last executing test programs: 3.669851502s ago: executing program 4 (id=6325): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x40000000) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'macvlan1\x00', 0x7931}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="162a85847134f0284c98a2af24ece40342353a2e8251ee426ab2eca12dc767fc8534cff2c60757caca6be5454499ee66021a965906957c1be036688330ba53f66cf336893ba90f68878c77ea639bcbc043310389acacb42de0b3dd6b"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 3.35928295s ago: executing program 4 (id=6327): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fcff16000100000000000000030000000000000000000100000000000080000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="81b8000000000000300012800b000100697036746e6c000020000280080008002700000014000300200100"/56], 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) (async, rerun: 64) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb4e}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x89, &(0x7f0000000300)=""/137, 0x40f00, 0x8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[{0x2, 0x4, 0x10, 0x1}, {0x2, 0x4, 0x7, 0xb}, {0x3, 0x3, 0xa}, {0x2, 0x2, 0x4}], 0x10, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.10629903s ago: executing program 4 (id=6332): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(0xffffffffffffffff, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r2, 0x0, &(0x7f0000000380)) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000600)=""/240, 0xf0}], 0x1) 2.208420604s ago: executing program 4 (id=6340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltaction={0x108, 0x31, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2346}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x29}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)={0x14, 0x1, 0x9, 0x401}, 0x14}}, 0x0) 2.018448916s ago: executing program 4 (id=6343): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 1.891649095s ago: executing program 4 (id=6346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="180000002600090027bd7000000000000400000004001e80"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.644143481s ago: executing program 0 (id=6350): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x9, 0x0, 0x5, 0x0, 0x5, 0x0, 0xfd, 0x2}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000480)={r3}, &(0x7f0000000700)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000040)={r3, 0x3e, "787929655f5dcdaa283b88270c5d84600d34ff1f006930ce8b481cf77c29134bddf27b11414db6e65453bdfe3e5567486b0dec583fd4604852a7651bb340"}, &(0x7f00000000c0)=0x46) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 1.443480772s ago: executing program 0 (id=6353): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) 1.440969616s ago: executing program 2 (id=6354): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000002000000000005000100070000000900020073797a30000000000c0007800800130000000000050005000200000005000400000000000d000300686173683a6e657400"/84], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.381385486s ago: executing program 3 (id=6355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6aabd95500462ffffc000000000000000000000000000001ff020000000000000000000000000001"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) 1.331698028s ago: executing program 1 (id=6356): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='@', 0xffffffffffffff86}, {&(0x7f0000000040)="352aa2a5a7e83e0b2473a1a1cffe0ea1958e8b89c744844b7689b3a99d9dec21d2a04e90481737e26ce225856ee734945f7be55deec7b2d6", 0x38}], 0x2, &(0x7f0000000180)=[{0x60, 0x10f, 0x3, "b20ef600000037cd513b253abd70301f257e3b6255d09ede1fe1eeac8a530e77e26a07accb20919c2c50667050719fd7372116dd11c589f6e3046cd629300db5a49f81e2e6fe2d419ac44225e6a3"}], 0x60}, 0x41) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='@', 0xffffffffffffff86}, {&(0x7f0000000040)="352aa2a5a7e83e0b2473a1a1cffe0ea1958e8b89c744844b7689b3a99d9dec21d2a04e90481737e26ce225856ee734945f7be55deec7b2d6", 0x38}], 0x2, &(0x7f0000000180)=[{0x60, 0x10f, 0x3, "b20ef600000037cd513b253abd70301f257e3b6255d09ede1fe1eeac8a530e77e26a07accb20919c2c50667050719fd7372116dd11c589f6e3046cd629300db5a49f81e2e6fe2d419ac44225e6a3"}], 0x60}, 0x41) (async) 1.172860338s ago: executing program 0 (id=6357): r0 = socket(0x1, 0x2, 0x0) shutdown(r0, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000015c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x8040) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x4004090) 1.156699718s ago: executing program 2 (id=6358): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0xfe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.090799151s ago: executing program 1 (id=6359): ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}]}) r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000180)={'wlan0\x00', {0x2, 0x0, @multicast1}}) (async) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000001c0), 0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) socketpair(0x0, 0x80000, 0x8001, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x48084) (async) close(0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000540)={0x1, 0x8, 0x200}) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f0000000580)=@generic={0x9, "7c2b713d90a9051f7a88a436f982dbb16cf719651b4d2fcec6acacac98651b1b086f653e1d00cd1429bb85d678f10e3ef7d335c7bf673f878de0a4c54ce3f44648065c3a061e4467392b74eb76aec88fc23d359965c1b17fe645148cb16e82ed5f697e872c693d70f211c4897ec1e31336b63c139241cb47c3994775746c"}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="2a917efc9b8b863c3be17f81d092a1f80c357df229f94eef539507267bf65772a28626a4507a89ec43a80c85f2ae04", 0x2f}, {&(0x7f0000000680)="6639b0f58400f593d1eba589c586a5a7f3b5d6a640fb3782222eab4af897d2c47a09b31bd8955a0dbe7fa7597e1fb515d9838c1710f6019630f3f344f09935665b0e3fd466d8f1077df94651a343b196510dd091b49833fa5d00b53fef722a2842f847b966876cff4dcc4abed98cf19bee34d60834acff9e968ac907e2c25c4d13191553ecd39141d62125bd0949c15e64483130f34d028678d1715ee7a36187664c2cf132ce6661a7e3ea65b75498b35e0641a43d8ec7319effacb4f413ea8bd7bc63cf", 0xc4}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="bca28f57681bb86ad0931a7c35a6af9fffb8787466b1edfb6d42", 0x1a}], 0x5}, 0x800) (async, rerun: 32) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000008c0)=0x6) (rerun: 32) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000900)=0x1, 0x4) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000940)={'veth0\x00', 0x7f}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000980)=0x1d7a, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f00000009c0)="55e1d392207c464a93c372f35c59255815ca131007cf91fb741abf6db8c307a050e5c18a127427076477b6fb29b880aa96772a69fe22ad7b5e58a23c081a6ec8fe479344b51ef101d83991f4b1a1acc57333ddf513e6fd403c344318459d34f00df17eb1e90e0207edc3dc100a8226740d80d258c04905b2e6235f5f0ab2d90a58aacfa0033ec9b5c22814475d92dbc171a65f96f7e27c09cfdff6fb5d2f1c770fc37ead0bda06d6bddc9fdc61e6e3f1acbb96aa0f2ac52dc65cf3811ea0ef3a06c6b94936f0bd04f9979b1bc02f027ce04dbce4dd", 0xd5) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000b00)={'tunl0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)) (async, rerun: 64) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000b80)="85cf8025075729aba451de264ea89cfeb6919418a01c0e74435e0302d8d208f0355d6dbfd928f2bfaf45901505a335a91057a1cd30743225c81f2a64c994778637f90f8a373f94a033860785b67ab0d63b658a40f1d28651", 0x58}, {&(0x7f0000000c00)="cc23084e7f6628fd74321605d457c4e8ade00ccd9ea27f2292a38111933612e6850af7405a690b218c11103b2e5cb07faf53b27d80bbb5ebc5ca2e433e2c8d226a79953b4f1e69c2a9384442ec085318b1", 0x51}, {&(0x7f0000000c80)="7a9475e11ac67abbf9c2c2dd7d023765b9f6ebe5d1ef856f577e90926ae3a30fd6a07f71bb84256a2971abc82ecd46b770149dc54f0c85151bcde5fbba0d6a70f0ef18380504215cac8bb0f662781a2fccc8926a86e8718ff0d44b42cf2e469ebb2a60", 0x63}, {&(0x7f0000000d00)="0e2861e9d0e388623f428ae92c3b2cb904239a7c4021b7e2e6ae987634368ada34", 0x21}, {&(0x7f0000000d40)="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", 0xfa}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)="0b791e4d42755abb9e2b1cde7381c8dd84fc66e9d54d179b101c84403d2b4441c72c0e7d32f5ac6684a44bf97755d742d87f2dc5ecc841493ae5011a6925849d18f24f74b9d5c8be614d098bdfa8c2741ded73235ab48723621e2af51d6b8539d808a579442373ef87e5443859433873d78e2d6d9307e3f6f0fae7fa805f2f602c2da238aa77ad4d5c96a4c672e9ac1058dca833ffc808a3e62cca494fb90fd89321d72e682b4174184cb3b83531297e6a09", 0xb2}, {&(0x7f0000000f40)="c3f5bca4e2536fdeb84d547cf89b6e2d9b122d0dc5adc76d986acb1a622eb5da1eaaf5fcd00b791cf0653d29f7ed348eea5a52a25785e88ddc0ce0b241abc52cc1cbfb0d4a003b050a20ebd8c835c948a369c59d13df946af433acaec68689be336572f4a32f3d3a1f0c79d4e6758119a215a9059705f5cf2eff8f83965a551ced1f0c736ec55a21d93ea72560e1", 0x8e}, {&(0x7f0000001000)="b16d85679f063e03a2c4bfd0d53523524cfcf5eb283d6f4aa3a0a0905e894347666440101006a9199d092f584d42a0db27f1332933ee6b4a3d9152f5dff6f84cadb057ee55983abf731fd7cedf87cb0c6b3b7cbf828cd8a276857fd800b2a9ca89599d681710076966b3b478ee746a5ea49c81121156bd", 0x77}, {&(0x7f0000001080)="f45cebd55f1f2aaeb1ccdc61b56893aed2ac5494b552fa349ebc32c21dba0899924094581bfee2441cc40e3153e29d010b6020", 0x33}], 0xa, &(0x7f0000001180)=[@iv={0x108, 0x117, 0x2, 0xf3, "4a5188b55ac76632b651eeff337ae7844ee57a5ccd64ae0db0ba81bd0bee843a203e8bf5e1f6e483563d2a9f3e4e1bb8f40526e0b56b8764d110a6e67f5f9c4068b58a831f4ed657a5b34580988aae888a0aa60961e9d90fa8f114c12f4f763f94bb786c05b6ad3edd1d18ab7e0eea2711ca9bbf3728279d077a34d65be27781c4504e31ee5b65363ed680374c42ab957f23ab43428c161180bbcbbf3996e8955909bfbebe5d8c122743985d93cbcc89864a61359a169472f2fb5b6730eeeb77c85d357c8da33fbc59f13298dd4d2c81c54b6a9af596d8c221ca7fdc42151ba999c65cc0e5c8c0db74e5ff0b639f56ca4283a5"}, @iv={0xe0, 0x117, 0x2, 0xca, "60753b74932024a1c871e70d5dea62bb3022e28e89ea4f6bfa66a60387b9ded8316fd76de0b2f4ef1ec9d7bec433aa21e0a7a91fe81dd038fb4ae7e8ab2460ac1147b20c174949344aebc46d221746f3957f51069e9140d102f3c55142668fff0117036bdf064b9397f888c610b1294cc2a244723ab82bf5ed891e28256d9fb26473c567db4b11f0028e574f04bbccb1fc0e128993d6ec05e70e87ba207d317edefb9193f26d5758b6195bd9448582eab276f3edc34371a61b4f355f47c360831c5ce85d66eaaa90c0b8"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xe8, 0x117, 0x2, 0xcd, "952efb88cf074f1997d2970a9b910ebfce8156b5b3b7b4d887e9cda118c2cb8af26c0afe31011c3405a08ebafcb00c769e1c154ccf5c47224f4a3876ee1e5ea97d3f3089f814c751166fa81057f8e78febed0c78fcc0aaba12cd8e5bacccffdca3a1eaa639742cc758f48dfc3dd43a1704d7b87ca905652cf93f52dc0a28152b8e510ef9f5c005b547fef59f101396735bc54d454e069d2ef532b869f26a12803217e6dd0323dd15d85a725dc63046a7b02f0ec8aa1d07648435bbb0f0061a992ca9f6947e30ba265315cd1fb9"}, @assoc={0x18, 0x117, 0x4, 0xa}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xc8, 0x117, 0x2, 0xaf, "d6138af706e1412302e3a66e5cf95b6808aff393e7e6af0aaecb4d790dc1f9790008e4f994b8d1824d82f1d401d9be9e06529a844417f24cd700f6aa7fcd106d8ad3de506a64007960f7f941ee9869886dd8fc617288c513beefbf79c017c8d1535a44d74228a260ae05f75eb6c13c34d1554f4c95f5088ebe74a16a90d3c99943f0d535bb6db258e297b64193d4ee58da890e14f74c3ab103fa59f587346973fc4937da6ecf1a3c2255d0308d6e7a"}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @op={0x18, 0x117, 0x3, 0x1}], 0x428, 0x40080}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000015c0)="cdfff680049245e3007ea3fa17f674ce7eb375cce8c8c8394f4ee4186e64b69676adbcd266d4bd4ab0e5397c0ba20678cc3fcd1ed9ef8e", 0x37}, {&(0x7f0000001600)="8ffe690733b30cf230fe3ecda3c0dae8807105d7301c6bffde818760554c", 0x1e}, {&(0x7f0000001640)="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", 0xfb}, {&(0x7f0000001740)="8a188e39aff53780f0359a32776670e6477ff2b78d51412fa2b89e2fa5b74513c6e4bd17b1eaac20394a0d2a35b8eaf0311848a8c2bd6454d6dd4fce94063f4431892bcd6cf1a8fb5e058f96ff2e1d37998d697d26e90b2fe00bd47a990b0df867fc6ddd55d88cb8", 0x68}, {&(0x7f00000017c0)="95673809a21b09b78b835e09d85dd694eae3df170886894715095c7298ef765ee843c069df02fe99e4caef8fc72ee1b7fab6be331b69c0feb248a6d289c20df928be29534545bca2d21dffc8b956", 0x4e}, {&(0x7f0000001840)="9a3f015d7950df3aa52373c3865a5cf8788b9e5a69d470989916cd0a88e66e8e181d3d9457ded80e6844487c30288d3699714b562bce16d78f618e1906267aabd16fbaa4fd8e", 0x46}, {&(0x7f00000018c0)="a4f810c0665135a1e8ff670b852f85ad7d73ebf6bc1d62fab0b6beca5fed576e23c8efeb741e73edef672a4c42ef5f1d2ab6ebee5823fdb91317087f308250dc76ca5784d51c1c7154e028c5a28e03fd885ca7d9df8cf0ec4c48f233bd9d8b042f38ae00f0f71cac764aad65bb9c1a4aaa0a00418965f3f55f6441a99f", 0x7d}, {&(0x7f0000001940)="68d9edccc262eb369429b98448476d708bacb52e0c76832081c53e77fdd8fffe25cec2dd0a74706d2ae11896fb3ed64956350bc6eaea5e5310d9f8fc57df09e2b46f06e4b741396141", 0x49}, {&(0x7f00000019c0)="7b9c4bedc552d2599c49c31c804b7551edf05a30038eec854ecbd773e7f2088a7c680a3f867682adbea3c6b4aafb9945a6087fe90724865df4e6319d1af1bd4886314d344ba31e0345e2949c22e304be67fcf0828778ebdfbe641053d814955ebc70517c296f869a9ee6955b41ad73d5d3044908c1d1785c73e0ee575a71a93ef60cef7bed40afa42831211a5abd6b4053db3df835094cdc741204575c32907126742bdc465eda669f209cd3f289109122d24d04f6cb434b4eb39babe04f9559f1478c4eadbcafcb1b90f6f176d85a43b016b35e19860abbbda276b13db95e", 0xdf}], 0x9, 0x0, 0x0, 0x24040000}], 0x2, 0x40000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c40), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000002040)={&(0x7f0000001c00), 0xc, &(0x7f0000002000)={&(0x7f0000001c80)={0x370, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaeab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ec}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x600}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x10000}, 0x4044040) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x58, 0x140e, 0x400, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008}, 0x4000894) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) 1.061623479s ago: executing program 3 (id=6360): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x32, "60caea2ab75b68bff9bd67e1f917d99f4cb8fe1f4ce91cdf1830d6980d57491d720be997875ee8592a6cf8b803a84230fd3f"}, &(0x7f0000000040)=0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={r1, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r5, 0x6, 0x20}, 0xc) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x400, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc084}, 0x40041) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f00000002c0)={r1, 0x101, 0x80}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv6_deladdr={0x78, 0x15, 0x10, 0x70bd2c, 0x25dfdbfc, {0xa, 0x40, 0x9, 0x0, r4}, [@IFA_FLAGS={0x8, 0x8, 0x110}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0xc0}, @IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c001}, 0x4000800) recvmmsg(r3, &(0x7f0000001940)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f00000017c0)=[{&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/125, 0x7d}, {&(0x7f00000015c0)=""/120, 0x78}, {&(0x7f0000001640)=""/174, 0xae}, {&(0x7f0000001700)=""/191, 0xbf}], 0x6, &(0x7f0000001840)=""/252, 0xfc}, 0x80}], 0x1, 0x2100, &(0x7f0000001980)={0x0, 0x3938700}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000002080)=@broute={'broute\x00', 0x20, 0x5, 0x676, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001a00], 0x0, &(0x7f00000019c0), &(0x7f0000001a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x40, 0x200, 'veth1_virt_wifi\x00', 'pimreg\x00', 'bond_slave_1\x00', '\x00', @empty, [0x0, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xbe, 0x11e, 0x14e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffff00], 0x4e23, 0x2f, 0x4, 0x4e24, 0x10, 0x2}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x401}}}}, {0x3, 0x3, 0x2, 'wg1\x00', 'veth1\x00', 'veth0_to_hsr\x00', 'batadv0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0x78e893f9d10b560b], @random="b1c7a6e77cfa", [0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x9, 0x3ff, 0x0, 0x0, "4b71066d4dd8bf80eef363cc1daeb342e1eeaea091dc6cb3cb34d1f98828627e08b51f5f71a0babff947da0cd8dda3aa45791191e15e08aebdbd315d14b78162"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x3, 0x60, 0x19, 'pimreg0\x00', 'veth1_to_bridge\x00', 'pim6reg\x00', 'syzkaller1\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@ERROR={'ERROR\x00', 0x20, {"112735d92ff1388ad2a4816c59ba18a8a79c0745c14d24dcc3dd70228fee"}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x9, 0x6, 0x9300, 'bond_slave_0\x00', 'veth1_to_bond\x00', 'veth1_to_bridge\x00', 'netdevsim0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xe6, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}], @common=@ERROR={'ERROR\x00', 0x20, {"2effdcfe258740d6210100a5699716367c047ee2664c7300be3b8c9603be"}}}, {0x11, 0x2, 0x3, 'macvlan1\x00', 'caif0\x00', '\x00', 'gretap0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0x101], 0xbe, 0x186, 0x1b6, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@private=0xa010102, [0xff000000, 0xffffff00, 0xff000000, 0xff], 0x4e22, 0x3a, 0x4, 0x4e21, 0x1, 0x8}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x9, 0x81, 0x9, 0x0, 0x0, "b619b0a4948a31fd40ccf83362ea61608edfeac02950623865c822b3e16282b8e991ebec6fa7b1c7be1b0784077f8e7715e11405690ff2f383ad5830280e08ae"}}}, @common=@log={'log\x00', 0x28, {{0x4, "16b9ff23d45bbc9206f9bdcf233ca5728ed4a3d679676301fa992d835640", 0x2}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}]}, 0x6ee) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002140)={0x204, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7a}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ba}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88b1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0605}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20}, 0x4008000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000002400)={0x1, 0x3, 0x8}) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000002440)={r5, 0xf, 0x8, 0xa}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000002500)={'tunl0\x00', &(0x7f0000002480)={'sit0\x00', r2, 0x10, 0x7, 0x1, 0xb, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x67, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @rr={0x7, 0xb, 0x92, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @noop]}}}}}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000002540)={@broadcast, @loopback}, &(0x7f0000002580)=0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r11, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x4c, r12, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4479}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x824}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r11) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000027c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x40, r13, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x8800) 941.068511ms ago: executing program 1 (id=6361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)=@newqdisc={0x404, 0x24, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0x4, 0x9}, {0xfff3, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x10}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x17}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1f}]}}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_choke={{0xa}, {0x260, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0xa354, 0x79, 0x1b, 0x8, 0x10, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x100, 0x2, 0x8000, 0x1e, 0x8, 0xc, 0x3}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x93c, 0x8, 0x17, 0x5, 0x15, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}, @TCA_CHOKE_STAB={0x104, 0x2, "939bb5da6f852d13a38ff9d0264cdd63d673ca8fd0ab7211a709b526337aa3e98e837a1bfd006a5c0bc3dadf565b94280de5e8ca82cd4102c7beb09fdaedc3df6b21167b25caf2f4f1a53f05ecabff7f3c54351f024bf93259741e6e6254d3226c528e1a2a1a2776c7813c9993c4ebd0162384ea7bdf104540d5c79d1afed79124a3d48c23865a98f94595a71b0366138165dd2a04808f35e178d113d8891861676f89b9788484c8100dd952f87505e2234d4e229e66558253154848eceb6f9806e62d6dfcb0edac293430e3bf07fc70a81e090509620a804dd3723d39040774921c3c19537a10b1ec19a019a8c12b718b077b84566cc09091e45c6aa57a4eb0"}]}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xe26}}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x3, 0x5b5, 0x2, 0xb, 0x3, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0x101, 0x5, 0x5]}}, {{0x1c, 0x1, {0x44, 0x0, 0x1, 0x9, 0x2, 0x403, 0x4, 0x7}}, {0x12, 0x2, [0x9, 0x8, 0x5, 0x2, 0xbfa, 0x1, 0xfffe]}}, {{0x1c, 0x1, {0x0, 0x2, 0xb4, 0x200, 0x1, 0xffffffff, 0x10000, 0x5}}, {0xe, 0x2, [0x6, 0xa0, 0x81, 0xff7e, 0x21f]}}, {{0x1c, 0x1, {0x7, 0x4, 0x1e00, 0x0, 0x2, 0x27, 0x9a, 0x4}}, {0xc, 0x2, [0x8, 0xfff8, 0x8d80, 0x7]}}, {{0x1c, 0x1, {0x4, 0x6, 0x100, 0x0, 0x0, 0x2, 0x4, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x0, 0x4, 0x492, 0x80, 0x6, 0x4, 0x6, 0x1000}}}}, @TCA_RATE={0x6, 0x5, {0xf, 0xa}}]}, 0x404}, 0x1, 0x0, 0x0, 0x4000}, 0xd1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1a}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0xc0) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) r3 = accept4(r0, 0x0, &(0x7f00000006c0), 0x80800) sendmsg$NFT_BATCH(r3, &(0x7f0000000b40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELSET={0x130, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_USERDATA={0xfc, 0xd, 0x1, 0x0, "2a8f4db44786123c833989b1d7fe32ebd24a8050b6d9fdc4cc95147bbad1059e66f3b7962736f40a3ec26e6ac9bf5cef498442c68ec93e48dd82681644ce16c38699ec5fa379aae54c2de2ec72172f50526047973dec2febf08a8e9184ec642e4fd3a39f95176c857f05e78485591221d2e543676d437ee4dedbf303ea6112cd1815f6f07845a3da800ba10c15c5e98f69d7745788a7b78c929c6596269d9386c77d18a62deae947f630249e26b7635236b2c75885572759bedbd70539735446d9e70e07c5ad575a888b67a19b71390f501e224b1600e3072a9b0253c445bd6dfe95f49af95a82625a65b0479fb8344f2db7610e1048b086"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x148, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1a}]}}}, {0x44, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x100000001}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3b0}, 0x1, 0x0, 0x0, 0x40815}, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4010) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000d80)=0x2, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000dc0)="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", 0x1000) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, r2, 0x4, 0x2, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x69}}}}, ["", "", "", "", ""]}, 0x20}}, 0x8004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r5) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001f00)={@remote, @remote, 0x0}, &(0x7f0000001f40)=0xc) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000001f80)={0x2, 0x12a, 0x5, 0x9, 0x2}) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000001fc0)={{0x5, 0x5}, 0x1}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x3c, r8, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x51}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004810) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000002280)={&(0x7f0000002180), 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x6c, 0x1, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x80000001}}, @NFQA_PAYLOAD={0x3d, 0xa, "4c0c94ec7cb40d2311050545cfa7bd500bd7cd4d6a5e49e3e84d7dbc73bfbdd01ca735bb2b30441f088274f4e8c00eee868e3582b5018e0c23"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFQA_EXP={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x14) getsockopt$inet_buf(r3, 0x0, 0x1c, &(0x7f00000022c0)=""/16, &(0x7f0000002300)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000002500)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000024c0)={&(0x7f0000002380)={0x13c, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x63, 0xc5, "f59bf0a2f10d0cd1f5208a1a17b0ee081d45397abe6e7d5c6659ac8da5a16030e47d20c09c5802a5dfba1ed8133b52558ea00fcc166862802f744121c204ac3afd619e5277cce632dc689ea9950be5d534623e13ce91eb742d209ffc2ab3cb"}, @NL80211_ATTR_VENDOR_DATA={0xb2, 0xc5, "3d5f76c97c8342d87d3c7044ad69203b9b36e4d6a056f25bce932015a4cb64c5c805f3f41ab819466ad3eec1a3beaa49e7d41ce7186c487d7f6fa5f9b7e22a9db0f1f1d74422aab784d2f46a0168669e6559de332f5c5239a5598f5162417daf152e908fcb9b037c7ec6adaf43747a8b5f010bec81376ea6e4ae7d6a4229a674761f415201395f6d167966ac79d30e43f316085a3566cf68ec0c1985b9ccc70488b72a63d8041321c918fc51f76b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4044883}, 0x8000) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r10, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x78, r11, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000026c0), r1) 826.879957ms ago: executing program 0 (id=6362): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x200000000000000, 0x100000, 0x1}}, 0x40) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0xc400) (async) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="500000000102030000000000000000000a000000470001800c00028005000100000000002c0001801400030000000000000000000000ffffe000000214000400fc008000"/80], 0x50}}, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@void, {0x8035, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x19, 0x0, 0x0, 0x0, "185dbb1cd7b284fee8cba2a31982503227a0ff346406455075b841f871b84b9dff1af3ba0a3fbfba7671ea11278096e5abfb374f6a01ec216cdde1aba35ee5e3"}}}}, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_int(r5, &(0x7f00000003c0), 0x12) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfd, 0x1}, 0xe) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000000000000008000000104000065050000", @ANYRES32=r5, @ANYBLOB="0200"/20, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0300fffe00000000010000000a000000000000000000000000000000ec41936a5487f7f7b7d5636ddd62e73f435f7816aaf919b7c495b9647a9c971900ee129a96eae389a2beb4912955142cdd64cf70d5897889016f30e708cca7a53e"], 0x50) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r11, 0x0) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r12, 0x0, 0x3, &(0x7f0000000080), 0x4) (async) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000300)={r13, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}}}, &(0x7f0000000280)=0x84) 824.823169ms ago: executing program 3 (id=6363): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x25}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040020) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) 823.925094ms ago: executing program 1 (id=6364): r0 = socket(0x2, 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3}, 0x94) socket(0x2, 0x2, 0x1) (async) socket(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3}, 0x94) (async) 809.201886ms ago: executing program 2 (id=6365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/110, &(0x7f0000000100)=0x6e) 662.65668ms ago: executing program 3 (id=6366): bind$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003340), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="746d03923ff699005329a36612bd1941f75c99f09526b4a026bd1644e6eec76354d96573f6eed666ab18497f8c8b4a0192a7a15c36b9e260cb189c8c91565c38ceff129d", @ANYRES16=r4, @ANYBLOB="11a029bd7000ffdbdf25170000005400308005000200000000003400018008000100000000000c0005000300000000000000050002000200000014000380060001000300000008000200000000001400040000bbfb8608180ce4d3c9a4d3f77c6a6b0c0006000100000001000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c16000008000640"], 0x6c}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r7, 0xf1aad47e89fb43b5, 0x0, 0x25dfdbfc, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) r11 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r11, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4009090}, 0x4000) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) r12 = socket$inet(0x2, 0x4, 0x1000006) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r15, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', 0x400}) 515.028815ms ago: executing program 0 (id=6367): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x438, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x2, 0x4, 0x1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xffffff00, 0xffffff00, 0x391fe582a8cff095], 0x500, 0x1404}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x8, 0x7, 0x1, 0x0, "51cee4b2208ea17604a7e7d7e09aec096bdeb2dd80d7f808c5e23528452cd3eb27d1ac8d27c0d360aad35002eaaffb9c81cc13b877d8ca41a30b3328320abbb0"}}}, {{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0x0, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'vlan0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x32, 0x3e, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xd}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 479.578663ms ago: executing program 1 (id=6368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x15}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8132da, 0xc574450d1af1b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x9}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="e02742e86c0d85ff7a82762f0800", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000100)='b', 0x1, 0x0) (async) pwrite64(r5, &(0x7f0000000100)='b', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10010, r3, 0x361c3000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10010, r3, 0x361c3000) 450.76317ms ago: executing program 3 (id=6369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0xffff, 0x1]}}]}]}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x70bd26, 0x0, {0x37}, [{{@pci, {0x8}}}]}, 0x3c}}, 0x0) 399.143017ms ago: executing program 2 (id=6370): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x12f, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000100)=0xe2, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 335.160631ms ago: executing program 3 (id=6371): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800ffffffff000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="b543000000001700000026000000eade62090aec6e81f064b4e03aa1825f12b0ab5048"], 0x14}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x5, 0x34e, {{0x19, 0x4, 0x3, 0x9, 0x64, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @multicast2, {[@end, @rr={0x7, 0xf, 0x54, [@loopback, @multicast1, @multicast2]}, @lsrr={0x83, 0x13, 0x83, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast2, @private=0xa010102, @local]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x10, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @empty]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES32=r5], 0x0, 0x37}, 0x28) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000005600000126bd7000fddbdf2507000001", @ANYRES32=r10, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x45}, 0x81) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) 215.029763ms ago: executing program 0 (id=6372): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="62202a3a2a206d1b"], 0x8) shutdown(r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) sendmsg$alg(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991ebcf25a3893cb367ba89edca2652", 0x10}], 0x1, 0x0, 0x0, 0x8890}, 0x4048001) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000400)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000580)=']', 0x1}], 0x1}, 0x4000840) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$NL80211_CMD_LEAVE_MESH(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r11, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r12) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WOWLAN(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0017f15d", @ANYRES16=r11, @ANYBLOB="00042abd7000fbdbdf254a000000380075800400010024000e8010000700060000004d0a000000800000060005000700000008000200ac14143f040002000400060004000300"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4850) 156.137057ms ago: executing program 2 (id=6373): socketpair(0x1, 0x1, 0x80000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x2b, "e4cb5c5b0741b2ccb7454fda077807d99e3c23f32ca3cd62bddd2b5005ef5f06678f82afaaae3877072953"}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'macsec0\x00', {}, 0x8001}) socket(0x2, 0x80805, 0x0) 129.254526ms ago: executing program 1 (id=6374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) close(0x4) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x60}, 0x122) recvmsg$unix(r3, &(0x7f0000003600)={&(0x7f0000000040), 0x6e, &(0x7f0000003580)=[{&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x2, &(0x7f00000035c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x40012022) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000d000000050007000000000034ef9d810d721f37050017000000000005001900000000000e000a00000000000500180000000000"], 0x44}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) 0s ago: executing program 2 (id=6375): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x10000, 0x5, {{0x23, 0x4, 0x1, 0x0, 0x8c, 0x68, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @cipso={0x86, 0x5a, 0x3, [{0x0, 0x3, "1d"}, {0x2, 0x9, "adea5a060a7a79"}, {0x7, 0xa, "94f76612241c13b2"}, {0x1, 0x9, "a6c95912edfd6d"}, {0x5, 0xa, "2c9fc13ae83df82f"}, {0x7, 0x9, "a0eb11040ba122"}, {0x1, 0x12, "db771c242789bb698f0ce5f8fe39af7f"}, {0x1, 0x10, "4bb5a693299be82cf8954cd88ce3"}]}, @rr={0x7, 0x17, 0x59, [@broadcast, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000009c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000400)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x48}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000faffffff00000000000000000033000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000890001006d6435000000000000000000000000000000000000000000000000000000000000a8ca950000000000000000000000000000000000000000000000000000000000000008"], 0x17c}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0xf0ab39a5801d7c87, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0x0, {[@nop, @generic={0xfe, 0x8, "9aacc7f3f4fe"}]}}}}}}}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x16, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d}, 0x20) ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0x3c, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x3c}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000380)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6c98, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000a00)='syzkaller\x00', 0x6e01, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r12 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)='pim6reg\x00', 0x386, 0x7, 0x2}) setsockopt$inet_int(r12, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) kernel console output (not intermixed with test programs): 505.280853][T24253] __nla_validate_parse: 9 callbacks suppressed [ 505.280897][T24253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4884'. [ 506.406428][T24301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4895'. [ 506.446291][T24301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 506.505908][T24301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 506.530814][ T13] gretap0: left allmulticast mode [ 506.539669][ T13] bridge0: port 3(gretap0) entered disabled state [ 506.553661][ T13] bridge_slave_1: left allmulticast mode [ 506.562464][ T13] bridge_slave_1: left promiscuous mode [ 506.569586][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.595229][ T13] bridge_slave_0: left allmulticast mode [ 506.602596][ T13] bridge_slave_0: left promiscuous mode [ 506.609273][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.712230][ T13] pimreg: left allmulticast mode [ 506.718363][ T13] pimreg3: left allmulticast mode [ 506.784845][T24317] validate_nla: 2 callbacks suppressed [ 506.784878][T24317] netlink: 'syz.4.4898': attribute type 39 has an invalid length. [ 507.274848][ T13] bond10 (unregistering): (slave geneve4): Releasing active interface [ 507.299267][ T13] bond4 (unregistering): (slave geneve2): Releasing active interface [ 508.112118][ T13] bond2 (unregistering): (slave bridge19): Releasing backup interface [ 508.120900][ T13] bridge19 (unregistering): left promiscuous mode [ 508.213231][ T13] bond0 (unregistering): (slave bridge21): Releasing backup interface [ 508.221724][ T13] bridge21 (unregistering): left promiscuous mode [ 508.261535][ T13] bond9 (unregistering): (slave bridge22): Releasing backup interface [ 508.270456][ T13] bridge22 (unregistering): left promiscuous mode [ 508.312981][ T13] bond1 (unregistering): Released all slaves [ 508.333466][ T13] bond2 (unregistering): Released all slaves [ 508.355140][ T13] bond3 (unregistering): Released all slaves [ 508.375535][ T13] bond4 (unregistering): Released all slaves [ 508.402700][ T13] bond5 (unregistering): Released all slaves [ 508.425128][ T13] bond6 (unregistering): (slave lo): Releasing backup interface [ 508.433572][ T13] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 508.445516][ T13] bond6 (unregistering): Released all slaves [ 508.468419][ T13] bond7 (unregistering): Released all slaves [ 508.487102][ T13] bond8 (unregistering): Released all slaves [ 508.506129][ T13] bond0 (unregistering): Released all slaves [ 508.539439][ T13] bond9 (unregistering): Released all slaves [ 508.557428][ T13] bond10 (unregistering): Released all slaves [ 508.698744][ T9826] net_ratelimit: 22 callbacks suppressed [ 508.698777][ T9826] bond2: (slave bridge2): failed to get link speed/duplex [ 508.782565][T24327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4901'. [ 508.857801][ T9832] bond2: (slave bridge2): failed to get link speed/duplex [ 508.930513][T24336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4903'. [ 508.992995][T24334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4904'. [ 509.002185][ T9826] bond2: (slave bridge2): failed to get link speed/duplex [ 509.147905][ T9825] bond2: (slave bridge2): failed to get link speed/duplex [ 509.400464][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4909'. [ 509.429174][T24357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4909'. [ 509.446981][T24357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4909'. [ 509.489368][ T9824] bond2: (slave bridge2): failed to get link speed/duplex [ 509.617742][ T9825] bond2: (slave bridge2): failed to get link speed/duplex [ 509.670023][T24375] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 509.746264][ T9830] bond2: (slave bridge2): failed to get link speed/duplex [ 509.961145][T24387] gretap1: entered promiscuous mode [ 510.015795][T24387] batman_adv: batadv0: Adding interface: gretap1 [ 510.058527][T24384] SET target dimension over the limit! [ 510.076609][T24387] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 510.106529][T24387] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 510.305073][T24392] lo speed is unknown, defaulting to 1000 [ 510.327689][ T9824] bond2: (slave bridge2): failed to get link speed/duplex [ 510.469878][ T9824] bond2: (slave bridge2): failed to get link speed/duplex [ 510.628270][T24411] __nla_validate_parse: 3 callbacks suppressed [ 510.628288][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 510.703724][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 510.736009][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 510.881289][T24392] lo speed is unknown, defaulting to 1000 [ 510.893695][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 510.918789][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 510.944269][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 510.997545][T24427] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 511.018614][T24427] bond0: (slave lo): Error: Device can not be enslaved while up [ 511.110714][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 511.126964][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 511.148253][T24411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4923'. [ 512.075902][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4928'. [ 513.468298][T24407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.478602][T24413] netlink: 'syz.4.4924': attribute type 3 has an invalid length. [ 513.486760][T24413] netlink: 'syz.4.4924': attribute type 1 has an invalid length. [ 513.684672][T24454] netlink: 'syz.2.4936': attribute type 18 has an invalid length. [ 513.727249][ T112] net_ratelimit: 28 callbacks suppressed [ 513.727266][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 513.876808][ T9824] bond2: (slave bridge2): failed to get link speed/duplex [ 514.024797][ T1049] bond2: (slave bridge2): failed to get link speed/duplex [ 514.169102][T24480] bond2: (slave bridge2): failed to get link speed/duplex [ 514.446937][T24519] bridge_slave_0: left promiscuous mode [ 514.504394][T24519] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.599748][T24523] xt_ecn: cannot match TCP bits for non-tcp packets [ 514.610173][T24519] bridge_slave_1: left allmulticast mode [ 514.624363][T24523] xt_ecn: cannot match TCP bits for non-tcp packets [ 514.636628][T24519] bridge_slave_1: left promiscuous mode [ 514.646527][T24519] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.683323][T24519] bond0: (slave bond_slave_0): Releasing backup interface [ 514.708690][T24519] bond_slave_0: left promiscuous mode [ 514.745906][T24519] bond0: (slave bond_slave_1): Releasing backup interface [ 514.774092][T24519] bond_slave_1: left promiscuous mode [ 514.808599][T24519] team0: Port device team_slave_0 removed [ 514.840880][T24519] team0: Port device team_slave_1 removed [ 514.853385][T24519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.863076][T24519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.882210][T24519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.889860][T24519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.900319][T24519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 515.036792][T24482] bond2: (slave bridge2): failed to get link speed/duplex [ 515.168461][T24544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.218958][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 515.322782][T24554] IPVS: nq: FWM 3 0x00000003 - no destination available [ 515.449574][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 515.694706][T24576] xt_hashlimit: invalid interval [ 515.829634][T24581] netlink: 'syz.0.4964': attribute type 1 has an invalid length. [ 515.845723][T24578] __nla_validate_parse: 3 callbacks suppressed [ 515.845742][T24578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4961'. [ 515.924347][T24578] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.4961'. [ 516.033551][T24591] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4967'. [ 516.209440][T24603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4965'. [ 516.473696][T24616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4972'. [ 516.524988][T24616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4972'. [ 516.724581][T24631] netlink: 'syz.1.4976': attribute type 21 has an invalid length. [ 516.758117][T24631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4976'. [ 516.875681][T24639] syz_tun: entered allmulticast mode [ 516.925098][T24639] pimreg: entered allmulticast mode [ 516.986612][T24639] syz_tun: left allmulticast mode [ 516.990945][T24641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4979'. [ 517.192473][T24648] syzkaller1: entered promiscuous mode [ 517.215396][T24648] syzkaller1: entered allmulticast mode [ 517.375345][T24665] netlink: 'syz.3.4988': attribute type 3 has an invalid length. [ 517.397200][T24665] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4988'. [ 517.625734][T24666] vcan0: entered promiscuous mode [ 517.633794][T24666] vcan0: entered allmulticast mode [ 517.762448][T24686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4993'. [ 518.314879][T24710] netlink: 'syz.0.4999': attribute type 1 has an invalid length. [ 518.348078][T24710] netlink: 'syz.0.4999': attribute type 11 has an invalid length. [ 518.728764][T24727] netlink: 'syz.4.5002': attribute type 1 has an invalid length. [ 518.827230][T24497] net_ratelimit: 23 callbacks suppressed [ 518.827247][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 519.107040][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 519.175468][T24742] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 519.229922][T24482] bond2: (slave bridge2): failed to get link speed/duplex [ 519.259499][T24745] tipc: Resetting bearer [ 519.315047][T24745] tipc: Resetting bearer [ 519.341195][T24745] tipc: Resetting bearer [ 519.370250][T24745] tipc: Resetting bearer [ 519.379133][T24745] tipc: Resetting bearer [ 519.388340][T24751] veth1_macvtap: left promiscuous mode [ 519.419812][T24745] tipc: Resetting bearer [ 519.441521][T24745] tipc: Resetting bearer [ 519.486234][T24745] tipc: Resetting bearer [ 519.503901][T24745] tipc: Resetting bearer [ 519.527098][T24745] tipc: Resetting bearer [ 519.540865][T24745] tipc: Resetting bearer [ 519.556912][T24745] tipc: Resetting bearer [ 519.568479][T24745] tipc: Resetting bearer [ 519.591874][T24745] tipc: Resetting bearer [ 519.610813][T24745] tipc: Resetting bearer [ 519.636933][T24745] tipc: Resetting bearer [ 519.649016][T24745] tipc: Resetting bearer [ 519.669896][T24745] tipc: Resetting bearer [ 519.699877][T24745] tipc: Resetting bearer [ 519.720728][T24745] tipc: Resetting bearer [ 519.738013][T24745] tipc: Resetting bearer [ 519.748786][T24745] tipc: Resetting bearer [ 519.763871][T24745] tipc: Resetting bearer [ 519.770971][T24745] tipc: Resetting bearer [ 519.786472][T24745] tipc: Resetting bearer [ 519.799388][T24745] tipc: Resetting bearer [ 519.818326][T24745] tipc: Resetting bearer [ 519.826222][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 519.840058][T24745] tipc: Resetting bearer [ 519.856833][T24745] tipc: Resetting bearer [ 519.868003][T24745] tipc: Resetting bearer [ 519.884832][T24745] tipc: Resetting bearer [ 519.898706][T24745] tipc: Resetting bearer [ 519.905585][T24745] tipc: Resetting bearer [ 519.916417][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 519.932442][T24745] tipc: Resetting bearer [ 519.940612][T24745] tipc: Resetting bearer [ 519.948100][T24745] tipc: Resetting bearer [ 519.954036][T24745] tipc: Resetting bearer [ 519.961206][T24745] tipc: Resetting bearer [ 519.967575][T24745] tipc: Resetting bearer [ 519.975247][T24745] tipc: Resetting bearer [ 519.981196][T24745] tipc: Resetting bearer [ 519.988408][T24745] tipc: Resetting bearer [ 520.003382][T24745] tipc: Resetting bearer [ 520.010268][T24745] tipc: Resetting bearer [ 520.020249][T24745] tipc: Resetting bearer [ 520.030552][T24778] syzkaller1: entered promiscuous mode [ 520.056117][T24778] syzkaller1: entered allmulticast mode [ 520.067650][T24745] tipc: Resetting bearer [ 520.080743][T24745] tipc: Resetting bearer [ 520.106248][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 520.218219][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 520.242215][ T29] audit: type=1800 audit(1778956199.677:8): pid=24790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5028" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1908 res=0 errno=0 [ 520.336557][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 520.412806][T24797] tipc: MTU too low for tipc bearer [ 520.457027][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 520.576469][ T9823] bond2: (slave bridge2): failed to get link speed/duplex [ 520.706130][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 521.293418][T24843] __nla_validate_parse: 8 callbacks suppressed [ 521.293463][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5042'. [ 521.302521][T24842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5041'. [ 521.310899][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5042'. [ 521.531290][T24852] netlink: 'syz.2.5044': attribute type 29 has an invalid length. [ 521.593101][T24855] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 521.608117][T24855] netlink: 'syz.3.5043': attribute type 2 has an invalid length. [ 521.621416][T24855] netlink: 'syz.3.5043': attribute type 1 has an invalid length. [ 521.631060][T24855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5043'. [ 521.642136][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5043'. [ 523.700546][T24814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.857416][T24476] net_ratelimit: 27 callbacks suppressed [ 523.857434][T24476] bond2: (slave bridge2): failed to get link speed/duplex [ 524.007056][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 524.123569][T24888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5053'. [ 524.136969][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 524.212625][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5054'. [ 524.255014][T24898] openvswitch: netlink: Unknown nsh attribute 0 [ 524.348202][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 524.498028][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 524.558596][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5059'. [ 524.616709][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 524.645014][T24916] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5062'. [ 524.707477][T24916] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 524.744732][T24916] gretap2: entered promiscuous mode [ 524.762863][T24916] gretap2: entered allmulticast mode [ 524.791615][T24924] tipc: Enabled bearer , priority 10 [ 524.886516][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 525.016603][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 525.158074][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 525.456995][T24965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5075'. [ 525.633197][T24972] syzkaller0: entered promiscuous mode [ 525.653479][T24972] syzkaller0: entered allmulticast mode [ 525.791236][ T29] audit: type=1107 audit(1778956205.227:9): pid=24980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ZI7={D*5 b /:q~(F6Z3G;c{HyLz_0GYG' [ 526.189398][T24991] syzkaller0: entered promiscuous mode [ 526.202528][T24991] syzkaller0: entered allmulticast mode [ 528.853746][T25024] IPVS: Unknown mcast interface: vcan0 [ 528.897232][T24482] net_ratelimit: 8 callbacks suppressed [ 528.897249][T24482] bond2: (slave bridge2): failed to get link speed/duplex [ 528.936520][T25026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5096'. [ 528.962428][T25026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5096'. [ 529.009390][T25035] netlink: 'syz.3.5099': attribute type 2 has an invalid length. [ 529.018243][T25030] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 529.033672][T25035] netlink: 'syz.3.5099': attribute type 1 has an invalid length. [ 529.035716][T25030] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 529.045499][T25035] xt_hashlimit: size too large, truncated to 1048576 [ 529.081498][T25030] gretap2: entered promiscuous mode [ 529.107448][T25030] gretap2: entered allmulticast mode [ 529.246277][ T9823] bond2: (slave bridge2): failed to get link speed/duplex [ 529.388071][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 529.507370][T24482] bond2: (slave bridge2): failed to get link speed/duplex [ 529.629403][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 529.659538][T25066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5107'. [ 529.675214][T25072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5109'. [ 529.685796][T25071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5108'. [ 529.717032][T25074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5107'. [ 529.731587][T25075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5109'. [ 529.757559][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 530.044661][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 530.168011][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 530.286675][T24495] bond2: (slave bridge2): failed to get link speed/duplex [ 530.406228][T24476] bond2: (slave bridge2): failed to get link speed/duplex [ 530.934077][T25135] xt_hashlimit: size too large, truncated to 1048576 [ 530.954512][T25129] bond12: entered promiscuous mode [ 530.960124][T25129] bond12: entered allmulticast mode [ 530.965892][T25129] 8021q: adding VLAN 0 to HW filter on device bond12 [ 531.819227][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5126'. [ 531.912927][T25166] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 531.953271][ T3109] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 532.295325][T25186] netlink: 'syz.2.5131': attribute type 1 has an invalid length. [ 532.335880][T25186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5131'. [ 532.568983][T25200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5134'. [ 533.360677][T25250] veth0_to_team: entered promiscuous mode [ 533.380007][T25250] macvlan0: entered promiscuous mode [ 533.996927][ T12] net_ratelimit: 27 callbacks suppressed [ 533.996946][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 534.116245][ T9823] bond2: (slave bridge2): failed to get link speed/duplex [ 534.226205][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 534.336286][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 534.446259][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 534.557297][ T9823] bond2: (slave bridge2): failed to get link speed/duplex [ 534.666235][ T9823] bond2: (slave bridge2): failed to get link speed/duplex [ 534.776184][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 534.886195][ T12] bond2: (slave bridge2): failed to get link speed/duplex [ 534.996213][ T9823] bond2: (slave bridge2): failed to get link speed/duplex [ 535.815863][T25215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.019009][T25270] netlink: 'syz.4.5151': attribute type 1 has an invalid length. [ 536.145091][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5152'. [ 536.174949][T25281] : entered promiscuous mode [ 536.370976][T25291] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.385065][T25290] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.407950][T25291] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.418252][T25291] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.466333][T25289] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.520355][T25291] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.579014][T25289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.615197][T25289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5159'. [ 536.632479][T25289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5159'. [ 537.074593][T25331] netlink: 'syz.4.5165': attribute type 10 has an invalid length. [ 537.120538][T25331] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.145038][T25331] team0: entered promiscuous mode [ 537.158367][T25331] bond0: (slave team0): Enslaving as an active interface with a down link [ 539.076175][T24483] net_ratelimit: 33 callbacks suppressed [ 539.076194][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 539.196223][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 539.306246][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 539.416268][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 539.526176][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 539.554933][T25306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.639227][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 539.807325][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 539.937540][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 540.067278][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 540.080778][T25411] netlink: 'syz.4.5191': attribute type 3 has an invalid length. [ 540.118629][T25411] netlink: 'syz.4.5191': attribute type 3 has an invalid length. [ 540.186171][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 540.502317][T25432] xt_hashlimit: size too large, truncated to 1048576 [ 541.151272][T25467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.542738][T25495] x_tables: duplicate underflow at hook 1 [ 541.545308][T25494] vcan0: tx address claim with different name [ 541.589054][T25498] __nla_validate_parse: 3 callbacks suppressed [ 541.589070][T25498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5217'. [ 541.659551][T25503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5217'. [ 541.790273][T25509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5219'. [ 542.088826][T25524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5227'. [ 542.145352][T25529] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5226'. [ 542.280902][T25536] xt_hashlimit: size too large, truncated to 1048576 [ 542.308465][T25538] netlink: 'syz.2.5230': attribute type 3 has an invalid length. [ 542.399415][T25546] veth0: entered promiscuous mode [ 542.522541][T25546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5231'. [ 542.592010][T25546] veth0: left promiscuous mode [ 542.915581][T25566] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5239'. [ 542.930463][T25566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5239'. [ 543.006590][T25574] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5238'. [ 543.063213][T25577] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5238'. [ 543.789131][T25603] netlink: 'syz.1.5250': attribute type 1 has an invalid length. [ 543.806843][T25603] netlink: 'syz.1.5250': attribute type 1 has an invalid length. [ 544.021650][T25608] bridge0: port 3(ipvlan2) entered blocking state [ 544.047210][T25608] bridge0: port 3(ipvlan2) entered disabled state [ 544.068694][T25608] ipvlan2: entered allmulticast mode [ 544.089566][T25608] bridge0: entered allmulticast mode [ 544.108578][T25608] ipvlan2: left allmulticast mode [ 544.114514][T25608] bridge0: left allmulticast mode [ 544.132006][T25615] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20004 [ 544.176438][ T9833] net_ratelimit: 33 callbacks suppressed [ 544.176456][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 544.327611][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 544.456884][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 544.561146][T25629] bond6: option fail_over_mac: invalid value (16) [ 544.573584][T25629] bond6 (unregistering): Released all slaves [ 544.660454][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 544.772429][T25648] netlink: 'syz.4.5266': attribute type 1 has an invalid length. [ 544.780413][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 544.906199][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 545.029354][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 545.170204][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 545.194061][T25672] block nbd2: not configured, cannot reconfigure [ 545.272747][T25678] netlink: 'syz.4.5275': attribute type 2 has an invalid length. [ 545.288524][T25676] 8021q: VLANs not supported on syzkaller1 [ 545.303126][T25678] netlink: 'syz.4.5275': attribute type 1 has an invalid length. [ 545.328249][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 545.382731][T25683] IPv4: Oversized IP packet from 127.202.26.0 [ 545.741782][T25707] netlink: 'syz.0.5281': attribute type 5 has an invalid length. [ 546.341427][T24506] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.363552][T25692] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 546.379843][T24506] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 546.392465][T25692] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 546.415360][T24506] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.465181][T25734] netlink: 'syz.2.5289': attribute type 1 has an invalid length. [ 546.662983][T25734] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.813004][T25738] bond6: (slave geneve3): making interface the new active one [ 546.852945][T25738] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 546.881987][T25692] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.919898][T25692] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 547.011882][T25692] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 547.040060][T25692] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 547.099065][T25692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 547.116836][T25692] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 547.254860][T25750] 8021q: adding VLAN 0 to HW filter on device bond8 [ 547.262895][T25750] bridge0: port 3(bond8) entered blocking state [ 547.267142][T25756] netlink: 'syz.2.5294': attribute type 39 has an invalid length. [ 547.269575][T25750] bridge0: port 3(bond8) entered disabled state [ 547.284823][T25750] bond8: entered allmulticast mode [ 547.292731][T25750] bond8: entered promiscuous mode [ 547.299688][T25750] bridge0: port 3(bond8) entered blocking state [ 547.306124][T25750] bridge0: port 3(bond8) entered listening state [ 547.490170][T25762] __nla_validate_parse: 9 callbacks suppressed [ 547.490201][T25762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5297'. [ 547.742301][T25773] syzkaller1: left promiscuous mode [ 547.779662][T25773] syzkaller1: left allmulticast mode [ 547.828673][T25776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5302'. [ 547.853640][T25776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5302'. [ 547.918897][T25780] netlink: 'syz.4.5304': attribute type 1 has an invalid length. [ 547.955963][T24497] bridge0: port 3(bond8) entered disabled state [ 548.064071][T25784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5305'. [ 548.268668][T25799] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5306'. [ 548.874047][T25814] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5312'. [ 549.141215][T25818] bond13 (unregistering): Released all slaves [ 549.311200][T25822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5317'. [ 549.438870][T24506] net_ratelimit: 26 callbacks suppressed [ 549.438887][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 549.572737][T25842] sctp: [Deprecated]: syz.3.5322 (pid 25842) Use of int in max_burst socket option. [ 549.572737][T25842] Use struct sctp_assoc_value instead [ 549.598556][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 549.736732][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 549.866178][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 549.983141][T25853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5324'. [ 550.000113][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 550.126913][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 550.246260][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 550.387872][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 550.482197][T25873] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5328'. [ 550.515449][T25873] 8021q: VLANs not supported on gre0 [ 550.576930][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 550.724236][T25883] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5331'. [ 550.737097][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 550.777101][T25883] bond0: Error: Cannot enslave bond to itself. [ 551.378959][T25909] veth0: entered promiscuous mode [ 551.480925][T25909] veth0: left promiscuous mode [ 551.491578][T25914] netlink: 'syz.2.5340': attribute type 1 has an invalid length. [ 551.782082][T25924] netlink: 'syz.3.5342': attribute type 2 has an invalid length. [ 551.822628][T25921] geneve1: entered promiscuous mode [ 552.555564][T25942] dvmrp0: entered allmulticast mode [ 552.689064][T25950] netlink: 'syz.2.5353': attribute type 1 has an invalid length. [ 553.116645][T25978] : entered promiscuous mode [ 553.136461][T25981] veth0_to_team: left promiscuous mode [ 553.145982][T25989] __nla_validate_parse: 7 callbacks suppressed [ 553.159369][T25981] macvlan0: left promiscuous mode [ 553.176759][T25989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5365'. [ 553.196990][T25981] netlink: 'syz.4.5364': attribute type 2 has an invalid length. [ 553.211681][T25989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5365'. [ 553.382411][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5368'. [ 553.493476][T26004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5371'. [ 553.833014][T26025] syzkaller0: entered promiscuous mode [ 553.839423][T26025] syzkaller0: entered allmulticast mode [ 553.861881][T26030] netlink: 'syz.4.5378': attribute type 10 has an invalid length. [ 553.892051][T26030] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5378'. [ 553.940034][T26033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5380'. [ 554.080181][T26037] IPVS: Unknown mcast interface: vcan0 [ 554.185126][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074616400: rx timeout, send abort [ 554.410351][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5386'. [ 554.440164][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5386'. [ 554.546360][ T9833] net_ratelimit: 20 callbacks suppressed [ 554.546379][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 554.677975][T26056] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 554.687107][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803589c800: rx timeout, send abort [ 554.696330][ C0] vcan0: j1939_tp_rxtimer: 0xffff888074616400: abort rx timeout. Force session deactivation [ 554.720931][T26056] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 554.746375][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 554.776747][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5388'. [ 554.869918][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 555.097559][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 555.195345][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803589c800: abort rx timeout. Force session deactivation [ 555.213301][T26083] tipc: Enabling of bearer rejected, failed to enable media [ 555.279664][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 555.411121][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 555.681226][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 555.729800][T26109] mac80211_hwsim hwsim41 : renamed from wlan1 [ 555.977700][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 556.054813][T26129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5406'. [ 556.097635][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 556.284097][T26136] veth1: entered allmulticast mode [ 556.358149][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 556.657819][T26165] sctp: [Deprecated]: syz.0.5418 (pid 26165) Use of int in max_burst socket option deprecated. [ 556.657819][T26165] Use struct sctp_assoc_value instead [ 556.762943][T26165] netlink: 'syz.0.5418': attribute type 2 has an invalid length. [ 556.911210][T26172] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 557.094561][T26172] sctp: [Deprecated]: syz.3.5420 (pid 26172) Use of int in max_burst socket option. [ 557.094561][T26172] Use struct sctp_assoc_value instead [ 557.930741][T26234] : renamed from veth1_to_hsr (while UP) [ 558.457816][T26263] netlink: 'syz.1.5448': attribute type 5 has an invalid length. [ 558.478283][T26263] __nla_validate_parse: 9 callbacks suppressed [ 558.478298][T26263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5448'. [ 558.497397][T26263] nbd: must specify a size in bytes for the device [ 558.508934][T26263] nbd: couldn't find a device at index 1 [ 558.749979][T26277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5452'. [ 558.769257][T26277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5452'. [ 558.860350][T26284] 8021q: VLANs not supported on syzkaller1 [ 558.956388][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 559.045571][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5458'. [ 559.150206][T26300] netlink: 'syz.4.5459': attribute type 39 has an invalid length. [ 559.167686][T26302] netlink: 'syz.1.5460': attribute type 1 has an invalid length. [ 559.213311][T26302] 8021q: adding VLAN 0 to HW filter on device bond9 [ 559.318659][T26308] bond9: (slave geneve3): making interface the new active one [ 559.329452][T26308] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 559.355130][T26308] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5460'. [ 559.393714][T26308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5460'. [ 559.560231][T24479] net_ratelimit: 23 callbacks suppressed [ 559.560250][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 559.717661][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 559.851249][T26335] openvswitch: netlink: Message has 8 unknown bytes. [ 559.858519][T26335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.867983][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 559.976396][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 560.106885][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 560.151454][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5474'. [ 560.268607][T26351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5476'. [ 560.278203][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 560.325136][T26355] netlink: 'syz.1.5477': attribute type 25 has an invalid length. [ 560.336602][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5477'. [ 560.388239][T26357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5477'. [ 560.432638][T26358] tipc: Enabled bearer , priority 10 [ 560.449413][T26360] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 560.459930][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 560.588983][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 560.669729][T26362] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 560.782253][T26380] netlink: 'syz.1.5482': attribute type 1 has an invalid length. [ 561.168256][T26399] sctp: [Deprecated]: syz.1.5489 (pid 26399) Use of int in max_burst socket option deprecated. [ 561.168256][T26399] Use struct sctp_assoc_value instead [ 561.530088][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.537364][T26412] bridge0: port 2(bridge_slave_1) entered listening state [ 561.552219][T26412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.578325][T26412] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.593906][T26412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.708487][T26419] netlink: 'syz.1.5496': attribute type 1 has an invalid length. [ 561.717703][T26419] netlink: 'syz.1.5496': attribute type 2 has an invalid length. [ 561.726951][ T5757] tipc: Node number set to 529810689 [ 561.733545][T26423] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 561.749953][T25314] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.757208][T25314] bridge0: port 1(bridge_slave_0) entered listening state [ 562.529707][ T5757] IPVS: starting estimator thread 0... [ 562.644031][T26477] IPVS: using max 33 ests per chain, 79200 per kthread [ 563.104030][T26467] infiniband syz1: set active [ 563.120462][T26467] infiniband syz1: added batadv_slave_1 [ 563.194324][T26467] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 563.217543][T26467] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 563.235792][T26467] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 563.395775][T26467] RDS/IB: syz1: added [ 563.410556][T26467] smc: adding ib device syz1 with port count 1 [ 563.433590][T26467] smc: ib device syz1 port 1 has no pnetid [ 563.461354][T26516] netlink: 'syz.2.5522': attribute type 1 has an invalid length. [ 563.513129][T26516] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.605006][T26516] bond7: (slave veth7): Enslaving as an active interface with a down link [ 563.651378][T26520] __nla_validate_parse: 7 callbacks suppressed [ 563.651397][T26520] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.5524'. [ 563.667435][T26519] bond7: (slave veth0_to_bond): making interface the new active one [ 563.685024][T26519] veth0_to_bond: entered promiscuous mode [ 563.693526][T26519] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 563.822173][T26516] bond7: (slave veth9): Enslaving as an active interface with a down link [ 563.851431][T26516] netlink: 'syz.2.5522': attribute type 1 has an invalid length. [ 563.867682][T26516] netlink: 'syz.2.5522': attribute type 2 has an invalid length. [ 563.899474][T26529] netlink: 'syz.0.5527': attribute type 49 has an invalid length. [ 564.169271][T26529] ip6gretap0: entered promiscuous mode [ 564.188095][T26529] ip6gretap0: entered allmulticast mode [ 564.447713][T26550] netlink: 'syz.0.5534': attribute type 2 has an invalid length. [ 564.470585][T26553] netlink: 'syz.1.5535': attribute type 3 has an invalid length. [ 564.616236][T24497] net_ratelimit: 25 callbacks suppressed [ 564.616255][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 564.946485][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 565.106623][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 565.246215][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 565.386827][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 565.545331][T26597] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5545'. [ 565.562170][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5542'. [ 565.646605][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 565.776926][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 565.885010][T26614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5548'. [ 565.915360][T26614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5548'. [ 565.925297][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 566.058064][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 566.186817][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 567.210965][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5560'. [ 567.656711][T26681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5563'. [ 568.059002][T26691] netlink: 'syz.4.5565': attribute type 11 has an invalid length. [ 568.096171][T26691] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5565'. [ 568.185947][T26698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5567'. [ 568.818997][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5571'. [ 568.847744][T26722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5571'. [ 569.349427][T26733] netlink: 'syz.0.5574': attribute type 1 has an invalid length. [ 569.388680][T26733] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5574'. [ 569.419564][T26733] netlink: 'syz.0.5574': attribute type 1 has an invalid length. [ 569.451166][T26733] netlink: 'syz.0.5574': attribute type 8 has an invalid length. [ 569.477833][T26733] netlink: 606 bytes leftover after parsing attributes in process `syz.0.5574'. [ 569.633062][T24497] net_ratelimit: 29 callbacks suppressed [ 569.633090][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 569.800288][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 569.946617][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 569.960321][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5579'. [ 569.985820][T26754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5579'. [ 570.148154][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 570.286682][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 570.426463][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 570.481036][T26771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'. [ 570.510640][T26773] netlink: 'syz.1.5584': attribute type 1 has an invalid length. [ 570.537903][T26771] netlink: 81 bytes leftover after parsing attributes in process `syz.0.5583'. [ 570.661651][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 570.722074][T26782] netlink: 'syz.0.5586': attribute type 1 has an invalid length. [ 570.843125][T26786] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 570.894698][T26786] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 570.941574][T26786] bond7: (slave ip6gre1): making interface the new active one [ 570.973496][T26786] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 570.990566][T26794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5587'. [ 571.005563][T26795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5589'. [ 571.016205][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 571.146195][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 571.266484][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 571.568534][T26819] netlink: 'syz.2.5595': attribute type 15 has an invalid length. [ 572.241103][T26859] 8021q: VLANs not supported on syzkaller1 [ 572.517541][T26879] sctp: [Deprecated]: syz.2.5611 (pid 26879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.517541][T26879] Use struct sctp_sack_info instead [ 573.140043][T26904] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 573.251772][T26912] netlink: 'syz.0.5617': attribute type 7 has an invalid length. [ 573.785809][T26925] tipc: New replicast peer: 255.255.255.255 [ 573.826152][T26925] tipc: Enabled bearer , priority 10 [ 573.862581][T26926] tipc: Enabling of bearer rejected, already enabled [ 573.910302][T26925] __nla_validate_parse: 5 callbacks suppressed [ 573.910319][T26925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5624'. [ 574.275409][T26953] syzkaller0: entered promiscuous mode [ 574.300768][T26953] syzkaller0: entered allmulticast mode [ 574.341012][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5635'. [ 574.368711][T26959] netlink: 'syz.2.5636': attribute type 21 has an invalid length. [ 574.394257][T26960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5634'. [ 574.396116][T26959] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5636'. [ 574.430274][T26959] netlink: 'syz.2.5636': attribute type 5 has an invalid length. [ 574.439020][T26959] netlink: 'syz.2.5636': attribute type 6 has an invalid length. [ 574.457398][T26959] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5636'. [ 574.662896][T26965] netlink: 'syz.0.5638': attribute type 7 has an invalid length. [ 574.699850][T26968] netlink: 'syz.0.5638': attribute type 7 has an invalid length. [ 574.746165][T24479] net_ratelimit: 17 callbacks suppressed [ 574.746182][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 574.777338][T24506] veth0_to_bond: left promiscuous mode [ 574.884167][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 574.946978][ T808] tipc: Node number set to 968708209 [ 575.018615][T26985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5643'. [ 575.056302][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 575.161567][T26991] syzkaller1: entered promiscuous mode [ 575.181287][T26991] syzkaller1: entered allmulticast mode [ 575.217782][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 575.258026][T26989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.346695][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 575.483531][T26997] netlink: 'syz.3.5646': attribute type 1 has an invalid length. [ 575.492040][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 575.635224][T26999] bond13: (slave geneve3): making interface the new active one [ 575.674910][T26999] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 575.765286][T24506] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 575.799289][T24506] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 575.825795][T27004] xt_hashlimit: size too large, truncated to 1048576 [ 575.847168][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 575.871707][T24506] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 575.902342][T24506] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 575.976112][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 576.045338][T27016] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 576.065623][T27016] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 576.170488][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 576.443646][T27028] macvtap1: entered promiscuous mode [ 576.453567][T27028] macvtap1: entered allmulticast mode [ 576.459309][T27028] veth1_vlan: entered allmulticast mode [ 576.484445][T27034] macvtap2: entered promiscuous mode [ 576.490157][T27034] macvtap2: entered allmulticast mode [ 576.521487][T27030] 8021q: VLANs not supported on syzkaller1 [ 576.532895][T27035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5657'. [ 576.628774][T27042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5659'. [ 576.822919][T27051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5663'. [ 576.839597][T27051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5663'. [ 577.050879][T27060] 8021q: VLANs not supported on syzkaller1 [ 577.094436][T27066] 8021q: VLANs not supported on syzkaller1 [ 577.619852][T27096] netlink: 'syz.3.5674': attribute type 29 has an invalid length. [ 577.659422][T27096] netlink: 'syz.3.5674': attribute type 29 has an invalid length. [ 577.873144][T27096] syzkaller0: entered promiscuous mode [ 577.891849][T27096] syzkaller0: entered allmulticast mode [ 577.920904][T27099] netlink: 'syz.3.5674': attribute type 29 has an invalid length. [ 577.973366][T27099] netlink: 'syz.3.5674': attribute type 29 has an invalid length. [ 578.232918][T27105] tipc: Enabled bearer , priority 0 [ 578.363801][T27113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.385595][T27113] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 578.407113][T27113] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 578.418365][T27108] syzkaller0: entered promiscuous mode [ 578.425118][T27108] syzkaller0: entered allmulticast mode [ 580.944833][T27101] tipc: Resetting bearer [ 580.969038][T27101] tipc: Disabling bearer [ 581.183721][ T5780] hsr0: entered promiscuous mode [ 581.189431][T27149] __nla_validate_parse: 3 callbacks suppressed [ 581.189445][T27149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5687'. [ 581.233809][T27151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5688'. [ 581.286285][T24479] net_ratelimit: 12 callbacks suppressed [ 581.286305][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 581.376945][T27156] team_slave_1: mtu less than device minimum [ 581.401007][T27160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5691'. [ 581.418479][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 581.480553][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5691'. [ 581.529844][T27160] validate_nla: 4 callbacks suppressed [ 581.529864][T27160] netlink: 'syz.3.5691': attribute type 1 has an invalid length. [ 581.585736][T27168] netlink: 'syz.1.5693': attribute type 8 has an invalid length. [ 581.590756][T27160] netlink: 'syz.3.5691': attribute type 2 has an invalid length. [ 581.676690][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 581.847376][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 581.892631][T27181] netlink: 'syz.1.5699': attribute type 58 has an invalid length. [ 581.930744][T27181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5699'. [ 581.988692][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 582.004113][T27195] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 582.131577][T27192] bridge10: entered promiscuous mode [ 582.146540][T27192] bridge10: entered allmulticast mode [ 582.158655][T27205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5704'. [ 582.184440][T27205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5704'. [ 582.194048][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 582.320102][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 582.617526][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 582.758202][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 582.891941][T27240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5712'. [ 583.012405][T27249] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 583.054538][T27254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5716'. [ 583.315224][T27264] netlink: 'syz.1.5718': attribute type 7 has an invalid length. [ 583.355294][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5718'. [ 584.411610][T27298] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 584.458078][T27298] bond0: (slave lo): Error: Device can not be enslaved while up [ 584.814031][T27315] netlink: 'syz.2.5730': attribute type 1 has an invalid length. [ 585.183316][T27318] bond14: option resend_igmp: invalid value (32767) [ 585.197974][T27318] bond14: option resend_igmp: allowed values 0 - 255 [ 585.233000][T27318] bond14 (unregistering): Released all slaves [ 585.251081][T27326] netlink: 'syz.0.5733': attribute type 6 has an invalid length. [ 586.119225][T27356] bond0: entered promiscuous mode [ 586.128094][T27356] bond_slave_0: entered promiscuous mode [ 586.150457][T27356] batadv0: entered promiscuous mode [ 586.169524][T27356] debugfs: 'hsr1' already exists in 'hsr' [ 586.180697][T27356] Cannot create hsr debugfs directory [ 586.195581][T27356] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 586.226623][T27356] bond0: left promiscuous mode [ 586.231602][T27356] bond_slave_0: left promiscuous mode [ 586.244610][T27356] batadv0: left promiscuous mode [ 586.314026][T27360] netlink: 'syz.3.5743': attribute type 9 has an invalid length. [ 586.417137][ T62] net_ratelimit: 22 callbacks suppressed [ 586.417158][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 586.549983][T27369] __nla_validate_parse: 2 callbacks suppressed [ 586.550002][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5747'. [ 586.587904][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 586.603452][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5747'. [ 586.618383][T27372] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 586.632156][T27369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5747'. [ 586.659166][T27376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'. [ 586.720909][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 586.736369][T27378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'. [ 586.860269][T27383] SET target dimension over the limit! [ 586.861491][T27384] xt_ipcomp: unknown flags 1D [ 586.873581][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 587.087438][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 587.239053][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 587.334850][T27405] netlink: 'syz.3.5760': attribute type 1 has an invalid length. [ 587.388386][T27405] 8021q: adding VLAN 0 to HW filter on device bond14 [ 587.407105][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 587.619593][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 587.760103][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 588.281999][T27446] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5774'. [ 588.305116][T27446] netlink: 'syz.1.5774': attribute type 1 has an invalid length. [ 588.676374][T27474] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5784'. [ 589.002962][T27497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5790'. [ 589.055565][T27500] netlink: 'syz.3.5790': attribute type 1 has an invalid length. [ 589.481834][T27523] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 589.507605][T27523] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5799'. [ 589.527076][T27523] netlink: 'syz.0.5799': attribute type 1 has an invalid length. [ 589.543299][T27523] netlink: 'syz.0.5799': attribute type 8 has an invalid length. [ 589.578380][T27523] netlink: 586 bytes leftover after parsing attributes in process `syz.0.5799'. [ 589.885713][T27551] Bluetooth: MGMT ver 1.23 [ 590.069124][T27556] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 590.549781][T27580] lo speed is unknown, defaulting to 1000 [ 591.043710][T27580] lo speed is unknown, defaulting to 1000 [ 591.512852][ T112] net_ratelimit: 27 callbacks suppressed [ 591.512871][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 591.611132][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 591.776191][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 591.896620][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 592.056522][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 592.177943][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 592.236643][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 592.297670][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 592.456129][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 592.480462][T27647] __nla_validate_parse: 6 callbacks suppressed [ 592.480508][T27647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5836'. [ 592.539925][T27647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5836'. [ 592.616199][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 592.752528][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 592.907423][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 593.011812][T27661] netlink: 'syz.4.5843': attribute type 2 has an invalid length. [ 593.419707][T27680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5845'. [ 594.104058][T27688] bond11: Unable to set down delay as MII monitoring is disabled [ 594.130203][T27688] bond11 (unregistering): Released all slaves [ 594.274849][T27691] bridge9: entered promiscuous mode [ 594.313152][T27691] bridge9: entered allmulticast mode [ 594.343919][T27691] team0: Port device bridge9 added [ 594.419956][T27698] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.5853'. [ 594.654998][T27703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5854'. [ 594.848103][T27715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5857'. [ 594.896436][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.902191][T27713] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.914203][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.924483][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.936590][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.945565][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.061493][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.070700][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.079827][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.090132][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.104646][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.835285][T27763] netlink: 'syz.4.5868': attribute type 1 has an invalid length. [ 595.856664][T27763] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5868'. [ 595.976830][T27769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5869'. [ 596.032074][T27769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5869'. [ 596.225724][T27716] lo speed is unknown, defaulting to 1000 [ 596.520216][T24506] net_ratelimit: 22 callbacks suppressed [ 596.520267][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 596.676927][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 596.778270][T27793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5874'. [ 596.816508][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 596.843059][T27716] lo speed is unknown, defaulting to 1000 [ 596.948531][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 597.086691][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 597.196423][ T50] Bluetooth: hci4: command tx timeout [ 597.292813][T27801] team0: Device vlan0 failed to change mtu [ 597.303681][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 597.426267][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 597.505895][T27810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5879'. [ 597.556266][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 597.636310][T27812] veth0: entered promiscuous mode [ 597.690289][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 597.789348][T27816] veth0: left promiscuous mode [ 597.828475][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 597.859845][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5883'. [ 597.873188][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5883'. [ 597.883643][T27826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5883'. [ 597.910165][T27826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5883'. [ 597.931115][T27826] bond0: ARP target 8.4.0.0 is already present [ 597.955419][T27826] bond0: option arp_ip_target: invalid value (1032) [ 597.985627][T27826] sctp: [Deprecated]: syz.3.5883 (pid 27826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.985627][T27826] Use struct sctp_sack_info instead [ 598.161048][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5887'. [ 598.740121][T27850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5889'. [ 598.811849][T27853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5891'. [ 599.037687][T27860] netlink: 'syz.4.5893': attribute type 21 has an invalid length. [ 599.064892][T27860] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5893'. [ 599.118372][T27860] netlink: 'syz.4.5893': attribute type 5 has an invalid length. [ 599.130130][T27860] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5893'. [ 599.145592][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.176324][T27716] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.192822][T27716] bridge_slave_0: entered allmulticast mode [ 599.234819][T27716] bridge_slave_0: entered promiscuous mode [ 599.276711][ T50] Bluetooth: hci4: command tx timeout [ 599.286695][T27716] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.315347][T27716] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.341633][T27716] bridge_slave_1: entered allmulticast mode [ 599.369929][T27716] bridge_slave_1: entered promiscuous mode [ 599.383487][ T5780] IPVS: starting estimator thread 0... [ 599.487146][T27878] IPVS: using max 29 ests per chain, 69600 per kthread [ 599.509175][T27716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.565150][T27716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.687155][T27877] lo speed is unknown, defaulting to 1000 [ 599.707181][T27716] team0: Port device team_slave_0 added [ 599.730381][T27716] team0: Port device team_slave_1 added [ 599.815825][T27716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.840258][T27716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.898779][T27716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.952720][T27716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.987879][T27716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.058144][T27716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.180540][T27877] lo speed is unknown, defaulting to 1000 [ 600.199979][T27716] hsr_slave_0: entered promiscuous mode [ 600.218201][T27716] hsr_slave_1: entered promiscuous mode [ 600.519411][T27908] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 600.536349][T27908] bond9: (slave lo): Enslaving as an active interface with an up link [ 601.357205][ T50] Bluetooth: hci4: command tx timeout [ 601.647413][T27716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.684103][T27716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 601.714721][T27716] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.808284][T24489] net_ratelimit: 14 callbacks suppressed [ 601.808305][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 601.958197][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 602.207296][T27950] openvswitch: netlink: Missing key (keys=40, expected=100) [ 602.214335][T27716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.240240][T27716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 602.252521][T27716] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.286496][T27951] netlink: 'syz.4.5917': attribute type 1 has an invalid length. [ 602.301080][T27951] netlink: 'syz.4.5917': attribute type 1 has an invalid length. [ 602.343849][T27951] netlink: 'syz.4.5917': attribute type 2 has an invalid length. [ 602.356243][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 602.385077][T27951] netlink: 'syz.4.5917': attribute type 1 has an invalid length. [ 602.510749][T27716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.533029][T27716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 602.549212][T27716] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.892229][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 603.023057][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 603.135128][T27971] __nla_validate_parse: 3 callbacks suppressed [ 603.135146][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5921'. [ 603.170617][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 603.438007][ T50] Bluetooth: hci4: command tx timeout [ 603.476621][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 603.677878][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 603.877731][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 604.179065][T27716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 604.231971][T27716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.270580][T27716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 604.323998][T27716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.348624][T27716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 604.384201][T27716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.401555][T27716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 604.437022][T27716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.517685][T27991] vxcan1: entered allmulticast mode [ 604.599012][T27992] tipc: Resetting bearer [ 604.886339][T28014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5932'. [ 605.214555][T28023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5935'. [ 605.237245][T28016] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 605.251540][T28016] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 605.510804][T27716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.631462][T27716] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.683982][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.691192][ T9833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.784931][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.792137][ T9833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.895278][T28041] x_tables: duplicate underflow at hook 4 [ 605.901898][T28042] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 605.985246][T28042] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 606.276670][T28053] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5943'. [ 606.769625][T28068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5949'. [ 606.857083][T25314] net_ratelimit: 14 callbacks suppressed [ 606.857103][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 607.041443][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 607.187595][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 607.249572][T28097] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5952'. [ 607.283379][T28098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5955'. [ 607.419394][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 607.470619][T27716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.627266][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 607.644127][T28110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5957'. [ 607.673931][T27716] veth0_vlan: entered promiscuous mode [ 607.722993][T27716] veth1_vlan: entered promiscuous mode [ 607.819595][T27716] veth0_macvtap: entered promiscuous mode [ 607.858181][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 607.882754][T27716] veth1_macvtap: entered promiscuous mode [ 607.931806][T27716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.967944][T27716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.996949][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 608.056594][T24506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.079557][T24506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.128289][T24506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.162776][T24506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.238025][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 608.457398][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 608.469207][T28123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5961'. [ 608.563346][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.592002][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.647566][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 608.744331][T28125] bridge11: entered promiscuous mode [ 608.756567][T28125] bridge11: entered allmulticast mode [ 608.781080][T24489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.806271][T24489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.988134][T28144] netlink: 'syz.1.5855': attribute type 1 has an invalid length. [ 609.037684][T28144] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5855'. [ 609.062865][T28146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 609.102753][T28144] netlink: 'syz.1.5855': attribute type 1 has an invalid length. [ 609.132300][T28144] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5855'. [ 609.228294][T28159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5968'. [ 609.364308][T28163] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5970'. [ 609.389032][T28165] 8021q: VLANs not supported on lo [ 609.461215][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5973'. [ 609.478237][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5973'. [ 609.482838][T28168] : renamed from virt_wifi0 [ 609.700400][T28184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5977'. [ 609.727255][T28184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5977'. [ 609.935373][T28196] netlink: 'syz.1.5981': attribute type 4 has an invalid length. [ 610.327854][T28206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.518664][T28227] IPv6: NLM_F_CREATE should be specified when creating new route [ 610.665760][T28231] veth0_to_team: entered promiscuous mode [ 610.674908][T28231] macvlan0: entered promiscuous mode [ 611.856336][T28298] netlink: 'syz.3.6008': attribute type 10 has an invalid length. [ 612.047845][T28298] veth1_vlan: left promiscuous mode [ 612.054014][T28298] macvlan1: entered promiscuous mode [ 612.060113][T28298] macvlan1: entered allmulticast mode [ 612.079747][T28298] veth1_vlan: entered promiscuous mode [ 612.093501][T28298] veth1_vlan: entered allmulticast mode [ 612.103665][T28298] team0: Port device macvlan1 added [ 612.120818][T28306] bond0: entered promiscuous mode [ 612.136082][T28306] bond_slave_0: entered promiscuous mode [ 612.147282][T28306] bond_slave_1: entered promiscuous mode [ 612.207407][ T62] net_ratelimit: 31 callbacks suppressed [ 612.207466][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 612.246340][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.257181][T28317] netlink: 'syz.4.6012': attribute type 1 has an invalid length. [ 612.330448][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.400680][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.456927][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 612.560515][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.596476][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 612.700090][T28336] batman_adv: batadv0: Adding interface: dummy0 [ 612.717605][T28336] batman_adv: batadv0: Interface activated: dummy0 [ 612.837194][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 612.851538][T28343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.006714][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 613.036561][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 613.232184][T28370] sctp: [Deprecated]: syz.0.6023 (pid 28370) Use of int in maxseg socket option. [ 613.232184][T28370] Use struct sctp_assoc_value instead [ 613.272908][T28371] sctp: [Deprecated]: syz.0.6023 (pid 28371) Use of int in maxseg socket option. [ 613.272908][T28371] Use struct sctp_assoc_value instead [ 613.312095][T28370] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 613.344915][T28370] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 613.605464][T28391] syzkaller1: entered promiscuous mode [ 613.612476][T28391] syzkaller1: entered allmulticast mode [ 613.940519][T28408] __nla_validate_parse: 14 callbacks suppressed [ 613.940537][T28408] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6034'. [ 614.221898][T28419] netlink: 'syz.3.6038': attribute type 1 has an invalid length. [ 614.240484][T28418] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 614.267264][T28418] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 614.289935][T28418] gretap1: entered promiscuous mode [ 614.295514][T28418] gretap1: entered allmulticast mode [ 614.403104][T28425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6040'. [ 614.503049][T28423] bond15: (slave geneve4): making interface the new active one [ 614.519335][T28425] netlink: 'syz.4.6040': attribute type 7 has an invalid length. [ 614.545049][T28423] bond15: (slave geneve4): Enslaving as an active interface with an up link [ 614.547842][T28425] netlink: 'syz.4.6040': attribute type 8 has an invalid length. [ 614.583098][ T9833] netdevsim netdevsim3 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 614.602636][T28425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6040'. [ 614.612107][ T9833] netdevsim netdevsim3 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 614.635042][ T9833] netdevsim netdevsim3 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 614.680741][ T9833] netdevsim netdevsim3 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 614.685192][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6042'. [ 614.835942][T28437] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.132603][T28438] erspan0: left promiscuous mode [ 615.176208][T28438] erspan0: left allmulticast mode [ 615.263791][T28457] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 615.290288][T28438] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 615.328844][T28438] macvtap1: left promiscuous mode [ 615.346846][T28438] vlan0: left promiscuous mode [ 615.356414][T28438] macvtap1: left allmulticast mode [ 615.376721][T28438] vlan0: left allmulticast mode [ 615.385764][T28438] veth0_vlan: left allmulticast mode [ 615.385776][T28450] netlink: 'syz.0.6045': attribute type 6 has an invalid length. [ 615.407261][T28438] bond3: left allmulticast mode [ 615.414709][T28438] vlan2: left allmulticast mode [ 615.427041][T28438] bond0: left allmulticast mode [ 615.435167][T28438] bond_slave_0: left allmulticast mode [ 615.876765][T28477] bridge12: entered allmulticast mode [ 615.894304][T28477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6054'. [ 616.131490][T28490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6058'. [ 616.190154][T28496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6061'. [ 616.217211][T28496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6061'. [ 616.269393][T28495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6060'. [ 616.302992][T28497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6060'. [ 616.334730][T28495] sch_tbf: burst 12 is lower than device macsec0 mtu (1482) ! [ 616.687788][T28522] tunl0: entered promiscuous mode [ 616.713133][T28522] netlink: 'syz.1.6066': attribute type 3 has an invalid length. [ 616.765608][T28526] netlink: 'syz.0.6071': attribute type 62 has an invalid length. [ 616.860491][T28531] netlink: 'syz.2.6073': attribute type 1 has an invalid length. [ 617.010463][T28531] 8021q: adding VLAN 0 to HW filter on device bond10 [ 617.084694][T28536] bond10: (slave geneve4): making interface the new active one [ 617.099110][T28536] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 617.340031][T24506] net_ratelimit: 29 callbacks suppressed [ 617.340048][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 617.522454][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 617.649203][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 617.757402][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.790878][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 617.850340][T28586] openvswitch: netlink: Duplicate or invalid key (type 0). [ 617.894803][T28586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.920937][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 617.998473][T28593] netlink: 'syz.2.6088': attribute type 7 has an invalid length. [ 618.060339][T28593] netlink: 'syz.2.6088': attribute type 8 has an invalid length. [ 618.080734][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 618.220460][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 618.417367][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 618.432258][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 618.441831][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 618.449906][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 618.459023][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 618.838847][T28627] netlink: 'syz.2.6095': attribute type 1 has an invalid length. [ 619.746837][T28654] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 619.769283][T28654] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 619.810183][T28611] lo speed is unknown, defaulting to 1000 [ 619.845552][T28666] sctp: [Deprecated]: syz.1.6104 (pid 28666) Use of int in maxseg socket option. [ 619.845552][T28666] Use struct sctp_assoc_value instead [ 620.133122][T28676] __nla_validate_parse: 6 callbacks suppressed [ 620.133170][T28676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6106'. [ 620.198429][T28676] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 620.558883][ T5632] Bluetooth: hci5: command tx timeout [ 620.670905][T28682] lo speed is unknown, defaulting to 1000 [ 620.683922][T28611] lo speed is unknown, defaulting to 1000 [ 621.243790][T28718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6118'. [ 621.262062][T28718] veth1_macvtap: left promiscuous mode [ 621.291792][T28724] validate_nla: 1 callbacks suppressed [ 621.291807][T28724] netlink: 'syz.4.6120': attribute type 1 has an invalid length. [ 621.489771][T28724] bond12: entered promiscuous mode [ 621.495735][T28724] 8021q: adding VLAN 0 to HW filter on device bond12 [ 621.512715][T28729] erspan0: entered promiscuous mode [ 621.527763][T28734] netlink: 'syz.3.6122': attribute type 30 has an invalid length. [ 621.547496][T28729] erspan0: entered allmulticast mode [ 621.601198][T28682] lo speed is unknown, defaulting to 1000 [ 621.715150][T28734] bond16: option arp_missed_max: invalid value (0) [ 621.722049][T28734] bond16: option arp_missed_max: allowed values 1 - 255 [ 621.735435][T28734] bond16 (unregistering): Released all slaves [ 621.889603][T28741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6124'. [ 622.155219][T28754] syzkaller1: left promiscuous mode [ 622.182841][T28754] syzkaller1: left allmulticast mode [ 622.486430][T24489] net_ratelimit: 41 callbacks suppressed [ 622.486449][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 622.551329][T28770] netlink: 'syz.4.6132': attribute type 1 has an invalid length. [ 622.595007][T28770] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6132'. [ 622.619307][T28770] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6132'. [ 622.639222][ T5632] Bluetooth: hci5: command tx timeout [ 622.666167][T28770] netlink: 658 bytes leftover after parsing attributes in process `syz.4.6132'. [ 622.675625][T28775] netlink: 'syz.2.6133': attribute type 1 has an invalid length. [ 622.683842][T28775] netlink: 'syz.2.6133': attribute type 3 has an invalid length. [ 622.692116][T28775] netlink: 'syz.2.6133': attribute type 7 has an invalid length. [ 622.700832][T28775] netlink: 'syz.2.6133': attribute type 8 has an invalid length. [ 622.708985][T28775] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6133'. [ 622.718614][T28775] NCSI netlink: No device for ifindex 131092 [ 622.835325][T28783] bond13: option min_links: invalid value (18446744073709551614) [ 622.843422][T28783] bond13: option min_links: allowed values 0 - 2147483647 [ 622.858992][T28783] bond13 (unregistering): Released all slaves [ 622.959527][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.009451][T28611] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.029969][T28611] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.054243][T28611] bridge_slave_0: entered allmulticast mode [ 623.075294][T28611] bridge_slave_0: entered promiscuous mode [ 623.104708][T28611] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.121316][T28611] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.138423][T28611] bridge_slave_1: entered allmulticast mode [ 623.147089][T28611] bridge_slave_1: entered promiscuous mode [ 623.340260][T28804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6142'. [ 623.368312][T28611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.392158][T28611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.444096][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.535574][T28811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6144'. [ 623.621439][T28820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6145'. [ 623.680613][T28810] bond16: entered allmulticast mode [ 623.690779][T28812] vlan0: entered promiscuous mode [ 623.716514][T28611] team0: Port device team_slave_0 added [ 623.811967][T28819] bridge2: entered promiscuous mode [ 623.826429][T28819] bridge2: entered allmulticast mode [ 623.853921][T28819] bond16: (slave bridge2): Enslaving as an active interface with an up link [ 624.007609][ T3109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.148047][T28611] team0: Port device team_slave_1 added [ 624.322020][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 624.360290][T28611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.395279][T28611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.488344][T28611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.520364][T28611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.529821][T28611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.569335][T28611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.651407][T28841] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 624.719394][ T5632] Bluetooth: hci5: command tx timeout [ 624.758810][T28611] hsr_slave_0: entered promiscuous mode [ 624.769739][T28611] hsr_slave_1: entered promiscuous mode [ 624.777930][T28611] debugfs: 'hsr0' already exists in 'hsr' [ 624.783713][T28611] Cannot create hsr debugfs directory [ 624.983128][T28850] netlink: 'syz.3.6153': attribute type 1 has an invalid length. [ 625.014945][T28850] netlink: 'syz.3.6153': attribute type 11 has an invalid length. [ 625.040019][ T3109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.134868][T28858] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 625.153003][T28854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.165356][T28854] bridge0: port 3(bond1) entered blocking state [ 625.172368][T28854] bridge0: port 3(bond1) entered disabled state [ 625.184342][T28854] bond1: entered allmulticast mode [ 625.197831][T28854] bond1: entered promiscuous mode [ 625.208295][T28854] bridge0: port 3(bond1) entered blocking state [ 625.214748][T28854] bridge0: port 3(bond1) entered forwarding state [ 625.234595][ T29] audit: type=1800 audit(1778956304.667:10): pid=28862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6156" name="memory.events" dev="tmpfs" ino=2997 res=0 errno=0 [ 625.257027][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 625.303932][ T29] audit: type=1804 audit(1778956304.737:11): pid=28858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6156" name="/newroot/584/memory.events" dev="tmpfs" ino=2997 res=1 errno=0 [ 625.320272][T28864] x_tables: unsorted underflow at hook 4 [ 625.396725][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 625.579480][T28873] tipc: Failed to remove unknown binding: 66,1,1/968708209:805521728/805521730 [ 625.670982][T28611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.686403][T28611] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.831588][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 625.864893][T28874] macvlan1: entered promiscuous mode [ 625.895102][T28874] macvlan1: entered allmulticast mode [ 625.930143][T28874] veth1_vlan: entered allmulticast mode [ 625.968729][T25314] bond2: (slave bridge2): failed to get link speed/duplex [ 626.109162][T28611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.121253][T28611] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.183968][T24489] bridge0: port 3(bond1) entered disabled state [ 626.274717][T28912] __nla_validate_parse: 4 callbacks suppressed [ 626.274735][T28912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6167'. [ 626.739606][T28917] tipc: Enabled bearer , priority 0 [ 626.754598][T28917] netlink: 'syz.2.6169': attribute type 11 has an invalid length. [ 626.796906][ T5632] Bluetooth: hci5: command tx timeout [ 626.887311][T28925] netlink: 'syz.2.6171': attribute type 61 has an invalid length. [ 627.033037][T28930] netem: change failed [ 627.250116][T28611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.263640][T28611] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.546536][T28947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6178'. [ 627.624027][T28611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.654213][T28611] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.733242][T28943] net_ratelimit: 12 callbacks suppressed [ 627.733261][T28943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.842437][T28961] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 627.843959][T28943] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 627.876875][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 628.010414][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 628.160385][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.169939][T28970] netlink: 'syz.3.6183': attribute type 1 has an invalid length. [ 628.284683][T28973] 8021q: adding VLAN 0 to HW filter on device bond18 [ 628.301708][T28973] bond17: (slave bond18): making interface the new active one [ 628.319533][T28973] bond17: (slave bond18): Enslaving as an active interface with an up link [ 628.361792][T28970] 8021q: adding VLAN 0 to HW filter on device bond17 [ 628.377493][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 628.395445][T28611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 628.423436][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.437915][T28611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 628.451065][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.469199][T28973] macvtap1: entered allmulticast mode [ 628.475160][T28973] veth0_macvtap: entered allmulticast mode [ 628.489560][T28611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 628.507379][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.518961][T28611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.532296][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.636303][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 628.727833][T28997] lo speed is unknown, defaulting to 1000 [ 628.820130][T29002] netlink: 'syz.2.6190': attribute type 6 has an invalid length. [ 628.844134][T29000] bond12 (unregistering): Released all slaves [ 628.896360][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 628.964079][T28611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.017739][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 629.064209][T28611] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.117058][T24506] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.124260][T24506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.133869][T29004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6191'. [ 629.170204][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.177483][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.199973][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.341761][T29017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6193'. [ 629.653392][T29033] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 629.775735][T28997] lo speed is unknown, defaulting to 1000 [ 629.819311][T29041] netlink: 'syz.3.6196': attribute type 2 has an invalid length. [ 630.574748][T29064] macvlan0: entered promiscuous mode [ 630.704355][T29064] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 630.872030][T28611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.088627][T28611] veth0_vlan: entered promiscuous mode [ 631.165367][T28611] veth1_vlan: entered promiscuous mode [ 631.167943][T29088] netlink: 'syz.2.6208': attribute type 1 has an invalid length. [ 631.492163][T28611] veth0_macvtap: entered promiscuous mode [ 631.534089][T28611] veth1_macvtap: entered promiscuous mode [ 631.549802][T29102] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6213'. [ 631.636857][T29103] vlan2: entered promiscuous mode [ 631.642828][T29103] batadv0: entered promiscuous mode [ 631.724418][T28611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.863450][T28611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.941940][ T9833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.970589][ T9833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.988541][T29112] xt_hashlimit: size too large, truncated to 1048576 [ 631.996948][ T9833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.054586][ T9833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.172347][T29115] syzkaller0: entered promiscuous mode [ 632.224769][T29115] syzkaller0: entered allmulticast mode [ 632.449370][T24483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.488379][T24483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.589103][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.635199][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.744223][T29124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6220'. [ 632.785769][T29131] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6221'. [ 632.792694][T29132] net_ratelimit: 25 callbacks suppressed [ 632.792726][T29132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.848336][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 632.966588][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 633.094858][T29142] netlink: 'syz.0.6225': attribute type 21 has an invalid length. [ 633.244738][T29146] netlink: 'syz.0.6225': attribute type 21 has an invalid length. [ 633.253070][T29147] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6226'. [ 633.258307][T29143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.364134][T29139] bond12: entered promiscuous mode [ 633.369902][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.399573][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 633.411375][T29142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6225'. [ 633.424270][T29146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6225'. [ 633.489221][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.512316][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.522453][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.541656][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.553364][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.691185][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.758885][T29153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6229'. [ 633.776972][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 633.812270][T29160] tipc: Enabling of bearer rejected, failed to enable media [ 633.912334][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 634.004699][T29169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6231'. [ 634.078588][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 634.109564][T29174] netlink: 'syz.2.6232': attribute type 5 has an invalid length. [ 634.197855][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 634.386735][T29183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6235'. [ 634.424000][T29183] netlink: 'syz.0.6235': attribute type 9 has an invalid length. [ 634.499719][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 634.762317][T29198] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6239'. [ 634.889780][T29204] macvtap1: entered promiscuous mode [ 634.895507][T29204] macvtap1: entered allmulticast mode [ 634.903268][T29204] veth1_vlan: entered allmulticast mode [ 635.030831][T29148] lo speed is unknown, defaulting to 1000 [ 635.596267][ T5632] Bluetooth: hci1: command tx timeout [ 635.612353][T29225] netlink: 'syz.0.6248': attribute type 2 has an invalid length. [ 635.725741][T29227] netlink: 'syz.4.6250': attribute type 61 has an invalid length. [ 635.785545][T29148] lo speed is unknown, defaulting to 1000 [ 636.155083][T29244] netem: change failed [ 636.602654][T29253] bond1: entered promiscuous mode [ 636.868468][T29265] __nla_validate_parse: 4 callbacks suppressed [ 636.868486][T29265] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.6257'. [ 637.234959][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6261'. [ 637.676944][ T5632] Bluetooth: hci1: command tx timeout [ 637.899245][ T112] net_ratelimit: 30 callbacks suppressed [ 637.899266][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 637.970709][T29291] netlink: 'syz.2.6264': attribute type 1 has an invalid length. [ 638.087309][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 638.293371][T29291] bond14: (slave bridge13): making interface the new active one [ 638.316670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.327475][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.342643][T29300] vcan0: tx address claim with different name [ 638.358433][T29291] bond14: (slave bridge13): Enslaving as an active interface with an up link [ 638.414252][T29293] macvlan2: entered promiscuous mode [ 638.435410][T29293] macvlan2: entered allmulticast mode [ 638.460282][T29293] bond14: entered promiscuous mode [ 638.466703][T29293] bridge13: entered promiscuous mode [ 638.502423][T29293] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 638.531513][T29293] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 638.550331][T29293] bond14: left promiscuous mode [ 638.557889][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.567375][T29293] bridge13: left promiscuous mode [ 638.916472][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 639.039963][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 639.109208][T29320] 8021q: VLANs not supported on lo [ 639.176405][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 639.316278][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 639.343569][T29329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6271'. [ 639.387507][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6271'. [ 639.409096][T29329] netlink: 'syz.4.6271': attribute type 12 has an invalid length. [ 639.421101][T29329] netlink: 'syz.4.6271': attribute type 11 has an invalid length. [ 639.438668][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.540606][T29332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6272'. [ 639.596933][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 639.710823][T29341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6274'. [ 639.757252][ T5632] Bluetooth: hci1: command tx timeout [ 639.798761][T29148] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.824704][T29148] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.852366][T29148] bridge_slave_0: entered allmulticast mode [ 639.885425][T29148] bridge_slave_0: entered promiscuous mode [ 640.001870][T29148] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.017789][T29148] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.025423][T29148] bridge_slave_1: entered allmulticast mode [ 640.036792][T29148] bridge_slave_1: entered promiscuous mode [ 640.249050][T29148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.298091][T29148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.374095][T29367] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 640.432284][T29148] team0: Port device team_slave_0 added [ 640.455537][T29148] team0: Port device team_slave_1 added [ 640.510806][T29374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6280'. [ 640.553142][T29374] netlink: 'syz.2.6280': attribute type 2 has an invalid length. [ 640.581347][T29376] netlink: 'syz.1.6281': attribute type 2 has an invalid length. [ 640.588965][T29148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.619277][T29148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.672292][T29148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.707522][T29148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.726098][T29148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.790053][T29148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.811536][T29387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6282'. [ 640.953543][T29391] wireguard: wg0: Could not create IPv4 socket [ 641.054473][T29148] hsr_slave_0: entered promiscuous mode [ 641.092613][T29148] hsr_slave_1: entered promiscuous mode [ 641.117941][T29148] debugfs: 'hsr0' already exists in 'hsr' [ 641.133476][T29148] Cannot create hsr debugfs directory [ 641.238408][T29401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6287'. [ 641.301260][T29394] nbd2: detected capacity change from 0 to 63 [ 641.343056][T29400] block nbd2: NBD_DISCONNECT [ 641.397901][T29400] block nbd2: Disconnected due to user request. [ 641.443795][T29400] block nbd2: shutting down sockets [ 641.459218][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.468606][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 641.498593][T29409] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 641.508460][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.517576][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 641.523494][T29410] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 641.525405][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.525436][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 641.525502][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.537022][T29409] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 641.541781][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 641.549481][T18806] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.609450][T29407] tun0: tun_chr_ioctl cmd 1074025675 [ 641.615538][T18806] Buffer I/O error on dev nbd2, logical block 0, async page read [ 641.617107][T29410] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 641.625172][T18806] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.636028][T29407] tun0: persist disabled [ 641.654216][T18806] Buffer I/O error on dev nbd2, logical block 1, async page read [ 641.677994][T18806] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.708824][T18806] Buffer I/O error on dev nbd2, logical block 2, async page read [ 641.739542][T18806] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.770322][T18806] Buffer I/O error on dev nbd2, logical block 3, async page read [ 641.799700][T18806] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.840730][ T5632] Bluetooth: hci1: command tx timeout [ 641.849462][T18806] Buffer I/O error on dev nbd2, logical block 0, async page read [ 641.883176][T18806] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.903877][T18806] Buffer I/O error on dev nbd2, logical block 1, async page read [ 641.943737][T18806] ldm_validate_partition_table(): Disk read failed. [ 641.959053][T29148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.965891][T18806] Dev nbd2: unable to read RDB block 0 [ 641.972068][T29148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.979776][T18806] nbd2: unable to read partition table [ 641.989802][T29148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.004542][T29148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 642.017426][T29148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 642.049785][T18806] ldm_validate_partition_table(): Disk read failed. [ 642.070012][T18806] Dev nbd2: unable to read RDB block 0 [ 642.099208][T18806] nbd2: unable to read partition table [ 642.338763][ T5757] hid-generic 0005:0458:7FFF.0003: item fetching failed at offset 0/1 [ 642.344613][T29148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.360305][ T5757] hid-generic 0005:0458:7FFF.0003: probe with driver hid-generic failed with error -22 [ 642.381971][T29148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.393981][T29148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.406726][T29148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 642.418512][T29148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 642.529343][T29438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 642.602641][T29148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.613254][T29148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.624131][T29148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.634816][T29148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 642.647011][T29148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 642.857245][T29148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.869174][T29148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.883334][T29148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 642.894874][T29148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 642.905814][T29148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 642.936238][ T62] net_ratelimit: 16 callbacks suppressed [ 642.936258][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 643.056726][ T62] bond2: (slave bridge2): failed to get link speed/duplex [ 643.162792][T29463] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 643.176711][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 643.191661][T29466] netlink: 'syz.1.6305': attribute type 12 has an invalid length. [ 643.223507][T29466] netlink: 'syz.1.6305': attribute type 29 has an invalid length. [ 643.247283][T29466] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6305'. [ 643.292368][T29466] netlink: 'syz.1.6305': attribute type 1 has an invalid length. [ 643.320020][T29466] netlink: 'syz.1.6305': attribute type 2 has an invalid length. [ 643.340591][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6308'. [ 643.445861][T29475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6307'. [ 643.635620][T29487] FAULT_INJECTION: forcing a failure. [ 643.635620][T29487] name failslab, interval 1, probability 0, space 0, times 1 [ 643.652862][T29488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6311'. [ 643.661907][T29487] CPU: 0 UID: 0 PID: 29487 Comm: syz.0.6310 Not tainted syzkaller #0 PREEMPT(full) [ 643.661930][T29487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.661941][T29487] Call Trace: [ 643.661949][T29487] [ 643.661956][T29487] dump_stack_lvl+0xe8/0x150 [ 643.661984][T29487] should_fail_ex+0x412/0x560 [ 643.662118][T29487] should_failslab+0xa8/0x100 [ 643.662154][T29487] __kmalloc_noprof+0xe8/0x760 [ 643.662183][T29487] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 643.662277][T29487] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 643.662303][T29487] genl_family_rcv_msg_doit+0xd9/0x330 [ 643.662327][T29487] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 643.662353][T29487] ? apparmor_capable+0x126/0x170 [ 643.662447][T29487] ? bpf_lsm_capable+0x9/0x20 [ 643.662482][T29487] ? security_capable+0x7e/0x2c0 [ 643.662609][T29487] genl_rcv_msg+0x61c/0x7a0 [ 643.662632][T29487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.662648][T29487] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 643.662742][T29487] ? __pfx_nl80211_tdls_mgmt+0x10/0x10 [ 643.662783][T29487] ? __pfx_nl80211_post_doit+0x10/0x10 [ 643.662804][T29487] ? __pfx_ref_tracker_free+0x10/0x10 [ 643.662874][T29487] netlink_rcv_skb+0x232/0x4b0 [ 643.662949][T29487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.662968][T29487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.663005][T29487] ? down_read+0x270/0x2e0 [ 643.663021][T29487] ? genl_rcv+0xd/0x40 [ 643.663039][T29487] genl_rcv+0x28/0x40 [ 643.663053][T29487] netlink_unicast+0x75c/0x8e0 [ 643.663083][T29487] netlink_sendmsg+0x813/0xb40 [ 643.663111][T29487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.663135][T29487] ? aa_sock_msg_perm+0xf1/0x1b0 [ 643.663156][T29487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 643.663180][T29487] ____sys_sendmsg+0x972/0x9f0 [ 643.663262][T29487] ? __might_fault+0xaf/0x130 [ 643.663289][T29487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.663318][T29487] ? import_iovec+0x73/0xa0 [ 643.663344][T29487] ___sys_sendmsg+0x2a5/0x360 [ 643.663365][T29487] ? __lock_acquire+0x6b5/0x2cf0 [ 643.663388][T29487] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.663445][T29487] ? __fget_files+0x2a/0x420 [ 643.663464][T29487] ? __fget_files+0x3a0/0x420 [ 643.663493][T29487] __x64_sys_sendmsg+0x1bd/0x2a0 [ 643.663516][T29487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 643.663547][T29487] ? __pfx_ksys_write+0x10/0x10 [ 643.663585][T29487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.663604][T29487] do_syscall_64+0x15f/0xf80 [ 643.663625][T29487] ? trace_irq_disable+0x3b/0x140 [ 643.663648][T29487] ? clear_bhb_loop+0x40/0x90 [ 643.663669][T29487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.663692][T29487] RIP: 0033:0x7f157619ce59 [ 643.663708][T29487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.663721][T29487] RSP: 002b:00007f157706c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.663736][T29487] RAX: ffffffffffffffda RBX: 00007f1576415fa0 RCX: 00007f157619ce59 [ 643.663747][T29487] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 643.663758][T29487] RBP: 00007f157706c090 R08: 0000000000000000 R09: 0000000000000000 [ 643.663768][T29487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.663776][T29487] R13: 00007f1576416038 R14: 00007f1576415fa0 R15: 00007ffd9cc99848 [ 643.663804][T29487] [ 644.038870][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.063228][T29148] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 644.101130][T29148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.328490][T29514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6316'. [ 644.504301][T29520] xt_hashlimit: max too large, truncated to 1048576 [ 644.581029][T29522] netlink: 'syz.4.6319': attribute type 4 has an invalid length. [ 644.589170][T29522] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6319'. [ 644.985917][T29148] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 644.999427][T29148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.046498][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 645.070856][T29522] .`: renamed from bond0 [ 645.084263][T29148] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.108520][T29148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.121268][ T5780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.135925][T29148] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 645.151343][T29148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.232025][T29538] FAULT_INJECTION: forcing a failure. [ 645.232025][T29538] name failslab, interval 1, probability 0, space 0, times 0 [ 645.257145][T29538] CPU: 1 UID: 0 PID: 29538 Comm: syz.4.6322 Not tainted syzkaller #0 PREEMPT(full) [ 645.257169][T29538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.257179][T29538] Call Trace: [ 645.257186][T29538] [ 645.257194][T29538] dump_stack_lvl+0xe8/0x150 [ 645.257220][T29538] should_fail_ex+0x412/0x560 [ 645.257247][T29538] should_failslab+0xa8/0x100 [ 645.257273][T29538] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 645.257297][T29538] ? __alloc_skb+0x1d0/0x7d0 [ 645.257389][T29538] ? __local_bh_enable_ip+0xd0/0x130 [ 645.257431][T29538] __alloc_skb+0x1d0/0x7d0 [ 645.257450][T29538] ? netlink_ack_tlv_len+0x6c/0x210 [ 645.257474][T29538] netlink_ack+0x146/0xa50 [ 645.257491][T29538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.257506][T29538] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 645.257534][T29538] ? __pfx_nl80211_post_doit+0x10/0x10 [ 645.257552][T29538] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.257584][T29538] netlink_rcv_skb+0x2b6/0x4b0 [ 645.257605][T29538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 645.257623][T29538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.257654][T29538] ? down_read+0x270/0x2e0 [ 645.257667][T29538] ? genl_rcv+0xd/0x40 [ 645.257685][T29538] genl_rcv+0x28/0x40 [ 645.257698][T29538] netlink_unicast+0x75c/0x8e0 [ 645.257727][T29538] netlink_sendmsg+0x813/0xb40 [ 645.257756][T29538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.257778][T29538] ? aa_sock_msg_perm+0xf1/0x1b0 [ 645.257799][T29538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.257822][T29538] ____sys_sendmsg+0x972/0x9f0 [ 645.257841][T29538] ? __might_fault+0xaf/0x130 [ 645.257866][T29538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.257894][T29538] ? import_iovec+0x73/0xa0 [ 645.257921][T29538] ___sys_sendmsg+0x2a5/0x360 [ 645.257941][T29538] ? __lock_acquire+0x6b5/0x2cf0 [ 645.257963][T29538] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.258017][T29538] ? __fget_files+0x2a/0x420 [ 645.258034][T29538] ? __fget_files+0x3a0/0x420 [ 645.258062][T29538] __x64_sys_sendmsg+0x1bd/0x2a0 [ 645.258086][T29538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.258116][T29538] ? __pfx_ksys_write+0x10/0x10 [ 645.258147][T29538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.258165][T29538] do_syscall_64+0x15f/0xf80 [ 645.258185][T29538] ? trace_irq_disable+0x3b/0x140 [ 645.258207][T29538] ? clear_bhb_loop+0x40/0x90 [ 645.258227][T29538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.258242][T29538] RIP: 0033:0x7f16b239ce59 [ 645.258259][T29538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.258272][T29538] RSP: 002b:00007f16b328f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.258290][T29538] RAX: ffffffffffffffda RBX: 00007f16b2615fa0 RCX: 00007f16b239ce59 [ 645.258301][T29538] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 645.258311][T29538] RBP: 00007f16b328f090 R08: 0000000000000000 R09: 0000000000000000 [ 645.258321][T29538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.258330][T29538] R13: 00007f16b2616038 R14: 00007f16b2615fa0 R15: 00007ffd5ad8c948 [ 645.258360][T29538] [ 645.360152][T29148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.516500][T22878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.523819][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 645.621432][T29148] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.641887][T24506] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.649128][T24506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.670493][T24506] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.677703][T24506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.697298][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 645.783878][T29558] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6327'. [ 645.810132][T29558] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6327'. [ 645.829223][T29558] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6327'. [ 645.846777][T24506] bond2: (slave bridge2): failed to get link speed/duplex [ 645.864857][T29558] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6327'. [ 646.124754][T29575] erspan0: left promiscuous mode [ 646.139048][T29575] erspan0: left allmulticast mode [ 646.576461][T29148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.631664][T29148] veth0_vlan: entered promiscuous mode [ 646.650562][T29148] veth1_vlan: entered promiscuous mode [ 646.680780][T29148] veth0_macvtap: entered promiscuous mode [ 646.691350][T29148] veth1_macvtap: entered promiscuous mode [ 646.708602][T29148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.726628][T29148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.740540][T24506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.751253][T24506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.763451][T24506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.782730][T24506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.007015][ T9833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.031613][ T9833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.072664][T24483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.096273][T24483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.251649][T29646] sctp: [Deprecated]: syz.1.6345 (pid 29646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 647.251649][T29646] Use struct sctp_sack_info instead [ 647.811181][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 647.828809][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 647.841190][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 647.853406][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 647.862128][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 648.000105][T24483] net_ratelimit: 22 callbacks suppressed [ 648.000124][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 648.187567][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 648.237841][T29590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.316663][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 648.351236][T29706] __nla_validate_parse: 66 callbacks suppressed [ 648.351252][T29706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 648.365125][T29709] netlink: 'syz.1.6364': attribute type 21 has an invalid length. [ 648.387183][T29709] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6364'. [ 648.424509][T29709] netlink: 'syz.1.6364': attribute type 4 has an invalid length. [ 648.427723][T29717] netlink: 'syz.1.6364': attribute type 21 has an invalid length. [ 648.444334][T29717] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6364'. [ 648.465452][T29709] netlink: 'syz.1.6364': attribute type 5 has an invalid length. [ 648.509034][T29709] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6364'. [ 648.524266][T29717] netlink: 'syz.1.6364': attribute type 4 has an invalid length. [ 648.533056][T29717] netlink: 'syz.1.6364': attribute type 5 has an invalid length. [ 648.541238][T29717] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6364'. [ 648.553146][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6365'. [ 648.558372][T29601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.580593][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 648.606324][T29724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6366'. [ 648.678312][T29727] x_tables: duplicate underflow at hook 2 [ 648.697697][T29729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6369'. [ 648.808305][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 648.943550][T29676] lo speed is unknown, defaulting to 1000 [ 648.989863][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 649.126104][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 649.127203][ T13] unregister_netdevice: waiting for bond6 to become free. Usage count = 2 [ 649.169857][T29756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6374'. [ 649.246236][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 649.406522][T29676] lo speed is unknown, defaulting to 1000 [ 649.917678][ T5632] Bluetooth: hci0: command tx timeout [ 650.037336][T29676] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.044497][T29676] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.053818][T29676] bridge_slave_0: entered allmulticast mode [ 650.061114][T29676] bridge_slave_0: entered promiscuous mode [ 650.069311][T29676] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.077110][T29676] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.084467][T29676] bridge_slave_1: entered allmulticast mode [ 650.092187][T29676] bridge_slave_1: entered promiscuous mode [ 650.118500][T29676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.131012][T29676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.161173][T29676] team0: Port device team_slave_0 added [ 650.168814][T29676] team0: Port device team_slave_1 added [ 650.192341][T29676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.199668][T29676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.225749][T29676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.239160][T29676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.246183][T29676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.272368][T29676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.314113][T29676] hsr_slave_0: entered promiscuous mode [ 650.322026][T29676] hsr_slave_1: entered promiscuous mode [ 650.328489][T29676] debugfs: 'hsr0' already exists in 'hsr' [ 650.334803][T29676] Cannot create hsr debugfs directory [ 650.462335][T29676] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.474141][T29676] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 650.485912][T29676] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 650.590422][T29676] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.602010][T29676] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 650.613642][T29676] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 650.689316][T29676] .`: (slave netdevsim1): Releasing backup interface [ 650.699243][T29676] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 650.710417][T29676] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.721522][T29676] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 650.731790][T29676] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 650.795102][T29676] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.807749][T29676] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 650.819655][T29676] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 650.972505][T29676] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 650.982277][T29676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.990536][T29676] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 651.000488][T29676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.008641][T29676] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 651.019146][T29676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.027471][T29676] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 651.037614][T29676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.111237][T29676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.161015][T29676] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.173615][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.180734][ T9833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.195446][T24479] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.202581][T24479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.502368][T29676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.687569][T29676] veth0_vlan: entered promiscuous mode [ 651.700248][T29676] veth1_vlan: entered promiscuous mode [ 651.732393][T29676] veth0_macvtap: entered promiscuous mode [ 651.743491][T29676] veth1_macvtap: entered promiscuous mode [ 651.775546][T29676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.797523][T29676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.814625][ T112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.829837][ T112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.852273][ T112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.875917][ T112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.996238][ T50] Bluetooth: hci0: command tx timeout [ 652.025153][ T9833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.049559][ T9833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.100894][T24497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.109737][T24497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.056625][T24479] net_ratelimit: 32 callbacks suppressed [ 653.056647][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 653.176148][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 653.286111][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 653.406830][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 653.447460][T29592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.516489][ T9833] bond2: (slave bridge2): failed to get link speed/duplex [ 653.626130][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 653.736424][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 653.846102][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 653.966292][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 654.086509][ T50] Bluetooth: hci0: command tx timeout [ 656.156674][ T50] Bluetooth: hci0: command tx timeout [ 658.126173][T24483] net_ratelimit: 41 callbacks suppressed [ 658.126194][T24483] bond2: (slave bridge2): failed to get link speed/duplex [ 658.158405][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.256643][T24479] bond2: (slave bridge2): failed to get link speed/duplex [ 658.366155][T24497] bond2: (slave bridge2): failed to get link speed/duplex [ 658.477459][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 658.586170][T24489] bond2: (slave bridge2): failed to get link speed/duplex [ 658.637278][T29589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.696126][ T112] bond2: (slave bridge2): failed to get link speed/duplex [ 658.798095][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.807043][T24489] bond2: (slave bridge2): failed to get link speed/duplex