Started in network mode [ 325.400035][T17243] tipc: Node identity f284429e116f, cluster identity 4711 [ 325.416988][T17243] tipc: Enabled bearer , priority 0 [ 325.637856][T17252] syzkaller0: entered promiscuous mode [ 325.643542][T17252] syzkaller0: entered allmulticast mode [ 325.651729][T17252] tipc: Resetting bearer [ 325.719881][T17242] tipc: Resetting bearer [ 325.949888][T17276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.969046][T17276] x_tables: duplicate underflow at hook 2 [ 326.335635][ T4943] Bluetooth: hci2: command tx timeout [ 328.408385][ T4943] Bluetooth: hci2: command tx timeout [ 329.502091][T17242] tipc: Disabling bearer [ 329.557540][T17277] vlan5: entered promiscuous mode [ 329.562719][T17277] bridge0: entered promiscuous mode [ 329.650768][ T5847] tipc: Node number set to 3823846046 [ 329.665432][T17189] hsr0 speed is unknown, defaulting to 1000 [ 329.972165][T17306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.112448][T17306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.191380][T17306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.432935][T17306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.477339][ T4943] Bluetooth: hci2: command tx timeout [ 330.510468][T17189] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.530971][T17189] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.554280][T17189] bridge_slave_0: entered allmulticast mode [ 330.574826][T17189] bridge_slave_0: entered promiscuous mode [ 330.597922][T17189] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.621568][T17189] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.637444][T17189] bridge_slave_1: entered allmulticast mode [ 330.645207][T17189] bridge_slave_1: entered promiscuous mode [ 330.661774][T17339] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3109'. [ 330.694948][T17339] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3109'. [ 330.719287][T17189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.739423][T17189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.805277][ T6284] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.882192][T17189] team0: Port device team_slave_0 added [ 330.898554][ T139] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.910644][T17351] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 330.920767][T17351] netlink: 'syz.1.3113': attribute type 2 has an invalid length. [ 330.933989][T17351] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 330.943498][T17351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3113'. [ 330.964906][ T6284] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.977291][T17189] team0: Port device team_slave_1 added [ 330.984191][T17355] netlink: 'syz.2.3114': attribute type 12 has an invalid length. [ 331.055187][ T139] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.071294][T17189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.085967][T17189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.124816][T17189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.152619][T17189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.159894][T17189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.191181][T17189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.229824][T17358] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3115'. [ 331.249768][T17365] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.326673][T17189] hsr_slave_0: entered promiscuous mode [ 331.334216][T17189] hsr_slave_1: entered promiscuous mode [ 331.344647][T17189] debugfs: 'hsr0' already exists in 'hsr' [ 331.351091][T17189] Cannot create hsr debugfs directory [ 331.387322][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 331.410495][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3119'. [ 331.517372][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 331.542302][T17371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3119'. [ 331.921658][T17390] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3122'. [ 332.307959][T17405] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3123'. [ 332.359406][T17189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.418538][T17189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.431974][T17189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 332.555767][ T4943] Bluetooth: hci2: command tx timeout [ 332.722941][T17189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.757293][T17189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.780337][T17189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 333.098668][T17189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.122831][T17189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.152498][T17189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 333.298475][T17189] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.311095][T17189] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.321653][T17189] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.872116][T17434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.930180][T17189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 335.981255][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.989717][T17189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.037003][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.058762][T17189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.085446][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.109355][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'. [ 336.122440][T17189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.152786][T17189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.224356][T17493] netlink: 'syz.2.3151': attribute type 2 has an invalid length. [ 336.260661][T17493] netlink: 'syz.2.3151': attribute type 1 has an invalid length. [ 336.375580][T17501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3153'. [ 336.619444][T17512] .`: (slave bridge0): Releasing backup interface [ 336.634601][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.642351][T17512] bridge0: port 1(0¾x9ÿ) entered disabled state [ 336.685274][T17512] ¾x9ÿ: left allmulticast mode [ 336.702839][T17512] ¾x9ÿ: left promiscuous mode [ 336.709142][T17512] bridge0: port 1(0¾x9ÿ) entered disabled state [ 336.722692][T17512] bridge_slave_1: left allmulticast mode [ 336.729335][T17512] bridge_slave_1: left promiscuous mode [ 336.735441][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.753639][T17512] .`: (slave bond_slave_0): Releasing backup interface [ 336.770845][T17512] .`: (slave bond_slave_1): Releasing backup interface [ 336.789269][T17512] team0: Port device team_slave_0 removed [ 336.799665][T17512] team0: Port device team_slave_1 removed [ 336.808260][T17512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.816359][T17512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.828942][T17512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.856361][T17189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.929322][T17189] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.967620][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.975452][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.015189][T17526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3165'. [ 337.034791][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.043525][ T6280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.102973][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'. [ 337.157517][T17529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.178042][T17529] batadv0: mtu less than device minimum [ 337.192048][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.210229][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.223990][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.238903][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.251235][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.262970][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.276525][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.289104][T17529] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 337.379199][T17529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.478269][T17543] syzkaller1: entered promiscuous mode [ 337.492841][T17543] syzkaller1: entered allmulticast mode [ 338.709924][T17189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.787007][T17606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.828639][T17606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.859387][T17189] veth0_vlan: entered promiscuous mode [ 338.882378][T17189] veth1_vlan: entered promiscuous mode [ 338.948984][T17189] veth0_macvtap: entered promiscuous mode [ 338.961844][T17189] veth1_macvtap: entered promiscuous mode [ 338.994635][T17189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.048273][T17189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.084589][ T6284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.094925][ T6284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.115246][ T6284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.127103][ T6284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.366096][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.393291][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.454448][ T6285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.474358][ T6285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.609382][T17628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3207'. [ 339.763602][T17632] tipc: Enabled bearer , priority 0 [ 339.793486][T17632] tipc: Resetting bearer [ 339.901170][T17631] tipc: Disabling bearer [ 340.146439][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.161413][T17646] netlink: 'syz.1.3213': attribute type 1 has an invalid length. [ 340.179328][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.191610][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.206361][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 340.216065][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.228134][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.403636][T17652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.419548][T17658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 340.455941][T17652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.487689][T17652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.503007][T17652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.589470][T17654] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 340.638156][T17656] veth3: entered promiscuous mode [ 340.653374][T17656] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 340.746699][T17658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.234171][T17690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3228'. [ 341.447447][T17644] hsr0 speed is unknown, defaulting to 1000 [ 341.691024][T17708] syzkaller1: entered promiscuous mode [ 341.696933][T17708] syzkaller1: entered allmulticast mode [ 341.808194][ T139] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 341.824248][ T139] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 341.836554][ T139] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.845488][ T139] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 40660 - 0 [ 342.316099][ T50] Bluetooth: hci1: command tx timeout [ 342.343099][T17644] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.375703][T17644] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.396160][T17644] bridge_slave_0: entered allmulticast mode [ 342.420148][T17644] bridge_slave_0: entered promiscuous mode [ 342.461795][T17644] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.491032][T17644] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.504272][T17644] bridge_slave_1: entered allmulticast mode [ 342.513010][T17644] bridge_slave_1: entered promiscuous mode [ 342.624443][T17644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.637751][T17644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.753838][T17644] team0: Port device team_slave_0 added [ 342.786746][T17644] team0: Port device team_slave_1 added [ 342.870325][T17644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.883434][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.913828][T17644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.940178][T17644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.973822][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.013485][T17644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.165411][T17764] syzkaller0: entered promiscuous mode [ 343.178506][T17764] syzkaller0: entered allmulticast mode [ 344.406354][ T50] Bluetooth: hci1: command tx timeout [ 346.489803][ T50] Bluetooth: hci1: command tx timeout [ 346.669624][T17791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3269'. [ 346.705662][T17791] tipc: MTU too low for tipc bearer [ 346.782587][T17644] hsr_slave_0: entered promiscuous mode [ 346.796965][T17644] hsr_slave_1: entered promiscuous mode [ 346.803741][T17644] debugfs: 'hsr0' already exists in 'hsr' [ 346.814883][T17644] Cannot create hsr debugfs directory [ 347.209975][T17644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.255721][T17644] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.403641][ T13] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 347.407303][T17829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'. [ 347.492560][T17644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.512248][T17644] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.624492][T17644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.637435][T17644] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.119626][T17818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.162200][T17644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.228197][T17644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.252276][T17644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.265392][T17644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.285255][T17644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.299988][T17856] netlink: 'syz.4.3293': attribute type 1 has an invalid length. [ 348.309898][T17644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.359274][T17644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.384215][T17861] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3293'. [ 348.387918][T17644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.419907][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3293'. [ 348.556404][ T50] Bluetooth: hci1: command tx timeout [ 348.617985][T17878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3298'. [ 348.622228][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'. [ 348.655407][T17644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.713478][T17644] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.763963][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.771198][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.814784][T17882] bridge_slave_0: left allmulticast mode [ 348.821882][T17886] netlink: 'syz.4.3302': attribute type 8 has an invalid length. [ 348.825220][T17882] bridge_slave_0: left promiscuous mode [ 348.853194][T17882] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.857097][T17888] netlink: 'syz.3.3303': attribute type 1 has an invalid length. [ 348.898807][T17882] bridge_slave_1: left allmulticast mode [ 348.906718][T17882] bridge_slave_1: left promiscuous mode [ 348.915031][T17882] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.931389][T17892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3303'. [ 348.942919][T17894] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3302'. [ 348.983432][T17882] bond0: (slave bond_slave_0): Releasing backup interface [ 348.997547][T17896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3303'. [ 349.065366][T17882] bond0: (slave bond_slave_1): Releasing backup interface [ 349.117734][T17882] team0: Port device team_slave_0 removed [ 349.147500][T17882] team0: Port device team_slave_1 removed [ 349.171537][T17882] net_ratelimit: 13 callbacks suppressed [ 349.171559][T17882] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.268587][T17896] 8021q: adding VLAN 0 to HW filter on device bond12 [ 349.284910][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.292136][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.509092][T17914] IPVS: set_ctl: invalid protocol: 23 172.20.20.21:20003 [ 349.608330][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 349.951471][T17942] x_tables: unsorted entry at hook 2 [ 350.141519][T17644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.201689][T17946] bond13: entered promiscuous mode [ 350.207109][T17946] bond13: entered allmulticast mode [ 350.214277][T17946] 8021q: adding VLAN 0 to HW filter on device bond13 [ 350.308079][T17644] veth0_vlan: entered promiscuous mode [ 350.330362][T17644] veth1_vlan: entered promiscuous mode [ 350.422951][T17644] veth0_macvtap: entered promiscuous mode [ 350.476876][T17644] veth1_macvtap: entered promiscuous mode [ 350.495097][T17962] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 350.571241][T17644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.614246][T17644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.642814][T17969] netlink: 'syz.3.3325': attribute type 24 has an invalid length. [ 350.654067][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.664012][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.683749][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.694048][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.883761][ T6280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.908486][ T6280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.970351][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.982564][T17977] netlink: 'syz.3.3328': attribute type 13 has an invalid length. [ 350.991073][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.279032][ T4943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.298951][ T4943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.312567][ T4943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.324812][ T4943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.336867][ T4943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.500529][T17990] netlink: 'syz.0.3331': attribute type 2 has an invalid length. [ 351.595162][T17997] IPv6: NLM_F_CREATE should be specified when creating new route [ 351.712908][T18006] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 351.730898][T18006] netlink: 'syz.4.3335': attribute type 1 has an invalid length. [ 351.913165][T18016] __nla_validate_parse: 5 callbacks suppressed [ 351.913181][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'. [ 351.924869][T17983] hsr0 speed is unknown, defaulting to 1000 [ 352.035159][T18020] netlink: 'syz.4.3338': attribute type 10 has an invalid length. [ 352.123238][ T6285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 352.135116][ T6285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 352.147365][ T6285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.160964][ T6285] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40660 - 0 [ 352.283945][T18020] team0 (unregistering): Port device team_slave_1 removed [ 352.300727][T18033] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3340'. [ 352.322844][T18031] netlink: 'syz.0.3340': attribute type 29 has an invalid length. [ 352.463871][T18039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3343'. [ 352.511761][ T6285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 352.522850][ T6285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 352.534684][ T6285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.546324][ T6285] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40660 - 0 [ 352.745152][ T6285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 352.759196][ T6285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 352.770172][ T6285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.780678][ T6285] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40660 - 0 [ 352.814480][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 352.843410][T18048] syzkaller1: entered promiscuous mode [ 352.843791][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 352.849529][T18048] syzkaller1: entered allmulticast mode [ 353.146143][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 353.260452][T18072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.267891][T18072] IPv6: NLM_F_CREATE should be set when creating new route [ 353.275147][T18072] IPv6: NLM_F_CREATE should be set when creating new route [ 353.285275][T18072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.332327][T18078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3353'. [ 353.435785][ T50] Bluetooth: hci0: command tx timeout [ 353.582685][T17983] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.605193][T17983] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.638644][T17983] bridge_slave_0: entered allmulticast mode [ 353.662840][T17983] bridge_slave_0: entered promiscuous mode [ 353.819678][T17983] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.839074][T17983] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.857993][T18101] ipt_REJECT: TCP_RESET invalid for non-tcp [ 353.873694][T17983] bridge_slave_1: entered allmulticast mode [ 353.887572][T17983] bridge_slave_1: entered promiscuous mode [ 353.952509][T18106] vlan1: entered allmulticast mode [ 353.960885][T18106] veth0_vlan: entered allmulticast mode [ 354.019873][T17983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.118133][T17983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.307163][T17983] team0: Port device team_slave_0 added [ 354.369421][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'. [ 354.397955][T18115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3364'. [ 354.964072][ T6285] bond0 (unregistering): (slave bridge1): Releasing active interface [ 355.042181][ T6285] bond1 (unregistering): (slave bridge3): Releasing active interface [ 355.222155][ T6285] .` (unregistering): Released all slaves [ 355.232342][ T6285] bond0 (unregistering): Released all slaves [ 355.246139][ T6285] bond1 (unregistering): Released all slaves [ 355.260690][ T6285] bond2 (unregistering): Released all slaves [ 355.293308][ T6285] bond3 (unregistering): Released all slaves [ 355.315214][ T6285] bond4 (unregistering): Released all slaves [ 355.362059][ T6285] bond5 (unregistering): Released all slaves [ 355.414301][ T6285] bond6 (unregistering): Released all slaves [ 355.446504][ T6285] bond7 (unregistering): (slave bond8): Releasing backup interface [ 355.464599][T18140] validate_nla: 1 callbacks suppressed [ 355.464616][T18140] netlink: 'syz.2.3368': attribute type 21 has an invalid length. [ 355.479413][ T6285] bond7 (unregistering): Released all slaves [ 355.512408][ T6285] bond8 (unregistering): Released all slaves [ 355.519654][ T50] Bluetooth: hci0: command tx timeout [ 355.554036][ T6285] bond9 (unregistering): Released all slaves [ 355.580456][ T6285] bond10 (unregistering): Released all slaves [ 355.599609][ T6285] bond11 (unregistering): (slave vxcan5): Releasing backup interface [ 355.610380][ T6285] bond11 (unregistering): (slave vxcan7): Releasing backup interface [ 355.621386][ T6285] bond11 (unregistering): Released all slaves [ 355.639189][ T6285] bond12 (unregistering): Released all slaves [ 355.653278][ T6285] bond13 (unregistering): Released all slaves [ 355.669637][T17983] team0: Port device team_slave_1 added [ 355.680813][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3364'. [ 355.690845][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 355.729798][T18143] syzkaller0: entered promiscuous mode [ 355.746263][T18143] syzkaller0: entered allmulticast mode [ 355.959945][ T6285] : left promiscuous mode [ 356.103012][T17983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.126872][T17983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.156491][T17983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.191213][T17983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.198737][T17983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.243435][T17983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.354345][ T6285] tipc: Disabling bearer [ 356.366775][ T6285] tipc: Left network mode [ 356.443116][T18182] erspan0: entered promiscuous mode [ 356.467678][T18182] erspan0: entered allmulticast mode [ 356.719846][T17983] hsr_slave_0: entered promiscuous mode [ 356.729857][T17983] hsr_slave_1: entered promiscuous mode [ 356.746716][T17983] debugfs: 'hsr0' already exists in 'hsr' [ 356.755195][T17983] Cannot create hsr debugfs directory [ 357.091189][T18211] bridge1: entered promiscuous mode [ 357.099448][T18211] bridge1: entered allmulticast mode [ 357.401990][T18228] __nla_validate_parse: 9 callbacks suppressed [ 357.402007][T18228] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3384'. [ 357.598095][ T50] Bluetooth: hci0: command tx timeout [ 357.727257][T18249] netlink: 'syz.0.3388': attribute type 6 has an invalid length. [ 357.738694][T18242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3386'. [ 357.775480][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 358.202252][T18267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3392'. [ 358.259963][T18267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3392'. [ 358.310862][ T6285] hsr_slave_0: left promiscuous mode [ 358.369029][ T6285] veth0_macvtap: left promiscuous mode [ 358.411843][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3395'. [ 358.881104][ T6280] smbdirect: ib_dev[syz1] removed [ 359.061181][ T5819] hsr0 speed is unknown, defaulting to 1000 [ 359.067919][ T5819] infiniband syz1: ib_query_port failed (-19) [ 359.271163][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3396'. [ 359.276707][T18297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3398'. [ 359.513342][T18305] 8021q: VLANs not supported on ip6_vti0 [ 359.677168][ T50] Bluetooth: hci0: command tx timeout [ 360.059419][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3406'. [ 360.095345][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3406'. [ 360.100379][ T6285] IPVS: stop unused estimator thread 0... [ 360.123851][T18337] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3406'. [ 360.145472][T18337] veth1_to_bridge: entered allmulticast mode [ 360.468299][T18337] syzkaller1: entered promiscuous mode [ 360.488982][T18337] syzkaller1: entered allmulticast mode [ 360.688521][T18363] tipc: Started in network mode [ 360.703560][T18363] tipc: Node identity ac14140f, cluster identity 4711 [ 360.738482][T18363] tipc: Enabled bearer , priority 10 [ 360.768496][T17983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 360.803577][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.844454][T17983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.875215][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.899931][T18371] team0: Cannot enslave team device to itself [ 360.919875][T17983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.944960][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.976092][T17983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.012422][T17983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.305002][T17983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.381690][T17983] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.440562][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.447976][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.514567][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.521803][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.856684][ T24] tipc: Node number set to 2886997007 [ 362.311403][T18462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.961040][T18494] ipt_REJECT: TCP_RESET invalid for non-tcp [ 362.984525][T18494] IPVS: set_ctl: invalid protocol: 51 172.20.20.27:20000 [ 363.024872][T18498] __nla_validate_parse: 6 callbacks suppressed [ 363.024889][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 363.073773][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3435'. [ 363.088604][T18500] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3436'. [ 363.112725][T17983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.206669][T18507] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3438'. [ 363.354360][T17983] veth0_vlan: entered promiscuous mode [ 363.380083][T17983] veth1_vlan: entered promiscuous mode [ 363.415562][T17983] veth0_macvtap: entered promiscuous mode [ 363.454498][T17983] veth1_macvtap: entered promiscuous mode [ 363.525851][T17983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.542346][T17983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.566970][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.584301][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.605327][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.620847][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.798059][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.806532][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.859883][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.870788][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.150967][T18547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3445'. [ 364.246905][T18549] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.311501][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 364.325471][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3447'. [ 364.335214][T18553] netlink: 'syz.3.3447': attribute type 14 has an invalid length. [ 364.343552][T18553] netlink: 'syz.3.3447': attribute type 13 has an invalid length. [ 364.563649][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3450'. [ 364.778321][T18571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3452'. [ 364.842423][T18575] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3453'. [ 364.853151][T18575] netlink: 'syz.0.3453': attribute type 9 has an invalid length. [ 365.102114][T18593] netlink: 'syz.4.3458': attribute type 1 has an invalid length. [ 365.426553][T18618] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 365.499875][T18622] openvswitch: netlink: IP tunnel dst address not specified [ 365.541024][T18630] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 365.559745][T18632] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 365.721395][T18641] netlink: 'syz.2.3474': attribute type 9 has an invalid length. [ 366.196639][T18668] IPVS: Unknown mcast interface: rose0 [ 366.768023][T18694] netlink: 'syz.4.3489': attribute type 3 has an invalid length. [ 369.539269][T18716] sctp: [Deprecated]: syz.0.3495 (pid 18716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.539269][T18716] Use struct sctp_sack_info instead [ 369.620978][T18723] __nla_validate_parse: 7 callbacks suppressed [ 369.620995][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3497'. [ 369.662778][T18728] netlink: 'syz.1.3498': attribute type 3 has an invalid length. [ 369.691603][T18728] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3498'. [ 369.927485][T18751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3503'. [ 369.950360][T18744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3503'. [ 370.032164][T18757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3508'. [ 370.042662][T18752] syzkaller0: entered promiscuous mode [ 370.053403][T18752] syzkaller0: entered allmulticast mode [ 370.137138][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 370.196271][T18757] bond1 (unregistering): Released all slaves [ 370.197870][T18772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3508'. [ 370.234351][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3506'. [ 370.245353][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3506'. [ 370.383894][T18765] team0: Port device team_slave_0 removed [ 370.399038][T18774] ip6tnl0: entered promiscuous mode [ 370.409622][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3508'. [ 370.536268][T18781] x_tables: duplicate entry at hook 1 [ 370.670522][T18792] x_tables: unsorted entry at hook 1 [ 370.686782][T18795] xt_socket: unknown flags 0x50 [ 370.733461][T18790] syzkaller0: entered promiscuous mode [ 370.759094][T18790] syzkaller0: entered allmulticast mode [ 370.989153][T18813] ip6tnl1: entered promiscuous mode [ 371.216347][T18831] vlan0: entered allmulticast mode [ 371.221664][T18831] bond0: entered allmulticast mode [ 371.387654][T18841] netlink: 'syz.1.3532': attribute type 1 has an invalid length. [ 371.450485][T18845] sctp: [Deprecated]: syz.3.3533 (pid 18845) Use of int in max_burst socket option deprecated. [ 371.450485][T18845] Use struct sctp_assoc_value instead [ 371.466487][T18845] sctp: [Deprecated]: syz.3.3533 (pid 18845) Use of int in max_burst socket option deprecated. [ 371.466487][T18845] Use struct sctp_assoc_value instead [ 371.486473][T18845] sctp: [Deprecated]: syz.3.3533 (pid 18845) Use of int in max_burst socket option deprecated. [ 371.486473][T18845] Use struct sctp_assoc_value instead [ 371.543078][T18852] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 371.553648][T18852] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 371.567356][T18852] bond2: (slave ip6gre1): making interface the new active one [ 371.576650][T18852] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 372.040060][T18871] syzkaller1: entered promiscuous mode [ 372.064280][T18871] syzkaller1: entered allmulticast mode [ 372.215779][T18900] netlink: 'syz.4.3545': attribute type 1 has an invalid length. [ 372.288920][T18900] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.327654][T18903] vlan0: entered allmulticast mode [ 372.338152][T18903] bond2: entered allmulticast mode [ 372.387669][T18909] bond2: (slave geneve2): making interface the new active one [ 372.395412][T18909] geneve2: entered allmulticast mode [ 372.411397][T18909] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 372.490382][T18911] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.583714][T18917] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.747684][T18929] bond3 (unregistering): Released all slaves [ 372.809052][T18919] macsec1: entered promiscuous mode [ 372.891839][T18940] syzkaller1: entered promiscuous mode [ 372.901161][T18940] syzkaller1: entered allmulticast mode [ 373.480801][T18975] netlink: 'syz.4.3570': attribute type 10 has an invalid length. [ 373.503015][T18975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.513973][T18975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.534601][T18975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.544320][T18975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.563838][T18982] netlink: 'syz.0.3573': attribute type 5 has an invalid length. [ 373.632049][T18977] netlink: 'syz.2.3571': attribute type 1 has an invalid length. [ 373.656428][T18977] netlink: 'syz.2.3571': attribute type 1 has an invalid length. [ 374.363301][T19031] veth3: entered promiscuous mode [ 374.492092][T19045] smbdirect: ib_dev[s†z2] renamed to [syz2] [ 374.843889][T19064] netlink: 'syz.1.3595': attribute type 13 has an invalid length. [ 374.853255][T19075] syzkaller0: entered promiscuous mode [ 374.859647][T19075] syzkaller0: entered allmulticast mode [ 375.051153][T19091] __nla_validate_parse: 22 callbacks suppressed [ 375.051172][T19091] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3600'. [ 375.317779][ T6294] bond1: (slave ip6gretap1): link status up again after 0 ms [ 375.356142][T18892] bond1: (slave ip6gretap1): link status up again after 0 ms [ 375.360832][T19086] netlink: 'syz.2.3600': attribute type 13 has an invalid length. [ 375.395890][T18892] bond1: (slave ip6gretap1): link status up again after 0 ms [ 375.405057][T18892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.539088][ T6295] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.547442][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 375.776636][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 375.928100][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.009142][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3611'. [ 376.028783][T19139] netlink: 'syz.1.3613': attribute type 2 has an invalid length. [ 376.039587][T19139] netlink: 'syz.1.3613': attribute type 11 has an invalid length. [ 376.047955][T19139] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3613'. [ 376.061299][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 376.076376][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.131148][T19137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.198138][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 376.406015][T19155] bond3: entered promiscuous mode [ 376.418347][T19155] bond3: entered allmulticast mode [ 376.432619][T19155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.059234][T19208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3627'. [ 377.096227][T19208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3627'. [ 377.129529][T19210] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 377.143756][T19210] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 377.153491][T19210] gretap1: entered promiscuous mode [ 377.159578][T19210] gretap1: entered allmulticast mode [ 377.189330][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3629'. [ 377.218421][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3628'. [ 377.235820][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3628'. [ 377.270228][T19213] netlink: 'syz.4.3629': attribute type 1 has an invalid length. [ 377.485299][T19226] xt_CT: No such helper "pptp" [ 377.536082][T19233] netlink: 'syz.2.3634': attribute type 1 has an invalid length. [ 377.576017][ T6297] net_ratelimit: 9 callbacks suppressed [ 377.576035][ T6297] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.672800][T19241] veth0: entered promiscuous mode [ 377.680287][T19241] veth0: left promiscuous mode [ 377.729640][T19246] erspan0: entered promiscuous mode [ 377.748102][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.861542][T19260] Bluetooth: MGMT ver 1.23 [ 377.868771][T19264] xt_hashlimit: size too large, truncated to 1048576 [ 377.905659][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 377.921603][T19269] –: renamed from vxcan1 (while UP) [ 378.015618][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.108176][T19278] H: renamed from dummy0 (while UP) [ 378.156671][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.278123][ T1162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.396551][ T1162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.477733][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.505681][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.615683][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 378.726851][ T1162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 380.628395][T19248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.770242][T19313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.799316][T19313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.823738][T19313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.835921][T19313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.965124][T19327] netlink: 'syz.3.3666': attribute type 4 has an invalid length. [ 380.999780][T19327] __nla_validate_parse: 6 callbacks suppressed [ 380.999800][T19327] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3666'. [ 381.025942][T19333] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3666'. [ 381.354975][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3673'. [ 381.436631][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3673'. [ 381.446583][ T6297] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.460295][ T6297] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.472591][ T6297] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.482862][ T6297] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.499417][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3673'. [ 381.523920][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 381.546958][T19356] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3674'. [ 381.738609][T19356] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3674'. [ 381.848240][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3677'. [ 382.560184][T19408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3689'. [ 382.687459][ T6279] net_ratelimit: 31 callbacks suppressed [ 382.687478][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 382.925691][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.056614][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.115069][T19456] netlink: 'syz.1.3698': attribute type 1 has an invalid length. [ 383.185886][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.197398][T19464] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.325864][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.445636][ T6297] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.587378][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.716071][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.847581][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 383.936316][T19513] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.944204][T19513] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.087338][T19527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.094620][T19527] IPv6: NLM_F_CREATE should be set when creating new route [ 384.102142][T19527] IPv6: NLM_F_CREATE should be set when creating new route [ 384.109414][T19527] IPv6: NLM_F_CREATE should be set when creating new route [ 384.138231][T19527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.369437][T19540] pim6reg527: entered allmulticast mode [ 384.451959][T19540] syzkaller1: entered promiscuous mode [ 384.461753][T19540] syzkaller1: entered allmulticast mode [ 384.928702][T19567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.954944][T19586] netlink: 'syz.4.3736': attribute type 10 has an invalid length. [ 384.968578][T19567] bond5 (unregistering): Released all slaves [ 385.044968][T19568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.079859][T19568] bond5 (unregistering): Released all slaves [ 385.111671][T19584] syzkaller0: entered promiscuous mode [ 385.133388][T19584] syzkaller0: entered allmulticast mode [ 385.291043][T19600] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 385.297394][T19600] syzkaller1: Refused to change device type [ 385.518066][T19612] netlink: 'syz.3.3740': attribute type 13 has an invalid length. [ 386.095894][T19640] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 386.469614][T19657] netlink: 'syz.4.3755': attribute type 4 has an invalid length. [ 386.489023][T19657] netlink: 'syz.4.3755': attribute type 4 has an invalid length. [ 386.500119][T19657] netlink: 'syz.4.3755': attribute type 4 has an invalid length. [ 386.508568][T19657] netlink: 'syz.4.3755': attribute type 4 has an invalid length. [ 386.516825][T19657] netlink: 'syz.4.3755': attribute type 4 has an invalid length. [ 386.524611][T19657] netlink: 'syz.4.3755': attribute type 4 has an invalid length. [ 386.542199][T19662] xt_hashlimit: size too large, truncated to 1048576 [ 386.543686][T19657] __nla_validate_parse: 10 callbacks suppressed [ 386.543701][T19657] netlink: 174 bytes leftover after parsing attributes in process `syz.4.3755'. [ 386.663125][T19674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3760'. [ 386.690093][T19674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3760'. [ 386.912012][T19691] netlink: 'syz.4.3765': attribute type 4 has an invalid length. [ 386.920730][T19691] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3765'. [ 386.979358][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'. [ 387.211753][T19718] netlink: 'syz.0.3772': attribute type 1 has an invalid length. [ 387.250748][T19718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 387.295422][T19718] bond1: (slave geneve2): making interface the new active one [ 387.309775][T19718] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 387.420195][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3774'. [ 387.533378][T19739] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3775'. [ 387.594469][T19732] syzkaller1: entered promiscuous mode [ 387.614926][T19732] syzkaller1: entered allmulticast mode [ 387.665207][T19740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3776'. [ 387.691066][T19745] netlink: 'syz.1.3778': attribute type 1 has an invalid length. [ 387.743707][T19743] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3778'. [ 387.773187][T19743] netlink: 'syz.1.3778': attribute type 83 has an invalid length. [ 387.828007][T19745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 387.903981][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3780'. [ 387.928694][ T6279] net_ratelimit: 21 callbacks suppressed [ 387.928713][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.972093][T19754] veth1_macvtap: entered allmulticast mode [ 388.203603][T19754] veth1_macvtap (unregistering): left allmulticast mode [ 388.647856][T19770] syzkaller0: entered promiscuous mode [ 388.655458][T19770] syzkaller0: entered allmulticast mode [ 388.749512][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.905011][T19813] vlan2: entered allmulticast mode [ 388.915098][T19813] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 389.077415][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 389.225205][T19830] syzkaller0: entered promiscuous mode [ 389.276575][T19830] syzkaller0: entered allmulticast mode [ 389.656868][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 389.702414][T19851] syzkaller0: entered promiscuous mode [ 389.736474][T19851] syzkaller0: entered allmulticast mode [ 389.800308][T19863] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 389.816135][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.023710][T19878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.071101][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.225950][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.431458][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.543858][T19904] x_tables: duplicate entry at hook 3 [ 390.561586][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 390.906316][T19922] vlan3: entered promiscuous mode [ 390.911648][T19922] geneve1: entered promiscuous mode [ 390.918099][T19922] vlan3: entered allmulticast mode [ 390.923271][T19922] geneve1: entered allmulticast mode [ 390.956268][T19921] syzkaller0: entered promiscuous mode [ 390.961935][T19921] syzkaller0: entered allmulticast mode [ 391.023170][T19933] FAULT_INJECTION: forcing a failure. [ 391.023170][T19933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.060281][T19933] CPU: 1 UID: 0 PID: 19933 Comm: syz.2.3827 Not tainted syzkaller #0 PREEMPT(full) [ 391.060307][T19933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.060323][T19933] Call Trace: [ 391.060333][T19933] [ 391.060341][T19933] dump_stack_lvl+0xe8/0x150 [ 391.060368][T19933] should_fail_ex+0x412/0x560 [ 391.060395][T19933] _copy_from_iter+0x1d3/0x1670 [ 391.060433][T19933] ? __pfx__copy_from_iter+0x10/0x10 [ 391.060453][T19933] ? sock_alloc_send_pskb+0x896/0x990 [ 391.060482][T19933] ? __pfx__copy_from_iter+0x10/0x10 [ 391.060512][T19933] copy_page_from_iter+0x220/0x2d0 [ 391.060539][T19933] skb_copy_datagram_from_iter+0x306/0x710 [ 391.060576][T19933] tun_get_user+0xc5e/0x43e0 [ 391.060612][T19933] ? aa_file_perm+0x192/0x15e0 [ 391.060640][T19933] ? aa_file_perm+0x50e/0x15e0 [ 391.060663][T19933] ? __pfx_tun_get_user+0x10/0x10 [ 391.060687][T19933] ? __lock_acquire+0x6b5/0x2cf0 [ 391.060709][T19933] ? kstrtoull+0x12f/0x1d0 [ 391.060736][T19933] ? ref_tracker_alloc+0x35c/0x4c0 [ 391.060761][T19933] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.060785][T19933] ? tun_get+0x1c/0x2f0 [ 391.060806][T19933] ? tun_get+0x1c/0x2f0 [ 391.060832][T19933] ? tun_get+0x1c/0x2f0 [ 391.060849][T19933] ? tun_get+0x1c/0x2f0 [ 391.060872][T19933] tun_chr_write_iter+0x113/0x200 [ 391.060896][T19933] vfs_write+0x61d/0xb90 [ 391.060929][T19933] ? __pfx_vfs_write+0x10/0x10 [ 391.060962][T19933] ? __fget_files+0x2a/0x420 [ 391.060991][T19933] ksys_write+0x150/0x270 [ 391.061017][T19933] ? __pfx_ksys_write+0x10/0x10 [ 391.061050][T19933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.061069][T19933] do_syscall_64+0x15f/0xf80 [ 391.061092][T19933] ? trace_irq_disable+0x3b/0x140 [ 391.061117][T19933] ? clear_bhb_loop+0x40/0x90 [ 391.061145][T19933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.061163][T19933] RIP: 0033:0x7f39f9d5d60e [ 391.061179][T19933] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 391.061194][T19933] RSP: 002b:00007f39f7ff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.061213][T19933] RAX: ffffffffffffffda RBX: 00007f39f7ff66c0 RCX: 00007f39f9d5d60e [ 391.061225][T19933] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 391.061236][T19933] RBP: 00007f39f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.061247][T19933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.061257][T19933] R13: 00007f39fa016038 R14: 00007f39fa015fa0 R15: 00007fff75653e08 [ 391.061288][T19933] [ 391.416069][T19942] --map-set only usable from mangle table [ 391.479758][T19937] syzkaller0: entered promiscuous mode [ 391.499923][T19937] syzkaller0: entered allmulticast mode [ 391.697366][T19962] tipc: Enabling of bearer rejected, failed to enable media [ 391.728586][T19960] __nla_validate_parse: 17 callbacks suppressed [ 391.728605][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'. [ 391.789536][T19960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3834'. [ 391.884819][T19978] FAULT_INJECTION: forcing a failure. [ 391.884819][T19978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.904234][ T6297] nci: nci_rsp_packet: unknown rsp opcode 0xb05 [ 391.948069][T19978] CPU: 1 UID: 0 PID: 19978 Comm: syz.3.3840 Not tainted syzkaller #0 PREEMPT(full) [ 391.948096][T19978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 391.948107][T19978] Call Trace: [ 391.948114][T19978] [ 391.948122][T19978] dump_stack_lvl+0xe8/0x150 [ 391.948148][T19978] should_fail_ex+0x412/0x560 [ 391.948176][T19978] _copy_from_iter+0x1d3/0x1670 [ 391.948208][T19978] ? __pfx__copy_from_iter+0x10/0x10 [ 391.948227][T19978] ? sock_alloc_send_pskb+0x896/0x990 [ 391.948256][T19978] ? __pfx__copy_from_iter+0x10/0x10 [ 391.948289][T19978] copy_page_from_iter+0x220/0x2d0 [ 391.948316][T19978] skb_copy_datagram_from_iter+0x306/0x710 [ 391.948352][T19978] tun_get_user+0xc5e/0x43e0 [ 391.948388][T19978] ? aa_file_perm+0x192/0x15e0 [ 391.948416][T19978] ? aa_file_perm+0x50e/0x15e0 [ 391.948439][T19978] ? __pfx_tun_get_user+0x10/0x10 [ 391.948462][T19978] ? __lock_acquire+0x6b5/0x2cf0 [ 391.948484][T19978] ? kstrtoull+0x12f/0x1d0 [ 391.948512][T19978] ? ref_tracker_alloc+0x35c/0x4c0 [ 391.948537][T19978] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.948562][T19978] ? tun_get+0x1c/0x2f0 [ 391.948583][T19978] ? tun_get+0x1c/0x2f0 [ 391.948608][T19978] ? tun_get+0x1c/0x2f0 [ 391.948628][T19978] ? tun_get+0x1c/0x2f0 [ 391.948653][T19978] tun_chr_write_iter+0x113/0x200 [ 391.948676][T19978] vfs_write+0x61d/0xb90 [ 391.948709][T19978] ? __pfx_vfs_write+0x10/0x10 [ 391.948743][T19978] ? __fget_files+0x2a/0x420 [ 391.948773][T19978] ksys_write+0x150/0x270 [ 391.948800][T19978] ? __pfx_ksys_write+0x10/0x10 [ 391.948836][T19978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.948855][T19978] do_syscall_64+0x15f/0xf80 [ 391.948876][T19978] ? trace_irq_disable+0x3b/0x140 [ 391.948901][T19978] ? clear_bhb_loop+0x40/0x90 [ 391.948923][T19978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.948941][T19978] RIP: 0033:0x7f5f14b5d60e [ 391.948958][T19978] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 391.948972][T19978] RSP: 002b:00007f5f12df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.948992][T19978] RAX: ffffffffffffffda RBX: 00007f5f12df66c0 RCX: 00007f5f14b5d60e [ 391.949005][T19978] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 391.949016][T19978] RBP: 00007f5f12df6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.949026][T19978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.949037][T19978] R13: 00007f5f14e16038 R14: 00007f5f14e15fa0 R15: 00007fff85068908 [ 391.949061][T19978] [ 392.367149][T20001] IPVS: set_ctl: invalid protocol: 216 255.255.255.255:20001 [ 392.387317][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3846'. [ 392.407116][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3846'. [ 392.499363][T20004] bond3 (unregistering): Released all slaves [ 392.986133][T18895] net_ratelimit: 13 callbacks suppressed [ 392.986153][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.106210][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.225880][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.335849][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.447092][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.555878][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.665936][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.776918][ T6297] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.886257][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.998506][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 394.820775][T19973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.026673][T20030] FAULT_INJECTION: forcing a failure. [ 395.026673][T20030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.056155][T20030] CPU: 0 UID: 0 PID: 20030 Comm: syz.2.3855 Not tainted syzkaller #0 PREEMPT(full) [ 395.056182][T20030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 395.056192][T20030] Call Trace: [ 395.056199][T20030] [ 395.056207][T20030] dump_stack_lvl+0xe8/0x150 [ 395.056234][T20030] should_fail_ex+0x412/0x560 [ 395.056263][T20030] _copy_from_iter+0x1d3/0x1670 [ 395.056298][T20030] ? __pfx__copy_from_iter+0x10/0x10 [ 395.056318][T20030] ? sock_alloc_send_pskb+0x896/0x990 [ 395.056349][T20030] ? __pfx__copy_from_iter+0x10/0x10 [ 395.056379][T20030] copy_page_from_iter+0x220/0x2d0 [ 395.056406][T20030] skb_copy_datagram_from_iter+0x306/0x710 [ 395.056443][T20030] tun_get_user+0xc5e/0x43e0 [ 395.056480][T20030] ? aa_file_perm+0x192/0x15e0 [ 395.056509][T20030] ? aa_file_perm+0x50e/0x15e0 [ 395.056532][T20030] ? __pfx_tun_get_user+0x10/0x10 [ 395.056554][T20030] ? __lock_acquire+0x6b5/0x2cf0 [ 395.056575][T20030] ? kstrtoull+0x12f/0x1d0 [ 395.056602][T20030] ? ref_tracker_alloc+0x35c/0x4c0 [ 395.056627][T20030] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 395.056652][T20030] ? tun_get+0x1c/0x2f0 [ 395.056673][T20030] ? tun_get+0x1c/0x2f0 [ 395.056699][T20030] ? tun_get+0x1c/0x2f0 [ 395.056722][T20030] ? tun_get+0x1c/0x2f0 [ 395.056747][T20030] tun_chr_write_iter+0x113/0x200 [ 395.056770][T20030] vfs_write+0x61d/0xb90 [ 395.056804][T20030] ? __pfx_vfs_write+0x10/0x10 [ 395.056838][T20030] ? __fget_files+0x2a/0x420 [ 395.056868][T20030] ksys_write+0x150/0x270 [ 395.056894][T20030] ? __pfx_ksys_write+0x10/0x10 [ 395.056932][T20030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.056952][T20030] do_syscall_64+0x15f/0xf80 [ 395.056975][T20030] ? trace_irq_disable+0x3b/0x140 [ 395.057000][T20030] ? clear_bhb_loop+0x40/0x90 [ 395.057028][T20030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.057046][T20030] RIP: 0033:0x7f39f9d5d60e [ 395.057064][T20030] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 395.057079][T20030] RSP: 002b:00007f39f7ff5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 395.057097][T20030] RAX: ffffffffffffffda RBX: 00007f39f7ff66c0 RCX: 00007f39f9d5d60e [ 395.057111][T20030] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 395.057123][T20030] RBP: 00007f39f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.057134][T20030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.057145][T20030] R13: 00007f39fa016038 R14: 00007f39fa015fa0 R15: 00007fff75653e08 [ 395.057174][T20030] [ 395.634271][T20059] validate_nla: 6 callbacks suppressed [ 395.634288][T20059] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 395.722620][T20070] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 395.990270][T20081] netlink: 'syz.0.3868': attribute type 1 has an invalid length. [ 396.023376][T20082] ip6tnl0: Caught tx_queue_len zero misconfig [ 396.028306][T20081] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3868'. [ 396.047797][T20081] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3868'. [ 396.056953][T20081] netlink: 'syz.0.3868': attribute type 8 has an invalid length. [ 396.065385][T20081] netlink: 'syz.0.3868': attribute type 8 has an invalid length. [ 396.073736][T20081] netlink: 610 bytes leftover after parsing attributes in process `syz.0.3868'. [ 396.080365][T20086] lo: Caught tx_queue_len zero misconfig [ 396.180416][T20093] FAULT_INJECTION: forcing a failure. [ 396.180416][T20093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.194332][T20093] CPU: 1 UID: 0 PID: 20093 Comm: syz.0.3872 Not tainted syzkaller #0 PREEMPT(full) [ 396.194357][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.194368][T20093] Call Trace: [ 396.194374][T20093] [ 396.194382][T20093] dump_stack_lvl+0xe8/0x150 [ 396.194408][T20093] should_fail_ex+0x412/0x560 [ 396.194437][T20093] _copy_from_iter+0x1d3/0x1670 [ 396.194471][T20093] ? __pfx__copy_from_iter+0x10/0x10 [ 396.194491][T20093] ? sock_alloc_send_pskb+0x896/0x990 [ 396.194522][T20093] ? __pfx__copy_from_iter+0x10/0x10 [ 396.194552][T20093] copy_page_from_iter+0x220/0x2d0 [ 396.194579][T20093] skb_copy_datagram_from_iter+0x306/0x710 [ 396.194616][T20093] tun_get_user+0xc5e/0x43e0 [ 396.194652][T20093] ? aa_file_perm+0x192/0x15e0 [ 396.194690][T20093] ? aa_file_perm+0x50e/0x15e0 [ 396.194712][T20093] ? __pfx_tun_get_user+0x10/0x10 [ 396.194737][T20093] ? __lock_acquire+0x6b5/0x2cf0 [ 396.194759][T20093] ? kstrtoull+0x12f/0x1d0 [ 396.194787][T20093] ? ref_tracker_alloc+0x35c/0x4c0 [ 396.194816][T20093] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 396.194841][T20093] ? tun_get+0x1c/0x2f0 [ 396.194862][T20093] ? tun_get+0x1c/0x2f0 [ 396.194888][T20093] ? tun_get+0x1c/0x2f0 [ 396.194908][T20093] ? tun_get+0x1c/0x2f0 [ 396.194932][T20093] tun_chr_write_iter+0x113/0x200 [ 396.194956][T20093] vfs_write+0x61d/0xb90 [ 396.194988][T20093] ? __pfx_vfs_write+0x10/0x10 [ 396.195022][T20093] ? __fget_files+0x2a/0x420 [ 396.195051][T20093] ksys_write+0x150/0x270 [ 396.195074][T20093] ? __pfx_ksys_write+0x10/0x10 [ 396.195105][T20093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.195124][T20093] do_syscall_64+0x15f/0xf80 [ 396.195146][T20093] ? trace_irq_disable+0x3b/0x140 [ 396.195171][T20093] ? clear_bhb_loop+0x40/0x90 [ 396.195193][T20093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.195211][T20093] RIP: 0033:0x7f0a2a55d60e [ 396.195228][T20093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.195243][T20093] RSP: 002b:00007f0a2b507fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 396.195261][T20093] RAX: ffffffffffffffda RBX: 00007f0a2b5086c0 RCX: 00007f0a2a55d60e [ 396.195274][T20093] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 396.195285][T20093] RBP: 00007f0a2b508090 R08: 0000000000000000 R09: 0000000000000000 [ 396.195296][T20093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.195307][T20093] R13: 00007f0a2a816038 R14: 00007f0a2a815fa0 R15: 00007fff166f36b8 [ 396.195337][T20093] [ 396.493490][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 396.647323][T20109] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004 [ 396.713224][T20114] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3877'. [ 396.771540][T20119] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3879'. [ 396.803705][T20121] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3882'. [ 396.910396][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 396.956233][T20126] bond3 (unregistering): Released all slaves [ 396.999633][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 397.003078][T20139] team0: entered promiscuous mode [ 397.019034][T20139] team_slave_0: entered promiscuous mode [ 397.025291][T20139] team_slave_1: entered promiscuous mode [ 397.068407][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 397.447958][T20165] netlink: 'syz.0.3893': attribute type 1 has an invalid length. [ 397.466810][T20164] bond0: Caught tx_queue_len zero misconfig [ 397.487702][T20165] netlink: 'syz.0.3893': attribute type 1 has an invalid length. [ 397.508903][T20165] netlink: 'syz.0.3893': attribute type 2 has an invalid length. [ 397.531842][T20165] netlink: 'syz.0.3893': attribute type 1 has an invalid length. [ 397.622380][ T29] xfrm0 speed is unknown, defaulting to 1000 [ 397.632021][T20121] infiniband syz1: set active [ 397.640762][T20121] infiniband syz1: added xfrm0 [ 397.690673][T20121] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 397.708382][T20121] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 397.720741][T20174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3896'. [ 397.734713][T20121] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 397.754593][T20175] syzkaller0: entered promiscuous mode [ 397.766068][T20175] syzkaller0: entered allmulticast mode [ 397.773637][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 397.790174][T20121] RDS/IB: syz1: added [ 397.803871][T20121] smc: adding ib device syz1 with port count 1 [ 397.811867][T20121] smc: ib device syz1 port 1 has no pnetid [ 397.823324][ T29] xfrm0 speed is unknown, defaulting to 1000 [ 397.827567][T20175] tipc: Enabled bearer , priority 0 [ 397.842808][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 397.878149][T20173] tipc: Resetting bearer [ 397.930034][T20173] tipc: Disabling bearer [ 398.096782][ T6283] net_ratelimit: 28 callbacks suppressed [ 398.096800][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.236297][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.323110][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 398.377192][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.517525][T20209] xt_hashlimit: size too large, truncated to 1048576 [ 398.528130][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.594971][T20211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3910'. [ 398.615264][T20211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3910'. [ 398.656880][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.787381][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.915060][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 398.926593][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.065638][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.132540][T20230] netlink: 'syz.0.3915': attribute type 4 has an invalid length. [ 399.150569][T20231] netlink: 'syz.3.3916': attribute type 1 has an invalid length. [ 399.170721][T20231] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3916'. [ 399.193629][T20232] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.201674][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.260698][T20235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.268029][T20235] IPv6: NLM_F_CREATE should be set when creating new route [ 399.346733][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.446887][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 399.579636][T20247] FAULT_INJECTION: forcing a failure. [ 399.579636][T20247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.626072][T20247] CPU: 1 UID: 0 PID: 20247 Comm: syz.3.3921 Not tainted syzkaller #0 PREEMPT(full) [ 399.626099][T20247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 399.626109][T20247] Call Trace: [ 399.626116][T20247] [ 399.626124][T20247] dump_stack_lvl+0xe8/0x150 [ 399.626150][T20247] should_fail_ex+0x412/0x560 [ 399.626178][T20247] _copy_from_iter+0x1d3/0x1670 [ 399.626213][T20247] ? __pfx__copy_from_iter+0x10/0x10 [ 399.626233][T20247] ? sock_alloc_send_pskb+0x896/0x990 [ 399.626267][T20247] ? __pfx__copy_from_iter+0x10/0x10 [ 399.626297][T20247] copy_page_from_iter+0x220/0x2d0 [ 399.626324][T20247] skb_copy_datagram_from_iter+0x306/0x710 [ 399.626360][T20247] tun_get_user+0xc5e/0x43e0 [ 399.626395][T20247] ? aa_file_perm+0x192/0x15e0 [ 399.626420][T20247] ? aa_file_perm+0x50e/0x15e0 [ 399.626441][T20247] ? __pfx_tun_get_user+0x10/0x10 [ 399.626465][T20247] ? __lock_acquire+0x6b5/0x2cf0 [ 399.626485][T20247] ? kstrtoull+0x12f/0x1d0 [ 399.626511][T20247] ? ref_tracker_alloc+0x35c/0x4c0 [ 399.626536][T20247] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 399.626561][T20247] ? tun_get+0x1c/0x2f0 [ 399.626583][T20247] ? tun_get+0x1c/0x2f0 [ 399.626609][T20247] ? tun_get+0x1c/0x2f0 [ 399.626634][T20247] ? tun_get+0x1c/0x2f0 [ 399.626659][T20247] tun_chr_write_iter+0x113/0x200 [ 399.626682][T20247] vfs_write+0x61d/0xb90 [ 399.626716][T20247] ? __pfx_vfs_write+0x10/0x10 [ 399.626750][T20247] ? __fget_files+0x2a/0x420 [ 399.626779][T20247] ksys_write+0x150/0x270 [ 399.626806][T20247] ? __pfx_ksys_write+0x10/0x10 [ 399.626839][T20247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.626859][T20247] do_syscall_64+0x15f/0xf80 [ 399.626881][T20247] ? trace_irq_disable+0x3b/0x140 [ 399.626906][T20247] ? clear_bhb_loop+0x40/0x90 [ 399.626929][T20247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.626946][T20247] RIP: 0033:0x7f5f14b5d60e [ 399.626964][T20247] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.626979][T20247] RSP: 002b:00007f5f12df5fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.626998][T20247] RAX: ffffffffffffffda RBX: 00007f5f12df66c0 RCX: 00007f5f14b5d60e [ 399.627012][T20247] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 399.627023][T20247] RBP: 00007f5f12df6090 R08: 0000000000000000 R09: 0000000000000000 [ 399.627034][T20247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.627044][T20247] R13: 00007f5f14e16038 R14: 00007f5f14e15fa0 R15: 00007fff85068908 [ 399.627074][T20247] [ 400.187358][T20255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3923'. [ 400.203494][T20255] block nbd0: Unsupported socket: should be TCP or UNIX. [ 400.250863][T20260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3925'. [ 400.273239][T20260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3925'. [ 400.286504][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 400.769393][T20288] validate_nla: 2 callbacks suppressed [ 400.769413][T20288] netlink: 'syz.4.3931': attribute type 10 has an invalid length. [ 400.786953][T20288] veth1_virt_wifi: entered promiscuous mode [ 400.836681][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 400.959742][T20299] netlink: 'syz.4.3935': attribute type 10 has an invalid length. [ 400.981109][T20299] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.988856][T20299] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.032498][T20299] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.039842][T20299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.047463][T20299] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.054624][T20299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.109190][T20299] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 401.271945][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 401.604041][T20328] netlink: 'syz.4.3942': attribute type 1 has an invalid length. [ 401.630746][T20327] nbd: must specify a device to reconfigure [ 401.770052][T20332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.783380][T20342] __nla_validate_parse: 1 callbacks suppressed [ 401.783399][T20342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3942'. [ 401.801296][T20332] bond3: (slave bond4): making interface the new active one [ 401.804099][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3943'. [ 401.817886][T20332] bond3: (slave bond4): Enslaving as an active interface with an up link [ 401.840365][T20328] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 401.851369][T20339] veth1_macvtap: entered allmulticast mode [ 401.857651][T20121] xfrm0 speed is unknown, defaulting to 1000 [ 401.859955][T20342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.952521][T20343] veth1_macvtap (unregistering): left allmulticast mode [ 402.007194][T20350] netlink: 'syz.2.3946': attribute type 4 has an invalid length. [ 402.067831][T20353] netlink: 'syz.2.3946': attribute type 4 has an invalid length. [ 402.291008][T20368] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3947'. [ 402.395326][ T29] IPVS: starting estimator thread 0... [ 402.434167][T20380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'. [ 402.449810][T20380] netlink: 'syz.3.3952': attribute type 1 has an invalid length. [ 402.485923][T20374] IPVS: using max 30 ests per chain, 72000 per kthread [ 402.659718][T20393] sctp: [Deprecated]: syz.0.3957 (pid 20393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.659718][T20393] Use struct sctp_sack_info instead [ 402.763890][T20399] xt_TCPMSS: Only works on TCP SYN packets [ 402.794122][T20401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3961'. [ 402.972835][T20413] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 402.992139][T20413] syzkaller0: entered promiscuous mode [ 403.010010][T20413] syzkaller0: entered allmulticast mode [ 403.050473][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3968'. [ 403.061295][T20419] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3968'. [ 403.073092][T20413] tipc: Started in network mode [ 403.091731][T20413] tipc: Node identity 62ca6f602ecd, cluster identity 4711 [ 403.105844][T20413] tipc: Enabled bearer , priority 0 [ 403.106498][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3970'. [ 403.142152][T20419] bond4 (unregistering): Released all slaves [ 403.159740][T20412] tipc: Resetting bearer [ 403.194627][T20412] tipc: Disabling bearer [ 403.265971][T18895] net_ratelimit: 26 callbacks suppressed [ 403.265991][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.398501][ T6297] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.465421][T20443] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3975'. [ 403.527060][ T6297] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.645651][ T6297] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.665459][T20450] syzkaller0: entered promiscuous mode [ 403.673946][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3981'. [ 403.702916][T20450] syzkaller0: entered allmulticast mode [ 403.748784][T20459] netlink: 'syz.2.3981': attribute type 32 has an invalid length. [ 403.796158][T20459] bond1: Setting coupled_control to off (0) [ 403.886078][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.905629][T20470] netlink: 'syz.0.3983': attribute type 6 has an invalid length. [ 403.945166][T20470] syzkaller0: entered promiscuous mode [ 403.954441][T20470] syzkaller0: entered allmulticast mode [ 404.038722][T20484] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 404.045665][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.195681][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.325629][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.461646][T20517] netlink: 'syz.0.3997': attribute type 1 has an invalid length. [ 404.470429][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.515249][T20523] FAULT_INJECTION: forcing a failure. [ 404.515249][T20523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.531016][T20523] CPU: 1 UID: 0 PID: 20523 Comm: syz.3.3999 Not tainted syzkaller #0 PREEMPT(full) [ 404.531041][T20523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.531052][T20523] Call Trace: [ 404.531059][T20523] [ 404.531066][T20523] dump_stack_lvl+0xe8/0x150 [ 404.531092][T20523] should_fail_ex+0x412/0x560 [ 404.531121][T20523] _copy_from_user+0x2d/0xb0 [ 404.531146][T20523] ___sys_sendmsg+0x1c6/0x360 [ 404.531173][T20523] ? __lock_acquire+0x6b5/0x2cf0 [ 404.531196][T20523] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.531253][T20523] ? __fget_files+0x2a/0x420 [ 404.531273][T20523] ? __fget_files+0x3a0/0x420 [ 404.531305][T20523] __x64_sys_sendmsg+0x1bd/0x2a0 [ 404.531329][T20523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.531361][T20523] ? __pfx_ksys_write+0x10/0x10 [ 404.531394][T20523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.531413][T20523] do_syscall_64+0x15f/0xf80 [ 404.531436][T20523] ? trace_irq_disable+0x3b/0x140 [ 404.531461][T20523] ? clear_bhb_loop+0x40/0x90 [ 404.531483][T20523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.531501][T20523] RIP: 0033:0x7f5f14b9cdd9 [ 404.531518][T20523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.531533][T20523] RSP: 002b:00007f5f12df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.531552][T20523] RAX: ffffffffffffffda RBX: 00007f5f14e15fa0 RCX: 00007f5f14b9cdd9 [ 404.531564][T20523] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 404.531576][T20523] RBP: 00007f5f12df6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.531586][T20523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.531597][T20523] R13: 00007f5f14e16038 R14: 00007f5f14e15fa0 R15: 00007fff85068908 [ 404.531627][T20523] [ 404.577239][T20517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.734979][T20531] netlink: 'syz.0.3997': attribute type 10 has an invalid length. [ 404.771037][T20531] H: entered promiscuous mode [ 404.926848][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 405.212972][T20558] lo: entered promiscuous mode [ 405.249347][T20556] syzkaller0: entered promiscuous mode [ 405.263113][T20556] syzkaller0: entered allmulticast mode [ 406.136931][T20617] validate_nla: 1 callbacks suppressed [ 406.136948][T20617] netlink: 'syz.0.4025': attribute type 1 has an invalid length. [ 406.409939][T20625] netlink: 'syz.3.4029': attribute type 1 has an invalid length. [ 406.873782][T20655] __nla_validate_parse: 19 callbacks suppressed [ 406.873803][T20655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4035'. [ 406.905780][T20659] netlink: 'syz.1.4037': attribute type 29 has an invalid length. [ 407.162019][T20669] syzkaller0: entered promiscuous mode [ 407.169360][T20669] syzkaller0: entered allmulticast mode [ 407.182258][T20669] team0: Caught tx_queue_len zero misconfig [ 407.894037][T20681] 8021q: VLANs not supported on ip6_vti0 [ 408.164297][T20703] syzkaller0: entered promiscuous mode [ 408.179957][T20703] syzkaller0: entered allmulticast mode [ 408.211082][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 408.277580][ T6279] net_ratelimit: 17 callbacks suppressed [ 408.277602][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.313406][T20712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.397649][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.525727][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.637154][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.745695][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.866052][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.985941][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 409.095646][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 409.215675][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 409.325649][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.895856][T20686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 410.912647][T20710] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 410.930972][T20710] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4052'. [ 410.953467][T20712] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 410.980964][T20712] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4052'. [ 411.044847][T20721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4054'. [ 411.113561][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'. [ 411.125025][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4055'. [ 411.236621][T20736] bridge0: port 1(veth1_to_bridge) entered blocking state [ 411.275413][T20736] bridge0: port 1(veth1_to_bridge) entered disabled state [ 411.299476][T20736] veth1_to_bridge: entered promiscuous mode [ 411.308106][T20736] bridge0: port 1(veth1_to_bridge) entered blocking state [ 411.315381][T20736] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 411.332179][T20746] xt_ecn: cannot match TCP bits for non-tcp packets [ 411.341052][T20746] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4063'. [ 411.390807][T20750] block nbd3: not configured, cannot reconfigure [ 411.571770][T20759] netlink: 'syz.4.4068': attribute type 13 has an invalid length. [ 411.828644][T20771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4072'. [ 411.836905][T20773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'. [ 411.881316][T20775] FAULT_INJECTION: forcing a failure. [ 411.881316][T20775] name failslab, interval 1, probability 0, space 0, times 0 [ 411.904877][T20775] CPU: 1 UID: 0 PID: 20775 Comm: syz.3.4074 Not tainted syzkaller #0 PREEMPT(full) [ 411.904901][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.904911][T20775] Call Trace: [ 411.904918][T20775] [ 411.904926][T20775] dump_stack_lvl+0xe8/0x150 [ 411.904953][T20775] should_fail_ex+0x412/0x560 [ 411.904981][T20775] should_failslab+0xa8/0x100 [ 411.905009][T20775] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 411.905033][T20775] ? __alloc_skb+0x186/0x7d0 [ 411.905052][T20775] ? __alloc_skb+0x1d0/0x7d0 [ 411.905069][T20775] ? __local_bh_enable_ip+0xd0/0x130 [ 411.905093][T20775] __alloc_skb+0x1d0/0x7d0 [ 411.905113][T20775] ? netlink_ack_tlv_len+0x6c/0x210 [ 411.905146][T20775] netlink_ack+0x146/0xa50 [ 411.905185][T20775] netlink_rcv_skb+0x2b6/0x4b0 [ 411.905207][T20775] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 411.905229][T20775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.905262][T20775] ? bpf_lsm_capable+0x9/0x20 [ 411.905279][T20775] ? security_capable+0x7e/0x2c0 [ 411.905307][T20775] nfnetlink_rcv+0x2c0/0x27b0 [ 411.905339][T20775] ? __local_bh_enable_ip+0xd0/0x130 [ 411.905357][T20775] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.905379][T20775] ? __dev_queue_xmit+0x2b6/0x3950 [ 411.905401][T20775] ? __local_bh_enable_ip+0xd0/0x130 [ 411.905418][T20775] ? __dev_queue_xmit+0x2b6/0x3950 [ 411.905440][T20775] ? __dev_queue_xmit+0x1fe5/0x3950 [ 411.905464][T20775] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 411.905490][T20775] ? __dev_queue_xmit+0x2b6/0x3950 [ 411.905517][T20775] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 411.905542][T20775] ? __pfx___dev_queue_xmit+0x10/0x10 [ 411.905571][T20775] ? ref_tracker_free+0x693/0x840 [ 411.905596][T20775] ? __pfx_ref_tracker_free+0x10/0x10 [ 411.905636][T20775] ? skb_clone+0x246/0x3a0 [ 411.905663][T20775] ? __netlink_deliver_tap+0x807/0x850 [ 411.905682][T20775] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.905706][T20775] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.905725][T20775] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.905751][T20775] netlink_unicast+0x75c/0x8e0 [ 411.905781][T20775] netlink_sendmsg+0x813/0xb40 [ 411.905811][T20775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.905837][T20775] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.905862][T20775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.905886][T20775] ____sys_sendmsg+0x972/0x9f0 [ 411.905908][T20775] ? __might_fault+0xaf/0x130 [ 411.905936][T20775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.905968][T20775] ? import_iovec+0x73/0xa0 [ 411.905996][T20775] ___sys_sendmsg+0x2a5/0x360 [ 411.906017][T20775] ? __lock_acquire+0x6b5/0x2cf0 [ 411.906040][T20775] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.906095][T20775] ? __fget_files+0x2a/0x420 [ 411.906115][T20775] ? __fget_files+0x3a0/0x420 [ 411.906153][T20775] __x64_sys_sendmsg+0x1bd/0x2a0 [ 411.906178][T20775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.906210][T20775] ? __pfx_ksys_write+0x10/0x10 [ 411.906242][T20775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.906262][T20775] do_syscall_64+0x15f/0xf80 [ 411.906284][T20775] ? trace_irq_disable+0x3b/0x140 [ 411.906309][T20775] ? clear_bhb_loop+0x40/0x90 [ 411.906332][T20775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.906349][T20775] RIP: 0033:0x7f5f14b9cdd9 [ 411.906367][T20775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.906382][T20775] RSP: 002b:00007f5f12df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.906401][T20775] RAX: ffffffffffffffda RBX: 00007f5f14e15fa0 RCX: 00007f5f14b9cdd9 [ 411.906414][T20775] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 411.906425][T20775] RBP: 00007f5f12df6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.906435][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.906446][T20775] R13: 00007f5f14e16038 R14: 00007f5f14e15fa0 R15: 00007fff85068908 [ 411.906476][T20775] [ 412.330446][T20779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4075'. [ 412.339735][T20778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4075'. [ 412.424534][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4077'. [ 412.531012][T20787] netlink: 'syz.4.4077': attribute type 21 has an invalid length. [ 412.540260][T20787] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4077'. [ 412.634640][T20800] netlink: 'syz.0.4082': attribute type 32 has an invalid length. [ 412.890303][T20816] syzkaller0: entered promiscuous mode [ 412.899893][T20816] syzkaller0: entered allmulticast mode [ 413.075285][T20813] geneve0: entered promiscuous mode [ 413.366315][ T6279] net_ratelimit: 28 callbacks suppressed [ 413.366334][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.542302][T20855] syzkaller0: entered promiscuous mode [ 413.565243][T20855] syzkaller0: entered allmulticast mode [ 413.590976][T20855] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4099'. [ 413.606818][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.631566][T20862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4100'. [ 413.746282][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.754919][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4100'. [ 413.855367][ T5847] hsr0: entered promiscuous mode [ 413.861297][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 413.903040][T20876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4104'. [ 413.932068][T20874] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 413.940760][T20874] syzkaller1: linktype set to 823 [ 413.966515][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.988656][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4102'. [ 414.090548][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 414.196597][T20889] netlink: 'syz.0.4106': attribute type 1 has an invalid length. [ 414.207795][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 414.259054][T20889] bond4: entered promiscuous mode [ 414.265112][T20889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.295122][T20889] bridge2: entered promiscuous mode [ 414.298380][T20896] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 414.301285][T20889] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 414.336693][T20896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.350403][T20889] veth3: entered promiscuous mode [ 414.365074][T20889] veth3: entered allmulticast mode [ 414.374292][T20889] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 414.390573][ T6279] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 414.426410][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 414.971344][T20925] pimreg: entered allmulticast mode [ 415.245435][ T5847] IPVS: starting estimator thread 0... [ 415.335977][T20951] IPVS: using max 33 ests per chain, 79200 per kthread [ 415.429642][T20950] team0: Caught tx_queue_len zero misconfig [ 416.430885][T20991] sctp: [Deprecated]: syz.1.4137 (pid 20991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.430885][T20991] Use struct sctp_sack_info instead [ 416.749576][T21007] TCP: TCP_TX_DELAY enabled [ 416.779436][T21009] ip6tnl0: Caught tx_queue_len zero misconfig [ 416.899986][T21017] ipt_ECN: cannot use operation on non-tcp rule [ 417.076945][T21021] netlink: 'syz.2.4147': attribute type 3 has an invalid length. [ 417.173268][T21033] syzkaller0: entered promiscuous mode [ 417.179953][T21033] syzkaller0: entered allmulticast mode [ 417.182741][T21037] netlink: 'syz.2.4147': attribute type 12 has an invalid length. [ 417.199603][T21037] netlink: 'syz.2.4147': attribute type 11 has an invalid length. [ 417.396634][T21038] vlan3: entered allmulticast mode [ 417.435721][T21038] bond0: entered allmulticast mode [ 417.457820][T21038] bond_slave_0: entered allmulticast mode [ 417.463773][T21038] bond_slave_1: entered allmulticast mode [ 417.471316][T21047] __nla_validate_parse: 10 callbacks suppressed [ 417.471335][T21047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4150'. [ 417.487329][T21047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4150'. [ 417.703583][T21069] vlan1: left allmulticast mode [ 417.709162][T21069] veth0_vlan: left allmulticast mode [ 417.809745][T21073] syzkaller0: entered promiscuous mode [ 417.817094][T21073] syzkaller0: entered allmulticast mode [ 417.832888][T21078] netlink: 'syz.2.4162': attribute type 1 has an invalid length. [ 418.403641][T21103] netlink: 'syz.0.4169': attribute type 2 has an invalid length. [ 418.415584][T21103] net_ratelimit: 30 callbacks suppressed [ 418.415603][T21103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.536714][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.633863][T21112] ieee802154 phy1 wpan1: encryption failed: -22 [ 418.709894][T21103] bond5: (slave ip6gretap0): Device is not bonding slave [ 418.717323][T21115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4169'. [ 418.755729][T21103] bond5: option active_slave: invalid value (ip6gretap0) [ 418.774910][T21103] bond5 (unregistering): Released all slaves [ 418.935633][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.046612][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.166205][ T6279] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.300112][T21148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4180'. [ 419.309285][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.426104][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.568346][ T6294] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.650834][T21176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4189'. [ 419.659504][T21173] tipc: Enabled bearer , priority 0 [ 419.677853][T21173] syzkaller0: entered promiscuous mode [ 419.691416][T21173] syzkaller0: entered allmulticast mode [ 419.701270][T21177] erspan0: entered promiscuous mode [ 419.712397][T21177] erspan0: entered allmulticast mode [ 419.734166][T21173] syzkaller0: mtu less than device minimum [ 419.767457][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.775139][T21173] netlink: 'syz.1.4188': attribute type 4 has an invalid length. [ 419.813492][T21173] netlink: 'syz.1.4188': attribute type 1 has an invalid length. [ 419.825733][T21173] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4188'. [ 419.868342][T21172] tipc: Resetting bearer [ 419.877157][T21187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4191'. [ 419.934815][T21172] tipc: Disabling bearer [ 420.116789][T21206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4198'. [ 420.421816][T21227] netlink: 'syz.3.4205': attribute type 2 has an invalid length. [ 420.425700][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4204'. [ 420.436856][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4205'. [ 421.037944][T21252] netlink: 'syz.3.4213': attribute type 1 has an invalid length. [ 421.139530][T21252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 421.178465][T21257] bond4: (slave geneve0): making interface the new active one [ 421.189763][T21257] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 421.333631][T21272] tipc: Started in network mode [ 421.348314][T21272] tipc: Node identity ac14140f, cluster identity 4711 [ 421.367285][T21272] tipc: New replicast peer: 255.255.255.255 [ 421.384879][T21272] tipc: Enabled bearer , priority 10 [ 421.528023][ T4943] Bluetooth: hci5: command 0x0406 tx timeout [ 421.630987][T21290] syzkaller0: entered promiscuous mode [ 421.644138][T21290] syzkaller0: entered allmulticast mode [ 421.655209][T21294] netlink: 'syz.0.4227': attribute type 1 has an invalid length. [ 421.770771][ T6279] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.788712][ T6279] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.813812][ T6279] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.832651][ T6279] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.032989][T21291] bond5: Invalid ad_actor_system MAC address. [ 422.039734][T21291] bond5: option ad_actor_system: invalid value (1) [ 422.052970][T21291] bond5 (unregistering): Released all slaves [ 422.246860][T21332] sctp: [Deprecated]: syz.1.4235 (pid 21332) Use of int in max_burst socket option. [ 422.246860][T21332] Use struct sctp_assoc_value instead [ 422.274261][T21339] validate_nla: 2 callbacks suppressed [ 422.274281][T21339] netlink: 'syz.2.4236': attribute type 4 has an invalid length. [ 422.413069][T21350] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.495957][ T24] tipc: Node number set to 2886997007 [ 422.543247][T21360] lo: Caught tx_queue_len zero misconfig [ 422.550976][T21360] __nla_validate_parse: 15 callbacks suppressed [ 422.550997][T21360] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4242'. [ 422.570507][T21364] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4244'. [ 422.589505][T21360] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4242'. [ 422.612804][T21360] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4242'. [ 422.812086][T21380] sctp: [Deprecated]: syz.3.4249 (pid 21380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.812086][T21380] Use struct sctp_sack_info instead [ 422.915286][T21390] xt_TCPMSS: Only works on TCP SYN packets [ 423.107599][T21387] bond5: Unable to set down delay as MII monitoring is disabled [ 423.119617][T21387] bond5 (unregistering): Released all slaves [ 423.188233][T21406] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4257'. [ 423.323810][T21412] syzkaller0: entered promiscuous mode [ 423.336802][T21412] syzkaller0: entered allmulticast mode [ 423.404486][T21420] xt_hashlimit: size too large, truncated to 1048576 [ 423.476512][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 423.535918][T21423] netlink: 'syz.1.4263': attribute type 1 has an invalid length. [ 423.586927][T21423] netlink: 'syz.1.4263': attribute type 2 has an invalid length. [ 423.609791][T18893] net_ratelimit: 27 callbacks suppressed [ 423.609810][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.775564][T18893] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.993387][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4272'. [ 424.042036][T21443] syzkaller0: entered promiscuous mode [ 424.076758][T21443] syzkaller0: entered allmulticast mode [ 424.125644][ T6297] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 426.942501][T21439] syzkaller0: entered promiscuous mode [ 426.948134][T21439] syzkaller0: entered allmulticast mode [ 427.075586][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.207289][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.281270][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'. [ 427.338960][T18892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.455987][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.575002][T21533] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 427.632528][T18890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.663121][T21533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4289'. [ 427.796341][T18890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 427.804622][T21543] netlink: 'syz.4.4290': attribute type 1 has an invalid length. [ 427.964464][T18890] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 428.239025][T21572] netlink: 'syz.4.4300': attribute type 1 has an invalid length. [ 428.248705][T21570] bond0: entered promiscuous mode [ 428.259810][T21570] bond_slave_0: entered promiscuous mode [ 428.285973][T21570] bond_slave_1: entered promiscuous mode [ 428.366601][T21579] macvlan0: entered promiscuous mode [ 428.394820][T21579] macvlan0: entered allmulticast mode [ 428.425385][T21579] bond5: entered promiscuous mode [ 428.431880][T21579] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 428.454018][T21579] bond5: left promiscuous mode [ 428.460855][T21586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4301'. [ 428.482294][T21587] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4298'. [ 428.623525][T18892] net_ratelimit: 3 callbacks suppressed [ 428.623545][T18892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 428.689264][T21596] veth0: Caught tx_queue_len zero misconfig [ 428.785679][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 428.851513][T21601] dvmrp0: entered allmulticast mode [ 428.895917][ T1162] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 428.956917][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.963449][T21613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.972720][T21613] IPv6: NLM_F_CREATE should be set when creating new route [ 429.008093][T18892] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.120766][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.137119][ T6283] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.267628][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.371829][T21640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4317'. [ 429.392573][T21640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4317'. [ 429.402322][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.440722][T21640] erspan0: entered promiscuous mode [ 429.462365][T21640] erspan0: left promiscuous mode [ 429.525670][T18895] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 429.916704][T21684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4327'. [ 430.241634][T21706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4331'. [ 430.274044][T21706] nbd: must specify a size in bytes for the device [ 430.402051][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4336'. [ 430.427267][T21715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4336'. [ 430.529877][T21728] netlink: 'syz.0.4339': attribute type 1 has an invalid length. [ 430.546965][T21729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4339'. [ 430.728580][T21742] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.736437][T21742] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.006922][T21719] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 431.052297][T21719] bond2 (unregistering): Released all slaves [ 431.293274][T21775] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 431.323975][T21776] netlink: 'syz.3.4349': attribute type 4 has an invalid length. [ 431.372799][T21775] Unsupported ieee802154 address type: 0 [ 431.668353][T21793] netlink: 'syz.4.4354': attribute type 1 has an invalid length. [ 431.717265][T21795] bond2: invalid ARP target 0.0.0.0 specified for addition [ 431.724694][T21795] bond2: option arp_ip_target: invalid value (0) [ 431.744148][T21795] bond2 (unregistering): Released all slaves [ 431.906405][T21808] netlink: 'syz.1.4358': attribute type 1 has an invalid length. [ 431.958600][T21809] bond6: Unable to set up delay as MII monitoring is disabled [ 431.974012][T21809] bond6 (unregistering): Released all slaves [ 432.064461][T21808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 432.288153][T21832] netlink: 'syz.1.4365': attribute type 7 has an invalid length. [ 432.332912][T21836] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 432.346614][T21836] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 432.790074][T21871] syzkaller0: entered promiscuous mode [ 432.801287][T21871] syzkaller0: entered allmulticast mode [ 432.946251][T21875] syzkaller0: entered promiscuous mode [ 432.955916][T21875] syzkaller0: entered allmulticast mode [ 432.962016][T21879] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 432.990252][T21882] netlink: 'syz.2.4379': attribute type 1 has an invalid length. [ 433.053778][T21884] __nla_validate_parse: 18 callbacks suppressed [ 433.053796][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4379'. [ 433.098611][T21882] bond2: entered promiscuous mode [ 433.104531][T21882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.120972][T21884] bond2: entered allmulticast mode [ 433.200128][T21882] bond2: (slave bridge2): making interface the new active one [ 433.209601][T21882] bridge2: entered promiscuous mode [ 433.215154][T21882] bridge2: entered allmulticast mode [ 433.221673][T21882] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 433.233773][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 433.286135][T21886] syzkaller0: entered promiscuous mode [ 433.307961][T21886] syzkaller0: entered allmulticast mode [ 433.677339][ T6287] net_ratelimit: 37 callbacks suppressed [ 433.677361][ T6287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.816935][ T6287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.858882][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4392'. [ 433.947692][ T1099] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 433.993250][T21913] netlink: 'syz.0.4388': attribute type 16 has an invalid length. [ 434.040796][T21913] netlink: 'syz.0.4388': attribute type 17 has an invalid length. [ 434.085925][T21913] lo: left promiscuous mode [ 434.134987][T21913] H: left promiscuous mode [ 434.232066][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4397'. [ 434.245397][T21913] vlan0: left allmulticast mode [ 434.258250][T21913] bond0: left allmulticast mode [ 434.263181][T21942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4397'. [ 434.278001][T21913] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.287326][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4397'. [ 434.312952][T21913] bond4: left promiscuous mode [ 434.326209][T21942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4397'. [ 434.338285][T21913] bridge2: left promiscuous mode [ 434.348673][T21913] veth3: left promiscuous mode [ 434.360255][T21913] veth3: left allmulticast mode [ 434.401105][T21913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.415782][ T48] bond4: (slave bridge2): link status up again after 0 ms [ 434.422978][T21913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.476666][ T48] bond4: (slave bridge2): link status up again after 0 ms [ 434.517420][ T6287] bond4: (slave bridge2): link status up again after 0 ms [ 434.546256][ T48] bond4: (slave bridge2): link status up again after 0 ms [ 434.595893][ T48] bond4: (slave bridge2): link status up again after 0 ms [ 434.626684][ T48] bond4: (slave bridge2): link status up again after 0 ms [ 434.674071][ T48] bond4: (slave bridge2): link status up again after 0 ms [ 434.731146][ T48] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 434.824714][ T48] bond4: active interface up! [ 435.313719][T21981] x_tables: duplicate underflow at hook 1 [ 435.329151][T21975] tipc: Enabled bearer , priority 11 [ 435.344767][T21980] x_tables: duplicate underflow at hook 1 [ 435.362190][T21981] x_tables: duplicate underflow at hook 2 [ 435.519600][T21999] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 435.553666][T21999] policy can only be matched on NF_INET_PRE_ROUTING [ 435.553686][T21999] unable to load match [ 435.732074][T22018] syzkaller1: entered promiscuous mode [ 435.744412][T22018] syzkaller1: entered allmulticast mode [ 435.777039][T22020] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20004 [ 435.820658][T22018] batadv_slave_0: Caught tx_queue_len zero misconfig [ 435.936723][T22029] veth0_macvtap: Caught tx_queue_len zero misconfig [ 436.027450][T22034] --map-set only usable from mangle table [ 436.031184][T22039] lo: Caught tx_queue_len zero misconfig [ 436.060202][T22041] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4429'. [ 436.069961][T22041] netlink: 'syz.3.4429': attribute type 2 has an invalid length. [ 436.330149][T22057] syzkaller0: entered promiscuous mode [ 436.336240][T22057] syzkaller0: entered allmulticast mode [ 436.370016][T22059] netlink: 'syz.3.4437': attribute type 1 has an invalid length. [ 436.478582][T22063] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4438'. [ 436.553339][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 436.576401][T22069] bridge3: entered promiscuous mode [ 436.581719][T22069] bridge3: entered allmulticast mode [ 437.449473][T22109] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 437.674171][T22118] syzkaller0: entered promiscuous mode [ 437.682506][T22118] syzkaller0: entered allmulticast mode [ 437.705029][T22122] FAULT_INJECTION: forcing a failure. [ 437.705029][T22122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.727732][T22122] CPU: 0 UID: 0 PID: 22122 Comm: syz.3.4459 Not tainted syzkaller #0 PREEMPT(full) [ 437.727758][T22122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.727769][T22122] Call Trace: [ 437.727776][T22122] [ 437.727784][T22122] dump_stack_lvl+0xe8/0x150 [ 437.727810][T22122] should_fail_ex+0x412/0x560 [ 437.727839][T22122] _copy_from_iter+0x1d3/0x1670 [ 437.727865][T22122] ? rcu_is_watching+0x15/0xb0 [ 437.727892][T22122] ? __pfx__copy_from_iter+0x10/0x10 [ 437.727923][T22122] ? netlink_sendmsg+0x650/0xb40 [ 437.727943][T22122] ? skb_put+0x11b/0x210 [ 437.727968][T22122] netlink_sendmsg+0x6c0/0xb40 [ 437.727999][T22122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.728024][T22122] ? aa_sock_msg_perm+0xf1/0x1b0 [ 437.728048][T22122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.728075][T22122] ____sys_sendmsg+0x972/0x9f0 [ 437.728102][T22122] ? __might_fault+0xaf/0x130 [ 437.728131][T22122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.728163][T22122] ? import_iovec+0x73/0xa0 [ 437.728190][T22122] ___sys_sendmsg+0x2a5/0x360 [ 437.728212][T22122] ? __lock_acquire+0x6b5/0x2cf0 [ 437.728236][T22122] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.728292][T22122] ? __fget_files+0x2a/0x420 [ 437.728312][T22122] ? __fget_files+0x3a0/0x420 [ 437.728343][T22122] __x64_sys_sendmsg+0x1bd/0x2a0 [ 437.728368][T22122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.728400][T22122] ? __pfx_ksys_write+0x10/0x10 [ 437.728432][T22122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.728452][T22122] do_syscall_64+0x15f/0xf80 [ 437.728474][T22122] ? trace_irq_disable+0x3b/0x140 [ 437.728507][T22122] ? clear_bhb_loop+0x40/0x90 [ 437.728529][T22122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.728546][T22122] RIP: 0033:0x7f5f14b9cdd9 [ 437.728564][T22122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.728579][T22122] RSP: 002b:00007f5f12df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.728598][T22122] RAX: ffffffffffffffda RBX: 00007f5f14e15fa0 RCX: 00007f5f14b9cdd9 [ 437.728610][T22122] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 437.728622][T22122] RBP: 00007f5f12df6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.728632][T22122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.728643][T22122] R13: 00007f5f14e16038 R14: 00007f5f14e15fa0 R15: 00007fff85068908 [ 437.728672][T22122] [ 437.975850][ T48] wlan1: Trigger new scan to find an IBSS to join [ 438.353475][T22143] tipc: Enabling of bearer rejected, already enabled [ 438.487133][T22145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.491786][T22153] __nla_validate_parse: 3 callbacks suppressed [ 438.491802][T22153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4468'. [ 438.542945][T22145] netlink: 'syz.0.4465': attribute type 21 has an invalid length. [ 438.695673][ T143] net_ratelimit: 57 callbacks suppressed [ 438.695691][ T143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.727341][ T143] bond4: (slave bridge2): failed to get link speed/duplex [ 438.733014][T22171] xt_TCPMSS: Only works on TCP SYN packets [ 438.825625][ T6287] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.846041][ T6287] bond4: (slave bridge2): failed to get link speed/duplex [ 438.935931][ T6292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.955649][ T6292] bond4: (slave bridge2): failed to get link speed/duplex [ 439.045681][ T6292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 439.065879][ T6292] bond4: (slave bridge2): failed to get link speed/duplex [ 439.155787][ T143] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 439.176051][ T143] bond4: (slave bridge2): failed to get link speed/duplex [ 439.371693][T22176] netlink: 320 bytes leftover after parsing attributes in process `syz.0.4475'. [ 439.383146][T22179] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 439.389183][T22182] sock: sock_timestamping_bind_phc: sock not bind to device [ 439.431397][T22187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4479'. [ 439.557361][T22187] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 439.574369][T22187] bond6 (unregistering): Released all slaves [ 439.678356][T22196] geneve2: entered promiscuous mode [ 439.722053][ T6282] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 34912 - 0 [ 439.757036][ T6282] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 34912 - 0 [ 439.771314][ T6282] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 34912 - 0 [ 439.853560][T22202] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 439.866429][T22202] bond7 (unregistering): Released all slaves [ 439.919920][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.218215][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4492'. [ 440.283335][T22212] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.285041][T22242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4493'. [ 440.291056][T22212] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.352785][T22244] netlink: 'syz.4.4493': attribute type 7 has an invalid length. [ 440.362037][T22244] netlink: 'syz.4.4493': attribute type 8 has an invalid length. [ 440.977648][ T6282] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 34912 - 0 [ 440.986989][ T6282] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.120594][ T6282] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.147684][ T6282] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.202084][ T6282] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.273350][T22251] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.280635][T22251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.289279][T22251] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.296557][T22251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.309680][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4498'. [ 441.329714][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 441.416395][T22264] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 441.445613][T22264] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 441.454286][T22264] gretap1: entered promiscuous mode [ 441.490667][T22264] gretap1: entered allmulticast mode [ 441.560405][T22271] vlan4: entered allmulticast mode [ 441.700238][T22285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4503'. [ 441.751785][T22289] netlink: 'syz.1.4506': attribute type 1 has an invalid length. [ 441.794519][T22289] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.828496][T22289] vlan5: entered promiscuous mode [ 441.842772][T22289] vlan5: entered allmulticast mode [ 441.911980][T22298] bond7: (slave bridge5): making interface the new active one [ 441.915171][T22302] ------------[ cut here ]------------ [ 441.926902][T22302] 1 [ 441.926951][T22302] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.4.4509/22302 [ 441.926978][T22298] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 441.947367][T22302] Modules linked in: [ 441.947652][T22298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4506'. [ 441.951586][T22302] CPU: 0 UID: 0 PID: 22302 Comm: syz.4.4509 Not tainted syzkaller #0 PREEMPT(full) [ 441.951613][T22302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.951627][T22302] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 441.985160][T22302] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4a 1d b9 f7 66 90 e8 43 1d b9 f7 31 ff 48 89 de ba 02 00 00 00 e8 84 81 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8f d8 9e 01 cc 49 [ 442.000578][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 442.004856][T22302] RSP: 0018:ffffc90006d671c0 EFLAGS: 00010286 [ 442.016949][T22302] RAX: 463eb952b3c37200 RBX: ffff88803f2128c0 RCX: 0000000080000401 [ 442.024924][T22302] RDX: 0000000000000002 RSI: ffffffff8dfa8972 RDI: ffffffff8c28abe0 [ 442.032940][T22302] RBP: ffffc90006d674c0 R08: ffffffff9030a5f7 R09: 1ffffffff20614be [ 442.040971][T22302] R10: dffffc0000000000 R11: fffffbfff20614bf R12: dffffc0000000000 [ 442.049022][T22302] R13: 0000000000000000 R14: ffff88803f2128c0 R15: dffffc0000000000 [ 442.057090][T22302] FS: 00007f6356bf46c0(0000) GS:ffff88812528f000(0000) knlGS:0000000000000000 [ 442.066838][T22302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.073564][T22302] CR2: 000000110c28a5fd CR3: 00000000ad4ac000 CR4: 00000000003526f0 [ 442.081591][T22302] Call Trace: [ 442.084886][T22302] [ 442.087859][T22302] ip_push_pending_frames+0x8b/0x110 [ 442.093162][T22302] __icmp_send+0x11e4/0x1690 [ 442.097802][T22302] ? __icmp_send+0x22b/0x1690 [ 442.102498][T22302] ? __pfx___icmp_send+0x10/0x10 [ 442.107509][T22302] ? ip_route_input_noref+0xad/0x270 [ 442.112826][T22302] ? __pfx_ip_route_input_noref+0x10/0x10 [ 442.118597][T22302] ? tcp_v4_early_demux+0x465/0x9c0 [ 442.123837][T22302] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 442.129093][T22302] ip_options_compile+0x80/0xb0 [ 442.134000][T22302] ip_rcv_finish_core+0xaa2/0x1c00 [ 442.139169][T22302] ip_rcv_finish+0x14c/0x2a0 [ 442.143776][T22302] NF_HOOK+0x336/0x3c0 [ 442.147896][T22302] ? sock_wfree+0x26e/0x750 [ 442.152455][T22302] ? __pfx_ip_rcv_finish+0x10/0x10 [ 442.157619][T22302] ? NF_HOOK+0x9e/0x3c0 [ 442.161797][T22302] ? __pfx_NF_HOOK+0x10/0x10 [ 442.166438][T22302] ? __pfx_ip_rcv_finish+0x10/0x10 [ 442.171567][T22302] ? netif_receive_skb+0x102/0xbf0 [ 442.176722][T22302] ? __pfx_ip_rcv+0x10/0x10 [ 442.181241][T22302] netif_receive_skb+0x45b/0xbf0 [ 442.186246][T22302] ? __pfx_netif_receive_skb+0x10/0x10 [ 442.191762][T22302] ? tun_rx_batched+0x185/0x790 [ 442.196660][T22302] tun_rx_batched+0x1de/0x790 [ 442.201356][T22302] ? __build_skb+0x62/0x440 [ 442.205908][T22302] ? __pfx_tun_rx_batched+0x10/0x10 [ 442.211127][T22302] ? tun_get_user+0x2787/0x43e0 [ 442.216068][T22302] ? tun_get_user+0x2787/0x43e0 [ 442.220969][T22302] ? tun_get_user+0x2394/0x43e0 [ 442.225892][T22302] ? tun_get_user+0x2394/0x43e0 [ 442.230778][T22302] ? __local_bh_enable_ip+0xd0/0x130 [ 442.236264][T22302] tun_get_user+0x2bbc/0x43e0 [ 442.240982][T22302] ? tun_get_user+0x2787/0x43e0 [ 442.245910][T22302] ? aa_file_perm+0x50e/0x15e0 [ 442.250699][T22302] ? __pfx_tun_get_user+0x10/0x10 [ 442.255779][T22302] ? __lock_acquire+0x6b5/0x2cf0 [ 442.260760][T22302] ? ref_tracker_alloc+0x35c/0x4c0 [ 442.265977][T22302] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 442.271464][T22302] ? tun_get+0x1c/0x2f0 [ 442.275674][T22302] ? tun_get+0x1c/0x2f0 [ 442.279853][T22302] ? tun_get+0x1c/0x2f0 [ 442.284090][T22302] ? tun_get+0x1c/0x2f0 [ 442.288308][T22302] tun_chr_write_iter+0x113/0x200 [ 442.293347][T22302] vfs_write+0x61d/0xb90 [ 442.297642][T22302] ? __pfx_vfs_write+0x10/0x10 [ 442.302439][T22302] ? __fget_files+0x2a/0x420 [ 442.307094][T22302] ksys_write+0x150/0x270 [ 442.311452][T22302] ? __pfx_ksys_write+0x10/0x10 [ 442.316392][T22302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.322485][T22302] do_syscall_64+0x15f/0xf80 [ 442.327148][T22302] ? trace_irq_disable+0x3b/0x140 [ 442.332202][T22302] ? clear_bhb_loop+0x40/0x90 [ 442.336921][T22302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.342830][T22302] RIP: 0033:0x7f6355d5d60e [ 442.347320][T22302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.366957][T22302] RSP: 002b:00007f6356bf3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.375371][T22302] RAX: ffffffffffffffda RBX: 00007f6356bf46c0 RCX: 00007f6355d5d60e [ 442.383382][T22302] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 442.391415][T22302] RBP: 00007f6355e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 442.399443][T22302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.407459][T22302] R13: 00007f6356016038 R14: 00007f6356015fa0 R15: 00007ffd8f23e188 [ 442.415443][T22302] [ 442.418574][T22302] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 442.425844][T22302] CPU: 0 UID: 0 PID: 22302 Comm: syz.4.4509 Not tainted syzkaller #0 PREEMPT(full) [ 442.435218][T22302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.445275][T22302] Call Trace: [ 442.448560][T22302] [ 442.451490][T22302] vpanic+0x56c/0xa60 [ 442.455478][T22302] ? __pfx__printk+0x10/0x10 [ 442.460077][T22302] ? __pfx_vpanic+0x10/0x10 [ 442.464572][T22302] ? is_bpf_text_address+0x292/0x2b0 [ 442.469852][T22302] ? is_bpf_text_address+0x26/0x2b0 [ 442.475064][T22302] panic+0xc5/0xd0 [ 442.478784][T22302] ? __pfx_panic+0x10/0x10 [ 442.483217][T22302] __warn+0x315/0x4c0 [ 442.487198][T22302] ? ip_rt_bug+0x2d/0x140 [ 442.491533][T22302] ? ip_rt_bug+0x2d/0x140 [ 442.495876][T22302] __report_bug+0x29a/0x540 [ 442.500396][T22302] ? ip_rt_bug+0x2d/0x140 [ 442.504729][T22302] ? __pfx___report_bug+0x10/0x10 [ 442.509766][T22302] ? lockdep_hardirqs_on+0x7a/0x110 [ 442.514975][T22302] ? irqentry_exit+0x218/0x730 [ 442.519736][T22302] ? trace_irq_disable+0x3b/0x140 [ 442.524803][T22302] ? ip_rt_bug+0x2f/0x140 [ 442.529129][T22302] ? ip_rt_bug+0x2d/0x140 [ 442.533448][T22302] report_bug+0x16a/0x220 [ 442.537776][T22302] ? ip_rt_bug+0x2d/0x140 [ 442.542093][T22302] ? ip_rt_bug+0x2f/0x140 [ 442.546413][T22302] handle_bug+0x9c/0x200 [ 442.550660][T22302] exc_invalid_op+0x1a/0x50 [ 442.555164][T22302] asm_exc_invalid_op+0x1a/0x20 [ 442.560012][T22302] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 442.564949][T22302] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4a 1d b9 f7 66 90 e8 43 1d b9 f7 31 ff 48 89 de ba 02 00 00 00 e8 84 81 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8f d8 9e 01 cc 49 [ 442.584551][T22302] RSP: 0018:ffffc90006d671c0 EFLAGS: 00010286 [ 442.590619][T22302] RAX: 463eb952b3c37200 RBX: ffff88803f2128c0 RCX: 0000000080000401 [ 442.598587][T22302] RDX: 0000000000000002 RSI: ffffffff8dfa8972 RDI: ffffffff8c28abe0 [ 442.606556][T22302] RBP: ffffc90006d674c0 R08: ffffffff9030a5f7 R09: 1ffffffff20614be [ 442.614613][T22302] R10: dffffc0000000000 R11: fffffbfff20614bf R12: dffffc0000000000 [ 442.622666][T22302] R13: 0000000000000000 R14: ffff88803f2128c0 R15: dffffc0000000000 [ 442.630916][T22302] ip_push_pending_frames+0x8b/0x110 [ 442.636213][T22302] __icmp_send+0x11e4/0x1690 [ 442.640797][T22302] ? __icmp_send+0x22b/0x1690 [ 442.645479][T22302] ? __pfx___icmp_send+0x10/0x10 [ 442.650434][T22302] ? ip_route_input_noref+0xad/0x270 [ 442.655726][T22302] ? __pfx_ip_route_input_noref+0x10/0x10 [ 442.661458][T22302] ? tcp_v4_early_demux+0x465/0x9c0 [ 442.666658][T22302] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 442.671877][T22302] ip_options_compile+0x80/0xb0 [ 442.676738][T22302] ip_rcv_finish_core+0xaa2/0x1c00 [ 442.681881][T22302] ip_rcv_finish+0x14c/0x2a0 [ 442.686491][T22302] NF_HOOK+0x336/0x3c0 [ 442.690566][T22302] ? sock_wfree+0x26e/0x750 [ 442.695074][T22302] ? __pfx_ip_rcv_finish+0x10/0x10 [ 442.700179][T22302] ? NF_HOOK+0x9e/0x3c0 [ 442.704337][T22302] ? __pfx_NF_HOOK+0x10/0x10 [ 442.708928][T22302] ? __pfx_ip_rcv_finish+0x10/0x10 [ 442.714044][T22302] ? netif_receive_skb+0x102/0xbf0 [ 442.719177][T22302] ? __pfx_ip_rcv+0x10/0x10 [ 442.723692][T22302] netif_receive_skb+0x45b/0xbf0 [ 442.728639][T22302] ? __pfx_netif_receive_skb+0x10/0x10 [ 442.734114][T22302] ? tun_rx_batched+0x185/0x790 [ 442.738964][T22302] tun_rx_batched+0x1de/0x790 [ 442.743640][T22302] ? __build_skb+0x62/0x440 [ 442.748145][T22302] ? __pfx_tun_rx_batched+0x10/0x10 [ 442.753347][T22302] ? tun_get_user+0x2787/0x43e0 [ 442.758193][T22302] ? tun_get_user+0x2787/0x43e0 [ 442.763041][T22302] ? tun_get_user+0x2394/0x43e0 [ 442.767889][T22302] ? tun_get_user+0x2394/0x43e0 [ 442.772732][T22302] ? __local_bh_enable_ip+0xd0/0x130 [ 442.778040][T22302] tun_get_user+0x2bbc/0x43e0 [ 442.782720][T22302] ? tun_get_user+0x2787/0x43e0 [ 442.787578][T22302] ? aa_file_perm+0x50e/0x15e0 [ 442.792339][T22302] ? __pfx_tun_get_user+0x10/0x10 [ 442.797357][T22302] ? __lock_acquire+0x6b5/0x2cf0 [ 442.802302][T22302] ? ref_tracker_alloc+0x35c/0x4c0 [ 442.807419][T22302] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 442.812879][T22302] ? tun_get+0x1c/0x2f0 [ 442.817026][T22302] ? tun_get+0x1c/0x2f0 [ 442.821181][T22302] ? tun_get+0x1c/0x2f0 [ 442.825331][T22302] ? tun_get+0x1c/0x2f0 [ 442.829485][T22302] tun_chr_write_iter+0x113/0x200 [ 442.834507][T22302] vfs_write+0x61d/0xb90 [ 442.838758][T22302] ? __pfx_vfs_write+0x10/0x10 [ 442.843530][T22302] ? __fget_files+0x2a/0x420 [ 442.848124][T22302] ksys_write+0x150/0x270 [ 442.852454][T22302] ? __pfx_ksys_write+0x10/0x10 [ 442.857308][T22302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.863376][T22302] do_syscall_64+0x15f/0xf80 [ 442.867964][T22302] ? trace_irq_disable+0x3b/0x140 [ 442.872990][T22302] ? clear_bhb_loop+0x40/0x90 [ 442.877667][T22302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.883557][T22302] RIP: 0033:0x7f6355d5d60e [ 442.887970][T22302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.907677][T22302] RSP: 002b:00007f6356bf3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.916090][T22302] RAX: ffffffffffffffda RBX: 00007f6356bf46c0 RCX: 00007f6355d5d60e [ 442.924054][T22302] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 442.932018][T22302] RBP: 00007f6355e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 442.939981][T22302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.947946][T22302] R13: 00007f6356016038 R14: 00007f6356015fa0 R15: 00007ffd8f23e188 [ 442.955930][T22302] [ 442.959402][T22302] Kernel Offset: disabled [ 442.963712][T22302] Rebooting in 86400 seconds..