last executing test programs: 2.436543749s ago: executing program 0 (id=7601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x2d, 0x4) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095", @ANYRESHEX=r4, @ANYBLOB="d9166317c25014e2940d2fd6a34fd219fa1af5f54e9eb23dcd957f895e1bedd1d02ee0e0421eb66f13cf7f13f80e055c1c6475b4831e0f24b40a86e13812978519d2751bf39bf9862e41b1c0526f69b244805cf251a571796744767c049eb0cdfca01dad912063ea300bf1c32946c1a3f9e2ab7ac60545c1045ddd7c659020cb2e08656d5c1362b4ed256dbd1046f5350d68046799ae129aed1e7438951ac313b67f21661ce10ce42dfa86c84bd7bb85650dd1274db747", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.354958276s ago: executing program 4 (id=7602): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x1, 0x4e21, 0x7fa8, 0x2, 0x80, 0xa0, 0x2f, r1, r3}, {0x5, 0x8, 0x0, 0x400, 0x9ebf, 0x78b, 0x4, 0x3}, {0xffffffffffffffff, 0xe, 0x94cf, 0x5}, 0x4, 0x6e6bbe, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x7, 0x3}}, 0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x1, 0x4e21, 0x7fa8, 0x2, 0x80, 0xa0, 0x2f, r1, r3}, {0x5, 0x8, 0x0, 0x400, 0x9ebf, 0x78b, 0x4, 0x3}, {0xffffffffffffffff, 0xe, 0x94cf, 0x5}, 0x4, 0x6e6bbe, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d3, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x7, 0x3}}, 0xe8) 2.22770555s ago: executing program 0 (id=7605): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x700, 0x1, 0x3, 0x5, {{0x26, 0x4, 0x3, 0x6, 0x98, 0x66, 0x0, 0x9, 0x29, 0x0, @remote, @local, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x4b, 0x0, 0xc, [0x6, 0x5, 0x2, 0x9]}, @timestamp={0x44, 0x14, 0xc0, 0x0, 0x9, [0x6, 0x80000000, 0x5, 0x6]}, @noop, @generic={0x94, 0xe, "705ac893ba620b2350952e55"}, @timestamp={0x44, 0x8, 0xff, 0x0, 0xa, [0x0]}, @timestamp={0x44, 0xc, 0xc5, 0x0, 0x9, [0x400, 0x5]}, @ssrr={0x89, 0x1b, 0x8, [@local, @loopback, @empty, @local, @remote, @remote]}, @rr={0x7, 0x7, 0x40, [@broadcast]}, @generic={0x44, 0x10, "89980eb271ad0105d066b7a501a1"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_getaddr={0x20, 0x16, 0x800, 0x70bd2d, 0x25dfdc00, {0x2, 0x10, 0x80, 0xc8, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_getaddr={0x20, 0x16, 0x800, 0x70bd2d, 0x25dfdc00, {0x2, 0x10, 0x80, 0xc8, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 2.081561875s ago: executing program 0 (id=7607): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111b8000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 2.080359715s ago: executing program 4 (id=7608): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xd2, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000200), 0x8, 0xe7, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r1, r2, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="660affffffff000061114c000000000085000000a400000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x5, 0xfd, 0x0, 0x7ff}]}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r3, &(0x7f0000000680)="bb0d323df1bfcb23350e3301715a714fdef0dec74d588a482decd3de1eab9f2ccffaa70a1da8ede62e1a942dae00b52b922d8eed3b", &(0x7f00000006c0)=@udp=r4, 0x3}, 0x20) 1.974982901s ago: executing program 3 (id=7609): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20044894) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl(r1, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9, 0x1}, 0x14}}, 0x0) 1.802834769s ago: executing program 0 (id=7610): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000440)={'veth0_macvtap\x00', @remote}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x100}, {@in=@remote, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}]}, 0x154}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000040}, 0x80) ioctl$TUNSETLINK(r2, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x4000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.802210782s ago: executing program 4 (id=7612): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x88, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x58}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xa2, 0x5}}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x88}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x48) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="00007cf9d30ba11b0b3926216b6e280000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, &(0x7f0000000240)=0xd) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="d2fc0557d63acf058ce09ea293", 0xd, 0x0, 0x0, 0x0) 1.733387096s ago: executing program 3 (id=7613): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x41, 0x3, 0x1f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x160, 0x1f0, 0x1f0, 0x160, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x89, 0x2, 0x8, 0xed02}, {0x1, 0x7, 0x9, 0x6}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) getsockname(r0, &(0x7f0000000440)=@ieee802154, &(0x7f0000000340)=0xfffffffffffffd73) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0xffffffffa3af292f, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) 1.481506892s ago: executing program 1 (id=7615): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={0xffffffffffffffff, 0x20, &(0x7f0000001240)={&(0x7f0000000140)=""/226, 0xe2, 0x0, &(0x7f0000000240)=""/4096, 0x1000}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000001780)={{0x80000001, 0x5, 0x8, 0x43, 0x2}, &(0x7f0000001480)=[{}, {}, {}, {}]}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x16, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) 1.481172677s ago: executing program 2 (id=7616): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="4bb7ea9493fa324589ebc8d8ede01bdff366af761d88212cfff42870d6d74e142a7621c455687a8f80b2eb68ed226aeedaf014c6e33f93986845392127cfa3bc01f6c843b712a23309f3e13aa08054", 0x4f) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="08f40900", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x48010) 1.478943788s ago: executing program 3 (id=7617): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r0}, 0x9, &(0x7f0000000000)=[0x9, 0x500de477, 0x3, 0x10000, 0x8, 0x9, 0xffffffff, 0x54, 0x2], 0x0, 0x4, 0x1}) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000100, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000100, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001880)=@gcm_128={{0x304}, "eabb24300e1f5123", "e13d1e79361c474d2eefa3c9432bc22f", "bbeff3e3", "ecffffff00000300"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001880)=@gcm_128={{0x304}, "eabb24300e1f5123", "e13d1e79361c474d2eefa3c9432bc22f", "bbeff3e3", "ecffffff00000300"}, 0x28) 1.370845259s ago: executing program 4 (id=7618): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x502, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x4c}}, 0x0) 1.345789244s ago: executing program 1 (id=7619): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340), 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) 1.251705381s ago: executing program 2 (id=7620): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) 1.166026662s ago: executing program 4 (id=7621): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000340)="f4001100052b2c25fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x20000810) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.146784728s ago: executing program 1 (id=7622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="97e14bee5c0e2547e2e3111492d565708d0e5da55e274c424503ac7469ff4b6296d61d6be0"], 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}, {0x0}], 0x2}}], 0x1, 0x41) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x2, {0x0, 0xff, 0x3}, 0x2}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x1, {0x0, 0xff, 0x2}, 0xfe}, 0x18) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$inet(r8, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x1b0}, 0x20000000) 1.031711925s ago: executing program 2 (id=7623): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8, 0x0, 0x1}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200010000000000a73f264c4e1b"], 0x28}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r6, @ANYBLOB="10005edd9c4bbebd97ce810000000000"], 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x880) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x125, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x4000000, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_LOSS={0xbc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x8, 0x0, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x5, 0x40, 0xb}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3ff, 0xf, 0x1, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x3, 0x2, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0xc2c, 0xffffffff, 0x6d5}}, @NETEM_LOSS_GE={0x14, 0x2, {0xfffffff4, 0x9, 0x4, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x1, 0x2, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8000, 0x2, 0x1, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x1000, 0x80, 0x3}}]}]}}}]}, 0x108}}, 0x8c0) 910.752934ms ago: executing program 0 (id=7624): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r6, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 865.772935ms ago: executing program 3 (id=7625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1, 0x5}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000180)={@dev, @local, @remote}, &(0x7f00000001c0)=0xc) 803.116022ms ago: executing program 4 (id=7626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x101, 0x5}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x44}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x810) syz_emit_ethernet(0x132e, &(0x7f0000000280)={@random="d1b9319ddba3", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @gre={{0x25, 0x4, 0x2, 0x4, 0x131c, 0x66, 0x0, 0x73, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0xe, "047231b85d1c6637b8053010"}, @timestamp_prespec={0x44, 0x1c, 0xfc, 0x3, 0x7, [{@multicast2, 0xe2}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffffffff}]}, @ssrr={0x89, 0x17, 0xc3, [@local, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_addr={0x44, 0x24, 0x6, 0x1, 0x8, [{@empty, 0x8}, {@empty, 0x401}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xffffff06}, {@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x5c, 0x3, 0x2, [{@private=0xa010101, 0x4}]}, @timestamp={0x44, 0xc, 0xf1, 0x0, 0x2, [0x266, 0x7fff]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xaf, 0x0, [0x3, 0x3], "17fb80f0190459980c67dfed8cca633de48509d21849c0ceec727a3ce7be1b32eaf53e70cfb591738f1fe4b928d5c94436956b26bc63df139baffd486dd8d26515855dc8dfcde48a5c22c377da65bfbaf905b604a0de2b6ce49da943845ba3bf93d7dec49a3442052a48167ba54cfdfb2cefa1fc9d6bd99d64dda589e7b7c208e1ec1914a4c1935ec0fbd573d078d15a04df80f03eda715259dbff6493bc6e3dda676c8e44f8b415e9adcedc24e042"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x6, 0x4], "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"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xd, 0x8], "4f4dd8a33db5ffce154273cdbf7d98cb42abd91c54c96ac0ed7ed910b629c892354487ff4ba0e3dbbef8553fc7f3541d76395ae730be88c409685145fba725364ef076857b4e5e637ea70247ffd65862ab8f93342dcbe60e0e82f871c9d64b6a179b1967d020c23e3fb6141083aa4b2766ddabaaa1b31cf81ac9ee03eb05e19b07a2edca8f934b6a37eeeaae83646d60bc90fd"}, {0x8, 0x88be, 0x2, {{0xa, 0x1, 0x3, 0x0, 0x1, 0x1, 0x4, 0x2}, 0x1, {0xa10}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x1, 0x2, 0x1, 0x2, 0x2, 0x1}, 0x2, {0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "d2ce4e2c7758ed9288320add5c20f651229038a0aafb44683f11798fff3f3304b74ca2ac83d7a043ab2c0c586ee2ad56233ce2e4d013f3edc992e415f8a2bd4c96c48cf46b246618da89f8a222881ecb02ed09f640e4cf7d8c28df9392dc83c8a0692caffc29832374dd9a9fbbd33ab57931a5d3b58283848687c9d2714dffdbb73e8224e1d5e91294772e230c5a0108b15da422f95634e9435904a840b5aa5dcb72e47a60a9b215b7fcbba4d5234824ab858deef8dae8eee77026f277aff15c370777fb8a71b05e98f7195c0533be3ce42a9af39399bb3a8cbe2c5c2d3897803dad77c5cecc3ac430f805dc6b7cd8ae81e7670e75ff"}}}}}}, &(0x7f00000015c0)={0x0, 0x2, [0xa82, 0xce1, 0xf48, 0xf37]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x3f681cbe238c1a83}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x66, 0xb}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x96}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c850}, 0x4004055) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000001980)={&(0x7f0000001700), 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x194, r4, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf0}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x30}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xca03}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x194}}, 0x880) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000019c0)=[@in6={0xa, 0x4e24, 0x9, @private2, 0x9}], 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), r0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x58, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000001b80), &(0x7f0000001bc0)=0x8) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c40), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d00)={'syztnl1\x00', &(0x7f0000001c80)={'ip6tnl0\x00', 0x0, 0x0, 0xfb, 0x0, 0xfffff801, 0x56, @local, @private2, 0x10, 0x40, 0x1, 0x4}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001f40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d40)={0x1b0, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x190, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "f6d41cf5c8d81cb4242b07007008c5db6b317a77f95064137454ddc4306f895e424d0411305a0d358b5ba11c01f41138338f95529df7bac4aaf6c51427eab32a8fa180d48073aa37102eafc13500215648e4cf4f00178209258bfb190fadce689a254d37d9ba9368e89b16c90ecaf55bdfc6532b79527c648cf37678ae84113447da9fe4321aebe2b4f3043ef5771d62f7da587031130a2582e45aa6f10b7b72d4f417baab8a"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff5f7c}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[}\xa5\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe30}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c841) r9 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000001f80), &(0x7f0000001fc0)=0x10) sendto$phonet(r9, &(0x7f0000002000)="0263c8714fac1bc06ba7b8bae3d06e0c4c32c214f6a0129554318bd1d725ab38c7dc843c11d4fe003cbeb0bb2ceee6eccb268a532bfa1a8838ae1e42cf4e1e617c8fa7e2ede3aa2cabf5fd58596b8bcb053eef48f3c07cabddc7e156d1a78abceb722d969d7ab9d4d40acfc6c834174bdab14c4f822d549a7bdf7662531b24fecfdb354519c0f6f8102822906864254aee2c45c311bbabb6b4396aef81d9dcc8ece07d579f84713ef95e41d1bf50737c27befc0346d64a94a1faeaaef36877b185b90adf", 0xc4, 0x20008810, &(0x7f0000002100)={0x23, 0x4, 0x62, 0x2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x5c, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000001, 0x57}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002300), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r11, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x89}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4c}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x60, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000, {0x2, 0xe, 0x0, 0x5}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x2, 0x7, 0x0, {0x8, 0x9c, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x0, 0x263, 0x9}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) r12 = accept(r5, 0x0, &(0x7f0000002540)) sendmsg$kcm(r12, &(0x7f0000003e00)={&(0x7f0000002580)=@in={0x2, 0x4e24, @remote}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002600)="fcdd9f22184be819bbb1c11925ffb9b8df0cd967da10ef3fb28d46f2c00d3fc7804933ecd2e977144fc8e7381bd1571ffa637bb504bfe86de39c7ec6c66d1887c79e6a8f06330345b062821473f147a9336151d364d5aab17a4f631886391308b06592b6f36d5ffcee8774407a3aa36cb392fd4d449d37b26132721db279a16cd5cdab38dd08d72757c32318fa343921d6fbdcdfbc31f50061bcbd32990b59d650822b210078d90f0e2bf47f96389154172df5a47c6c64c53fa9ff6c1f73111c68de96fc2214f4c69ddf5e81481cbd80899c230ad4f62eb47918f9c9dafc7b8e", 0xe0}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000003700)="42219817210649dc839be48f6e737e7d98c83d22efc7775705364e419e12f950e018f7335a27b157f7b3250c36fadb52a35ac95db5390260ad77a0ac22c82fccdad1eec753003d1398ffdce4485a6899256d20c479275375dc1559ca421a6b0944b27343cd82229304f244f8fc", 0x6d}, {&(0x7f0000003780)="58d8287ba562af7f03976fb73ef973dc1c10e2727972e70844c25b91e08dff5d8763736c5366a24c83b24ddae2af1769d95733d57439eaf9b2527a617c982042a133275e5a90ba988161fee02b7d5c94befa9126372f7a7394832f0c84ab74dc475c1e2d52d5b5bd0140c278288856129aabef919356f255a951a6c14c3c838a67ef3c09fdc6a045b26851d5bc7c0a3a22f1e9d10118a49cf2ac3b77b0168581c373bd06a893814b1e252e5e816d", 0xae}, {&(0x7f0000003840)="4edfc1800c58671e7015c7731a8b7e19e3cf", 0x12}, {&(0x7f0000003880)="d64e9ae03eb0eb39e2bc0d4f045cc836cb46e1959b9a0047fe41d3af185c4926e3d0941d8a806d2bb79bd6c0fb45643b94dd578cc09f0e8161dbc46b563c227c63000904b2e1dd6f21986d0b587d2c8c0f19d7458324faf8b63189eeab770e238eae74f8e22d94aa44c9547f7dc2665eef9d9278f1598211521c95ef3e92c1c6b15b20cbb95c0e8c09da6d55118ebd9111927ba4769b9958947dcbb7aed38872d8c02be654d608264c61b8a6032e33047821c3ef73c2e1d55cdab245fc1954459cc7408cee253fd6fde04793fbf9659f", 0xd0}, {&(0x7f0000003980)="6eb04d1578017275b050ccdf95817edffad0312e3a071ba7fa31b4e736b3cf01c1b3b75f07742b594ead32a5984e8052093fcc5a66ec3ff93102aeb466660a4f0db62578d8969a87c9113d5b7d1d1153f2a6e98e6bb441636bc73a629302676c79acf8f3eba94f6313e3ea0ddb939a13a6ce5eb207d242f4bb9eb064d4d45ab42f10e8dbb8c1c5f337680db72fecbd90", 0x90}, {&(0x7f0000003a40)="ec2ac4900277b6fe774c3627ae50dd2b87fc446a377544f7eab9d4cbb3eb423373ed1a97ce09330c15e359b64d64c3b5e3ac3b61b295d0b6f06c10142aeb5cb4940c34b18dae2a2746707b1c82867834630783d4c52c135695d551fcd311ca5672f93e3531e61b70533f3e4e1abaee6abe60189e136ff1558a2038c9828f4fdbcb710cbf6c06d787fc5a0816010f0655dda3164e78c628838a9df3b50fc439db40b5190fd748", 0xa6}, {&(0x7f0000003b00)="98eef7d2f8ca8c09def1532e363a007455ab1972a0e372a28212b88c719a1256ff1a10be8e69570014ed78b420716fcee4de208d9bd72e66c692bb9e43d564f76643b10b286d42793d86eb25c4ac0a803b236e3bf2dffb21bd75cf14f79331438375ce522c12f3edeb6b97401bd3ff245b1dcb4438d04a563e981a2a33baa8337e972b58748b51b4d5", 0x89}, {&(0x7f0000003bc0)='%F', 0x2}], 0xa, &(0x7f0000003cc0)=[{0xb8, 0xff, 0x0, "6c0b13fc420086e75aad0f56ac4b3ebda03926394ad51fef1564b30cdfa8d0d75343ee79b58473e474c46b4c67c415d4257078dc37059a5e19d317fcf6c83a86f325fdafe69bb2b36ef82ae9345fefd8771bda5ff9d51a33fc55e50e7b2905cff57bf55b8802bfb7a482871bb09c90cc54d3623586255f2e83c01e0a6206be38e62a2fa09fbc763c8723eef8eba3f58869dc3d7aa7d87ef90a8ec09891082f9572e6d459a681b3e0"}, {0x60, 0x84, 0x3, "757bfd45e695bb4af5c7a8657d7f1c28726171e745727cf11757d4b858fc982535eeae6195c9c0f915a15fa22dcf030756369327c28944f131c335ff8efb2e0e1dc884c618aad126d33d58"}], 0x118}, 0x3004c010) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003e80), r12) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000003f80)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003ec0)={0x74, r13, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfb}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000004080)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004040)={&(0x7f0000004000)={0x24, r1, 0xf00, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008831}, 0x20080011) 713.454289ms ago: executing program 1 (id=7627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="15e03b07b0689e768dac8117c5df9c00c26c567f39c4e6f7ad30c2305149035522730cc760825fbaf55f8e45ceaf5229505ecfd08cdca002616cce57dcf0cf8cf204c6db239feb5ad66a91c85037e02ef9a027c05d2bf260152d514bebdfb76285b57a211a6cddd48b68bb68ffb96f8af9fb", 0x72, 0x4c040, &(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x800, @mcast1, 0x1303}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="35ab2788d003", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x4e24, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x1, 0x472bd28, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e10, 0x36a81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 597.550082ms ago: executing program 2 (id=7628): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x5, @none, 0x1, 0x2}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0xf8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x14, 0x400, 0x5, 0x2, 0x1, 0x3, '\x00', r3, r4, 0x5, 0x1, 0x5, 0xa}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) sendto$unix(r1, &(0x7f0000000400)="b9385d34cb748904dbd3780f087e3bc155a7dbdeb25a2c985484b3a5ce2646af819852625f46a829a15d63260768f0ad7c098d5724038c80995d6926016120ef27ef96bea890d84fc2f418f4c624b19fbcefdfb2b55996ecc219f2fba2c160382132520f3015f19807f6526a394a4383f231d28ce9af35ea604b7ca2ade116086ed8ae3322922cb895966111f383fdcf0a56b699e0e3798c074d72acb09d6d19c5709eb8f0083330", 0xa8, 0x4000800, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$inet6(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{0x0}, {0x0}, {&(0x7f0000002000)="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", 0x489}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="137d72", 0x3}], 0x1, &(0x7f0000001c80)=[@flowinfo={{0x14, 0x29, 0xb, 0x48000}}, @rthdr={{0x18, 0x29, 0x39, {0x6, 0x0, 0x2, 0x5}}}], 0x30}}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x240089c1) 335.592903ms ago: executing program 2 (id=7629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r1, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2711, 0x0, &(0x7f00000000c0)) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000000)=0x2, 0xfffffffffffffe08) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000002030300000001000021000000000010581ae4de3b4a62c1b49a07abbbb70800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24048000}, 0x4000) 335.118806ms ago: executing program 3 (id=7630): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="890704", 0x3) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000200)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x30, 0x25, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0x4}, {0x4, 0xd}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="890704", 0x3) (async) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000200)=0x1, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delqdisc={0x30, 0x25, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0x4}, {0x4, 0xd}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async) 247.344166ms ago: executing program 2 (id=7631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x4084) 167.859091ms ago: executing program 1 (id=7632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x20000090) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000180)={r3, &(0x7f0000000040)='\x00', 0x9021a701d45d0d42, &(0x7f0000000080)={@_ha_fsid={[0xffffffff, 0x40]}, {0xffff, 0x1000, 0x100, 0x8}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xa) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 95.343344ms ago: executing program 3 (id=7633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xa, 0x0, 0xd}}, {0x4}}]}]}, 0x68}}, 0x0) 80.372279ms ago: executing program 0 (id=7634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x24, r2, 0x11, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x24, r2, 0x11, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040) 0s ago: executing program 1 (id=7635): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x1404, 0x0, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0000}, 0x40) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) kernel console output (not intermixed with test programs): 938] veth1_vlan: left promiscuous mode [ 676.825022][ T7938] pim6reg (unregistering): left allmulticast mode [ 676.869024][ T7938] pimreg (unregistering): left allmulticast mode [ 677.192238][T16809] lo speed is unknown, defaulting to 1000 [ 677.216033][T16809] infiniband syz0: ib_query_port failed (-19) [ 677.403105][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 677.432333][T28469] syzkaller0: entered promiscuous mode [ 677.444516][T28469] syzkaller0: entered allmulticast mode [ 677.877391][T28481] syzkaller0: entered promiscuous mode [ 677.891702][T28481] syzkaller0: entered allmulticast mode [ 677.915675][T28499] netlink: 'syz.2.6110': attribute type 11 has an invalid length. [ 677.928172][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 680.073816][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 680.092382][T22330] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.132809][T28081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 680.157702][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 680.178614][T28081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 680.191023][ T7938] IPVS: stop unused estimator thread 0... [ 680.201419][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.217457][T28081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.261406][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.279997][T22330] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.291822][T22330] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.322256][T22330] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.349692][T28081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.397408][T28081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.522791][T28554] __nla_validate_parse: 5 callbacks suppressed [ 680.522812][T28554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6121'. [ 680.596675][T28561] netlink: 'syz.3.6125': attribute type 2 has an invalid length. [ 680.604712][T28561] netlink: 'syz.3.6125': attribute type 1 has an invalid length. [ 680.631877][T28558] netlink: 'syz.0.6123': attribute type 4 has an invalid length. [ 680.643715][T28564] netlink: 'syz.0.6123': attribute type 4 has an invalid length. [ 680.658061][T28564] netlink: 'syz.0.6123': attribute type 4 has an invalid length. [ 680.666766][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 680.760333][T28081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.794930][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 680.824729][T28081] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.847816][T28570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6128'. [ 680.860434][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.867857][ T7930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.904981][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 680.920330][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.927537][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.954772][T28579] IPv6: addrconf: prefix option has invalid lifetime [ 680.973204][T28580] netlink: 'syz.4.6129': attribute type 25 has an invalid length. [ 680.986743][T28580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6129'. [ 681.163585][T28584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.182303][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 681.292945][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 681.420079][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 681.552669][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 681.643511][T28081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.712410][T28615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6140'. [ 681.763935][T28081] veth0_vlan: entered promiscuous mode [ 681.795848][T28618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6144'. [ 681.800794][T28081] veth1_vlan: entered promiscuous mode [ 681.920753][T28081] veth0_macvtap: entered promiscuous mode [ 681.961534][T28081] veth1_macvtap: entered promiscuous mode [ 682.040295][T28081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.061653][T28629] team0: No ports can be present during mode change [ 682.076278][T28081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.106192][T22330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.126232][T22330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.177490][T22330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.196241][T22330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.315033][T28638] syzkaller1: entered promiscuous mode [ 682.320728][T28638] syzkaller1: entered allmulticast mode [ 682.346563][ T7939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.364918][ T7939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.424823][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.438068][T28645] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6150'. [ 682.441245][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.650700][T28655] netlink: 'syz.1.6009': attribute type 1 has an invalid length. [ 682.664204][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6152'. [ 682.732142][T28658] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6153'. [ 682.796470][T28658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.833223][T28659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6153'. [ 682.882300][T28658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.904596][T28658] bond0 (unregistering): Released all slaves [ 683.391517][T28691] clip:clip_setentry: non-CLIP VCC [ 683.422982][T28695] wg1 speed is unknown, defaulting to 1000 [ 683.829033][T28725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6168'. [ 684.602169][T23387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 684.619656][T23387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 684.632462][T23387] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 684.647356][T23387] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 684.655359][T23387] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 684.928606][T28777] netlink: 'syz.4.6184': attribute type 1 has an invalid length. [ 685.046985][T28766] wg1 speed is unknown, defaulting to 1000 [ 685.366216][T28792] netlink: 'syz.4.6188': attribute type 3 has an invalid length. [ 685.394964][T28792] netlink: 'syz.4.6188': attribute type 3 has an invalid length. [ 685.436434][ T7938] net_ratelimit: 24 callbacks suppressed [ 685.436458][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 686.022154][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.042476][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.725402][ T5836] Bluetooth: hci5: command tx timeout [ 687.716762][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.730065][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.766187][T28831] netlink: 'syz.4.6192': attribute type 4 has an invalid length. [ 687.820037][T28833] netlink: 'syz.4.6192': attribute type 4 has an invalid length. [ 687.931960][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.953199][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.078121][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.089400][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.132809][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 688.259311][T28854] netlink: 'syz.2.6197': attribute type 12 has an invalid length. [ 688.268714][T28854] __nla_validate_parse: 6 callbacks suppressed [ 688.268735][T28854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6197'. [ 688.289498][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.310654][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.566312][T28880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6202'. [ 688.802807][ T5836] Bluetooth: hci5: command tx timeout [ 689.054238][T28860] netlink: 'syz.2.6197': attribute type 29 has an invalid length. [ 689.127833][T28854] netlink: 'syz.2.6197': attribute type 29 has an invalid length. [ 689.183829][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 689.221682][T28869] netlink: 'syz.2.6197': attribute type 29 has an invalid length. [ 689.243946][T28869] netlink: 'syz.2.6197': attribute type 29 has an invalid length. [ 689.306756][T28869] netlink: 'syz.2.6197': attribute type 29 has an invalid length. [ 689.336101][T28869] netlink: 'syz.2.6197': attribute type 29 has an invalid length. [ 689.367221][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 689.448708][T28869] netlink: 'syz.2.6197': attribute type 29 has an invalid length. [ 689.507328][T28766] chnl_net:caif_netlink_parms(): no params data found [ 689.567688][T22330] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.587433][T22330] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 34579 - 0 [ 689.718618][ T7938] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.727261][ T7938] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 34579 - 0 [ 689.763212][T28920] sch_fq: defrate 0 ignored. [ 689.810055][T28923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6210'. [ 689.939785][ T7938] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.972668][ T7938] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 34579 - 0 [ 690.039328][ T7938] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.052666][ T7938] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 34579 - 0 [ 690.092136][ T12] bridge_slave_1: left promiscuous mode [ 690.124130][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.558395][ T12] bond17 (unregistering): (slave ip6gre2): Releasing backup interface [ 690.707810][ T12] batman_adv: batadv0: Removing interface: gretap3 [ 690.876826][ T12] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 690.885393][ T12] bridge3 (unregistering): left promiscuous mode [ 690.887433][ T5836] Bluetooth: hci5: command tx timeout [ 690.976796][ T12] bond12 (unregistering): (slave bridge5): Releasing active interface [ 691.052588][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 691.060686][ C1] lec:lec_tx_timeout: lec0 [ 691.122784][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.405655][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.414659][ T12] bond_slave_0: left allmulticast mode [ 691.422059][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.431481][ T12] bond_slave_1: left allmulticast mode [ 691.440166][ T12] bond0 (unregistering): Released all slaves [ 691.451931][ T12] bond1 (unregistering): Released all slaves [ 691.466135][ T12] bond2 (unregistering): Released all slaves [ 691.479259][ T12] bond3 (unregistering): Released all slaves [ 691.506133][ T12] bond4 (unregistering): Released all slaves [ 691.524456][ T12] bond5 (unregistering): Released all slaves [ 691.540469][ T12] bond6 (unregistering): Released all slaves [ 691.555822][ T12] bond7 (unregistering): Released all slaves [ 691.570083][ T12] bond8 (unregistering): Released all slaves [ 691.589541][ T12] bond9 (unregistering): Released all slaves [ 691.602323][ T12] bond10 (unregistering): Released all slaves [ 691.616263][ T12] bond11 (unregistering): Released all slaves [ 691.632164][ T12] bond12 (unregistering): Released all slaves [ 691.646610][ T12] bond13 (unregistering): Released all slaves [ 691.670468][ T12] bond14 (unregistering): Released all slaves [ 691.684521][ T12] bond15 (unregistering): Released all slaves [ 691.706739][ T12] bond16 (unregistering): (slave lo): Releasing backup interface [ 691.715540][ T12] bond16 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 691.728603][ T12] bond16 (unregistering): Released all slaves [ 691.742365][ T12] bond17 (unregistering): Released all slaves [ 691.758518][ T12] bond18 (unregistering): (slave veth7): Releasing active interface [ 691.769774][ T12] bond18 (unregistering): Released all slaves [ 691.821972][T28959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.953603][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 692.175851][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 692.196337][ T12] tipc: Disabling bearer [ 692.202022][ T12] tipc: Left network mode [ 692.202173][T28766] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.223866][T28766] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.231837][T28766] bridge_slave_0: entered allmulticast mode [ 692.267404][T28766] bridge_slave_0: entered promiscuous mode [ 692.308323][T28766] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.343126][T28766] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.353083][T28766] bridge_slave_1: entered allmulticast mode [ 692.370816][T28986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6226'. [ 692.385193][T28993] IPv6: NLM_F_CREATE should be specified when creating new route [ 692.394339][T28766] bridge_slave_1: entered promiscuous mode [ 692.532981][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 692.567604][T28766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.596842][T28766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.616087][T28998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6228'. [ 692.713254][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 692.850252][T28986] syzkaller0: entered promiscuous mode [ 692.856319][T28986] syzkaller0: entered allmulticast mode [ 692.895778][T29001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.925896][T29005] bond1: (slave ip6gretap1): making interface the new active one [ 692.935252][T29005] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 692.944310][T28998] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 692.954828][T28998] bond1: entered allmulticast mode [ 692.959985][T28998] ip6gretap1: entered allmulticast mode [ 692.965856][ T5836] Bluetooth: hci5: command tx timeout [ 693.594609][T29046] validate_nla: 4 callbacks suppressed [ 693.594633][T29046] netlink: 'syz.1.6239': attribute type 24 has an invalid length. [ 695.355924][T29017] bridge_slave_0: default FDB implementation only supports local addresses [ 695.365059][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6232'. [ 695.494212][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 695.505468][T28766] team0: Port device team_slave_0 added [ 695.566619][T29058] gretap2: entered promiscuous mode [ 695.574768][T29058] batman_adv: batadv0: Adding interface: gretap2 [ 695.600710][T29058] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.642716][T29058] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 695.711074][T28766] team0: Port device team_slave_1 added [ 695.844663][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 695.973555][T28766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.980574][T28766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.033277][T28766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.055061][T28766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.062206][T28766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 696.132000][T28766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.163690][T29099] ip6t_rpfilter: unknown options [ 696.183997][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6250'. [ 696.206160][T29100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6250'. [ 696.246872][T29099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6250'. [ 696.256300][T29099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6250'. [ 696.443437][T29113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6255'. [ 696.573872][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.591180][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.618118][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 696.638516][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 696.685738][ T12] batadv0: left promiscuous mode [ 696.707090][ T12] veth0_macvtap: left allmulticast mode [ 696.731953][ T12] veth0_macvtap: left promiscuous mode [ 696.762916][ T12] veth1_vlan: left promiscuous mode [ 696.768271][ T12] veth0_vlan: left promiscuous mode [ 696.913019][ T12] pimreg (unregistering): left allmulticast mode [ 696.944473][ T12] pim6reg (unregistering): left allmulticast mode [ 697.421315][T29113] team1: entered promiscuous mode [ 697.428028][T29113] team1: entered allmulticast mode [ 697.453993][T28766] hsr_slave_0: entered promiscuous mode [ 697.461201][T28766] hsr_slave_1: entered promiscuous mode [ 697.468431][T28766] debugfs: 'hsr0' already exists in 'hsr' [ 697.482138][T28766] Cannot create hsr debugfs directory [ 697.501886][T29152] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6261'. [ 697.515615][T29125] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.546049][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 697.606695][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 697.835559][ T7930] tipc: Subscription rejected, illegal request [ 697.856547][T29165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6265'. [ 697.900286][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6262'. [ 697.994058][T29165] syz_tun (unregistering): left allmulticast mode [ 698.030413][T29155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.065031][T29155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.121590][T29177] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6268'. [ 698.275912][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 698.295439][ T12] IPVS: stop unused estimator thread 0... [ 698.375548][T28766] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.411030][T28766] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 34579 - 0 [ 698.513512][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 698.609086][T28766] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.621891][T28766] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34579 - 0 [ 698.767836][T28766] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.778537][T28766] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34579 - 0 [ 698.857064][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 699.026240][T28766] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.041633][T28766] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34579 - 0 [ 699.076322][T29241] xt_hashlimit: size too large, truncated to 1048576 [ 699.113039][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 699.222651][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 699.463649][T29264] netlink: 'syz.0.6289': attribute type 1 has an invalid length. [ 699.632854][T28766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 700.184293][T28766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.197341][T28766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 700.299297][T28766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.314240][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 700.374042][T28766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 700.398962][T28766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.498117][T28766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 700.508893][T29312] __nla_validate_parse: 8 callbacks suppressed [ 700.508914][T29312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6297'. [ 700.529189][T28766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.598950][T29312] gtp1: entered promiscuous mode [ 700.621500][T29312] gtp1: entered allmulticast mode [ 700.755223][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 700.835861][T29332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6302'. [ 700.868532][T29332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6302'. [ 700.882953][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 700.911476][T28766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.934958][T29336] netlink: 'syz.0.6302': attribute type 13 has an invalid length. [ 700.956339][T29336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6302'. [ 700.980896][T28766] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.995437][T29332] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6302'. [ 701.022973][T29332] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 701.052465][T29336] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6302'. [ 701.075453][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.082794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.092242][T29332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6302'. [ 701.172384][T29342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6305'. [ 701.184556][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.191787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.258641][T29342] xt_hashlimit: size too large, truncated to 1048576 [ 701.367593][T29361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6305'. [ 701.750279][T29380] macvtap0: entered promiscuous mode [ 701.793338][T29380] bond0: entered promiscuous mode [ 701.798661][T29380] macvtap0: entered allmulticast mode [ 701.816142][T29380] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 701.929847][T29373] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6311'. [ 702.167058][T28766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.372335][T28766] veth0_vlan: entered promiscuous mode [ 702.427475][T28766] veth1_vlan: entered promiscuous mode [ 702.474080][T28766] veth0_macvtap: entered promiscuous mode [ 702.492243][T28766] veth1_macvtap: entered promiscuous mode [ 702.524471][T28766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.561685][T28766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.656406][T22330] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.681884][T22330] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.712906][T12154] net_ratelimit: 11 callbacks suppressed [ 702.712928][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 702.765264][T22330] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.773753][T29422] netlink: 'syz.0.6319': attribute type 51 has an invalid length. [ 702.789823][T22330] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.835688][T29422] batman_adv: batadv0: Removing interface: gretap2 [ 702.887350][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 702.988977][T29424] syzkaller1: entered promiscuous mode [ 702.999469][T29424] syzkaller1: entered allmulticast mode [ 703.073299][T29424] ip6t_srh: unknown srh invflags 4000 [ 703.074995][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 703.102695][T29433] netlink: 'syz.4.6323': attribute type 1 has an invalid length. [ 703.223948][T22330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.251897][T22330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.342614][T29442] netlink: 'syz.2.6325': attribute type 7 has an invalid length. [ 703.390566][ T7930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.414207][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 703.434192][ T7930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.437033][T29449] netlink: 'syz.1.6328': attribute type 18 has an invalid length. [ 703.513222][T29451] netlink: 'syz.1.6328': attribute type 4 has an invalid length. [ 703.560471][T29456] block nbd2: Unsupported socket: should be TCP or UNIX. [ 703.573149][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 703.612115][ T7930] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.645754][ T7930] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.737676][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 703.754181][ T7930] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.760822][T29473] xt_bpf: check failed: parse error [ 703.824587][ T7930] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.942776][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 704.102969][T29490] netlink: 'syz.4.6336': attribute type 1 has an invalid length. [ 704.113564][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 704.232755][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 704.349985][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 704.426242][T29506] tipc: Started in network mode [ 704.431190][T29506] tipc: Node identity 42e5c1c3b13e, cluster identity 4711 [ 704.484765][T29506] tipc: Enabled bearer , priority 11 [ 704.653002][T23387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 704.666508][T23387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 704.676115][T23387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 704.702947][T23387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 704.714505][T23387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 704.814580][T29519] netlink: 'syz.4.6345': attribute type 1 has an invalid length. [ 704.872578][T29515] wg1 speed is unknown, defaulting to 1000 [ 705.068676][T29527] syzkaller0: entered promiscuous mode [ 705.102676][T29527] syzkaller0: entered allmulticast mode [ 705.329850][T29540] netlink: 'syz.3.6351': attribute type 11 has an invalid length. [ 705.355991][T29538] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.363253][T29538] bridge0: port 2(bridge_slave_1) entered listening state [ 705.370705][T29538] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.378182][T29538] bridge0: port 1(bridge_slave_0) entered listening state [ 705.423696][T29543] x_tables: unsorted entry at hook 2 [ 705.523746][T29515] chnl_net:caif_netlink_parms(): no params data found [ 705.634745][T11716] tipc: Node number set to 4091265475 [ 705.707908][T29549] wg1 speed is unknown, defaulting to 1000 [ 705.901244][T29571] __nla_validate_parse: 13 callbacks suppressed [ 705.901266][T29571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6359'. [ 705.922893][T29571] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6359'. [ 705.945625][T29515] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.955549][T29515] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.963056][T29515] bridge_slave_0: entered allmulticast mode [ 705.971484][T29515] bridge_slave_0: entered promiscuous mode [ 705.979645][T29576] netlink: 'syz.4.6360': attribute type 9 has an invalid length. [ 705.981829][T29515] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.995002][T29515] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.999907][T29576] netlink: 'syz.4.6360': attribute type 11 has an invalid length. [ 706.002278][T29515] bridge_slave_1: entered allmulticast mode [ 706.019238][T29515] bridge_slave_1: entered promiscuous mode [ 706.035921][T29576] netlink: 'syz.4.6360': attribute type 12 has an invalid length. [ 706.051670][T29576] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.6360'. [ 706.080676][T29577] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 706.112417][T29576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6360'. [ 706.124789][T29577] bond2 (unregistering): Released all slaves [ 706.234723][T29583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6362'. [ 706.333451][T16811] IPVS: starting estimator thread 0... [ 706.442922][T29592] IPVS: using max 28 ests per chain, 67200 per kthread [ 706.444910][T29515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.463947][T29599] delete_channel: no stack [ 706.500357][T29601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6366'. [ 706.505864][T29515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.684883][T29515] team0: Port device team_slave_0 added [ 706.705162][T29515] team0: Port device team_slave_1 added [ 706.731591][T29614] netlink: 'syz.1.6371': attribute type 1 has an invalid length. [ 706.790927][T29620] x_tables: duplicate underflow at hook 3 [ 706.801897][T29620] erspan0: entered allmulticast mode [ 706.803171][ T5836] Bluetooth: hci0: command tx timeout [ 706.810550][T29621] Bluetooth: MGMT ver 1.23 [ 706.821045][T29621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6368'. [ 706.839815][T29621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6368'. [ 706.849823][T29515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.849845][T29515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.849873][T29515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.851871][T29515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.904312][T29515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.938835][T29621] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6368'. [ 706.948960][T29621] netlink: 'syz.4.6368': attribute type 2 has an invalid length. [ 706.956953][T29621] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6368'. [ 706.985121][T29515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.030579][T29615] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 707.041156][T29615] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 707.062431][T29615] bond1: (slave vxcan3): making interface the new active one [ 707.075731][T29615] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 707.107855][T29619] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 707.121712][T29619] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 707.350247][T29515] hsr_slave_0: entered promiscuous mode [ 707.360001][T29515] hsr_slave_1: entered promiscuous mode [ 707.361091][T29642] netlink: 'syz.2.6375': attribute type 1 has an invalid length. [ 707.374460][T29515] debugfs: 'hsr0' already exists in 'hsr' [ 707.382662][T29515] Cannot create hsr debugfs directory [ 707.400068][T29642] netlink: 'syz.2.6375': attribute type 2 has an invalid length. [ 707.733818][ T7930] net_ratelimit: 11 callbacks suppressed [ 707.733841][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 707.872482][T29515] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.888141][T29515] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 707.908636][T29515] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 707.931122][T29515] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 707.962757][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 708.006578][T29515] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.034125][T29515] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 708.048613][T29515] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 708.062030][T29515] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 708.112929][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 708.134449][T29515] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.145443][T29515] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 708.158112][T29515] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 708.169944][T29515] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 708.243892][T29515] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.254932][T29515] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 708.266309][T29515] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 708.289994][T29515] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 708.352672][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 708.469248][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 708.563315][T29686] delete_channel: no stack [ 708.634062][T29515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 708.686230][T29515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.711296][T29515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 708.729274][T29693] netlink: 'syz.2.6392': attribute type 21 has an invalid length. [ 708.740959][T29693] IPv6: NLM_F_CREATE should be specified when creating new route [ 708.768578][T29693] openvswitch: netlink: Duplicate or invalid key (type 0). [ 708.771394][T29515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.793167][T29693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.797884][T29515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 708.846100][T29515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.872918][T29515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 708.882975][ T5836] Bluetooth: hci0: command tx timeout [ 708.912461][T29515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.995187][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 709.151492][T29716] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 709.177620][T29716] bond2 (unregistering): Released all slaves [ 709.279495][T29684] infiniband syz0: set active [ 709.319548][T29684] infiniband syz0: added veth0_vlan [ 709.369409][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 709.401010][T29684] RDS/IB: syz0: added [ 709.417413][T29684] smc: adding ib device syz0 with port count 1 [ 709.441548][T29684] smc: ib device syz0 port 1 has no pnetid [ 709.476719][T29515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.499175][T29515] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.558107][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.565359][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.662971][T29735] IPVS: set_ctl: invalid protocol: 1 172.30.0.5:20000 [ 709.689247][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.696527][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.774032][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 710.127218][T29515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.241826][T29515] veth0_vlan: entered promiscuous mode [ 710.295478][T29515] veth1_vlan: entered promiscuous mode [ 710.384973][T29515] veth0_macvtap: entered promiscuous mode [ 710.402158][T29515] veth1_macvtap: entered promiscuous mode [ 710.474504][T29515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.514393][T29515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.562451][T12154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.577897][T12154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.621944][T12154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.642314][T29770] block nbd2: Unsupported socket: should be TCP or UNIX. [ 710.662299][T12154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.965254][ T5836] Bluetooth: hci0: command tx timeout [ 711.108027][T29775] nbd2: detected capacity change from 0 to 63 [ 711.153592][T23387] block nbd2: Receive control failed (result -104) [ 711.164400][ T5836] block nbd2: Receive control failed (result -32) [ 711.368019][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.393705][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.455966][T29802] netlink: 'syz.4.6416': attribute type 1 has an invalid length. [ 711.626992][T29808] bond2: (slave bridge1): making interface the new active one [ 711.671233][T29808] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 711.736438][ T7930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.752602][ T7930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.820857][T29821] netlink: 'syz.1.6418': attribute type 58 has an invalid length. [ 711.851722][T29821] __nla_validate_parse: 9 callbacks suppressed [ 711.851744][T29821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6418'. [ 712.010658][T29826] lo: entered promiscuous mode [ 712.034457][T29826] tunl0: entered promiscuous mode [ 712.056079][T29826] gre0: entered promiscuous mode [ 712.115619][T29826] gretap0: entered promiscuous mode [ 712.228002][T29826] erspan0: entered promiscuous mode [ 712.267337][T29826] ip_vti0: entered promiscuous mode [ 712.320583][T29842] netlink: 'syz.0.6422': attribute type 11 has an invalid length. [ 712.342674][T29842] netlink: 'syz.0.6422': attribute type 4 has an invalid length. [ 712.360751][T29842] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.6422'. [ 712.500696][T29852] netlink: 'syz.1.6424': attribute type 1 has an invalid length. [ 712.629965][T29852] bond2: entered promiscuous mode [ 712.653696][T29852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 712.822237][T29869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6428'. [ 712.835282][T29840] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 712.843011][ T12] net_ratelimit: 15 callbacks suppressed [ 712.843031][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 713.029147][T29873] netlink: 'syz.0.6428': attribute type 2 has an invalid length. [ 713.043234][ T5836] Bluetooth: hci0: command tx timeout [ 713.417127][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 713.528421][T29891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6433'. [ 713.551904][T29890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6433'. [ 713.622619][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 713.643093][T29901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6436'. [ 713.732794][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 713.831017][T29907] tipc: Started in network mode [ 713.842283][T29907] tipc: Node identity 401, cluster identity 4711 [ 713.858070][T29907] tipc: Node number set to 1025 [ 713.872048][T29910] xt_TCPMSS: Only works on TCP SYN packets [ 713.883134][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 713.995287][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 714.136599][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 714.226614][T29927] netlink: 'syz.4.6443': attribute type 1 has an invalid length. [ 714.251112][T29927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6443'. [ 714.263538][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 714.285896][T29927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6443'. [ 714.375883][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 714.513441][ T79] bond1: (slave bridge1): failed to get link speed/duplex [ 714.536640][T29938] netlink: 'syz.4.6446': attribute type 3 has an invalid length. [ 714.878955][T29955] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.933933][T29958] netlink: 'syz.2.6448': attribute type 16 has an invalid length. [ 714.941826][T29958] netlink: 'syz.2.6448': attribute type 17 has an invalid length. [ 714.994502][T29955] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.035391][T29960] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6449'. [ 715.100816][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6449'. [ 715.125363][ T5836] Bluetooth: hci0: command 0x080f tx timeout [ 715.136462][T29964] block nbd0: Unsupported socket: should be TCP or UNIX. [ 715.234757][T29958] lo: left promiscuous mode [ 715.264227][T29958] tunl0: left promiscuous mode [ 715.285763][T29958] gre0: left promiscuous mode [ 715.386247][T29958] gretap0: left promiscuous mode [ 715.397979][T29958] erspan0: left promiscuous mode [ 715.406596][T29958] ip_vti0: left promiscuous mode [ 715.414321][T29978] xt_TCPMSS: Only works on TCP SYN packets [ 715.424484][T29958] ip6_vti0: left promiscuous mode [ 715.487044][T29980] 8021q: VLANs not supported on lo [ 716.611900][T30045] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 717.266033][T30070] syzkaller0: entered promiscuous mode [ 717.271683][T30070] syzkaller0: entered allmulticast mode [ 717.283659][T30068] tipc: Enabled bearer , priority 0 [ 717.418887][T30057] tipc: Resetting bearer [ 717.478042][T30089] xt_hashlimit: size too large, truncated to 1048576 [ 717.718215][T30097] __nla_validate_parse: 4 callbacks suppressed [ 717.718239][T30097] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6483'. [ 717.735992][T30097] netlink: 'syz.2.6483': attribute type 9 has an invalid length. [ 719.458510][T30057] tipc: Disabling bearer [ 719.471067][T30085] pimreg: entered allmulticast mode [ 719.512730][T12154] net_ratelimit: 14 callbacks suppressed [ 719.512755][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 719.590505][T30115] netlink: 'syz.1.6487': attribute type 1 has an invalid length. [ 719.657603][ T7938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.672172][T30122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6489'. [ 719.673776][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 719.684616][ T7938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.714817][T30121] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6488'. [ 719.741256][T30129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.748913][T30121] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 719.790554][T30127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6491'. [ 719.793007][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 719.863839][T30121] syzkaller1: entered promiscuous mode [ 719.877350][T30121] syzkaller1: entered allmulticast mode [ 719.890397][T30127] openvswitch: netlink: Flow actions attr not present in new flow. [ 719.907686][T30138] netlink: 'syz.0.6493': attribute type 11 has an invalid length. [ 719.915134][T30137] netlink: 'syz.0.6493': attribute type 11 has an invalid length. [ 719.942865][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 720.013049][T30144] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 720.058428][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 720.085401][T30146] syzkaller1: entered promiscuous mode [ 720.091460][T30146] syzkaller1: entered allmulticast mode [ 720.110950][T30146] netlink: 288 bytes leftover after parsing attributes in process `syz.3.6496'. [ 720.203045][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 720.330450][T30152] syzkaller0: entered promiscuous mode [ 720.342254][T30152] syzkaller0: entered allmulticast mode [ 720.373105][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 721.682133][T30200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.952672][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 723.094733][T30211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6514'. [ 723.154236][T30214] netlink: 'syz.0.6515': attribute type 3 has an invalid length. [ 723.290654][T30220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'. [ 723.520663][T30245] xt_cluster: node mask cannot exceed total number of nodes [ 723.532415][T30236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6519'. [ 723.824641][T30259] geneve2: entered promiscuous mode [ 723.974912][T30270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6535'. [ 724.015334][T30266] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6533'. [ 724.543063][ T13] net_ratelimit: 14 callbacks suppressed [ 724.543086][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 724.633298][T19059] lec:lec_start_xmit: lec0:No lecd attached [ 724.772833][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 724.789320][T30324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6550'. [ 724.813299][T30324] netlink: 'syz.3.6550': attribute type 18 has an invalid length. [ 724.835786][T30324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6550'. [ 724.910171][T30334] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 724.910891][T30324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6550'. [ 724.921455][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 724.936917][T30324] netlink: 'syz.3.6550': attribute type 18 has an invalid length. [ 724.946393][T30324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6550'. [ 724.961477][T30334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6553'. [ 724.970897][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.992878][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.013161][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.047158][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.074243][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 725.193469][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 725.240943][T30346] netlink: 'syz.3.6557': attribute type 10 has an invalid length. [ 725.316267][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 725.432832][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 725.458069][T30358] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 725.572621][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 725.691967][T30366] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 725.732898][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 725.795428][T30368] netlink: 'syz.2.6565': attribute type 1 has an invalid length. [ 726.053161][T30383] netlink: 'syz.3.6570': attribute type 1 has an invalid length. [ 726.053718][T30385] netlink: 'syz.0.6571': attribute type 10 has an invalid length. [ 726.100127][T30385] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.110362][T30385] bridge_slave_1: left allmulticast mode [ 726.130349][T30385] bridge_slave_1: left promiscuous mode [ 726.143507][T30385] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.172001][T30385] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 726.301314][T30383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 726.351534][T30393] bond1: (slave bridge2): making interface the new active one [ 726.361830][T30393] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 726.536267][T30414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.086663][T30451] x_tables: unsorted entry at hook 3 [ 727.304355][T30460] erspan0: left allmulticast mode [ 727.333355][T30407] delete_channel: no stack [ 727.495479][T30471] netlink: 'syz.3.6595': attribute type 1 has an invalid length. [ 728.101909][T30503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.133031][T30501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.154798][T30522] __nla_validate_parse: 10 callbacks suppressed [ 728.154819][T30522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6611'. [ 728.369499][T30532] macvlan0: entered promiscuous mode [ 728.424040][T30538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6615'. [ 728.616876][T30545] netlink: 'syz.2.6617': attribute type 1 has an invalid length. [ 728.657442][T30548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6618'. [ 728.670468][T30545] bond0: entered promiscuous mode [ 728.680061][T30545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.824738][T30561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6622'. [ 728.985293][T30561] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6622'. [ 729.024768][T30569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6623'. [ 729.433255][T30584] netlink: 'syz.1.6627': attribute type 4 has an invalid length. [ 729.604839][ T7928] net_ratelimit: 31 callbacks suppressed [ 729.604863][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 729.664972][T30590] syzkaller0: entered promiscuous mode [ 729.670596][T30590] syzkaller0: entered allmulticast mode [ 729.773466][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 729.795866][T30605] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6632'. [ 730.027350][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 730.082801][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 730.086424][T30615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.090997][ C1] lec:lec_tx_timeout: lec0 [ 730.170360][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 730.261358][T30624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.325129][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 730.470269][T30632] mac80211_hwsim hwsim85 syzkaller0: entered promiscuous mode [ 730.523219][T30632] mac80211_hwsim hwsim85 syzkaller0: entered allmulticast mode [ 730.545359][T30635] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6640'. [ 730.555823][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 730.683127][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 730.837406][T30650] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 731.490396][T30695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6653'. [ 731.554372][T30695] bond0: entered promiscuous mode [ 731.559482][T30695] bond_slave_0: entered promiscuous mode [ 731.575805][T30695] bond_slave_1: entered promiscuous mode [ 731.594887][T30695] bond0: left promiscuous mode [ 731.599897][T30695] bond_slave_0: left promiscuous mode [ 731.610301][T30695] bond_slave_1: left promiscuous mode [ 731.884720][T30711] netlink: 'syz.4.6659': attribute type 1 has an invalid length. [ 731.921206][T30711] netlink: 'syz.4.6659': attribute type 2 has an invalid length. [ 732.325292][T30732] netlink: 'syz.3.6666': attribute type 1 has an invalid length. [ 732.335119][T30732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.342407][T30732] IPv6: NLM_F_CREATE should be set when creating new route [ 732.491144][T30736] bond2: option all_slaves_active: invalid value (222) [ 732.593620][T30736] bond2 (unregistering): Released all slaves [ 732.807003][T30755] No such timeout policy "syz0" [ 732.976580][T30759] wg1 speed is unknown, defaulting to 1000 [ 733.089182][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6675'. [ 733.519901][T30773] h: entered promiscuous mode [ 733.962184][T30803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6683'. [ 734.051605][T30803] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 734.090442][T30803] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 734.119916][T30803] gretap1: entered promiscuous mode [ 734.140113][T30803] gretap1: entered allmulticast mode [ 735.348659][T30836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.419563][T30836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.923687][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 735.930023][T30865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6695'. [ 735.931154][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 736.033768][ T7938] net_ratelimit: 24 callbacks suppressed [ 736.033795][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 736.052865][T12154] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.117277][T12154] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.155457][T12154] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.182296][T12154] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.232746][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 736.248499][T30872] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.269796][T30872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6696'. [ 736.347659][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 736.356441][T30885] kthread_run failed with err -4 [ 736.492620][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 736.499780][T30889] netlink: 'syz.4.6700': attribute type 5 has an invalid length. [ 736.508053][T30894] netlink: 'syz.4.6700': attribute type 5 has an invalid length. [ 736.563098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 736.643617][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 736.774214][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 736.786676][T30896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6704'. [ 736.952616][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 737.062853][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 737.128884][T30920] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6707'. [ 737.172629][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 737.324033][T30933] netlink: 'syz.2.6711': attribute type 1 has an invalid length. [ 737.657295][T30951] netlink: 'syz.2.6716': attribute type 2 has an invalid length. [ 737.695178][T30953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6717'. [ 737.714965][T30953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6717'. [ 737.780096][T30957] netlink: 'syz.1.6717': attribute type 1 has an invalid length. [ 737.788896][T30957] netlink: 236 bytes leftover after parsing attributes in process `syz.1.6717'. [ 737.858889][T30962] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6719'. [ 738.058682][ T5832] IPVS: starting estimator thread 0... [ 738.087387][T30972] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6721'. [ 738.184166][T30971] IPVS: using max 26 ests per chain, 62400 per kthread [ 738.610323][ T7938] smc: removing ib device syz0 [ 738.620392][T29836] syz0: Port: 1 Link DOWN [ 738.630547][T30989] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 738.706057][T30992] team1: entered promiscuous mode [ 738.711272][T30992] team1: entered allmulticast mode [ 739.068612][T31017] __nla_validate_parse: 4 callbacks suppressed [ 739.068634][T31017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6736'. [ 739.102123][T31015] wg1 speed is unknown, defaulting to 1000 [ 739.188008][T31017] syzkaller0: entered promiscuous mode [ 739.195502][T31017] syzkaller0: entered allmulticast mode [ 739.860099][T31035] netlink: 'syz.4.6740': attribute type 1 has an invalid length. [ 739.938321][T31038] netlink: 'syz.1.6741': attribute type 21 has an invalid length. [ 740.014899][T31029] syzkaller0: entered promiscuous mode [ 740.131679][T31035] bond3: entered promiscuous mode [ 740.161827][T31035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 740.381627][T31046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6742'. [ 741.742919][ T1704] block nbd2: Connection timed out, retrying (0/2 alive) [ 741.751422][ T1704] block nbd2: Connection timed out, retrying (0/2 alive) [ 741.763761][ T1704] block nbd2: Connection timed out, retrying (0/2 alive) [ 741.770901][ T1704] block nbd2: Connection timed out, retrying (0/2 alive) [ 741.788392][ T1704] block nbd2: Dead connection, failed to find a fallback [ 741.797383][ T1704] block nbd2: shutting down sockets [ 741.804078][ T1704] blk_print_req_error: 54 callbacks suppressed [ 741.804098][ T1704] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.821114][ T1704] buffer_io_error: 54 callbacks suppressed [ 741.821134][ T1704] Buffer I/O error on dev nbd2, logical block 3, async page read [ 741.835815][ T1704] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.847259][ T1704] Buffer I/O error on dev nbd2, logical block 2, async page read [ 741.855228][ T1704] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.864918][ T1704] Buffer I/O error on dev nbd2, logical block 1, async page read [ 741.872809][ T1704] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.882344][ T1704] Buffer I/O error on dev nbd2, logical block 0, async page read [ 741.892823][T22859] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.923403][T22859] Buffer I/O error on dev nbd2, logical block 0, async page read [ 741.942624][T22859] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.952165][T22859] Buffer I/O error on dev nbd2, logical block 1, async page read [ 741.969708][T22859] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 741.988589][T22859] Buffer I/O error on dev nbd2, logical block 2, async page read [ 742.029757][T22859] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 742.062825][T22859] Buffer I/O error on dev nbd2, logical block 3, async page read [ 742.070759][T22859] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 742.121216][T22859] Buffer I/O error on dev nbd2, logical block 0, async page read [ 742.140279][T22859] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 742.150338][T22859] Buffer I/O error on dev nbd2, logical block 1, async page read [ 742.159553][T22859] ldm_validate_partition_table(): Disk read failed. [ 742.167133][T22859] Dev nbd2: unable to read RDB block 0 [ 742.174119][T22859] nbd2: unable to read partition table [ 742.199729][T22859] ldm_validate_partition_table(): Disk read failed. [ 742.207129][T22859] Dev nbd2: unable to read RDB block 0 [ 742.214048][T22859] nbd2: unable to read partition table [ 743.693966][T31043] bond3: (slave bridge3): making interface the new active one [ 743.701684][T31043] bridge3: entered promiscuous mode [ 743.709627][T31043] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 743.814486][T31046] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 743.835815][ T13] net_ratelimit: 17 callbacks suppressed [ 743.835841][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 743.973732][ T13] bond1: (slave bridge1): failed to get link speed/duplex [ 744.066741][T31058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.093532][T31061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6746'. [ 744.096089][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 744.102975][T31061] netlink: 'syz.2.6746': attribute type 5 has an invalid length. [ 744.174237][T31061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6746'. [ 744.267276][T31067] lo: entered promiscuous mode [ 744.267352][T31061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6746'. [ 744.298723][T31067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.322178][T31061] netlink: 'syz.2.6746': attribute type 5 has an invalid length. [ 744.355191][ T7939] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.364212][T31061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6746'. [ 744.386820][T12154] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.407362][T31071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 744.414476][T12154] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.431299][T12154] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.462710][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 744.578196][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 744.644749][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6753'. [ 744.673480][T31086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6753'. [ 744.693586][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 744.830276][T31096] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6756'. [ 744.840098][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 744.949340][T31106] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6756'. [ 744.959324][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 745.623870][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6760'. [ 745.736683][T31133] syzkaller0: entered promiscuous mode [ 745.744587][T31133] syzkaller0: entered allmulticast mode [ 745.802108][T31137] netlink: 'syz.4.6765': attribute type 13 has an invalid length. [ 745.879766][T31142] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6767'. [ 746.058294][T31139] netlink: 'syz.0.6766': attribute type 2 has an invalid length. [ 746.274212][T31161] tc_dump_action: action bad kind [ 746.281198][T31161] netlink: 'syz.0.6771': attribute type 11 has an invalid length. [ 746.393629][T31163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.633781][T31179] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 747.427464][T31212] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 747.465882][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.475870][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.507242][T31212] bond2: (slave lo): Enslaving as an active interface with an up link [ 747.868558][T31254] ipt_rpfilter: unknown options [ 748.094269][T31273] ip6gre0: Master is either lo or non-ether device [ 748.509286][ T29] audit: type=1804 audit(1776158141.266:7): pid=31289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6805" name="/newroot/217/cgroup.controllers" dev="tmpfs" ino=1121 res=1 errno=0 [ 748.546915][ T29] audit: type=1800 audit(1776158141.266:8): pid=31289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6805" name="cgroup.controllers" dev="tmpfs" ino=1121 res=0 errno=0 [ 748.675827][T31297] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 748.952964][ T7939] net_ratelimit: 32 callbacks suppressed [ 748.952987][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 749.094203][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 749.164282][T31325] netlink: 'syz.2.6817': attribute type 3 has an invalid length. [ 749.222891][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 749.352602][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 749.376085][T31343] __nla_validate_parse: 12 callbacks suppressed [ 749.376108][T31343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6821'. [ 749.463445][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 749.539330][T31350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6822'. [ 749.572788][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 749.674031][T31360] mac80211_hwsim hwsim79 wlan0: entered promiscuous mode [ 749.684858][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 749.700456][T31361] lo: left promiscuous mode [ 749.722910][T31361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 749.803308][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 749.913513][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 749.935316][T31374] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 749.954849][T31374] team0: Device macvlan3 is already an upper device of the team interface [ 749.971059][T31379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6835'. [ 749.997234][T31375] team0: Device gtp0 is up. Set it down before adding it as a team port [ 750.036769][T31374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6834'. [ 750.350795][T31402] netlink: 'syz.3.6840': attribute type 1 has an invalid length. [ 750.454254][T31402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.585034][T31402] bond3: (slave veth0_to_bond): making interface the new active one [ 750.613109][T31402] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 750.634241][T31406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6840'. [ 750.770710][T31432] syzkaller0: entered promiscuous mode [ 750.792149][T31432] syzkaller0: entered allmulticast mode [ 750.839781][T31438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6849'. [ 750.883114][T31442] netlink: 'syz.4.6845': attribute type 4 has an invalid length. [ 750.931352][ T5832] IPVS: starting estimator thread 0... [ 750.941447][T31449] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6849'. [ 751.063845][T31448] IPVS: using max 24 ests per chain, 57600 per kthread [ 751.147517][T31455] netlink: 'syz.0.6853': attribute type 2 has an invalid length. [ 751.157863][T31455] netlink: 'syz.0.6853': attribute type 2 has an invalid length. [ 751.176866][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6853'. [ 751.498891][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6859'. [ 751.538932][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6859'. [ 751.605064][ T7938] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.627069][ T7938] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.655327][T31482] netlink: 'syz.1.6862': attribute type 10 has an invalid length. [ 751.679936][T31482] team0: Device vxcan1 is of different type [ 751.717208][T31486] netlink: 'syz.4.6861': attribute type 2 has an invalid length. [ 751.729050][ T7938] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.747413][T31486] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 751.765349][ T7938] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.005263][T31500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 752.012616][T31500] IPv6: NLM_F_CREATE should be set when creating new route [ 752.423234][T31533] netlink: 'syz.3.6877': attribute type 1 has an invalid length. [ 753.010030][T31574] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.042553][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 753.050801][ C1] lec:lec_tx_timeout: lec0 [ 753.533163][T31601] netlink: 'syz.3.6897': attribute type 1 has an invalid length. [ 753.900330][T31630] pimreg: left allmulticast mode [ 753.972757][T12154] net_ratelimit: 34 callbacks suppressed [ 753.972781][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 754.103042][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 754.213308][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 754.241748][T31646] netlink: 'syz.3.6913': attribute type 1 has an invalid length. [ 754.276140][T31651] netlink: 'syz.0.6914': attribute type 12 has an invalid length. [ 754.287822][T31651] netlink: 'syz.0.6914': attribute type 12 has an invalid length. [ 754.333641][T31652] netlink: 'syz.1.6912': attribute type 3 has an invalid length. [ 754.384892][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 754.492723][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 754.610694][T31669] __nla_validate_parse: 19 callbacks suppressed [ 754.610716][T31669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6921'. [ 754.634950][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 754.714628][T31676] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6923'. [ 754.748451][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 754.922897][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 754.963896][T31695] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.6928'. [ 754.986182][T31695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6928'. [ 754.997346][T31695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6928'. [ 755.103722][T31701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.110997][T31701] IPv6: NLM_F_CREATE should be set when creating new route [ 755.128192][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 755.171674][T31699] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 573 [ 755.183122][T31701] lo: entered allmulticast mode [ 755.188409][T31701] tunl0: entered allmulticast mode [ 755.214526][T31701] gre0: entered allmulticast mode [ 755.225858][T31703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6932'. [ 755.239123][T31701] gretap0: entered allmulticast mode [ 755.263251][T31701] erspan0: entered allmulticast mode [ 755.279610][T31701] ip_vti0: entered allmulticast mode [ 755.290772][T31701] ip6_vti0: entered allmulticast mode [ 755.293847][T31708] netlink: 'syz.4.6932': attribute type 3 has an invalid length. [ 755.307884][T31701] sit0: entered allmulticast mode [ 755.319353][T31701] ip6tnl0: entered allmulticast mode [ 755.341287][T31701] ip6gre0: entered allmulticast mode [ 755.362225][T31701] syz_tun: entered allmulticast mode [ 755.380498][T31701] ip6gretap0: entered allmulticast mode [ 755.404157][T31701] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.412099][T31701] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.433564][T31701] bridge0: entered allmulticast mode [ 755.445274][T31701] vcan0: entered allmulticast mode [ 755.452091][T31701] bond0: entered allmulticast mode [ 755.459458][T31701] bond_slave_0: entered allmulticast mode [ 755.465863][T31701] bond_slave_1: entered allmulticast mode [ 755.466628][T31715] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6935'. [ 755.475238][T31701] team0: entered allmulticast mode [ 755.486570][T31701] team_slave_0: entered allmulticast mode [ 755.492329][T31701] team_slave_1: entered allmulticast mode [ 755.503452][T31701] dummy0: entered allmulticast mode [ 755.515134][T31701] nlmon0: entered allmulticast mode [ 755.523497][T31701] caif0: entered allmulticast mode [ 755.528979][T31701] batadv0: entered allmulticast mode [ 755.540522][T31701] vxcan0: entered allmulticast mode [ 755.548189][T31701] vxcan1: entered allmulticast mode [ 755.555217][T31701] veth0: entered allmulticast mode [ 755.565279][T31701] veth1: entered allmulticast mode [ 755.575288][T31701] wg0: entered allmulticast mode [ 755.584472][T31701] wg1: entered allmulticast mode [ 755.593005][T31701] wg2: entered allmulticast mode [ 755.600404][T31701] veth0_to_bridge: entered allmulticast mode [ 755.614968][T31701] veth1_to_bridge: entered allmulticast mode [ 755.627383][T31701] veth0_to_bond: entered allmulticast mode [ 755.639430][T31701] veth1_to_bond: entered allmulticast mode [ 755.651253][T31701] veth0_to_team: entered allmulticast mode [ 755.666006][T31701] veth1_to_team: entered allmulticast mode [ 755.677834][T31701] veth0_to_batadv: entered allmulticast mode [ 755.686655][T31701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.695534][T31701] batadv_slave_0: entered allmulticast mode [ 755.704314][T31701] xfrm0: entered allmulticast mode [ 755.714003][T31701] veth0_to_hsr: entered allmulticast mode [ 755.723373][T31701] hsr_slave_0: entered allmulticast mode [ 755.730508][T31701] veth1_to_hsr: entered allmulticast mode [ 755.740762][T31701] hsr_slave_1: entered allmulticast mode [ 755.748339][T31701] hsr0: entered allmulticast mode [ 755.757527][T31701] veth1_virt_wifi: entered allmulticast mode [ 755.766481][T31701] veth0_virt_wifi: entered allmulticast mode [ 755.777033][T31701] virt_wifi0: entered allmulticast mode [ 755.783183][T31701] veth1_vlan: entered allmulticast mode [ 755.790705][T31701] veth0_vlan: entered allmulticast mode [ 755.803512][T31701] vlan0: entered allmulticast mode [ 755.808816][T31701] vlan1: entered allmulticast mode [ 755.815001][T31701] macvlan0: entered allmulticast mode [ 755.822428][T31701] macvlan1: entered allmulticast mode [ 755.830143][T31701] ipvlan0: entered allmulticast mode [ 755.837443][T31701] ipvlan1: entered allmulticast mode [ 755.844607][T31701] veth1_macvtap: entered allmulticast mode [ 755.853679][T31701] veth0_macvtap: entered allmulticast mode [ 755.862293][T31701] macvtap0: entered allmulticast mode [ 755.871105][T31701] macsec0: entered allmulticast mode [ 755.883815][T31701] geneve0: entered allmulticast mode [ 755.891426][T31701] geneve1: entered allmulticast mode [ 755.899801][T31701] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 755.909417][T31701] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 755.919692][T31701] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 755.930488][T31701] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 755.946947][T31701] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 755.960228][T31701] mac80211_hwsim hwsim83 wlan1: entered allmulticast mode [ 755.969306][T31701] ip6tnl1: entered allmulticast mode [ 755.975375][T31701] ip6erspan0: entered allmulticast mode [ 755.981208][T31701] bridge1: entered allmulticast mode [ 755.989598][T31701] vxlan0: entered allmulticast mode [ 755.996496][T31701] bond1: entered allmulticast mode [ 756.001619][T31701] vxcan3: entered allmulticast mode [ 756.009555][T31701] vxcan2: entered allmulticast mode [ 756.016145][T31701] vxcan4: entered allmulticast mode [ 756.021692][T31701] vxcan5: entered allmulticast mode [ 756.028989][T31701] bond2: left promiscuous mode [ 756.034402][T31701] bond2: entered allmulticast mode [ 756.040356][T31701] veth2: entered allmulticast mode [ 756.046081][T31701] veth3: entered allmulticast mode [ 756.051635][T31701] syztnl2: entered allmulticast mode [ 756.058175][T31701] bond3: entered allmulticast mode [ 756.063838][T31701] sit1: entered allmulticast mode [ 756.069466][T31701] bridge2: entered allmulticast mode [ 756.077183][T31701] bridge3: entered allmulticast mode [ 756.085531][T31701] bond4: entered allmulticast mode [ 756.090801][T31701] bond5: entered allmulticast mode [ 756.143716][T31715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.198886][T31715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.233070][T31715] bond0 (unregistering): Released all slaves [ 756.267265][T31723] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6938'. [ 756.334752][ T7928] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.347177][T31729] xt_hashlimit: size too large, truncated to 1048576 [ 756.352734][ T7928] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.376465][ T7928] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.396366][ T7928] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.408871][ T7928] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.432773][ T7928] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.448835][T31740] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6941'. [ 756.451960][ T7928] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.468989][ T7928] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.484683][T12154] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 756.496804][T12154] bond3: now running without any active interface! [ 756.835720][T31758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6948'. [ 757.114943][T31774] netlink: 'syz.4.6953': attribute type 1 has an invalid length. [ 757.207738][T31774] bond4: entered promiscuous mode [ 757.215745][T31774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 757.288206][T31774] bond4: (slave bridge4): making interface the new active one [ 757.296312][T31774] bridge4: entered promiscuous mode [ 757.304371][T31774] bridge4: left promiscuous mode [ 758.022062][T31830] x_tables: duplicate underflow at hook 2 [ 758.022062][T31829] x_tables: duplicate underflow at hook 2 [ 759.022949][ T12] net_ratelimit: 19 callbacks suppressed [ 759.022973][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 759.153115][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 759.284484][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 759.403010][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 759.513078][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 759.623578][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 759.744609][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 759.867616][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 759.893869][ T29] audit: type=1804 audit(1776158152.646:9): pid=31944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7001" name="/newroot/108/cgroup.controllers" dev="tmpfs" ino=563 res=1 errno=0 [ 759.972126][ T29] audit: type=1800 audit(1776158152.646:10): pid=31944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7001" name="cgroup.controllers" dev="tmpfs" ino=563 res=0 errno=0 [ 760.010702][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 760.060403][T31953] netlink: 'syz.3.7006': attribute type 2 has an invalid length. [ 760.077508][T31953] netlink: 'syz.3.7006': attribute type 8 has an invalid length. [ 760.133928][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 760.159491][T31953] __nla_validate_parse: 11 callbacks suppressed [ 760.159512][T31953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7006'. [ 760.288093][T31968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7012'. [ 760.316955][T31972] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7014'. [ 760.371913][T31972] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7014'. [ 760.577632][T31992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7021'. [ 760.589714][T31989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7019'. [ 760.719557][T32005] netlink: 'syz.1.7023': attribute type 1 has an invalid length. [ 760.719581][T32002] syzkaller1: entered promiscuous mode [ 760.734635][T32002] syzkaller1: entered allmulticast mode [ 760.753298][T32008] bridge1: entered promiscuous mode [ 760.759088][T32008] bridge1: entered allmulticast mode [ 760.811231][T32005] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 761.037961][T32025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7028'. [ 761.071871][T32024] : renamed from hsr0 [ 761.096399][T32026] netlink: 'syz.0.7028': attribute type 6 has an invalid length. [ 761.116906][T32024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7029'. [ 761.131939][T32031] netlink: 'syz.1.7031': attribute type 1 has an invalid length. [ 761.140657][T32032] netlink: 'syz.1.7031': attribute type 1 has an invalid length. [ 761.216903][T32031] bond6: entered promiscuous mode [ 761.230816][T32031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 761.242660][T32029] tipc: MTU too low for tipc bearer [ 761.267557][T32039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7033'. [ 761.531304][T32055] netlink: 'syz.3.7036': attribute type 1 has an invalid length. [ 761.567708][T32055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 761.612204][T32055] bond4: (slave veth3): Enslaving as an active interface with a down link [ 761.804073][T32070] netlink: 'syz.1.7042': attribute type 25 has an invalid length. [ 761.822042][T32070] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.7042'. [ 761.881706][T32073] netlink: 'syz.4.7044': attribute type 1 has an invalid length. [ 762.165662][T32055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 762.195212][T32055] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 762.263161][T32088] : entered promiscuous mode [ 762.715941][T32114] netlink: 'syz.3.7058': attribute type 1 has an invalid length. [ 762.897911][T32121] wg1 speed is unknown, defaulting to 1000 [ 762.920211][T29836] IPVS: starting estimator thread 0... [ 763.023351][T32130] IPVS: using max 32 ests per chain, 76800 per kthread [ 763.059518][T32126] bond1: Unable to set down delay as MII monitoring is disabled [ 763.096427][T32126] bond1 (unregistering): Released all slaves [ 763.140871][T32142] x_tables: duplicate underflow at hook 1 [ 763.215320][T32135] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 763.600099][ T5836] block nbd3: Receive control failed (result -32) [ 763.928280][T32178] veth0: entered promiscuous mode [ 763.939548][T32176] veth0: left promiscuous mode [ 763.949480][T32175] Cannot find add_set index 0 as target [ 763.957649][T32174] Cannot find add_set index 0 as target [ 763.977331][T32174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.076908][T12154] net_ratelimit: 26 callbacks suppressed [ 764.076931][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 764.267843][T32183] wg1 speed is unknown, defaulting to 1000 [ 764.499098][T32204] x_tables: duplicate underflow at hook 1 [ 764.505044][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 764.625048][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 764.729735][T32218] tipc: Enabled bearer , priority 0 [ 764.753021][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 764.771590][T32218] syzkaller0: entered promiscuous mode [ 764.791292][T32218] syzkaller0: entered allmulticast mode [ 764.974040][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.003097][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 765.012766][T32239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.112791][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 765.171101][T32243] syzkaller1: entered promiscuous mode [ 765.182908][T32243] syzkaller1: entered allmulticast mode [ 765.223000][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 765.277861][T32255] validate_nla: 2 callbacks suppressed [ 765.278146][T32255] netlink: 'syz.3.7095': attribute type 21 has an invalid length. [ 765.322840][T32255] __nla_validate_parse: 9 callbacks suppressed [ 765.322863][T32255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7095'. [ 765.366225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 765.600286][T32260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7100'. [ 765.639970][T32260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7100'. [ 765.687070][T32265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7102'. [ 765.791327][T32267] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7103'. [ 766.013581][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.020989][ C0] bridge0: topology change detected, propagating [ 766.028956][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.036251][ C0] bridge0: topology change detected, propagating [ 766.119692][T32283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7108'. [ 766.192823][T32283] ip6erspan0: entered promiscuous mode [ 766.303327][T32294] netlink: 'syz.2.7108': attribute type 1 has an invalid length. [ 766.733106][T32314] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7115'. [ 766.779221][T32319] xt_check_match: 23 callbacks suppressed [ 766.779245][T32319] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 766.809123][T32324] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 766.846551][T32323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7121'. [ 766.898175][T32314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7115'. [ 766.937799][T32328] Cannot find map_set index 65533 as target [ 766.953558][T32329] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 766.988143][T32323] macvlan2: entered promiscuous mode [ 766.993868][T32323] macvlan2: entered allmulticast mode [ 767.000157][T32323] bond7: entered promiscuous mode [ 767.006161][T32323] bridge4: entered promiscuous mode [ 767.013455][T32323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 767.049758][T32323] bond7: left promiscuous mode [ 767.055351][T32323] bridge4: left promiscuous mode [ 767.143193][T32333] syzkaller0: entered promiscuous mode [ 767.148862][T32333] syzkaller0: entered allmulticast mode [ 769.171126][T32344] syzkaller1: entered promiscuous mode [ 769.177055][T32344] syzkaller1: entered allmulticast mode [ 769.197422][T32359] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7128'. [ 769.207664][T16810] net_ratelimit: 25 callbacks suppressed [ 769.207684][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.243254][T32366] A link change request failed with some changes committed already. Interface * may have been left with an inconsistent configuration, please check. [ 769.363430][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 769.453211][T32377] syzkaller0: entered promiscuous mode [ 769.459294][T32374] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 769.467954][T32374] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 769.487407][T32377] syzkaller0: entered allmulticast mode [ 769.502139][T32374] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 769.506013][T32381] x_tables: duplicate underflow at hook 1 [ 769.517450][T32374] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 769.536281][T32374] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 769.563465][T32374] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 769.576646][T32374] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 769.839689][T32406] netlink: 'syz.4.7140': attribute type 2 has an invalid length. [ 769.869439][T32406] netlink: 'syz.4.7140': attribute type 3 has an invalid length. [ 769.977185][T32418] netlink: 'syz.2.7142': attribute type 2 has an invalid length. [ 770.070657][T32418] 9: entered promiscuous mode [ 772.649730][T32392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 773.235387][T32470] __nla_validate_parse: 6 callbacks suppressed [ 773.235410][T32470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7161'. [ 773.381423][T32481] netlink: 'syz.0.7163': attribute type 83 has an invalid length. [ 773.386811][T32482] syz_tun: entered allmulticast mode [ 773.890056][T32513] ipvlan0: entered allmulticast mode [ 773.913889][T32516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7172'. [ 773.920840][T32513] batadv_slave_1: entered allmulticast mode [ 773.930955][T32513] batman_adv: batadv0: Adding interface: ipvlan0 [ 773.938385][T32513] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.967394][T32513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.978598][T32513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.989695][T32513] batman_adv: batadv0: Interface activated: ipvlan0 [ 774.034137][T32518] vcan1: entered promiscuous mode [ 774.039357][T32518] vcan1: entered allmulticast mode [ 774.063628][T32520] vcan1: entered promiscuous mode [ 774.069950][T32520] vcan1: entered allmulticast mode [ 774.072308][T32516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7172'. [ 774.108568][T32526] bond6: entered promiscuous mode [ 774.114018][T32526] bond6: entered allmulticast mode [ 774.194186][T32533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7176'. [ 774.263062][T12154] net_ratelimit: 78 callbacks suppressed [ 774.263087][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 774.299398][T32538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7176'. [ 774.403187][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.457472][T32547] netlink: 'syz.0.7180': attribute type 23 has an invalid length. [ 774.472645][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 774.479141][T32547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7180'. [ 774.502783][T32547] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7180'. [ 774.522114][T32547] netlink: 'syz.0.7180': attribute type 6 has an invalid length. [ 774.543741][T32547] netlink: 'syz.0.7180': attribute type 5 has an invalid length. [ 774.551540][T32547] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7180'. [ 774.587306][T32551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7180'. [ 774.592698][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 774.712863][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 774.726522][T32552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7181'. [ 774.837330][T32557] bond1 (unregistering): Released all slaves [ 774.967384][T32552] vlan0: entered allmulticast mode [ 775.023604][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 775.162984][T32583] batadv_slave_0: entered promiscuous mode [ 775.192979][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 775.362072][T32592] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 775.413000][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 775.428134][T32592] ipt_REJECT: TCP_RESET invalid for non-tcp [ 775.444798][T32595] netlink: 'syz.3.7192': attribute type 11 has an invalid length. [ 775.454255][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.532647][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 775.546298][T32583] batadv_slave_0: left promiscuous mode [ 775.674840][T32606] veth5: entered promiscuous mode [ 775.681874][T32606] veth5: entered allmulticast mode [ 775.744204][T32611] netlink: 'syz.2.7198': attribute type 3 has an invalid length. [ 775.766090][T32611] netlink: 'syz.2.7198': attribute type 1 has an invalid length. [ 775.795257][T32615] netdevsim netdevsim0 : renamed from netdevsim0 [ 775.961917][T32617] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.969790][T32617] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.137159][T32617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.155255][T32617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.168205][T32617] tipc: Resetting bearer [ 776.384591][T32617] bond1: left allmulticast mode [ 776.389811][T32617] ip6gretap1: left allmulticast mode [ 776.425585][T32617] gretap1: left promiscuous mode [ 776.430596][T32617] gretap1: left allmulticast mode [ 776.449838][T32617] bond3: left promiscuous mode [ 776.455242][T32617] bridge3: left promiscuous mode [ 776.523258][T32617] tipc: Resetting bearer [ 776.538608][T32617] syzkaller0: left promiscuous mode [ 776.544674][T32617] syzkaller0: left allmulticast mode [ 776.559530][T32617] bond4: left promiscuous mode [ 776.569070][T32617] bond6: left promiscuous mode [ 776.574754][T32617] bond6: left allmulticast mode [ 776.714044][ T7928] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.729296][ T7928] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.809012][T32640] bond0: entered allmulticast mode [ 776.815360][ T7928] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.842773][ T7928] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.878031][ T7928] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.903966][ T7928] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.925967][ T7928] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.939813][ T7928] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.265240][T32665] pimreg: entered allmulticast mode [ 777.383458][T32674] syzkaller0: entered promiscuous mode [ 777.403001][T32674] syzkaller0: entered allmulticast mode [ 777.431340][T32679] netlink: 'syz.4.7220': attribute type 1 has an invalid length. [ 777.492192][T32679] bond7: entered promiscuous mode [ 777.498068][T32679] 8021q: adding VLAN 0 to HW filter on device bond7 [ 777.751662][ T60] nci: nci_ntf_packet: unsupported ntf opcode 0xf3c [ 777.805671][T32697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.124559][T32713] netlink: 'syz.0.7229': attribute type 1 has an invalid length. [ 778.309019][T32729] __nla_validate_parse: 7 callbacks suppressed [ 778.309043][T32729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7233'. [ 778.381424][T32729] bond8: entered promiscuous mode [ 778.387422][T32729] 8021q: adding VLAN 0 to HW filter on device bond8 [ 778.971227][T32755] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7237'. [ 779.020731][T32751] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7237'. [ 779.554077][T32745] netlink: 'syz.1.7237': attribute type 1 has an invalid length. [ 779.602921][T30859] net_ratelimit: 160 callbacks suppressed [ 779.602939][T30859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.699453][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 779.769201][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.822951][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 779.932737][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 779.933010][ T300] x_tables: duplicate underflow at hook 2 [ 779.963972][ T306] netlink: 'syz.2.7241': attribute type 17 has an invalid length. [ 779.995190][ T305] netlink: 'syz.4.7243': attribute type 1 has an invalid length. [ 780.042858][ T306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7241'. [ 780.071818][ T306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7241'. [ 780.103692][ T305] bond9: entered promiscuous mode [ 780.109288][ T305] 8021q: adding VLAN 0 to HW filter on device bond9 [ 780.141694][ T311] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 780.157002][ T310] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 780.171854][ T311] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 780.183588][ T311] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 780.220287][ T315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7245'. [ 780.262677][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 780.373147][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 780.454245][ T325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7248'. [ 780.477109][ T322] xt_TCPMSS: Only works on TCP SYN packets [ 780.486000][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 780.509278][ T322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7249'. [ 780.529352][ T322] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 780.602677][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 780.642987][T30859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.658270][ T336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7252'. [ 780.724016][ T341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7255'. [ 780.765479][ T342] bridge_slave_0: left allmulticast mode [ 780.778157][ T342] bridge_slave_0: left promiscuous mode [ 780.804044][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.825637][ T342] bridge_slave_1: left allmulticast mode [ 780.834329][ T342] bridge_slave_1: left promiscuous mode [ 780.838032][ T350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.840367][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.867956][ T342] bond0: (slave bond_slave_0): Releasing backup interface [ 780.876934][ T342] bond0: (slave bond_slave_1): Releasing backup interface [ 780.887305][ T342] team0: Port device team_slave_1 removed [ 780.893921][ T342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.901816][ T342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.061291][ T361] IPv6: NLM_F_REPLACE set, but no existing node found! [ 781.221345][ T372] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 781.250038][ T372] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 781.259342][ T372] gretap2: entered promiscuous mode [ 781.267941][ T372] gretap2: entered allmulticast mode [ 781.313464][ T374] netlink: 'syz.4.7265': attribute type 4 has an invalid length. [ 781.493342][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.501118][ T60] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.523204][T30848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.652818][T30848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.662249][ T402] netlink: 'syz.0.7275': attribute type 1 has an invalid length. [ 781.672297][ T402] netlink: 'syz.0.7275': attribute type 1 has an invalid length. [ 781.714769][ T402] netlink: 'syz.0.7275': attribute type 8 has an invalid length. [ 782.292149][ T434] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 782.564473][T30848] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 782.629269][ T450] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 782.638406][ T450] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 783.522908][ T496] netlink: 'syz.1.7297': attribute type 83 has an invalid length. [ 783.562119][ T500] __nla_validate_parse: 10 callbacks suppressed [ 783.562143][ T500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7298'. [ 783.639451][ T500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7298'. [ 784.076320][ T521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7302'. [ 784.114737][ T521] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7302'. [ 784.230124][ T529] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7303'. [ 784.281081][ T529] netlink: 'syz.2.7303': attribute type 4 has an invalid length. [ 784.282002][ T530] syzkaller0: entered promiscuous mode [ 784.296075][ T530] syzkaller0: entered allmulticast mode [ 784.424383][ T538] netlink: 'syz.3.7308': attribute type 1 has an invalid length. [ 784.496655][ T538] 8021q: adding VLAN 0 to HW filter on device bond5 [ 784.548750][ T540] bond5: (slave veth7): Enslaving as an active interface with a down link [ 784.605658][ T538] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 784.657098][ T538] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 784.785611][ T554] syzkaller0: entered promiscuous mode [ 784.801405][ T554] syzkaller0: entered allmulticast mode [ 784.818657][T30859] net_ratelimit: 40 callbacks suppressed [ 784.818678][T30859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.969269][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 785.165148][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 785.273930][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 785.375226][ T586] netlink: 'syz.0.7320': attribute type 1 has an invalid length. [ 785.393688][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 785.522581][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 785.611476][ T601] veth7: entered allmulticast mode [ 785.632623][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 785.744526][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 785.843768][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 785.863497][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 785.872695][T30848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.983397][ T627] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.7331'. [ 786.623518][ T666] netlink: 'syz.3.7340': attribute type 9 has an invalid length. [ 787.174047][ T699] netlink: 'syz.1.7349': attribute type 21 has an invalid length. [ 787.241974][ T699] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 787.305904][ T699] bond8 (unregistering): Released all slaves [ 787.485827][ T709] netlink: 'syz.1.7353': attribute type 21 has an invalid length. [ 787.773766][T19059] lec:lec_start_xmit: lec0:No lecd attached [ 787.804672][ T718] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.7355'. [ 788.424696][ T722] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7356'. [ 788.900940][ T625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.107662][ T733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7359'. [ 789.134110][ T731] vlan0: entered promiscuous mode [ 789.139214][ T731] erspan0: entered promiscuous mode [ 789.162701][ T733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7359'. [ 789.207264][ T738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.622051][ T755] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.7365'. [ 789.903509][T12154] net_ratelimit: 40 callbacks suppressed [ 789.903536][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 789.913271][ T768] openvswitch: netlink: IP tunnel dst address not specified [ 790.003130][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.032610][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 790.082928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.150144][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 790.192682][ T780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7374'. [ 790.217889][ T784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7376'. [ 790.324136][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 790.406152][ T799] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7379'. [ 790.459384][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 790.485743][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 790.593102][ T7930] bond1: (slave bridge1): failed to get link speed/duplex [ 790.642585][ T809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 790.712644][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 790.897960][ T825] PKCS7: Unknown OID: [4] (bad) [ 790.913258][ T825] PKCS7: Only support pkcs7_signedData type [ 791.173728][ T841] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7394'. [ 791.240532][T30859] hid-generic 0005:07C0:1010.0003: item fetching failed at offset 0/1 [ 791.273323][T30859] hid-generic 0005:07C0:1010.0003: probe with driver hid-generic failed with error -22 [ 791.924070][ T875] ip6tnl2: entered promiscuous mode [ 792.189190][ T888] Unsupported ieee802154 address type: 0 [ 792.201033][ T888] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7406'. [ 792.556786][ T916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7414'. [ 792.594712][ T911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7414'. [ 792.693568][ T928] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 793.042579][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 793.059777][ C1] lec:lec_tx_timeout: lec0 [ 793.926451][ T1005] syzkaller0: entered promiscuous mode [ 793.953250][ T1005] syzkaller0: entered allmulticast mode [ 794.091905][ T1022] netlink: 'syz.4.7433': attribute type 32 has an invalid length. [ 794.568192][ T1045] __nla_validate_parse: 2 callbacks suppressed [ 794.568214][ T1045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7440'. [ 794.805616][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 795.002828][ T12] net_ratelimit: 42 callbacks suppressed [ 795.002852][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 795.154148][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 795.203466][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.223880][ T1099] FAULT_INJECTION: forcing a failure. [ 795.223880][ T1099] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 795.288448][ T1099] CPU: 1 UID: 0 PID: 1099 Comm: syz.3.7451 Not tainted syzkaller #0 PREEMPT(full) [ 795.288480][ T1099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 795.288494][ T1099] Call Trace: [ 795.288502][ T1099] [ 795.288512][ T1099] dump_stack_lvl+0xe8/0x150 [ 795.288548][ T1099] should_fail_ex+0x412/0x560 [ 795.288586][ T1099] _copy_from_user+0x2d/0xb0 [ 795.288613][ T1099] __sys_sendto+0x2b0/0x710 [ 795.288645][ T1099] ? __pfx___sys_sendto+0x10/0x10 [ 795.288668][ T1099] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 795.288712][ T1099] ? __fget_files+0x3a0/0x420 [ 795.288753][ T1099] ? ksys_write+0x242/0x270 [ 795.288780][ T1099] ? __pfx_ksys_write+0x10/0x10 [ 795.288810][ T1099] __x64_sys_sendto+0xde/0x100 [ 795.288840][ T1099] do_syscall_64+0x14d/0xf80 [ 795.288869][ T1099] ? trace_irq_disable+0x3b/0x150 [ 795.288889][ T1099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.288911][ T1099] ? clear_bhb_loop+0x40/0x90 [ 795.288937][ T1099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.288957][ T1099] RIP: 0033:0x7f3cd7d9c819 [ 795.288978][ T1099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.288996][ T1099] RSP: 002b:00007f3cd8c68028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 795.289020][ T1099] RAX: ffffffffffffffda RBX: 00007f3cd8015fa0 RCX: 00007f3cd7d9c819 [ 795.289037][ T1099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 795.289050][ T1099] RBP: 00007f3cd8c68090 R08: 0000200000000200 R09: 0000000000000048 [ 795.289065][ T1099] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 795.289078][ T1099] R13: 00007f3cd8016038 R14: 00007f3cd8015fa0 R15: 00007ffd98d931a8 [ 795.289113][ T1099] [ 795.480946][ T1098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7452'. [ 795.495400][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 795.612695][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 795.723966][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 795.751282][ T1114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7457'. [ 795.852839][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 795.882577][ T1116] syzkaller1: entered promiscuous mode [ 795.888145][ T1116] syzkaller1: entered allmulticast mode [ 795.962753][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 796.154429][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 796.245103][T16810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.449723][ T1152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7467'. [ 796.704065][ T1161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7470'. [ 796.724924][ T1161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7470'. [ 796.755999][ T1161] netlink: 'syz.4.7470': attribute type 15 has an invalid length. [ 796.845539][ T1161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7470'. [ 796.846618][ T7928] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 43690 - 0 [ 796.894956][ T7928] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 43690 - 0 [ 796.912860][ T1161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7470'. [ 796.926537][ T7928] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 43690 - 0 [ 796.952656][ T1161] netlink: 'syz.4.7470': attribute type 15 has an invalid length. [ 796.969808][ T7928] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 43690 - 0 [ 797.178460][ T1179] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 797.216136][ T1173] ip6t_rpfilter: unknown options [ 797.359634][ T1183] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7478'. [ 797.476204][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7479'. [ 797.491338][ T1194] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 797.570825][ T1193] macvtap1: entered promiscuous mode [ 797.576597][ T1193] vlan0: entered promiscuous mode [ 797.582258][ T1193] macvtap1: entered allmulticast mode [ 797.591065][ T1193] vlan0: entered allmulticast mode [ 797.598061][ T1193] veth0_vlan: entered allmulticast mode [ 797.859812][ T1108] netlink: 'syz.2.7453': attribute type 4 has an invalid length. [ 797.886902][ T1207] pimreg: entered allmulticast mode [ 797.984458][ T1207] tipc: Enabling of bearer rejected, media not registered [ 798.001048][ T1206] ip6gre0: Master is either lo or non-ether device [ 799.238468][ T1290] netlink: 'syz.1.7508': attribute type 1 has an invalid length. [ 799.446932][ T1299] tipc: Started in network mode [ 799.451888][ T1299] tipc: Node identity ac14140f, cluster identity 5 [ 799.488109][ T1299] tipc: New replicast peer: 172.20.20.187 [ 799.497174][ T1299] tipc: Enabled bearer , priority 10 [ 799.522064][ T1302] : entered promiscuous mode [ 799.834613][ T1323] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 799.891816][ T1326] __nla_validate_parse: 7 callbacks suppressed [ 799.891841][ T1326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7520'. [ 799.957372][ T1329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7521'. [ 799.977752][ T1325] xt_hashlimit: size too large, truncated to 1048576 [ 800.022070][ T1329] netlink: 'syz.3.7521': attribute type 1 has an invalid length. [ 800.094456][ T1329] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7521'. [ 800.112755][ T7939] net_ratelimit: 28 callbacks suppressed [ 800.112780][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 800.232962][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 800.354708][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 800.389622][ T1334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7522'. [ 800.467910][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 800.484092][ T1335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7522'. [ 800.493988][T16810] tipc: Node number set to 2886997007 [ 800.500326][ T1335] openvswitch: netlink: Flow actions attr not present in new flow. [ 800.601066][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 800.730021][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 800.973534][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 801.104492][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 801.225320][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 801.304251][ T1369] netlink: 'syz.0.7530': attribute type 20 has an invalid length. [ 801.319715][ T1369] IPv6: NLM_F_CREATE should be specified when creating new route [ 801.553944][ T1378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7533'. [ 801.615160][ T1377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7533'. [ 801.630994][ T1382] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7534'. [ 801.900159][ T1401] netlink: 177 bytes leftover after parsing attributes in process `syz.2.7539'. [ 801.993635][ T1406] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 802.265187][ T1415] netlink: 'syz.0.7544': attribute type 21 has an invalid length. [ 802.273240][ T1415] netlink: 'syz.0.7544': attribute type 1 has an invalid length. [ 802.614771][ T1435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7551'. [ 802.624825][ T1433] netem: change failed [ 802.941025][ T1454] netlink: 'syz.2.7558': attribute type 5 has an invalid length. [ 802.966506][T23387] block nbd4: Receive control failed (result -107) [ 803.009860][ T1464] xt_cgroup: xt_cgroup: no path or classid specified [ 803.052969][ T1443] nbd4: detected capacity change from 0 to 127 [ 803.079567][T22859] block nbd4: Dead connection, failed to find a fallback [ 803.095166][ T1453] bond2 (unregistering): Released all slaves [ 803.152267][T22859] block nbd4: shutting down sockets [ 803.159966][T22859] blk_print_req_error: 138 callbacks suppressed [ 803.159986][T22859] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.230452][T22859] buffer_io_error: 138 callbacks suppressed [ 803.230475][T22859] Buffer I/O error on dev nbd4, logical block 0, async page read [ 803.309709][T22859] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.322191][ T1469] netlink: 'syz.2.7562': attribute type 1 has an invalid length. [ 803.331295][T22859] Buffer I/O error on dev nbd4, logical block 1, async page read [ 803.355425][ T1469] netlink: 'syz.2.7562': attribute type 2 has an invalid length. [ 803.364852][T22859] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.422706][T22859] Buffer I/O error on dev nbd4, logical block 2, async page read [ 803.433699][T22859] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.462637][T22859] Buffer I/O error on dev nbd4, logical block 3, async page read [ 803.491210][T22859] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.552657][T22859] Buffer I/O error on dev nbd4, logical block 0, async page read [ 803.560834][T22859] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.615829][T22859] Buffer I/O error on dev nbd4, logical block 1, async page read [ 803.636371][ T1481] team0: No ports can be present during mode change [ 803.644046][T22859] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.673599][ T1481] netlink: 'syz.3.7567': attribute type 28 has an invalid length. [ 803.681637][ T1481] netlink: 'syz.3.7567': attribute type 3 has an invalid length. [ 803.687914][T22859] Buffer I/O error on dev nbd4, logical block 2, async page read [ 803.725599][T22859] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.783829][T22859] Buffer I/O error on dev nbd4, logical block 3, async page read [ 803.805455][T22859] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.850419][T22859] Buffer I/O error on dev nbd4, logical block 0, async page read [ 803.902642][T22859] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 803.944640][T22859] Buffer I/O error on dev nbd4, logical block 1, async page read [ 803.966863][T22859] ldm_validate_partition_table(): Disk read failed. [ 804.004240][T22859] Dev nbd4: unable to read RDB block 0 [ 804.011364][T22859] nbd4: unable to read partition table [ 804.049879][T22859] ldm_validate_partition_table(): Disk read failed. [ 804.067121][T22859] Dev nbd4: unable to read RDB block 0 [ 804.121125][T22859] nbd4: unable to read partition table [ 804.288545][ T1506] bridge0: port 3(ipvlan2) entered blocking state [ 804.351210][ T1506] bridge0: port 3(ipvlan2) entered disabled state [ 804.372968][ T1506] ipvlan2: entered allmulticast mode [ 804.423943][ T1506] ipvlan2: left allmulticast mode [ 804.645037][ T1521] netlink: 'syz.2.7583': attribute type 1 has an invalid length. [ 804.664541][ T1522] veth0: entered promiscuous mode [ 805.078608][ T1521] syzkaller0: entered promiscuous mode [ 805.129560][ T1521] syzkaller0: entered allmulticast mode [ 805.248536][ T1542] netlink: 'syz.4.7589': attribute type 21 has an invalid length. [ 805.295373][ T1542] __nla_validate_parse: 12 callbacks suppressed [ 805.295396][ T1542] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7589'. [ 805.457216][ T1553] Bluetooth: MGMT ver 1.23 [ 805.538793][ T1559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7592'. [ 808.362599][ T7928] net_ratelimit: 24 callbacks suppressed [ 808.362621][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 808.377368][ T1542] netlink: 'syz.4.7589': attribute type 5 has an invalid length. [ 808.385751][ T1542] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7589'. [ 808.417934][ T1559] macvlan2: entered allmulticast mode [ 808.533115][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 808.644499][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 808.750093][ T1587] macvtap2: entered allmulticast mode [ 808.772620][ T1587] veth0_macvtap: entered allmulticast mode [ 808.779258][ T1589] mac80211_hwsim hwsim78 : renamed from wlan1 [ 808.802773][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 808.918380][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.924877][ T60] bond1: (slave bridge1): failed to get link speed/duplex [ 808.936125][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 808.945702][ T1601] netlink: 'syz.1.7606': attribute type 13 has an invalid length. [ 808.995008][ T1601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7606'. [ 809.033902][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 809.043353][ T1601] netlink: 'syz.1.7606': attribute type 13 has an invalid length. [ 809.062823][ T1601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7606'. [ 809.118408][ T1608] netlink: 'syz.3.7609': attribute type 2 has an invalid length. [ 809.153122][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 809.327059][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 809.360256][ T1620] Cannot find add_set index 0 as target [ 809.383585][ T1619] netlink: 'syz.4.7612': attribute type 1 has an invalid length. [ 809.427701][ T1619] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7612'. [ 809.458055][ T1619] netlink: 'syz.4.7612': attribute type 1 has an invalid length. [ 809.462642][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 809.489226][ T1619] netlink: 'syz.4.7612': attribute type 2 has an invalid length. [ 809.566302][ T1628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7616'. [ 809.582625][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 809.800812][ T1642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7620'. [ 809.938217][ T1646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7621'. [ 809.954727][ T1647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7622'. [ 810.349786][ T1657] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 810.420433][ T1657] bond7 (unregistering): Released all slaves [ 810.450172][ T1673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7624'. [ 810.511355][ T1669] veth0: entered promiscuous mode [ 810.652431][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7629'. [ 810.668485][ T1680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7629'. [ 810.692330][ T1673] veth0 (unregistering): left promiscuous mode [ 810.718287][ T1678] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.7624'. [ 810.746143][ T1682] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 810.801743][ T1685] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 810.831831][ T1685] batman_adv: batadv0: Removing interface: ipvlan0 [ 810.856824][ T1685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.935301][ T1691] tipc: Enabling of bearer rejected, already enabled [ 810.966263][T23387] Bluetooth: hci5: command 0x0406 tx timeout [ 810.985544][ T5836] [ 810.987932][ T5836] ====================================================== [ 810.994976][ T5836] WARNING: possible circular locking dependency detected [ 811.002103][ T5836] syzkaller #0 Not tainted [ 811.006532][ T5836] ------------------------------------------------------ [ 811.013556][ T5836] kworker/u9:3/5836 is trying to acquire lock: [ 811.019710][ T5836] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 811.030423][ T5836] [ 811.030423][ T5836] but task is already holding lock: [ 811.037786][ T5836] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 811.048059][ T5836] [ 811.048059][ T5836] which lock already depends on the new lock. [ 811.048059][ T5836] [ 811.058462][ T5836] [ 811.058462][ T5836] the existing dependency chain (in reverse order) is: [ 811.067531][ T5836] [ 811.067531][ T5836] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 811.075643][ T5836] down_write+0x96/0x200 [ 811.080439][ T5836] kernfs_add_one+0x41/0x5c0 [ 811.085555][ T5836] kernfs_create_dir_ns+0xde/0x130 [ 811.091192][ T5836] internal_create_group+0x425/0x1180 [ 811.097169][ T5836] cpuhp_invoke_callback+0x445/0x860 [ 811.102988][ T5836] cpuhp_issue_call+0x430/0x7a0 [ 811.108369][ T5836] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 811.115078][ T5836] __cpuhp_setup_state+0x3f/0x60 [ 811.120552][ T5836] do_one_initcall+0x250/0x8d0 [ 811.125847][ T5836] do_initcall_level+0x104/0x190 [ 811.131316][ T5836] do_initcalls+0x59/0xa0 [ 811.136181][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 811.141906][ T5836] kernel_init+0x1d/0x1d0 [ 811.146761][ T5836] ret_from_fork+0x51e/0xb90 [ 811.151915][ T5836] ret_from_fork_asm+0x1a/0x30 [ 811.157229][ T5836] [ 811.157229][ T5836] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 811.165066][ T5836] [ 811.165066][ T5836] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 811.172869][ T5836] cpus_read_lock+0x42/0x160 [ 811.178030][ T5836] static_key_disable+0x12/0x20 [ 811.183434][ T5836] __inet_hash_connect+0x2430/0x2440 [ 811.189255][ T5836] tcp_v4_connect+0xd5f/0x19b0 [ 811.194556][ T5836] __inet_stream_connect+0x25a/0xdd0 [ 811.200386][ T5836] inet_stream_connect+0x66/0xa0 [ 811.205869][ T5836] __sys_connect+0x312/0x450 [ 811.210989][ T5836] __x64_sys_connect+0x7a/0x90 [ 811.216284][ T5836] do_syscall_64+0x14d/0xf80 [ 811.221409][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.227825][ T5836] [ 811.227825][ T5836] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 811.235482][ T5836] lock_sock_nested+0x48/0x100 [ 811.240771][ T5836] inet_shutdown+0x6a/0x390 [ 811.245804][ T5836] nbd_mark_nsock_dead+0x2e9/0x560 [ 811.251442][ T5836] recv_work+0x1c7f/0x1d90 [ 811.256390][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 811.262468][ T5836] worker_thread+0xa53/0xfc0 [ 811.267593][ T5836] kthread+0x388/0x470 [ 811.272184][ T5836] ret_from_fork+0x51e/0xb90 [ 811.277300][ T5836] ret_from_fork_asm+0x1a/0x30 [ 811.282597][ T5836] [ 811.282597][ T5836] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 811.290289][ T5836] __mutex_lock+0x19f/0x1300 [ 811.295593][ T5836] nbd_queue_rq+0x37b/0x1100 [ 811.300713][ T5836] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 811.306785][ T5836] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 811.313660][ T5836] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 811.320172][ T5836] blk_mq_run_hw_queue+0x348/0x4f0 [ 811.325819][ T5836] blk_mq_dispatch_list+0xd16/0xe10 [ 811.331568][ T5836] blk_mq_flush_plug_list+0x48d/0x570 [ 811.337489][ T5836] __blk_flush_plug+0x3ed/0x4d0 [ 811.342880][ T5836] __submit_bio+0x28d/0x580 [ 811.347920][ T5836] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 811.354087][ T5836] block_read_full_folio+0x599/0x830 [ 811.359904][ T5836] filemap_read_folio+0x137/0x3b0 [ 811.365456][ T5836] do_read_cache_folio+0x358/0x590 [ 811.371620][ T5836] read_part_sector+0xb6/0x2b0 [ 811.376915][ T5836] adfspart_check_ICS+0xa5/0xa40 [ 811.382395][ T5836] bdev_disk_changed+0x7ba/0x1550 [ 811.387950][ T5836] blkdev_get_whole+0x380/0x510 [ 811.393338][ T5836] bdev_open+0x31e/0xd30 [ 811.398216][ T5836] blkdev_open+0x470/0x610 [ 811.403223][ T5836] do_dentry_open+0x785/0x14e0 [ 811.408527][ T5836] vfs_open+0x3b/0x340 [ 811.413130][ T5836] path_openat+0x2e08/0x3860 [ 811.418247][ T5836] do_file_open+0x23e/0x4a0 [ 811.423275][ T5836] do_sys_openat2+0x113/0x200 [ 811.428497][ T5836] __x64_sys_openat+0x138/0x170 [ 811.433908][ T5836] do_syscall_64+0x14d/0xf80 [ 811.439028][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.445538][ T5836] [ 811.445538][ T5836] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 811.452775][ T5836] __mutex_lock+0x19f/0x1300 [ 811.457901][ T5836] nbd_queue_rq+0xc6/0x1100 [ 811.463021][ T5836] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 811.469103][ T5836] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 811.475967][ T5836] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 811.482503][ T5836] blk_mq_run_hw_queue+0x348/0x4f0 [ 811.488168][ T5836] blk_mq_dispatch_list+0xd16/0xe10 [ 811.493905][ T5836] blk_mq_flush_plug_list+0x48d/0x570 [ 811.499818][ T5836] __blk_flush_plug+0x3ed/0x4d0 [ 811.505197][ T5836] __submit_bio+0x28d/0x580 [ 811.510228][ T5836] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 811.516389][ T5836] block_read_full_folio+0x599/0x830 [ 811.522205][ T5836] filemap_read_folio+0x137/0x3b0 [ 811.527758][ T5836] do_read_cache_folio+0x358/0x590 [ 811.533402][ T5836] read_part_sector+0xb6/0x2b0 [ 811.538696][ T5836] adfspart_check_ICS+0xa5/0xa40 [ 811.544265][ T5836] bdev_disk_changed+0x7ba/0x1550 [ 811.549825][ T5836] blkdev_get_whole+0x380/0x510 [ 811.555217][ T5836] bdev_open+0x31e/0xd30 [ 811.560017][ T5836] blkdev_open+0x470/0x610 [ 811.564964][ T5836] do_dentry_open+0x785/0x14e0 [ 811.570259][ T5836] vfs_open+0x3b/0x340 [ 811.574856][ T5836] path_openat+0x2e08/0x3860 [ 811.579975][ T5836] do_file_open+0x23e/0x4a0 [ 811.585006][ T5836] do_sys_openat2+0x113/0x200 [ 811.590213][ T5836] __x64_sys_openat+0x138/0x170 [ 811.595601][ T5836] do_syscall_64+0x14d/0xf80 [ 811.600808][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.607229][ T5836] [ 811.607229][ T5836] -> #4 (set->srcu){.+.+}-{0:0}: [ 811.614533][ T5836] __synchronize_srcu+0xca/0x300 [ 811.620032][ T5836] elevator_switch+0x1e8/0x7a0 [ 811.625323][ T5836] elevator_change+0x2cc/0x450 [ 811.630619][ T5836] elevator_set_default+0x36c/0x430 [ 811.636348][ T5836] blk_register_queue+0x366/0x430 [ 811.641911][ T5836] __add_disk+0x677/0xd50 [ 811.646858][ T5836] add_disk_fwnode+0xfb/0x480 [ 811.652071][ T5836] nbd_dev_add+0x72c/0xb50 [ 811.657100][ T5836] nbd_init+0x168/0x1f0 [ 811.661783][ T5836] do_one_initcall+0x250/0x8d0 [ 811.667075][ T5836] do_initcall_level+0x104/0x190 [ 811.672552][ T5836] do_initcalls+0x59/0xa0 [ 811.677501][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 811.683222][ T5836] kernel_init+0x1d/0x1d0 [ 811.688162][ T5836] ret_from_fork+0x51e/0xb90 [ 811.693286][ T5836] ret_from_fork_asm+0x1a/0x30 [ 811.698676][ T5836] [ 811.698676][ T5836] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 811.706504][ T5836] __mutex_lock+0x19f/0x1300 [ 811.711624][ T5836] elevator_change+0x1b3/0x450 [ 811.716911][ T5836] elevator_set_none+0xb5/0x140 [ 811.722286][ T5836] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 811.728628][ T5836] nbd_start_device+0x17f/0xb10 [ 811.734012][ T5836] nbd_genl_connect+0x165b/0x1cf0 [ 811.739560][ T5836] genl_family_rcv_msg_doit+0x22a/0x330 [ 811.745721][ T5836] genl_rcv_msg+0x61c/0x7a0 [ 811.750754][ T5836] netlink_rcv_skb+0x232/0x4b0 [ 811.756040][ T5836] genl_rcv+0x28/0x40 [ 811.760607][ T5836] netlink_unicast+0x80f/0x9b0 [ 811.765896][ T5836] netlink_sendmsg+0x813/0xb40 [ 811.771186][ T5836] ____sys_sendmsg+0x972/0x9f0 [ 811.776487][ T5836] ___sys_sendmsg+0x2a5/0x360 [ 811.781698][ T5836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 811.787170][ T5836] do_syscall_64+0x14d/0xf80 [ 811.792306][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.798736][ T5836] [ 811.798736][ T5836] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 811.807355][ T5836] blk_alloc_queue+0x546/0x680 [ 811.812645][ T5836] __blk_mq_alloc_disk+0x197/0x390 [ 811.818287][ T5836] nbd_dev_add+0x499/0xb50 [ 811.823239][ T5836] nbd_init+0x168/0x1f0 [ 811.827924][ T5836] do_one_initcall+0x250/0x8d0 [ 811.833222][ T5836] do_initcall_level+0x104/0x190 [ 811.838684][ T5836] do_initcalls+0x59/0xa0 [ 811.844238][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 811.849962][ T5836] kernel_init+0x1d/0x1d0 [ 811.854812][ T5836] ret_from_fork+0x51e/0xb90 [ 811.859928][ T5836] ret_from_fork_asm+0x1a/0x30 [ 811.865221][ T5836] [ 811.865221][ T5836] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 811.872435][ T5836] fs_reclaim_acquire+0x71/0x100 [ 811.877902][ T5836] kmem_cache_alloc_noprof+0x40/0x650 [ 811.883796][ T5836] __kernfs_iattrs+0xdf/0x340 [ 811.889005][ T5836] kernfs_iop_setattr+0xea/0x3f0 [ 811.894469][ T5836] notify_change+0xc1a/0xf40 [ 811.899604][ T5836] do_truncate+0x1c2/0x250 [ 811.904555][ T5836] path_openat+0x2f89/0x3860 [ 811.909669][ T5836] do_file_open+0x23e/0x4a0 [ 811.914698][ T5836] do_sys_openat2+0x113/0x200 [ 811.919991][ T5836] __x64_sys_openat+0x138/0x170 [ 811.925376][ T5836] do_syscall_64+0x14d/0xf80 [ 811.930493][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.936908][ T5836] [ 811.936908][ T5836] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 811.945425][ T5836] __lock_acquire+0x15a5/0x2cf0 [ 811.950805][ T5836] lock_acquire+0xf0/0x2e0 [ 811.955751][ T5836] down_write+0x96/0x200 [ 811.960518][ T5836] kernfs_unlink_sibling+0x71/0x180 [ 811.966243][ T5836] __kernfs_remove+0x3e7/0x660 [ 811.971533][ T5836] kernfs_remove_by_name_ns+0xaf/0x130 [ 811.977608][ T5836] sysfs_unmerge_group+0xd4/0x140 [ 811.983180][ T5836] dpm_sysfs_remove+0x76/0xd0 [ 811.988392][ T5836] device_del+0x250/0x8f0 [ 811.993249][ T5836] device_unregister+0x21/0xf0 [ 811.998546][ T5836] hci_conn_del+0xc36/0x1230 [ 812.003662][ T5836] hci_abort_conn_sync+0xdd0/0x1190 [ 812.009389][ T5836] hci_cmd_sync_work+0x213/0x400 [ 812.014856][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 812.020928][ T5836] worker_thread+0xa53/0xfc0 [ 812.026047][ T5836] kthread+0x388/0x470 [ 812.030642][ T5836] ret_from_fork+0x51e/0xb90 [ 812.035758][ T5836] ret_from_fork_asm+0x1a/0x30 [ 812.041055][ T5836] [ 812.041055][ T5836] other info that might help us debug this: [ 812.041055][ T5836] [ 812.051287][ T5836] Chain exists of: [ 812.051287][ T5836] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 812.051287][ T5836] [ 812.065736][ T5836] Possible unsafe locking scenario: [ 812.065736][ T5836] [ 812.073183][ T5836] CPU0 CPU1 [ 812.078545][ T5836] ---- ---- [ 812.083909][ T5836] lock(&root->kernfs_rwsem); [ 812.088677][ T5836] lock(cpuhp_state_mutex); [ 812.095802][ T5836] lock(&root->kernfs_rwsem); [ 812.103108][ T5836] lock(&root->kernfs_iattr_rwsem); [ 812.108425][ T5836] [ 812.108425][ T5836] *** DEADLOCK *** [ 812.108425][ T5836] [ 812.116580][ T5836] 5 locks held by kworker/u9:3/5836: [ 812.121872][ T5836] #0: ffff88807b231148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 812.132782][ T5836] #1: ffffc9000409fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 812.145356][ T5836] #2: ffff88805f138ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 812.155224][ T5836] #3: ffff88805f1380c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 812.164991][ T5836] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 812.175710][ T5836] [ 812.175710][ T5836] stack backtrace: [ 812.181632][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 812.181653][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 812.181665][ T5836] Workqueue: hci5 hci_cmd_sync_work [ 812.181696][ T5836] Call Trace: [ 812.181706][ T5836] [ 812.181714][ T5836] dump_stack_lvl+0xe8/0x150 [ 812.181737][ T5836] print_circular_bug+0x2e1/0x300 [ 812.181764][ T5836] check_noncircular+0x12e/0x150 [ 812.181790][ T5836] __lock_acquire+0x15a5/0x2cf0 [ 812.181813][ T5836] ? __lock_acquire+0x6b5/0x2cf0 [ 812.181837][ T5836] lock_acquire+0xf0/0x2e0 [ 812.181856][ T5836] ? kernfs_unlink_sibling+0x71/0x180 [ 812.181877][ T5836] down_write+0x96/0x200 [ 812.181891][ T5836] ? kernfs_unlink_sibling+0x71/0x180 [ 812.181908][ T5836] ? __pfx_down_write+0x10/0x10 [ 812.181922][ T5836] ? kernfs_root+0x1c/0x230 [ 812.181945][ T5836] ? kernfs_root+0x1c/0x230 [ 812.181966][ T5836] ? kernfs_root+0x1c/0x230 [ 812.181988][ T5836] ? kernfs_root+0x1ea/0x230 [ 812.182011][ T5836] kernfs_unlink_sibling+0x71/0x180 [ 812.182029][ T5836] __kernfs_remove+0x3e7/0x660 [ 812.182047][ T5836] kernfs_remove_by_name_ns+0xaf/0x130 [ 812.182065][ T5836] sysfs_unmerge_group+0xd4/0x140 [ 812.182090][ T5836] dpm_sysfs_remove+0x76/0xd0 [ 812.182114][ T5836] device_del+0x250/0x8f0 [ 812.182135][ T5836] ? klist_iter_exit+0xc1/0x100 [ 812.182160][ T5836] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 812.182177][ T5836] ? __pfx_device_del+0x10/0x10 [ 812.182198][ T5836] ? __pfx_autoremove_wake_function+0x10/0x10 [ 812.182218][ T5836] device_unregister+0x21/0xf0 [ 812.182239][ T5836] hci_conn_del+0xc36/0x1230 [ 812.182257][ T5836] ? hci_abort_conn_sync+0xa7b/0x1190 [ 812.182274][ T5836] hci_abort_conn_sync+0xdd0/0x1190 [ 812.182293][ T5836] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 812.182312][ T5836] ? abort_conn_sync+0x26/0x210 [ 812.182332][ T5836] ? abort_conn_sync+0x26/0x210 [ 812.182351][ T5836] ? abort_conn_sync+0x19c/0x210 [ 812.182369][ T5836] ? __pfx_abort_conn_sync+0x10/0x10 [ 812.182390][ T5836] hci_cmd_sync_work+0x213/0x400 [ 812.182412][ T5836] ? process_scheduled_works+0xa8d/0x18c0 [ 812.182435][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 812.182469][ T5836] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.182493][ T5836] ? assign_work+0x3d5/0x5e0 [ 812.182514][ T5836] worker_thread+0xa53/0xfc0 [ 812.182544][ T5836] kthread+0x388/0x470 [ 812.182560][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 812.182579][ T5836] ? __pfx_kthread+0x10/0x10 [ 812.182594][ T5836] ret_from_fork+0x51e/0xb90 [ 812.182616][ T5836] ? __pfx_ret_from_fork+0x10/0x10 [ 812.182636][ T5836] ? __switch_to+0xc7d/0x1450 [ 812.182654][ T5836] ? __pfx_kthread+0x10/0x10 [ 812.182669][ T5836] ret_from_fork_asm+0x1a/0x30 [ 812.182705][ T5836] [ 812.450292][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.513548][ T1694] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7634'. [ 813.463003][ T7928] net_ratelimit: 16 callbacks suppressed [ 813.463029][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 813.582730][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 813.702716][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 813.812781][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 813.922780][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 814.002873][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 814.042860][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 814.082523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 814.090576][ C1] lec:lec_tx_timeout: lec0 [ 814.152576][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 814.262822][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 814.382793][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 814.492735][ T7928] bond1: (slave bridge1): failed to get link speed/duplex [ 818.512620][T12154] net_ratelimit: 35 callbacks suppressed [ 818.512646][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 818.632569][ T7939] bond1: (slave bridge1): failed to get link speed/duplex [ 818.742772][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 818.852662][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 818.962631][T12154] bond1: (slave bridge1): failed to get link speed/duplex [ 819.072605][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 819.192906][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 819.302701][ T7938] bond1: (slave bridge1): failed to get link speed/duplex [ 819.412805][T22330] bond1: (slave bridge1): failed to get link speed/duplex [ 819.522926][T22330] bond1: (slave bridge1): failed to get link speed/duplex