last executing test programs: 21m49.707338473s ago: executing program 3 (id=3643): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="0000000000000000b702000000000000850000001d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 21m48.911238297s ago: executing program 3 (id=3648): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101200000000000000073797a0d00000000050001008f00"/42], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x414843, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'gretap0\x00', 0x420}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r9}, 0x10) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x1, r9, 0x20, r2}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200050e000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000040000000000000000fe8000000000000000000000200400bb0000000000000000"], 0x70}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200050e000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000040000000000000000fe8000000000000000000000200400bb0000000000000000"], 0x70}, 0x1, 0x7}, 0x0) 21m47.205653448s ago: executing program 3 (id=3655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4000884) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x70, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x14, 0x1, 0x70bd2a, 0x25dfdbfb, {0xf, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x29, 0x1, "039f9c3b56a9a752ee924eb13c1f481e64fd9128b35f4c55e89c8b56bc059c7356e5690426"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21m46.948871291s ago: executing program 3 (id=3658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000009c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xc63d}]}}]}, 0x3c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000840)={0x29, 0x1}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000a80)={0x2, &(0x7f0000000000)=[{0x40, 0x20, 0x0, 0xff}, {0x6, 0x0, 0x8, 0x4}]}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_udp_int(r7, 0x88, 0x1, &(0x7f0000000080), 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="200025bd7000fddbdf2508000000240001800800032001000000082003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x21c}}, 0x801) r8 = socket(0x23, 0x5, 0x0) recvmsg(r8, &(0x7f0000000440)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/136, 0x88}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/31, 0x1f}], 0x3, &(0x7f0000000340)=""/244, 0xf4}, 0x12022) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000000)) socket$inet6(0xa, 0x6, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500009c210749a942b576e7d9223d0000000079109d000000000005a0f4ff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=@newtfilter={0x2d8, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2a4, 0x2, [@TCA_MATCHALL_ACT={0x2a0, 0x2, [@m_ife={0x124, 0x13, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xffff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0xfef, 0x10000001, 0x9, 0x40}, 0x1}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0xbe, 0x6, "96f71a3f5c1cd45e3012566f28a06fad7b9de95a1a964f5ee04d5c688dfdeae7fe86b93c1173d0dc8af6084a699aae49fc2bc9ddcae5811bbda8e3fa5c7627a763ee0a39a68cb50572390c96d3961b834d7961208e4051d8ff0cadf03e7a8436ba9912cea0c9c21452e942d7298aa4a9b88bf7ee166bfb54af32948f4b690113b62c78e6e09b0f6c6aa145f19029606193da1fa91f1e29e83cba928ac167c5968259f3b845f880e666557a26ee74118b41001c033c73d9bcfc01"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x178, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xb0}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xd, 0x5, 0x7, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffff8c4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff5}]}, {0xfc, 0x6, "71f164223568071bc93932febc624d613ad643414c52089ee9b47a07bf319e39f4450455a26450f9af3a34c77ddf039d5f4a5b478c3e8d1341131d3781d02ceb45743bb1523e97a7be7a07a962189985a0dd22a651599e61d72ba4ca3e492ebeeb3d90ef0e5e734f509af1cf4d9526e0aac198d424dabfb59081e7186070d66919ddd1bc78c38a28fc2de4c58b60648e8f47623f1354e8a78931ddb6849845b4a3000d401336072b867fed648112843ec96fb0e94b9bc9abee44009db5178e26bb675c569b14ccf6ffc4da3406b9ab9985282dcd1a5609a925aa02cc2fe5f002544c9d450a11e40b2a020c542bcf347a488dde20b27e252b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="040000000000000000006700000008000300", @ANYRES32=r13, @ANYBLOB="2de96269929910aa78c9ed99c178408870fe845bc4859bad6d1c2679d640557413c5619bccce30d539f36974b57c82a8dafcd5ae81816e368acfa7d9cd89857a37325d02f8ea9344959e5e5c260bac0b473d118fd48b27ca6939afbb71c262aa174b15f5368c00229e7108d1b4aaa02961e293bc2ad3b5ba056cc427abf7f8e00c79344d3ce57aeb8e442cbefbd2830a73757949df0865887b5ced11615fb3b87931834becfd9966e7521c11b3"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0xa17aabded77fd16f}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}}, 0x810) 21m46.300638917s ago: executing program 3 (id=3665): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) 21m45.658230109s ago: executing program 3 (id=3671): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01000000001c029fe200001c000000030000000e0000000000000a0102000001000001000000110100"/55], 0x0, 0x37}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x1, 0x1, 0xfffffffc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r5, &(0x7f0000000040)={0x2, 0xfff0, @empty}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001e000100"/28], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) (async, rerun: 64) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x4018, r3}, 0x18) (async) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) (async) r9 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 21m30.535934428s ago: executing program 32 (id=3671): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01000000001c029fe200001c000000030000000e0000000000000a0102000001000001000000110100"/55], 0x0, 0x37}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x1, 0x1, 0xfffffffc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x100000, 0x1}}, 0x40) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7, 0x48, 0x7, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, {[@cipso={0x86, 0xa, 0x0, [{0x5, 0x4, "749d"}]}, @cipso={0x86, 0xa, 0x2, [{0x1, 0x4, "b3ce"}]}]}}}}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r5, &(0x7f0000000040)={0x2, 0xfff0, @empty}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001e000100"/28], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) (async, rerun: 64) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x0, 0x4018, r3}, 0x18) (async) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) (async) r9 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.930268203s ago: executing program 2 (id=17036): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 2.497424972s ago: executing program 2 (id=17040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030069087a300000000060000000060a010400000000000000000500400008000b400000000038000480340001800b00010074756e6e656c0000240002800800034000000000080001400000000908000340000000f5080002400000000c0900010073797a3000"], 0xd4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000110087d44a372eaf541d000a07000000", @ANYRES32=r0, @ANYRESDEC=0x0], 0x44}}, 0x2000800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="110000005500e3ffffff0000000000a806bf27802704", @ANYRES32=0x0], 0x18}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000140)=[@in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e21, 0x1, @private2, 0x3b5d1a97}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES8=r1], 0xfdef) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x572, 0x6}, 0x90) pipe(&(0x7f0000000040)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000e0000200000000000000000000000800656da8bf2f00"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) r10 = socket(0x1e, 0x4, 0x0) ppoll(&(0x7f0000000240)=[{r10, 0x8}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0x93, 0x6}, 0x20) 2.417766473s ago: executing program 1 (id=17042): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="4cd668fca8b086882d9c3e64d31decf9f3ed7c195d30e130ba7d7eaefa457defad949234376ec3cdf4a007d912b52854be7838962914328f55cee608d24a647e43356e706bd4164ef10ff79b78f9214e74599f9016b650e93415b5e56d95c798c1971af90a15795438965fc1ab12097bb4ded89203e40ad6619a2b3351a230f8710c999a2f20a2f00ea771c51a29538af5aa1aa9a3355e2e3be85544231e2fbb3ffdc6733feeceab82f260fa6a4a23b9f9218dc7ff9c2ef041274cedc62158ecfc7a574b155ea480f8df1d0675dea743f31c68943f062116ee5fd89a45e2992805c580e4482a02271611454683b2a1af4802e8", 0xf3}, {&(0x7f0000000140)="200a2b13e7176a44fad6152f66f6ac1cfa52eff787ff4c65cc4856bfffd757f1ac57f5ea0227599391737564c62003cc49c2071856ecc9c7c3c104e8c7c32f70873893576f3d0472fa3ee8f6c3e665a68e68fd2872b748d37fc950013dbb43c0679be94c765501f27fd35879064a97b219a2fed1943853cc9e25cd69d2f8cbea6384053e6605bdef31c08a72b9ec65075a24f6ad64a98e1866198a591d88b17f8b6b4327a696c37e576855c7b3150d82427bd1c47f5387092393a5c0c8912fc957619ad22e6a631c00", 0xc9}, {&(0x7f0000000240)="d351d80a8cf2cbbb2ffbf2918480ed3adce80629875fbf204459923b294c6f0ba5006089f4a6685cf61e1064164ca801efa13e7bf10e574576fabb61e298c77d0f26d317ad041ddce0feac5d6ba3de87c2805363851030a2d3b9940ae2eb5b0a04714c8626bb96e2fd1a967b2c920d043f999d949a80aacf7c17a68491b48227b8fe26740faee2910a456c4cfa32510337fd46caacc30301bd65b378c7cb9fb8fde56cca48953727b14a72edec", 0xad}, {&(0x7f0000000340)="92637b79e3d4207c7f8f7dd0bc4cba609d09668eb757240c1879bbe644f039c209e2009797b0f2dcb537f3f297a94ef8c9895dc7cd7c7a3ac21e90e5cccbc2f557cacc5d6b769087a9ece94ea1e42bbfb9d2a7a91d8ff7fa93da7c6c98b55bde3fd635e3e0ee8cf6ef809d228af68c87d50c09a91a960731e55f83e5c61ef689b54835beb72f8ebda0193d402055496f742f8f0c277301b83fe045df1bdcb955450fc20108ef2b6acaa620054a681e35d2d8def7e47df04ea949983c4ed507c39f44786e9d151b6e7c42fd2fa332578ee988c49f", 0xd4}], 0x4, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="dd39c7477f3bc1c9a8758a66221061b8f9e31a411c9cbb8a0109cb7fc01d8a9e9055d619223e7f394f0bde046161d886f4962fc43ceaec766949564192c1348223cc7aedc74baf944a1cebb5252ce6fca86f898f0094d86593fe0a73bce7ab8cb30d49c563b7c9f190c3", 0x6a}, {&(0x7f0000000580)="2445c840ef7ce5006a4825c0fdb988746f4efdb885bd0a2d23ce5eff51c9ae2d222715caa5de8f07d79bf19f7d99043c1450aa0f868b94145dbdadc8a9dddb4d1ce5aa9fc2ca773988f30e10282260d4c6161100a3f8e66dc2453022a3fd455c21898da61d194ff3d3aa5a66bc38a58537a3fb1dd9026657a39e35a83b84c188bde1acc4ffcd6c140572118d8da7147c4c33472f2704b5ae13f608ebd161ade1fc57c691b051754b9d17a2c855d3f60a009724384d479f52", 0xb8}], 0x2, &(0x7f0000000640)=[@iv={0x28, 0x117, 0x2, 0x13, "ae6b1b288f10dddbfdd5b8207c54e6860a966e"}], 0x28, 0x20004040}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)="ec804a41899ca9dcbadab668e6e7762f1df9ef393652049695cb4676d13e5ba0a87220d7925a9adf7b3b02b1fd8479f9d82bbb6860b920e6c7b43ecd75d42ecfeb061e137561522fe6d7bb370e9e66e431f7cb3d753ffab35128937031ae8b0c1a336d4e58118e987fcc588eaaa610113d746b2036eeca109dfbf976c345ff85cfe4a74d167665bcd90a9e1095fab8ffc964db00fa3d80c99adb04dfc29b12be780726821cfc5ed483942b204bdf7f4797f5fabd849ca3c3132acacdc86ac5bba876be332b29afcc36e930b07c899b519cd554b159657707e249e85a1d5e29366afd16442b1c429be8", 0xe9}, {&(0x7f0000000780)="628373dfc7d4884b7913f0269dbf5116293dedfd4fa0e431e67bd7d7cf69595803c1ac80c6264892c0c55e73852f641c8bf6492f2900133056d30d8e989e96c637eec9fa30fd4939f9d0d9d42e861906135f5c00ee6e5b80a44aa69750110b7f603708b0f3b8810cdbc011e77a03c2715c3a84638da0815b3d0a175f474f33062c195917c0277d32b110db802843dd6847cfebd8512cf15020a036efd19ab481eb3393fc3e55a2b17a3945c3bc2ad44d3db822ceca6e436a08d1d971691775081bd6ecbccefe92bb967ab90b9c2c72066e68", 0xd2}, {&(0x7f0000000880)="59c072f70d90b2d43b4d2aa18e80d7bb4c6ea5a1ed6edfefd9e6760d9d1228f8baefa3a52d10d26e9f828edf5501245343ff7d9bceba7743235c9e5a1f641fa3c6a1f5607f8502b42b6666927670342c76a599e0fa71dfc2a0ca0639001872117777bede5ddd003bda035a278c8e6e677648b383a3129cd32eb244325316590b0dd9460eb1f15628140d249d82c57420809825c58b040f2660e0f3757520f4313ef90ba9859dcbc1306ba859d369a25d7cdab7ad42a1ad2a8ec6044588b90189e0ff0f8c4bef56bc2bf5dbedc0c8c3040d95510a4187fea30f682a5519027f035c681713cd69", 0xe6}], 0x3, &(0x7f00000009c0)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x85, "2a9afc88a7b7a6e306f03b4cebcd251239d8f5bb1cad7e79029e517af660c11e2eadcdb2116fa01450bc6399851c07aa48ea8ee97c71c69ddb8dd3bae9e125f6aaae727e4529f2137a2b7ac51c79faa33e0c6f44a87dda67fb149d8426910443982d7ef82ed0573119aaebaad0c28fc7a8c8f3514790d552b5476529d1235565bf4a243420"}], 0xd0, 0x4000}, {0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x40}], 0x4, 0x1c0b86c8691b3238) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.121697241s ago: executing program 2 (id=17045): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00000000000000000700000000000000007f000001000000000000000000000000000000d8"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x255fdbbf, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x24}}, 0x8800) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f0000001f00)=""/4062, &(0x7f00000001c0)=0xfde) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000390400000000fbdbdf2500000000", @ANYRES32=r8, @ANYBLOB="01980000031700004c0012800800010067747000400002800800040000000000080004000200000008000200", @ANYRES32=r4, @ANYBLOB="0500fcffffffffff040005000000000014000800fc020000000000000000000000000000ba0556f8ffeab6d2f1cbc97e1e70fb803bbed59335a5ec156de35238f31489ede976b2e427115b98303eb87c277e15cbb8baf156b4b2c27566b18860a311690a182aecbd3b892961d80f0000bce5a339a958faedc7bb895f2c54fba4baeae23a86456bf93eb3dae690313b69d57e755dd5800d2779e33a154207d38f3897dedf7af89d4cfb3327bb6eebf9c4982e38e50eefeecabb8272fa03996cd255609e3b8f7e1f6abbb60ee043bde6"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRESOCT=r7, @ANYRES32=r3, @ANYBLOB="15b20d6b492ae741f483a9abe4ba37d0e356df846badf43d4a1c7bc52e3f83f2cccb8368eecbf167080fa1fff76399c8aace1aab19e24e14e1013bf0a9a60e4caeef097506dfa5629ccfe3a4882717f511588f73a569de8fc2bf3794ad8580937a8d262b3580fb"], 0x10}}, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000abaff9), 0x10) 1.732914965s ago: executing program 5 (id=17050): r0 = socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x6e24, 0xa1c, @remote, 0x1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x78a4}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0xfffffe9e}, 0x48) 1.581935853s ago: executing program 5 (id=17052): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.501347874s ago: executing program 0 (id=17053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x34, r1, 0x639fe759bb2d0663, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="72934ded3b58"}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) 1.500993304s ago: executing program 4 (id=17054): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000006800010000000000fddbdf25020000000000000006000700010000000c000880050004000100000008000500", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x440a}, 0x4040414) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}}) unshare(0x22020400) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x6e02a6c3770c3083) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x4, 0x6, 0x5, 0xdc4, 0x10, @private0, @private1, 0xa0, 0xf818, 0x6, 0x32c0e99b}}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f00000001a00000029bd7000fbdbdf25fc000000000000000000000000000000200100000000000000000000000000014e24068d4e2307ff020020802b000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="ffffffff000000000000000000000000000004d46c000000fc00000000000000000000000000000105000000000000000000008000000000e108000000000000b15500000000000045c62653ce225eed5dff01000000000000530a00040000000000000000000000800700000000000000030000000000000005000000000000000100008000000000800000000000000008093dba8e00be887b8a4497197d17e9927a9607b6427d"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.484685507s ago: executing program 5 (id=17055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r4, 0x421, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000814}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) socket$inet(0x2, 0x1, 0xf) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x3f9, 0x0, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) 1.455138577s ago: executing program 1 (id=17056): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x2c}}, 0x0) r7 = getpid() sendmsg$netlink(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)={0x22c, 0x2d, 0x20, 0x70bd26, 0x25dfdbfd, "", [@nested={0xe5, 0x153, 0x0, 0x1, [@typed={0xc, 0xd1, 0x0, 0x0, @u64=0x800}, @generic="5880f99bd1cad6b2644d2d5c13f1189f07a308b9079169ec5a99c5f8568c055839421be1980d4181d0045a51789fa718631b3efca253a72d3bdc983748b74bab93f3c9069fa7bbc018c801898b8947fe40cc4791bf93a85fbd141b5438b8f8f46b3b30e68a555f0a608c9332f47fb26c49d99ab38c3ab7022c5cdb73516c37ea01a95d230f510eeef733bda862defa9e773e0e2758764044c2840e3542ff00ab944e26b4841a990fd70dc217eb5a61f091589fbac6fa999e709ebf13090975b2ba", @typed={0x8, 0x13a, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x13}]}, @typed={0xc, 0x119, 0x0, 0x0, @u64=0x80000001}, @generic="cfac59c431012902cc88b8ef957075fb2ad1c5e3940e88012a8df97f0b329b14cbce7070b8c691471e70d91b20c06541b9d1e448e424cb23530fa79b008f2dfbd5270db2d1cb7f0a208b96d3d9ca3d5b95bd207d16bcb8a52c48e554595bcd8f4d04e27449823b6cf2", @typed={0x4, 0x152}, @typed={0x4, 0xcd}, @nested={0xb4, 0x83, 0x0, 0x1, [@generic="850350eb4fc2470f007e9ff305c4fded15bc97de214a4324d51ab6e3d1c561bdfbe1325aac0333ef0f82187e00000024cc9b773a0889b37d1a3aca57664cd5666149d04bc57017fa210747bbc5188effdda3058ddd9ff01fa5683c5ef5b964f589bb49b8d259df31d5461c4c374503210adffc17431d0b4b61ce4582038a1706bdee56e692b79c76bee78da1c629e6e6900e7cd4f75d715d08710b7e9d2e33a38d1bad3757093700", @nested={0x4, 0xfe}, @nested={0x4, 0x153}]}]}, 0x22c}, {&(0x7f0000003980)={0xf0, 0x1e, 0x200, 0x70bd26, 0x25dfdbfc, "", [@generic="57d052cb8b62b78c947f6a4a44ed981bb86090304eb6c59fc2e04516fcc23beb7367ecf65346a19375c9ce2d29d8c8", @generic="4ec2bc2c0fa538eb5f5f2411c89cf47e2f9a33a5caf1bb2a83ec0a0a0b51ef9f75970f569b1b9ba45bc4dd6bcdbca56c9b89fe79a809205730a6d6aabee9e3cc58e28f41c20d002484b42be7eb435c942c579099a9332322be9f", @typed={0x21, 0x6b, 0x0, 0x0, @binary="7fadf946fb6387b73dbf3dce84ac56edf90783df1ffb8d8714095714ed"}, @nested={0x2d, 0x34, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="fc14272bd63ca0ca0615edb69936c9927dfbd8b8f56a7663e65fcd53d18d13ab6e346f99b3"]}]}, 0xf0}, {&(0x7f0000001040)={0x280, 0x32, 0x200, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x25c, 0x7a, 0x0, 0x1, [@nested={0x258, 0xec, 0x0, 0x1, [@nested={0x20, 0x131, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x86}, @nested={0x4, 0xf8}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r7}, @nested={0x4, 0xc2}]}, @nested={0x234, 0x83, 0x0, 0x1, [@nested={0x4, 0x153}, @typed={0xc, 0x13e, 0x0, 0x0, @u64=0x40}, @nested={0x220, 0x146, 0x0, 0x1, [@nested={0x21a, 0x38, 0x0, 0x1, [@generic="b0bb3d3077fe7678cc667dad3e71c8babde5b6dc673b", @nested={0x10f, 0x152, 0x0, 0x1, [@generic="d379988a8bd12e6ed471f8c3f0657d699d9f4a6c43c5996fe0c98bd3bfe3ec25dcf7b36e749e305469d478a125370c17473069419631", @generic="51df84c94facbfec9b19d35db34d40c5280f89ea6f6635a396d560c278bf36e6f749b1b0df30725b08c89513cad964a1146b9d96e2427102db5a10e8c2cb442f2684a33d7429a48d94bbbf6c0e0f1e14de9d1b2ad45a4d93ccd6b2ffeaac843197092825a9f1dd28727be94662a5401eefaae79022adc8ccd164629982ff9dfd4bcdc1c15a495c68fef566e435d4f45c5f1d511e9f90407ab03d84ea9e917cf31ebb6d11ba7bdfd1e2e421f88f9e187a3b0b7f49a19399237fd0c479838d466005c9971245c855ebba0bf887c09783bd3e", @nested={0x4, 0x11d}]}, @nested={0xe8, 0x44, 0x0, 0x1, [@generic="451b3a7a4ca5bf6e09f42ae148de667834cdeb92b7a988417a4c3aa11aaaca01754c143d4689e59871086a008c348f3df848960ed50a9a908467fd4e8253f590fcda79dd18c01673fda47d00aa77e55676a0d115f286793432e642e995129e027a3eaa9ac6", @typed={0xc, 0x96, 0x0, 0x0, @u64=0x9}, @generic="8cb6ac5857cd5db1aba50fa3ab0346e2d88e03c89f686eef65a77ed9d97c85207515fcdd3e219cabaccf27b278fb2b47c391bb1a367f20c2e794f1d10be7af49977fb39e220e21c9b3075a81e5b767eb4d8ab77364abc7cdf85abf", @nested={0x4, 0x7c}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x2}, @nested={0x4, 0x54}, @nested={0x4, 0xfb}]}, @typed={0x6, 0x2f, 0x0, 0x0, @str='[\x00'}]}]}]}]}]}]}, 0x280}], 0x3, 0x0, 0x0, 0x4c0d1}, 0x404c014) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000540), 0x6e, &(0x7f0000000600)=[{&(0x7f00000009c0)=""/192, 0xc0}, {&(0x7f0000000a80)=""/174, 0xae}, {&(0x7f0000000b40)=""/114, 0x72}, {&(0x7f0000000c40)=""/148, 0x94}], 0x4, &(0x7f0000000d00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0) sendmmsg$inet(r8, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="f0", 0x1}], 0x1}}], 0x1, 0x24044c41) ppoll(&(0x7f0000000380)=[{r8, 0x6006}], 0x1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$tipc(r1, &(0x7f00000004c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x3}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="0e07eb146a90918c287bf5bf17700e038b5f1e55fe0c1a3af368e4eed70650e0c868b20ebe57ebbc80c0644ce6b88a46cf3faf97dfb70fb13d0553b48ab5c3e150edf5c22edc017b0dbb8cd44c61a52e830aa1adc32670c4424d4d578a4a1bf1a13ca6904b0913a1794e0013014ad35554a55ee6ccb89a063e4c0511cf4304bff9a469c99170ae8a4f35bd149dbc48b7739e7440c73e549f5966de0ecc5b030faf8394f782a53f9258702f5c678ed8cb4dcccd6bd2bd4567c78c32dc621133e2b2389ab23fb7681e63911c", 0xcb}, {&(0x7f0000000080)="244e54da", 0x4}, {&(0x7f0000000280)="551a08136acdbd522fcc397d293ed4d10f10ba7fa146ce812e31a7bc856cd525b9d4280fa9625ea72e8ec9185a52162f47a3d25763dd75323a2bd124d6481d59d94e11ca748e88124d968d756bd7264e901fe01fb8827e979585066c316087179ef09df653e2a7aaad3bcf66236524ae2da1ee30f6b18db90a70", 0x7a}, {&(0x7f0000000300)="ccc670a92aa06eac30c6e8a14dc0dbd2d697231a5eba3e29e3b6557a73aba3f57f55c7f1fc43aec1f9255ec672c6cbba9a1eb93dfc99c6d1e19a0a159199d63957dbe447ae2d39c22cb061f4cafcd4d0fd9b0fe345a95377796bc62acfa3eed757efa77812e7e567f7458e8b23e9ea0c30b5b9ac25237c243466ee7c6d992d3ebc71ce432cd6806ef7afe696", 0x8c}], 0x4, &(0x7f00000003c0)="9ed132dfda0647aa93a3975cbb6a13c998846f732a0194362c73ac4b80c8d0e117158e97d3a1a277b90e51b9240d30a23fe02ed3e867b21ded769ab6728e8f76a27b436b6dc3889f82c2564604a25bae48dc9e6b8762be82a9c9d2efe011bd0d0b2d481b3079f78c985adc7952d019de7a192a4f0548357be982b573d67fff8fa036570236521c646b4736f7a4d81ff928d4a33d5551222217babda55b3b1355043dacb3ad7c04120de0dde80c41067a527ad5c8ef399f1a866c50cdf6e287ccfc86b8e6c3bce8c597791106234d06757ec1c27fa887f7a0cf03", 0xda, 0x80}, 0x8804) 1.28901542s ago: executing program 1 (id=17057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x8020) r1 = socket(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r3, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x10}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x800, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.288808655s ago: executing program 4 (id=17058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0c0000000000000000000000000000000073797a32000000000900010073797a30000086002c000480280001800b0064006f62577265660000188002800900040073797a3208000340000000001400e4f06a7a010000000000b9d799987b7ebacb47f95d4750e0eba7991ee200000000a09f1920d617120ef040f2608fc1c7ad46a1ae6aa4f954bab386a3ced8e5aa0f1f8024f2bf4ebad64baa50435d39c195de72ff5cb73c69d5cbc2bd687f9901f1fe9c21fd11511698bcd29df5fea39dd21c632a18cf"], 0x80}}, 0x0) 1.288209079s ago: executing program 0 (id=17059): socket$phonet(0x23, 0x2, 0x1) (async) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000000)='veth1_to_hsr\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x40800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @void}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={0x0, r4}, 0x18) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x2d, 0x44, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0x4, [{@empty, 0x7}, {@multicast2, 0x6}, {@multicast2, 0x1}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local}, {@in6=@mcast2, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, {}, {}, {0xffffffff}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x21}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.191068904s ago: executing program 4 (id=17060): r0 = socket(0x27, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1, 0x0, 0xfffffffffffffd22}, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xcbc0}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004880}, 0x8041) socket(0x27, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1, 0x0, 0xfffffffffffffd22}, 0x0) (async) close(r0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000180)=0x57) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_FLUSH(r4, 0x0, 0xd0, 0x0, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) (async) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xcbc0}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004880}, 0x8041) (async) 1.147908275s ago: executing program 2 (id=17061): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80000) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x7, @none, 0x3}, 0xe) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000e8f9756985000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 1.101492366s ago: executing program 1 (id=17062): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) sendto$packet(r5, &(0x7f0000002400)="800000800000210ee7decd7a0000", 0xe, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0x3}, 0x14) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @mss={0x2, 0xe1e7}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @timestamp, @sack_perm, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.084684482s ago: executing program 0 (id=17063): r0 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6134) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.059650098s ago: executing program 5 (id=17064): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x80) (async) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) ioctl(r2, 0x8b29, &(0x7f0000000040)) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x67, 0x9, 0xfffeffff, 0x7}, &(0x7f0000000080)=0x14) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000100), 0x4) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={r7, 0x1}, 0x8) (async) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f0000000100)) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c20800000000000000aa08004500002800640000040290ca72d47800000000e000000211009078e000fe01000000020000000400"], 0x0) 925.446453ms ago: executing program 4 (id=17065): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x255fdbbf, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x24}}, 0x8800) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x4, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newneigh={0x38, 0x1c, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, r3, 0x10, 0x16, 0x4}, [@NDA_LLADDR={0xa}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x38}}, 0x0) 924.453213ms ago: executing program 2 (id=17066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x4}}]}, 0x2c}}, 0x20000000) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000631121010000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r7 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1400000010000100000000000000000001000400000000f0ffff0002000000000000000000000402200008000e0a010800000000003f8ce22500b0837c00000a00080900010073797a31000000001400000011000100000000000000000007"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8084) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000013000500fdfffffffeffffff07000000", @ANYRES32=r6, @ANYBLOB="08300000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) recvmmsg(r7, &(0x7f0000000e00)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/187, 0xbb}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x8, &(0x7f00000009c0)=""/147, 0x93}, 0x1}, {{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000a80)=""/96, 0x60}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f0000000c00)=""/232, 0xe8}], 0x2, &(0x7f0000000d00)=""/225, 0xe1}, 0x3}], 0x3, 0xbedc1187b01e344f, &(0x7f0000000ec0)) 853.642444ms ago: executing program 5 (id=17067): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc, @loopback, 0xdf, 0x2}, 0x20) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) 830.765529ms ago: executing program 1 (id=17068): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r2, &(0x7f00000002c0)="aa69c2eb87", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5e}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r6 = socket(0x2b, 0x1, 0x0) listen(r6, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, 0x0) (async) close(r3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x3f7, 0x20, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 769.660617ms ago: executing program 0 (id=17069): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000fc0)={0xa, 0x4e24, 0x5, @loopback, 0xb}, 0x1c) recvmmsg(r0, &(0x7f0000000500), 0x38, 0x2100, 0x0) 735.429328ms ago: executing program 5 (id=17070): socket(0x1a, 0xa, 0x7) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000070000000000c6347715068c4b52c15cb579920fa637563dff336d0055ba340042a75cf44a2f37170ed2aeb8ec723a650a415d31ce0bf5dd3d6be01ffa528d5f213437778a9efd3b60b39fe24592cbd279e4f72b80cceec5a00ab4f1d68a410de5da575499cd7cbfe6592e38a779bc751edeb553eb2e3bd40bf82d0e3d923afdc52c2119da185b57efe16f669b9518aeeb61430bdd06b74fc1641885907303263776b150fe63918c4b7ee10e552e7900"/199, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="18070003ea49ab21ce6458ae632b9c5ceb910000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000064000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r8, 0x0, 0x0, 0x563de1c6eba3ad61, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001100a7cc4a", @ANYRES32=r3, @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x20008005}, 0x848) 678.948869ms ago: executing program 0 (id=17071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) syz_emit_ethernet(0x179, &(0x7f0000000240)={@random="e00031d8640a", @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x18000}, {0xc40}], @generic="b3201912aecfbf1378d867ed8cf2a27cff9e1ac0aa2ef9339ea85f1994782741ed34cf94b58467cfb149f4a64f140097ce744d87b00c1ca72f72808a8422510f1bd0cf193278c76784ca6682389b9c208f0a0724f8968fc9ebad4b0bcbcb339f647138de045bcb21365bff4391332745318dad802f2aa3662f41d3d714dd5d265ada1f05bcb5d6e8f047de2e64c4b6c8cef666eae175d1001020b858fbcc41060c628949c5fddb22149a09f0b656a68de06276fa406e959be7a69c9b343e6b964175cf7df63eff79aa3ba480dacc1515d822db3f3a64d5fa802c9d242eb266482606eb390268a9b5b46baba860496ad12a51357ec510046c6f5b0d27bc21a5e7bcfd783f0805a175b8db60730047a51ec5f80d7eef2a38bb1cf7e319c444af87a5362d4010311587f950f56f74a594db4e6c559299a146b3af1a6c480e3cf88245d4fc1f881c9870a34882cd07b3e9e20e014e0fb8df1a1d5eec7ab7e28ba0"}}}}, 0x0) 604.729927ms ago: executing program 4 (id=17072): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000140009050000000000000000020100fe", @ANYRES32=r4, @ANYBLOB="080003000000000208000200ac"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000480)={0x44, r5, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffd, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) 596.9501ms ago: executing program 1 (id=17073): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r3, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000100", @ANYRES32, @ANYBLOB="08000300e00000020500090008"], 0x58}}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) 515.220792ms ago: executing program 0 (id=17074): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4800) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@loopback}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef98b", @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 352.797126ms ago: executing program 4 (id=17075): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10004, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r1, &(0x7f00000000c0), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000007300000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$inet6(0xa, 0x803, 0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x2, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r7) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028cd7000fddbdf251c000000080003000300000008000400001000000800010080"], 0x2c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @volatile]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000200)=""/191, 0x3b, 0xbf, 0x1}, 0x28) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=17076): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x4e, 0xb, 0x5, 0xf9, 0x67, 0x8, 0x9, 0x4, 0x98, 0x2, 0x0, 0x7, 0x2}, 0xe) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x7}, 0x6) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYBLOB="5c24b6e436dbb6d707f02b573bd4f86124340af246189686711b8ce845a206430e21c841f485a1181b3d6acd737de2da79cd1fdb47c8760a36f59c562222b4ca7d0d81c3a0d6f25f016be21b0c0e9e51a814e62b02bb88fcd6ae379c62f6e44f6f4c4d0622fcd7cb06a9822fb10a65e9affbe13da6eb8c388be5128fbbc4461d641da216b00698aad9ee909ece417780a562dd7b22de046fcb6232079a1a60089ec95f9827cdf0b397f9c13437cb6dc3849e5c0feed579ca1ff4539c781877815bcd9cb56982aba189779879c116e7280ae71db243bfe0748755499bcc05e55a", @ANYBLOB="0a0001"], 0x48}}, 0x0) kernel console output (not intermixed with test programs): 1656.840700][T25327] lec:lec_start_xmit: lec0:No lecd attached [ 1656.931862][T30842] block nbd10: server does not support multiple connections per device. [ 1656.950031][T30842] block nbd10: shutting down sockets [ 1657.413023][T14132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.501566][T30860] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1657.531709][T30860] bond1 (unregistering): Released all slaves [ 1657.571514][ T1437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.812788][T30871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15332'. [ 1657.838110][T30872] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15332'. [ 1657.917465][T30876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15332'. [ 1658.117639][T30882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1658.156716][T30882] bond0: entered allmulticast mode [ 1658.173696][T30882] bond_slave_0: entered allmulticast mode [ 1658.190267][T30882] bond_slave_1: entered allmulticast mode [ 1658.251737][T30886] syzkaller0: entered promiscuous mode [ 1658.278319][T30886] syzkaller0: entered allmulticast mode [ 1658.622347][ T9234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.704145][T30906] netlink: 'syz.2.15341': attribute type 1 has an invalid length. [ 1658.753551][T30906] team0: Port device veth3 added [ 1658.825051][T30906] team0: Port device veth0_to_bond added [ 1658.862895][T30909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15342'. [ 1658.876533][T30909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15342'. [ 1658.886403][T30909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15342'. [ 1658.923309][T30906] team0: Port device veth5 added [ 1658.940127][T30906] netlink: 'syz.2.15341': attribute type 1 has an invalid length. [ 1658.954474][T30906] netlink: 'syz.2.15341': attribute type 2 has an invalid length. [ 1658.992490][T30909] IPVS: persistence engine module ip_vs_pe_ not found [ 1659.160762][T30919] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15345'. [ 1659.170855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.275202][T30923] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15346'. [ 1659.294493][T30925] netlink: 'syz.1.15347': attribute type 18 has an invalid length. [ 1659.545353][T30936] netlink: 'syz.2.15349': attribute type 21 has an invalid length. [ 1659.651221][ T9234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.717074][T30939] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 1659.765483][T30939] bond13 (unregistering): Released all slaves [ 1659.990308][T30936] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15349'. [ 1660.057754][T30939] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 1660.070064][T30939] bond13 (unregistering): Released all slaves [ 1660.100402][T30944] netlink: 'syz.0.15351': attribute type 11 has an invalid length. [ 1660.213846][T30939] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 1660.237199][T30939] bond13 (unregistering): Released all slaves [ 1660.383756][T30939] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 1660.415028][T30939] bond13 (unregistering): Released all slaves [ 1660.451785][T12001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.526097][T30963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1660.601374][T30968] : entered promiscuous mode [ 1660.711642][T30973] Unsupported ieee802154 address type: 0 [ 1660.720076][T30974] Unsupported ieee802154 address type: 0 [ 1661.002670][T30986] netlink: 'syz.4.15363': attribute type 1 has an invalid length. [ 1661.139409][T30986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1661.224609][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1661.244654][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1661.266190][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1661.276621][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1661.290556][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1661.292543][T30986] bond1: (slave gretap1): making interface the new active one [ 1661.387517][T30986] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1661.617795][T31003] syzkaller0: entered promiscuous mode [ 1661.639653][T31003] syzkaller0: entered allmulticast mode [ 1661.889936][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 1661.898010][ C1] lec:lec_tx_timeout: lec0 [ 1662.103381][T31019] __nla_validate_parse: 2 callbacks suppressed [ 1662.103403][T31019] netlink: 256 bytes leftover after parsing attributes in process `syz.2.15370'. [ 1662.170874][T31019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15370'. [ 1662.194796][ T9954] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.223490][ T9954] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.244868][T31021] netem: change failed [ 1662.308692][T31029] geneve3: entered promiscuous mode [ 1662.338024][T31029] geneve3: entered allmulticast mode [ 1662.347547][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15373'. [ 1662.376776][ T9954] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.388908][T31025] netlink: 'syz.4.15373': attribute type 14 has an invalid length. [ 1662.408747][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15375'. [ 1662.419838][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15373'. [ 1662.433020][ T9954] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.484960][ T9955] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1662.504708][ T9955] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1662.581570][ T9954] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.603063][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15373'. [ 1662.629687][ T9954] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.639676][T31025] netlink: 'syz.4.15373': attribute type 14 has an invalid length. [ 1662.659682][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15373'. [ 1662.682941][ T77] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1662.707745][ T77] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1662.734121][T30995] chnl_net:caif_netlink_parms(): no params data found [ 1662.801945][ T9954] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1662.820428][ T9954] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.024845][T31054] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 1663.333541][ T5834] Bluetooth: hci0: command tx timeout [ 1663.470214][T30995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.570427][T31077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15384'. [ 1663.661183][T30995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.668575][T30995] bridge_slave_0: entered allmulticast mode [ 1663.691768][T30995] bridge_slave_0: entered promiscuous mode [ 1663.703672][ T9957] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.703847][T31080] netlink: 'syz.1.15385': attribute type 21 has an invalid length. [ 1663.722148][T31077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15384'. [ 1663.767661][ T9960] netdevsim netdevsim5 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.780199][T31077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15384'. [ 1664.309513][T31078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.317323][T31078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.880267][T31078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.943920][T31078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.420304][ T5834] Bluetooth: hci0: command tx timeout [ 1665.677513][T30995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.687381][T30995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.695672][T30995] bridge_slave_1: entered allmulticast mode [ 1665.704807][T30995] bridge_slave_1: entered promiscuous mode [ 1665.751790][T31077] geneve2: entered promiscuous mode [ 1665.757056][T31077] geneve2: entered allmulticast mode [ 1665.845286][ T9955] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.864599][ T9955] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.884942][ T9955] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1665.905609][ T9955] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1666.132831][ T36] netdevsim netdevsim5 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.156987][T30995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1666.204511][T30995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.393911][ T9950] netdevsim netdevsim5 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.477747][T31132] netlink: 'syz.1.15400': attribute type 39 has an invalid length. [ 1666.834355][ T9954] bond6 (unregistering): (slave gretap2): Releasing active interface [ 1666.869035][ T9954] dvmrp6 (unregistering): left allmulticast mode [ 1667.357850][T31142] __nla_validate_parse: 4 callbacks suppressed [ 1667.357871][T31142] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.15403'. [ 1667.414879][ T9954] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1667.434160][ T9954] bond0 (unregistering): Released all slaves [ 1667.449161][ T9954] bond1 (unregistering): Released all slaves [ 1667.473276][ T9954] bond2 (unregistering): (slave lo): Releasing backup interface [ 1667.482766][ T9954] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1667.498705][ T5834] Bluetooth: hci0: command tx timeout [ 1667.506761][ T9954] bond2 (unregistering): Released all slaves [ 1667.530661][ T9954] bond3 (unregistering): Released all slaves [ 1667.555243][ T9954] bond4 (unregistering): Released all slaves [ 1667.581544][ T9954] bond5 (unregistering): Released all slaves [ 1667.605945][ T9954] bond6 (unregistering): Released all slaves [ 1667.631541][ T9954] bond7 (unregistering): Released all slaves [ 1667.656070][ T9954] bond8 (unregistering): Released all slaves [ 1667.685691][ T9954] bond9 (unregistering): Released all slaves [ 1667.709389][ T9954] bond10 (unregistering): Released all slaves [ 1667.737536][ T9954] bond11 (unregistering): Released all slaves [ 1667.766649][ T9954] bond12 (unregistering): Released all slaves [ 1667.818486][T30995] team0: Port device team_slave_0 added [ 1667.963374][T30995] team0: Port device team_slave_1 added [ 1668.052528][ T9954] : left promiscuous mode [ 1668.197394][ T9954] tipc: Left network mode [ 1668.226311][T30995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.242190][T30995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.274548][T30995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.315637][T30995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.323593][T30995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.426139][T30995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.682141][T31174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1668.860931][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1668.935532][T30995] hsr_slave_0: entered promiscuous mode [ 1668.958587][T30995] hsr_slave_1: entered promiscuous mode [ 1668.981971][T30995] debugfs: 'hsr0' already exists in 'hsr' [ 1668.998234][T30995] Cannot create hsr debugfs directory [ 1669.430414][ T9954] hsr_slave_0: left promiscuous mode [ 1669.442074][ T9954] 0: left promiscuous mode [ 1669.461962][ T9954] veth1_macvtap: left promiscuous mode [ 1669.467525][ T9954] veth0_macvtap: left promiscuous mode [ 1669.488042][ T9954] veth1_vlan: left promiscuous mode [ 1669.528474][ T9954] veth0_vlan: left promiscuous mode [ 1669.570933][ T5834] Bluetooth: hci0: command tx timeout [ 1669.614077][T31217] netlink: 'syz.0.15419': attribute type 3 has an invalid length. [ 1669.881384][T31228] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1670.234986][T31229] ip6gre0: Master is either lo or non-ether device [ 1670.572754][T31241] netlink: 84 bytes leftover after parsing attributes in process `syz.2.15425'. [ 1670.677027][T30995] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.884898][ T9954] IPVS: stop unused estimator thread 0... [ 1670.942850][T30995] netdevsim netdevsim5 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.102797][T30995] netdevsim netdevsim5 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.275452][T30995] netdevsim netdevsim5 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.350008][T31278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15431'. [ 1671.369550][T31278] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1671.420812][T31282] netlink: 312 bytes leftover after parsing attributes in process `syz.1.15432'. [ 1671.883790][T30995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1671.965342][T30995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1672.008224][T30995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1672.009876][T31303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15437'. [ 1672.034485][T30995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1672.097670][T31305] syzkaller0: entered promiscuous mode [ 1672.103374][T31305] syzkaller0: entered allmulticast mode [ 1672.309286][T30995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.385781][T30995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.408442][T31319] netlink: 208 bytes leftover after parsing attributes in process `syz.1.15440'. [ 1672.433098][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.440322][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.465263][T31323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15441'. [ 1672.488533][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.495729][ T9976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.529944][T31323] openvswitch: netlink: Unknown nsh attribute 0 [ 1672.679268][T31319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15440'. [ 1673.073336][T31349] netlink: 11 bytes leftover after parsing attributes in process `syz.0.15442'. [ 1673.108922][T31349] netlink: 11 bytes leftover after parsing attributes in process `syz.0.15442'. [ 1673.168235][T31353] netlink: 11 bytes leftover after parsing attributes in process `syz.0.15442'. [ 1673.277245][T31353] netlink: 11 bytes leftover after parsing attributes in process `syz.0.15442'. [ 1673.320307][T31368] pimreg: entered allmulticast mode [ 1673.342650][T31367] syz_tun: entered allmulticast mode [ 1673.493235][T31367] syz_tun: left allmulticast mode [ 1673.525072][T30995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.615848][T31376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15450'. [ 1673.824286][T31384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15451'. [ 1673.889892][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1673.898001][ C1] lec:lec_tx_timeout: lec0 [ 1674.173136][T31411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1674.180477][T31411] IPv6: NLM_F_CREATE should be set when creating new route [ 1674.187731][T31411] IPv6: NLM_F_CREATE should be set when creating new route [ 1674.250905][T31414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15456'. [ 1674.260650][T31414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.355213][T31414] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1674.406135][T31414] batman_adv: batadv0: Removing interface: ipvlan2 [ 1674.452702][T31414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.524242][T31428] netlink: 'syz.2.15461': attribute type 1 has an invalid length. [ 1674.570458][T31428] netlink: 'syz.2.15461': attribute type 2 has an invalid length. [ 1674.721220][T30995] veth0_vlan: entered promiscuous mode [ 1674.766596][T30995] veth1_vlan: entered promiscuous mode [ 1674.877197][T30995] veth0_macvtap: entered promiscuous mode [ 1674.916392][T30995] veth1_macvtap: entered promiscuous mode [ 1674.974311][T31451] netlink: 'syz.4.15466': attribute type 1 has an invalid length. [ 1674.999091][T30995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.017931][T30995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.073039][T31451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1675.143634][T31454] veth7: entered allmulticast mode [ 1675.267750][T31465] netlink: 'syz.4.15466': attribute type 1 has an invalid length. [ 1675.315163][T31456] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1675.340542][T31465] netlink: 'syz.4.15466': attribute type 2 has an invalid length. [ 1675.348913][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.389032][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.428937][T31459] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1675.464039][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.483769][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.911818][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1675.935865][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.140472][ T9950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.148344][ T9950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.566691][T31533] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1677.080542][T31550] netlink: 'syz.2.15491': attribute type 13 has an invalid length. [ 1677.092365][T31562] syzkaller0: entered promiscuous mode [ 1677.103149][T31562] syzkaller0: entered allmulticast mode [ 1678.141802][T31603] __nla_validate_parse: 15 callbacks suppressed [ 1678.141822][T31603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15508'. [ 1678.185886][T31605] lo: Caught tx_queue_len zero misconfig [ 1678.250665][T31605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15509'. [ 1678.428597][ T29] audit: type=1107 audit(1771466538.675:16): pid=31613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='y[cYvbKfVtE' [ 1678.486754][T31627] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15515'. [ 1678.560238][T31627] tipc: Invalid UDP bearer configuration [ 1678.560307][T31627] tipc: Enabling of bearer rejected, failed to enable media [ 1678.610261][T31633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1678.817376][T31643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15519'. [ 1679.043030][T31655] mac80211_hwsim hwsim192 wlan0: entered promiscuous mode [ 1679.067491][T31653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1679.271020][T31677] netlink: 'syz.2.15528': attribute type 3 has an invalid length. [ 1679.362101][T31682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15530'. [ 1679.456056][T31688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15531'. [ 1679.477388][T31692] netlink: 88 bytes leftover after parsing attributes in process `syz.2.15531'. [ 1679.537490][T31695] netlink: 100 bytes leftover after parsing attributes in process `syz.5.15533'. [ 1679.547364][T31697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15534'. [ 1679.573992][T31697] sctp: [Deprecated]: syz.4.15534 (pid 31697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1679.573992][T31697] Use struct sctp_sack_info instead [ 1679.854949][T31710] netlink: 'syz.5.15538': attribute type 1 has an invalid length. [ 1679.893745][ T9234] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1679.943932][T31710] netlink: 'syz.5.15538': attribute type 1 has an invalid length. [ 1680.250639][T31726] netlink: 76 bytes leftover after parsing attributes in process `syz.2.15544'. [ 1680.285956][ T6492] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.316586][ T6492] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.339974][T31729] netlink: 'syz.0.15542': attribute type 1 has an invalid length. [ 1680.341018][ T6492] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.410600][ T9950] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1680.709629][T31754] SET target dimension over the limit! [ 1680.746036][T31754] netlink: 'syz.2.15548': attribute type 5 has an invalid length. [ 1680.983393][T31779] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1681.004650][T31779] bond3: (slave lo): Enslaving as an active interface with an up link [ 1681.016100][T31779] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1681.547257][T31816] netlink: 'syz.5.15562': attribute type 8 has an invalid length. [ 1681.631370][T31821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1682.451131][T31873] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1682.526831][T31867] netlink: 'syz.5.15576': attribute type 13 has an invalid length. [ 1682.601767][T31867] lec:lec_start_xmit: lec0:No lecd attached [ 1682.832583][T31884] netlink: 'syz.1.15583': attribute type 23 has an invalid length. [ 1683.227680][T31924] netlink: 'syz.1.15593': attribute type 5 has an invalid length. [ 1683.296828][T31910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.912088][T31956] nbd10: detected capacity change from 0 to 127 [ 1684.005119][ T5834] block nbd10: Receive control failed (result -104) [ 1684.402988][T31995] __nla_validate_parse: 10 callbacks suppressed [ 1684.403011][T31995] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15608'. [ 1684.660737][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15610'. [ 1684.726083][T32015] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15610'. [ 1684.773238][T32015] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1684.936814][ T5487] veth0_macvtap: left promiscuous mode [ 1685.275722][T32023] bond1: option fail_over_mac: invalid value (16) [ 1685.354829][T32023] bond1 (unregistering): Released all slaves [ 1685.418704][T32019] syzkaller0: entered promiscuous mode [ 1685.430149][T32049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15615'. [ 1685.437843][T32019] syzkaller0: entered allmulticast mode [ 1685.440163][T32049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15615'. [ 1685.451375][T32031] netlink: 'syz.2.15616': attribute type 12 has an invalid length. [ 1685.720514][T32058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15621'. [ 1685.739215][T32060] veth0: entered promiscuous mode [ 1685.758111][T32058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15621'. [ 1685.896293][T32054] veth0: left promiscuous mode [ 1686.098444][T32082] netlink: 452 bytes leftover after parsing attributes in process `syz.2.15626'. [ 1686.152123][T32087] veth1_macvtap: left promiscuous mode [ 1686.157652][T32087] macsec0: entered promiscuous mode [ 1686.212026][T32087] macsec0: entered allmulticast mode [ 1686.313808][T32087] veth1_macvtap: entered promiscuous mode [ 1686.337421][T32087] veth1_macvtap: entered allmulticast mode [ 1686.357167][T32087] macsec0: left promiscuous mode [ 1686.376060][T32087] macsec0: left allmulticast mode [ 1686.389219][T32087] veth1_macvtap: left allmulticast mode [ 1686.639357][T32125] netlink: 'syz.1.15636': attribute type 1 has an invalid length. [ 1686.665928][T32125] netlink: 'syz.1.15636': attribute type 1 has an invalid length. [ 1686.965023][T32138] bond8: option fail_over_mac: invalid value (16) [ 1686.982571][T32138] bond8 (unregistering): Released all slaves [ 1687.311110][T32157] sctp: [Deprecated]: syz.5.15643 (pid 32157) Use of int in maxseg socket option. [ 1687.311110][T32157] Use struct sctp_assoc_value instead [ 1687.322308][T32158] sit1: entered promiscuous mode [ 1687.356091][T32158] sit1: entered allmulticast mode [ 1687.683663][T32178] netlink: 'syz.2.15650': attribute type 1 has an invalid length. [ 1687.699728][T32178] netlink: 96 bytes leftover after parsing attributes in process `syz.2.15650'. [ 1687.716673][T32178] netlink: 1 bytes leftover after parsing attributes in process `syz.2.15650'. [ 1687.763278][T32187] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1687.889519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 1687.897606][ C1] lec:lec_tx_timeout: lec0 [ 1687.900849][T32197] netlink: 'syz.1.15655': attribute type 1 has an invalid length. [ 1687.903461][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1687.959310][T32197] tc_dump_action: action bad kind [ 1688.312026][T32208] syzkaller0: entered promiscuous mode [ 1688.317736][T32208] syzkaller0: entered allmulticast mode [ 1690.926397][T32240] __nla_validate_parse: 7 callbacks suppressed [ 1690.926418][T32240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15671'. [ 1691.106172][T32250] netlink: 128 bytes leftover after parsing attributes in process `syz.5.15676'. [ 1691.130041][T32250] netlink: 128 bytes leftover after parsing attributes in process `syz.5.15676'. [ 1691.175845][T32261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15677'. [ 1691.266149][T32255] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.15677'. [ 1691.276008][T32255] netlink: Conntrack attr has 4 unknown bytes [ 1691.668942][T32284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15683'. [ 1691.678366][T32284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15683'. [ 1691.691300][T32284] xt_policy: output policy not valid in PREROUTING and INPUT [ 1691.726109][T32285] syzkaller0: entered allmulticast mode [ 1691.920218][T32297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15688'. [ 1692.010315][T32303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1692.750271][T32352] netlink: zone id is out of range [ 1692.755450][T32352] netlink: zone id is out of range [ 1692.770356][T32352] netlink: zone id is out of range [ 1692.775518][T32352] netlink: zone id is out of range [ 1692.801615][T32352] netlink: zone id is out of range [ 1692.806786][T32352] netlink: zone id is out of range [ 1692.811809][T32361] bridge_slave_0: left allmulticast mode [ 1692.817748][T32361] bridge_slave_0: left promiscuous mode [ 1692.824377][T32361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.835189][T32352] netlink: zone id is out of range [ 1692.848322][T32352] netlink: zone id is out of range [ 1692.919482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1692.922099][T32361] bridge_slave_1: left allmulticast mode [ 1692.927529][ C1] lec:lec_tx_timeout: lec0 [ 1692.951840][T32371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15710'. [ 1692.962620][T32361] bridge_slave_1: left promiscuous mode [ 1692.976255][T32373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15712'. [ 1692.980158][T32361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.009020][T32361] bond0: (slave bond_slave_0): Releasing backup interface [ 1693.030884][T32361] bond0: (slave bond_slave_1): Releasing backup interface [ 1693.057740][T32361] team0: Port device team_slave_0 removed [ 1693.073305][T32361] team0: Port device team_slave_1 removed [ 1693.080366][T32361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1693.087796][T32361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.099016][T32361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.107792][T32361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.133004][T32371] : renamed from veth1_vlan (while UP) [ 1693.530724][T32399] syzkaller0: entered promiscuous mode [ 1693.536369][T32399] syzkaller0: entered allmulticast mode [ 1693.548428][T32404] nbd: couldn't find a device at index 2 [ 1693.758365][T32417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1693.765728][T32417] IPv6: NLM_F_CREATE should be set when creating new route [ 1693.773035][T32417] IPv6: NLM_F_CREATE should be set when creating new route [ 1693.800761][T32415] netlink: 'syz.2.15728': attribute type 4 has an invalid length. [ 1694.100491][T32434] vlan2: entered promiscuous mode [ 1694.114521][T32434] bridge0: entered promiscuous mode [ 1694.126810][T32434] vlan2: entered allmulticast mode [ 1694.161856][T32434] bridge0: entered allmulticast mode [ 1694.331943][T32450] tipc: Enabling of bearer rejected, media not registered [ 1694.599030][T32457] syzkaller1: entered promiscuous mode [ 1694.606935][T32457] syzkaller1: entered allmulticast mode [ 1695.150677][T32488] netlink: 'syz.5.15747': attribute type 10 has an invalid length. [ 1695.360777][T32497] netlink: 'syz.2.15751': attribute type 16 has an invalid length. [ 1695.714811][T32521] netlink: 'syz.1.15759': attribute type 10 has an invalid length. [ 1695.988507][T32534] __nla_validate_parse: 11 callbacks suppressed [ 1695.988528][T32534] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.15763'. [ 1696.541852][T32585] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15779'. [ 1696.582580][T32582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15777'. [ 1696.605823][T32589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15780'. [ 1696.628921][T32587] syzkaller0: entered promiscuous mode [ 1696.635113][T32587] syzkaller0: entered allmulticast mode [ 1696.654300][T32589] ip6tnl0: Caught tx_queue_len zero misconfig [ 1696.687573][T32589] Bluetooth: MGMT ver 1.23 [ 1696.847838][T32605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15784'. [ 1696.881574][T32605] netlink: 'syz.2.15784': attribute type 1 has an invalid length. [ 1696.895665][T32605] netlink: 'syz.2.15784': attribute type 1 has an invalid length. [ 1696.910911][T32605] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.15784'. [ 1696.921741][T32611] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15785'. [ 1697.027717][T32619] netlink: 'syz.1.15788': attribute type 1 has an invalid length. [ 1697.054689][T32619] netlink: 'syz.1.15788': attribute type 7 has an invalid length. [ 1697.088708][T32619] netlink: 'syz.1.15788': attribute type 8 has an invalid length. [ 1697.120150][T32619] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15788'. [ 1697.214135][T32630] tipc: Enabling of bearer rejected, failed to enable media [ 1697.256556][T32630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15792'. [ 1697.268475][T32630] net_ratelimit: 12 callbacks suppressed [ 1697.268493][T32630] xfrm0: mtu less than device minimum [ 1697.435765][T32639] netlink: 'syz.0.15795': attribute type 11 has an invalid length. [ 1697.458774][T32639] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15795'. [ 1697.672241][T32657] netlink: 'syz.5.15799': attribute type 1 has an invalid length. [ 1697.729700][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1698.192344][T32683] Unsupported ieee802154 address type: 0 [ 1698.198373][T32683] Unsupported ieee802154 address type: 0 [ 1698.219657][T32683] Unsupported ieee802154 address type: 0 [ 1698.225364][T32683] Unsupported ieee802154 address type: 0 [ 1698.249861][T32683] Unsupported ieee802154 address type: 0 [ 1698.851266][ T9950] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.882040][ T9950] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.925934][ T9950] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.955192][T32732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1698.982363][ T9950] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1699.276465][T32750] validate_nla: 1 callbacks suppressed [ 1699.276486][T32750] netlink: 'syz.1.15823': attribute type 8 has an invalid length. [ 1700.268359][ T349] netlink: 'syz.2.15841': attribute type 1 has an invalid length. [ 1700.802740][ T382] x_tables: unsorted entry at hook 2 [ 1701.040922][ T400] __nla_validate_parse: 30 callbacks suppressed [ 1701.040944][ T400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15853'. [ 1701.167000][ T392] bond8: entered promiscuous mode [ 1701.172698][ T392] bond8: entered allmulticast mode [ 1701.178616][ T392] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1701.416546][ T419] netlink: 'syz.5.15859': attribute type 11 has an invalid length. [ 1701.876347][ T453] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15870'. [ 1702.105740][ T471] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1702.147239][ T472] pim6reg527: entered allmulticast mode [ 1702.240126][ T482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15873'. [ 1702.406222][ T487] bridge11: entered promiscuous mode [ 1702.420762][ T487] bridge11: entered allmulticast mode [ 1702.448326][ T489] netlink: 'syz.2.15877': attribute type 1 has an invalid length. [ 1702.555776][ T489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1702.609364][ T495] bond2: (slave geneve2): making interface the new active one [ 1702.642009][ T495] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1702.692034][ T508] netlink: 'syz.1.15881': attribute type 1 has an invalid length. [ 1702.712670][ T508] netlink: 236 bytes leftover after parsing attributes in process `syz.1.15881'. [ 1702.733607][ T513] netlink: 'syz.0.15883': attribute type 26 has an invalid length. [ 1702.849900][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 1702.857968][ C1] lec:lec_tx_timeout: lec0 [ 1702.863466][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1703.042628][ T532] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1703.176940][ T545] netlink: 'syz.1.15892': attribute type 10 has an invalid length. [ 1703.187995][ T546] netlink: 176 bytes leftover after parsing attributes in process `syz.5.15888'. [ 1703.232708][ T535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.240710][ T535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.293001][ T545] mac80211_hwsim hwsim150 wlan1: entered allmulticast mode [ 1703.322740][ T545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1703.481853][ T559] mac80211_hwsim hwsim180 : renamed from wlan1 [ 1703.778549][ T576] xt_hashlimit: size too large, truncated to 1048576 [ 1704.242587][ T601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15905'. [ 1704.392964][T12005] IPVS: starting estimator thread 0... [ 1704.461993][ T613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15907'. [ 1704.502607][ T611] IPVS: using max 29 ests per chain, 69600 per kthread [ 1704.545955][ T620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15910'. [ 1704.600969][ T620] sctp: [Deprecated]: syz.1.15910 (pid 620) Use of int in maxseg socket option. [ 1704.600969][ T620] Use struct sctp_assoc_value instead [ 1704.701880][ T620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15910'. [ 1704.725576][ T620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15910'. [ 1705.347293][ T653] syzkaller0: entered promiscuous mode [ 1705.367256][ T653] syzkaller0: entered allmulticast mode [ 1705.404389][ T653] 0: reclassify loop, rule prio 0, protocol 800 [ 1705.635779][ T677] sctp: [Deprecated]: syz.5.15925 (pid 677) Use of int in max_burst socket option deprecated. [ 1705.635779][ T677] Use struct sctp_assoc_value instead [ 1705.758384][ T686] netlink: 'syz.0.15926': attribute type 10 has an invalid length. [ 1705.834730][ T686] batman_adv: batadv0: Adding interface: netdevsim0 [ 1705.887401][ T686] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1705.978703][ T686] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1706.216408][ T716] __nla_validate_parse: 4 callbacks suppressed [ 1706.216433][ T716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15933'. [ 1706.655047][ T750] syzkaller0: entered promiscuous mode [ 1706.674699][ T750] syzkaller0: entered allmulticast mode [ 1706.744292][ T5834] Bluetooth: hci0: link tx timeout [ 1706.752129][ T5834] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1706.842141][ T758] netlink: 'syz.4.15942': attribute type 27 has an invalid length. [ 1707.147438][ T775] syzkaller1: entered promiscuous mode [ 1707.153295][ T775] syzkaller1: entered allmulticast mode [ 1707.187730][ T769] netlink: 'syz.2.15947': attribute type 21 has an invalid length. [ 1707.196055][ T769] IPv6: NLM_F_CREATE should be specified when creating new route [ 1707.205701][ T769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1707.213002][ T769] IPv6: NLM_F_CREATE should be set when creating new route [ 1707.220265][ T769] IPv6: NLM_F_CREATE should be set when creating new route [ 1707.227469][ T769] IPv6: NLM_F_CREATE should be set when creating new route [ 1707.296860][ T3570] Bluetooth: hci0: link tx timeout [ 1707.304108][ T3570] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1707.478959][ T9950] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.492501][ T9950] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.502736][ T9950] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.516850][ T9950] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.526885][ T9950] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.537115][ T9950] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.546753][ T780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15950'. [ 1707.572080][ T9950] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1707.582822][ T9950] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.664507][ T783] netlink: 9 bytes leftover after parsing attributes in process `syz.5.15951'. [ 1707.675706][ T783] gretap0: entered promiscuous mode [ 1707.687041][ T785] netlink: 'syz.2.15952': attribute type 1 has an invalid length. [ 1707.695000][ T783] gretap0: left promiscuous mode [ 1707.717221][ T783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.725673][ T783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1707.736655][ T783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1707.803794][ T787] bond3: (slave bridge1): Enslaving as a backup interface with an up link [ 1707.837423][ T785] bond3: (slave bridge2): Enslaving as a backup interface with a down link [ 1707.861049][ T790] netlink: 'syz.5.15953': attribute type 32 has an invalid length. [ 1707.869259][ T790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15953'. [ 1707.889718][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1707.897855][ C1] lec:lec_tx_timeout: lec0 [ 1707.914392][ T790] bond1: Setting coupled_control to off (0) [ 1707.925569][ T790] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1707.936576][ T795] netlink: 'syz.2.15954': attribute type 1 has an invalid length. [ 1707.997580][ T792] Cannot find add_set index 0 as target [ 1708.772797][ T3570] Bluetooth: hci0: command 0x0406 tx timeout [ 1709.280324][ T723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1709.518890][ T810] lo: entered allmulticast mode [ 1709.525328][ T818] netlink: 56 bytes leftover after parsing attributes in process `syz.0.15961'. [ 1709.613053][ T818] bond2 (unregistering): Released all slaves [ 1709.716464][ T825] netlink: 80 bytes leftover after parsing attributes in process `syz.2.15963'. [ 1709.727078][ T827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15964'. [ 1709.738707][ T825] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15963'. [ 1709.802990][ T825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15963'. [ 1709.882591][ T833] netlink: 'syz.0.15966': attribute type 1 has an invalid length. [ 1709.894199][ T833] netlink: 160 bytes leftover after parsing attributes in process `syz.0.15966'. [ 1709.928425][ T827] bond2: (slave vcan1): refused to change device type [ 1710.169748][ T851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.676693][ T885] netlink: 'syz.1.15983': attribute type 4 has an invalid length. [ 1710.697146][ T885] wlan1: mtu less than device minimum [ 1710.919124][ T899] sctp: [Deprecated]: syz.0.15988 (pid 899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1710.919124][ T899] Use struct sctp_sack_info instead [ 1711.001559][ T907] netlink: zone id is out of range [ 1711.006897][ T907] netlink: zone id is out of range [ 1711.012409][ T907] netlink: zone id is out of range [ 1711.017702][ T907] netlink: zone id is out of range [ 1711.023379][ T907] netlink: zone id is out of range [ 1711.028677][ T907] netlink: zone id is out of range [ 1711.039211][ T907] netlink: zone id is out of range [ 1711.044610][ T907] netlink: zone id is out of range [ 1711.118565][ T909] netlink: 'syz.0.15991': attribute type 13 has an invalid length. [ 1711.149019][ T909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1711.213467][ T917] netlink: 'syz.0.15992': attribute type 83 has an invalid length. [ 1711.346062][ T925] rdma_op ffff8880567ed1f0 conn xmit_rdma 0000000000000000 [ 1711.515577][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.534194][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.556043][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.565599][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.574387][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.583359][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.592106][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.600698][ T940] netlink: 'syz.5.15997': attribute type 10 has an invalid length. [ 1711.913309][ T959] __nla_validate_parse: 1 callbacks suppressed [ 1711.913332][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16001'. [ 1711.947014][ T959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16001'. [ 1711.963024][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16001'. [ 1711.973325][ T959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16001'. [ 1712.387432][ T985] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.16012'. [ 1712.692520][ T998] x_tables: duplicate entry at hook 3 [ 1712.727322][ T3570] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1712.743506][ T3570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1712.761008][ T998] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16016'. [ 1712.776875][ T3570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1712.778057][ T1003] lo: Caught tx_queue_len zero misconfig [ 1712.809169][ T3570] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1712.821456][ T3570] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1712.860247][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1713.077150][ T1010] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16019'. [ 1713.091413][ T1009] vcan0: entered allmulticast mode [ 1713.134088][ T1009] netlink: 67 bytes leftover after parsing attributes in process `syz.0.16018'. [ 1713.145590][ T1009] nlmon0: Caught tx_queue_len zero misconfig [ 1713.181925][ T1013] netlink: 666 bytes leftover after parsing attributes in process `syz.4.16020'. [ 1713.216136][ T1013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16020'. [ 1713.320969][ T1023] bridge0: port 3(syz_tun) entered blocking state [ 1713.327814][ T1023] bridge0: port 3(syz_tun) entered disabled state [ 1713.335789][ T1023] syz_tun: entered allmulticast mode [ 1713.344959][ T1023] syz_tun: entered promiscuous mode [ 1713.482355][ T999] chnl_net:caif_netlink_parms(): no params data found [ 1713.729193][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.743908][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.752700][ T999] bridge_slave_0: entered allmulticast mode [ 1713.772561][ T999] bridge_slave_0: entered promiscuous mode [ 1713.793763][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.808597][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.830408][ T999] bridge_slave_1: entered allmulticast mode [ 1713.846533][ T999] bridge_slave_1: entered promiscuous mode [ 1713.923194][ T999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1713.952629][ T999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1714.051579][ T999] team0: Port device team_slave_0 added [ 1714.062754][ T999] team0: Port device team_slave_1 added [ 1714.145603][ T999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.170940][ T999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.247985][ T999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.262772][ T999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.290616][ T5200] block nbd10: Possible stuck request ffff888026760000: control (read@0,1024B). Runtime 30 seconds [ 1714.295882][ T999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.302976][ T5200] block nbd10: Possible stuck request ffff888026760200: control (read@1024,1024B). Runtime 30 seconds [ 1714.341518][ T5200] block nbd10: Possible stuck request ffff888026760400: control (read@2048,1024B). Runtime 30 seconds [ 1714.354707][ T5200] block nbd10: Possible stuck request ffff888026760600: control (read@3072,1024B). Runtime 30 seconds [ 1714.383198][ T999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.413030][ T1062] gre0: Caught tx_queue_len zero misconfig [ 1714.557283][ T999] hsr_slave_0: entered promiscuous mode [ 1714.586538][ T999] hsr_slave_1: entered promiscuous mode [ 1714.617010][ T999] debugfs: 'hsr0' already exists in 'hsr' [ 1714.633660][ T999] Cannot create hsr debugfs directory [ 1714.747124][ T1093] physdev_mt_check: 55 callbacks suppressed [ 1714.747145][ T1093] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1714.781222][ T1091] ip6gre1: entered allmulticast mode [ 1714.933740][ T5834] Bluetooth: hci5: command tx timeout [ 1714.987927][ T1100] veth1_macvtap: left promiscuous mode [ 1715.106532][ T999] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.121364][ T999] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.163927][ T1106] tipc: Started in network mode [ 1715.179012][ T1106] tipc: Node identity 5e67432b0e4f, cluster identity 4711 [ 1715.187709][ T1106] tipc: Enabled bearer , priority 0 [ 1715.256450][ T1110] syzkaller0: entered promiscuous mode [ 1715.262952][ T1110] syzkaller0: entered allmulticast mode [ 1715.269128][ T1110] tipc: Resetting bearer [ 1715.287897][ T999] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.300798][ T999] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.326846][ T1113] tipc: Resetting bearer [ 1715.433649][ T1125] ipt_ECN: cannot use operation on non-tcp rule [ 1717.019978][ T5834] Bluetooth: hci5: command tx timeout [ 1717.521471][ T1113] tipc: Disabling bearer [ 1717.531812][ T9234] tipc: Node number set to 1344815915 [ 1717.543059][ T999] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.553452][ T999] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.622480][ T999] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.633093][ T999] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.890138][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1717.898184][ C1] lec:lec_tx_timeout: lec0 [ 1717.903145][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1718.179861][ T1117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1718.381483][ T999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1718.404274][ T999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1718.484826][ T999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1718.513767][ T1166] validate_nla: 62 callbacks suppressed [ 1718.513788][ T1166] netlink: 'syz.0.16052': attribute type 1 has an invalid length. [ 1718.545166][ T999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1718.563828][ T1166] __nla_validate_parse: 9 callbacks suppressed [ 1718.563910][ T1166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16052'. [ 1718.594904][ T1171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16054'. [ 1718.614180][ T1170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16051'. [ 1718.665690][ T1180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16051'. [ 1718.726792][ T1171] bond5: Invalid ad_actor_system MAC address. [ 1718.733226][ T1171] bond5: option ad_actor_system: invalid value (1) [ 1718.743044][ T1171] bond5 (unregistering): Released all slaves [ 1718.751519][ T1187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16056'. [ 1718.896524][ T1187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1718.966808][ T1196] bond5: entered promiscuous mode [ 1718.972279][ T1196] bond5: entered allmulticast mode [ 1718.977980][ T1196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1719.090160][ T5834] Bluetooth: hci5: command tx timeout [ 1719.140532][ T999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.193441][ T999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.216746][ T1209] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1719.251488][T24925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.258682][T24925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.344446][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.351692][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.550874][ T999] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1719.663724][ T1229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16065'. [ 1719.712283][ T1229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16065'. [ 1719.770063][ T1229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16065'. [ 1719.816076][ T1235] netlink: 'syz.0.16069': attribute type 1 has an invalid length. [ 1719.942661][ T1235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1719.943607][ T1250] net_ratelimit: 62 callbacks suppressed [ 1719.943624][ T1250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1719.951705][ T1249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.036033][ T1244] bond3: (slave gretap1): making interface the new active one [ 1720.073751][ T1244] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1720.095326][ T1254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16071'. [ 1720.196977][ T999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1720.304950][ T1269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16075'. [ 1720.312018][ T1268] netlink: 'syz.4.16077': attribute type 1 has an invalid length. [ 1720.328110][ T1269] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1720.396843][ T1276] bond5: (slave geneve3): making interface the new active one [ 1720.406504][ T1276] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1720.406754][ T1277] xt_hashlimit: size too large, truncated to 1048576 [ 1720.435417][ T999] veth0_vlan: entered promiscuous mode [ 1720.449149][ T999] veth1_vlan: entered promiscuous mode [ 1720.467797][ T9976] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1720.486375][ T1269] SET target dimension over the limit! [ 1720.510801][ T1280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.526595][ T9976] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1720.557950][ T9976] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1720.600341][ T9976] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1720.655586][ T999] veth0_macvtap: entered promiscuous mode [ 1720.705528][ T999] veth1_macvtap: entered promiscuous mode [ 1720.735325][ T999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.762193][ T999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.792043][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.826504][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.865880][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.896909][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.087483][ T1295] bond6: Removing last arp target with arp_interval on [ 1721.134030][ T1303] syzkaller1: entered promiscuous mode [ 1721.141361][ T1303] syzkaller1: entered allmulticast mode [ 1721.170866][ T5834] Bluetooth: hci5: command tx timeout [ 1721.176660][ T1301] tipc: Started in network mode [ 1721.182948][ T1301] tipc: Node identity 7a6cca2784ea, cluster identity 4711 [ 1721.267885][ T1301] tipc: Enabled bearer , priority 0 [ 1721.297775][ T1307] syzkaller0: entered promiscuous mode [ 1721.305583][ T1307] syzkaller0: entered allmulticast mode [ 1721.368990][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.382267][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.418018][ T1319] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1721.438515][ T1319] bond7 (unregistering): Released all slaves [ 1721.487723][ T1307] tipc: Resetting bearer [ 1721.514529][ T1307] tipc: Disabling bearer [ 1721.639027][T24925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.666058][T24925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.000586][ T1353] netlink: 'syz.0.16096': attribute type 2 has an invalid length. [ 1722.016672][ T1351] vlan2: entered allmulticast mode [ 1722.022594][ T1351] geneve1: entered allmulticast mode [ 1722.350422][ T1371] team1: entered promiscuous mode [ 1722.355876][ T1371] team1: entered allmulticast mode [ 1722.396908][ T1372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.676872][ T1389] s5: renamed from vlan1 (while UP) [ 1722.909475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1722.917578][ C1] lec:lec_tx_timeout: lec0 [ 1722.931065][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1722.963079][ T1408] dvmrp0: entered allmulticast mode [ 1723.206321][ T1429] netlink: 'syz.0.16119': attribute type 4 has an invalid length. [ 1723.362751][ T1444] sctp: [Deprecated]: syz.4.16122 (pid 1444) Use of int in max_burst socket option deprecated. [ 1723.362751][ T1444] Use struct sctp_assoc_value instead [ 1723.418799][ T1444] netlink: 'syz.4.16122': attribute type 1 has an invalid length. [ 1723.708742][ T1455] netlink: 'syz.0.16125': attribute type 10 has an invalid length. [ 1723.854985][ T1462] __nla_validate_parse: 10 callbacks suppressed [ 1723.855005][ T1462] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.16127'. [ 1724.243335][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16135'. [ 1724.366418][ T1480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16132'. [ 1724.397181][ T1492] Cannot find del_set index 65534 as target [ 1724.506465][ T1503] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16139'. [ 1724.810040][ T1522] netlink: 67 bytes leftover after parsing attributes in process `syz.4.16143'. [ 1724.876194][ T1524] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1725.078543][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16149'. [ 1725.089104][ T1537] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 1725.139307][ T1544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16152'. [ 1725.158941][ T1544] block nbd11: Unsupported socket: should be TCP or UNIX. [ 1725.184978][ T1537] team1: entered promiscuous mode [ 1725.203708][ T1537] team1: entered allmulticast mode [ 1725.258726][ T1554] sctp: [Deprecated]: syz.1.16154 (pid 1554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1725.258726][ T1554] Use struct sctp_sack_info instead [ 1725.495307][ T1563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16156'. [ 1725.515346][ T1563] netlink: 2 bytes leftover after parsing attributes in process `syz.4.16156'. [ 1725.711055][ T1578] netlink: 'syz.5.16160': attribute type 1 has an invalid length. [ 1725.751872][ T1585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16161'. [ 1725.858276][ T1591] netlink: 'syz.4.16163': attribute type 1 has an invalid length. [ 1725.863916][ T1587] bond3: entered promiscuous mode [ 1725.876046][ T1587] bond3: entered allmulticast mode [ 1725.882402][ T1587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1725.930099][ T1599] nbd: must specify at least one socket [ 1725.938047][ T1578] bridge16: entered promiscuous mode [ 1725.946970][ T1578] bridge16: entered allmulticast mode [ 1725.964058][ T1578] bond3: (slave bridge16): Enslaving as a backup interface with an up link [ 1725.964797][T24925] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1726.078671][ T1599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1726.139887][T24925] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1726.154649][ T1602] bond7: entered promiscuous mode [ 1726.187399][ T1602] bond7: entered allmulticast mode [ 1726.206237][ T1602] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1726.351843][ T1591] bridge2: entered promiscuous mode [ 1726.376622][ T1591] bridge2: entered allmulticast mode [ 1726.382341][ T9954] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1726.400439][ T1591] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1726.463492][ T1606] bridge3: entered promiscuous mode [ 1726.488818][ T1606] bridge3: entered allmulticast mode [ 1726.509536][ T9954] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1726.539908][ T1606] bond7: (slave bridge3): Enslaving as a backup interface with a down link [ 1726.814615][ T1633] syzkaller0: entered promiscuous mode [ 1726.859973][ T1633] syzkaller0: entered allmulticast mode [ 1727.034081][ T1648] tipc: Cannot configure node identity twice [ 1727.293705][ T1666] netlink: 'syz.5.16176': attribute type 7 has an invalid length. [ 1727.334425][ T1666] erspan0: entered promiscuous mode [ 1727.348237][ T1666] gretap0: entered promiscuous mode [ 1727.371484][ T1666] debugfs: 'hsr1' already exists in 'hsr' [ 1727.389822][ T1666] Cannot create hsr debugfs directory [ 1727.440730][ T1671] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1727.591176][ T1686] netlink: 'syz.0.16180': attribute type 1 has an invalid length. [ 1727.613285][ T1686] netlink: 'syz.0.16180': attribute type 1 has an invalid length. [ 1727.640541][ T1688] netlink: 'syz.0.16180': attribute type 1 has an invalid length. [ 1727.704790][ T1688] netlink: 'syz.0.16180': attribute type 1 has an invalid length. [ 1727.865561][ T1705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.925514][ T1705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.939465][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1727.947545][ C1] lec:lec_tx_timeout: lec0 [ 1727.969559][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1728.026696][ T1711] gtp0: entered promiscuous mode [ 1728.034330][ T1711] gtp0: entered allmulticast mode [ 1728.414380][T12002] IPVS: starting estimator thread 0... [ 1728.433702][ T1739] syz_tun: entered allmulticast mode [ 1728.509561][ T1738] IPVS: using max 26 ests per chain, 62400 per kthread [ 1728.993105][ T1782] __nla_validate_parse: 7 callbacks suppressed [ 1728.993127][ T1782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16201'. [ 1729.156104][ T1788] bond0: (slave gre0): Error: Device type is different from other slaves [ 1729.189189][ T9976] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.213295][ T9976] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1729.250827][ T9976] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.264447][ T1788] netlink: 'syz.0.16204': attribute type 32 has an invalid length. [ 1729.271246][ T9976] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1729.282655][ T1788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16204'. [ 1729.315793][ T9976] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.348210][ T9976] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1729.412724][ T1785] veth3: entered allmulticast mode [ 1729.472504][ T1788] bond4: option coupled_control: invalid value (98) [ 1729.484226][ T1804] netlink: 'syz.1.16206': attribute type 1 has an invalid length. [ 1729.520602][ T1788] bond4 (unregistering): Released all slaves [ 1729.661075][ T9976] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.675303][ T9976] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1729.982903][ T1831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16212'. [ 1730.123638][ T1843] syzkaller0: entered promiscuous mode [ 1730.162426][ T1843] syzkaller0: entered allmulticast mode [ 1730.267541][ T1859] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16218'. [ 1730.328514][ T1843] vlan2: entered allmulticast mode [ 1730.343081][ T1843] bridge_slave_0: entered allmulticast mode [ 1730.371634][ T1845] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16216'. [ 1730.604498][ T1872] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16223'. [ 1730.643123][ T1875] netlink: 'syz.2.16224': attribute type 12 has an invalid length. [ 1730.655992][ T1875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16224'. [ 1730.666704][ T1875] netlink: 'syz.2.16224': attribute type 12 has an invalid length. [ 1730.686838][ T1876] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.16225'. [ 1730.700080][ T1875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16224'. [ 1730.784973][ T1880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1730.794265][ T1881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16226'. [ 1731.205326][ T1902] nbd: must specify a device to reconfigure [ 1731.222169][ T1902] openvswitch: netlink: Key type 85 is out of range max 32 [ 1731.241050][ T1905] netlink: 'syz.4.16232': attribute type 4 has an invalid length. [ 1731.654019][ T1932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1732.017928][ T1942] tipc: Started in network mode [ 1732.028573][ T1942] tipc: Node identity -8, cluster identity 4711 [ 1732.979599][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1732.987689][ C1] lec:lec_tx_timeout: lec0 [ 1732.993114][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1733.475112][ T2027] netlink: 'syz.2.16258': attribute type 1 has an invalid length. [ 1733.483373][ T2027] netlink: 'syz.2.16258': attribute type 2 has an invalid length. [ 1733.508869][ T2027] netlink: 'syz.2.16258': attribute type 1 has an invalid length. [ 1733.527962][ T2027] netlink: 'syz.2.16258': attribute type 3 has an invalid length. [ 1733.669324][ T2033] syzkaller0: entered promiscuous mode [ 1733.688781][ T2033] syzkaller0: entered allmulticast mode [ 1734.820407][ T2096] xt_cluster: node mask cannot exceed total number of nodes [ 1734.860780][ T2101] syzkaller0: entered promiscuous mode [ 1734.866304][ T2101] syzkaller0: entered allmulticast mode [ 1735.064506][ T2113] __nla_validate_parse: 10 callbacks suppressed [ 1735.064530][ T2113] netlink: 9 bytes leftover after parsing attributes in process `syz.2.16286'. [ 1735.093665][ T2113] gretap0: entered promiscuous mode [ 1735.212775][ T2113] syzkaller1: entered promiscuous mode [ 1735.221488][ T2113] syzkaller1: entered allmulticast mode [ 1735.352756][ T2121] gretap0: left promiscuous mode [ 1735.423292][ T2121] bridge0: port 3(syz_tun) entered blocking state [ 1735.429939][ T2121] bridge0: port 3(syz_tun) entered forwarding state [ 1735.437043][ T2121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1735.444300][ T2121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1735.451834][ T2121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1735.459034][ T2121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1735.491721][ T2121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1735.863623][ T2141] netlink: 220 bytes leftover after parsing attributes in process `syz.0.16294'. [ 1735.875225][ T2141] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1736.426115][ T2163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16301'. [ 1736.737394][ T2184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16305'. [ 1736.750472][ T2184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16305'. [ 1736.759774][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16305'. [ 1736.934858][ T2193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1736.952168][ T2195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16310'. [ 1736.963266][ T2195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16310'. [ 1736.973954][ T2195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16310'. [ 1736.983437][ T2195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16310'. [ 1737.508310][ T2243] x_tables: unsorted underflow at hook 2 [ 1737.904755][ T2278] netlink: 'syz.0.16333': attribute type 7 has an invalid length. [ 1737.929187][ T2278] netlink: 'syz.0.16333': attribute type 8 has an invalid length. [ 1737.999803][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1738.007885][ C1] lec:lec_tx_timeout: lec0 [ 1738.049656][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1738.536069][ T2308] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000 [ 1738.768437][ T2325] netlink: 'syz.5.16351': attribute type 23 has an invalid length. [ 1738.996559][ T2332] syzkaller0: entered promiscuous mode [ 1739.003447][ T2332] syzkaller0: entered allmulticast mode [ 1741.264103][ T2363] __nla_validate_parse: 7 callbacks suppressed [ 1741.264124][ T2363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16359'. [ 1741.324324][ T2363] gtp0: entered promiscuous mode [ 1741.329343][ T2363] gtp0: entered allmulticast mode [ 1741.364818][ T2365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.516799][ T2378] team0: Port device team_slave_0 removed [ 1741.543825][ T2385] netlink: 'syz.5.16365': attribute type 10 has an invalid length. [ 1741.648365][ T2388] netlink: 40 bytes leftover after parsing attributes in process `syz.5.16365'. [ 1741.760818][ T2397] netlink: 'syz.2.16367': attribute type 13 has an invalid length. [ 1741.765389][ T2399] tipc: Enabling of bearer rejected, failed to enable media [ 1741.788130][ T2397] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16367'. [ 1741.829618][ T2397] syz_tun: refused to change device tx_queue_len [ 1741.887418][ T2405] vlan2: entered promiscuous mode [ 1742.031573][ T2405] bridge0: entered promiscuous mode [ 1742.235676][ T2433] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1742.355196][ T2439] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.16372'. [ 1742.472055][ T2450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16376'. [ 1742.517356][ T2450] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1742.590682][ T2460] netlink: 'syz.1.16378': attribute type 2 has an invalid length. [ 1742.871747][ T2471] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1742.996743][ T2482] netlink: 'syz.4.16385': attribute type 4 has an invalid length. [ 1743.022309][ T2482] netlink: 'syz.4.16385': attribute type 4 has an invalid length. [ 1743.050764][ T2485] bridge0: port 3(syz_tun) entered disabled state [ 1743.059540][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1743.067882][ C1] lec:lec_tx_timeout: lec0 [ 1743.071921][ T2485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.074592][ T2492] netlink: 'syz.0.16388': attribute type 2 has an invalid length. [ 1743.096555][ T2485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.097513][ T2484] netlink: 'syz.2.16386': attribute type 16 has an invalid length. [ 1743.104434][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1743.122211][ T2484] netlink: 'syz.2.16386': attribute type 17 has an invalid length. [ 1743.193986][ T2482] netlink: 'syz.4.16385': attribute type 4 has an invalid length. [ 1743.206301][ T2492] netlink: 'syz.0.16388': attribute type 4 has an invalid length. [ 1743.225748][ T2484] bridge0: port 3(syz_tun) entered blocking state [ 1743.232294][ T2484] bridge0: port 3(syz_tun) entered forwarding state [ 1743.247980][ T2484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1743.275112][ T2482] netlink: 'syz.4.16385': attribute type 4 has an invalid length. [ 1743.305562][ T2482] netlink: 'syz.4.16385': attribute type 4 has an invalid length. [ 1743.326708][ T2482] netlink: 'syz.4.16385': attribute type 4 has an invalid length. [ 1743.371396][ T2500] netlink: 248 bytes leftover after parsing attributes in process `syz.5.16389'. [ 1743.382937][ T2502] netlink: 248 bytes leftover after parsing attributes in process `syz.5.16389'. [ 1743.604019][ T2524] netlink: 48 bytes leftover after parsing attributes in process `syz.5.16393'. [ 1743.644216][ T2528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16396'. [ 1743.804002][ T2539] bond6: (slave gretap2): making interface the new active one [ 1743.833580][ T2539] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 1744.197974][ T2560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16403'. [ 1744.380546][ T5200] block nbd10: Possible stuck request ffff888026760000: control (read@0,1024B). Runtime 60 seconds [ 1744.399661][ T5200] block nbd10: Possible stuck request ffff888026760200: control (read@1024,1024B). Runtime 60 seconds [ 1744.410751][ T5200] block nbd10: Possible stuck request ffff888026760400: control (read@2048,1024B). Runtime 60 seconds [ 1744.422195][ T5200] block nbd10: Possible stuck request ffff888026760600: control (read@3072,1024B). Runtime 60 seconds [ 1744.557322][ T2579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1744.599816][ T5190] udevd[5190]: worker [31001] /devices/virtual/block/nbd10 is taking a long time [ 1744.615133][ T2583] ip6t_rpfilter: unknown options [ 1744.927541][ T2594] syzkaller0: entered promiscuous mode [ 1744.935116][ T2594] syzkaller0: entered allmulticast mode [ 1745.605161][ T2641] bond6 (unregistering): Released all slaves [ 1746.195969][ T2692] xt_hashlimit: size too large, truncated to 1048576 [ 1746.537098][ T2703] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1746.557341][ T2720] __nla_validate_parse: 9 callbacks suppressed [ 1746.557360][ T2720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16431'. [ 1746.560078][ T2718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16430'. [ 1746.564382][ T2719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16431'. [ 1746.736120][ T2720] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1746.746432][ T2720] team0: Port device batadv2 added [ 1746.775913][ T2719] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1746.791108][ T2719] team0: Port device batadv3 added [ 1746.809262][ T2732] SET target dimension over the limit! [ 1747.059926][ T2752] openvswitch: netlink: Message has 4 unknown bytes. [ 1747.251632][ T2763] veth3: entered promiscuous mode [ 1747.348459][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.360408][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.371474][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.382672][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.392427][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.402066][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.413932][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.424362][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.438121][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.450717][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1747.568048][ T2786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1747.645881][ T2786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1747.661077][ T2786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1747.683427][ T2786] veth1_vlan: left promiscuous mode [ 1747.690877][ T2786] veth0_vlan: left promiscuous mode [ 1747.697738][ T2786] veth0_vlan: entered promiscuous mode [ 1747.708729][ T2786] veth1_vlan: entered promiscuous mode [ 1747.731195][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 1747.754757][ T2786] veth1_macvtap: left promiscuous mode [ 1747.774288][ T2786] veth0_macvtap: left promiscuous mode [ 1747.790321][ T2786] veth0_macvtap: entered promiscuous mode [ 1747.807993][ T2786] veth1_macvtap: entered promiscuous mode [ 1747.850016][ T2786] mac80211_hwsim hwsim192 wlan0: left promiscuous mode [ 1747.925774][ T2786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1747.936286][ T2786] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1747.944682][ T2786] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1747.954358][ T2786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1747.985079][ T2786] bond3: left promiscuous mode [ 1747.990601][ T2786] bridge16: left promiscuous mode [ 1747.996041][ T2786] bond3: left allmulticast mode [ 1748.008621][ T2786] bridge16: left allmulticast mode [ 1748.026008][ T2786] vlan2: left promiscuous mode [ 1748.031566][ T2786] bridge0: left promiscuous mode [ 1748.044507][ T2786] veth3: left promiscuous mode [ 1748.205657][ T9955] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.229562][ T9955] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.305137][ T9955] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.328947][ T9955] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.339353][ T9955] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.364171][ T9955] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.391604][T12855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1748.410653][T12855] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1748.421147][ T9234] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1748.520463][ T9955] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.541315][ T9955] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.591239][ T2827] x_tables: duplicate underflow at hook 3 [ 1748.599099][ T2827] validate_nla: 67 callbacks suppressed [ 1748.599117][ T2827] netlink: 'syz.5.16456': attribute type 21 has an invalid length. [ 1748.643338][ T2837] geneve2: entered promiscuous mode [ 1748.793660][ T2837] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.831139][ T9234] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1748.850631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1748.858693][ C1] lec:lec_tx_timeout: lec0 [ 1748.864097][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1748.887820][ T2827] netlink: 132 bytes leftover after parsing attributes in process `syz.5.16456'. [ 1748.915950][T12855] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1748.930964][T12855] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1748.938755][ T2236] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 34032 - 0 [ 1748.947968][T30291] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1748.964223][ T2236] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 34032 - 0 [ 1749.001148][ T2236] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 34032 - 0 [ 1749.052143][ T2236] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.080069][ T2236] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 34032 - 0 [ 1749.151373][T30291] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1749.171286][ T2871] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16464'. [ 1749.412225][ T1437] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1749.894772][ T1437] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1751.580322][ T2875] IPv6: sit2: Disabled Multicast RS [ 1751.586844][ T2875] sit2: entered allmulticast mode [ 1751.821757][ T2906] netlink: 112 bytes leftover after parsing attributes in process `syz.5.16474'. [ 1751.912802][ T2915] netlink: 356 bytes leftover after parsing attributes in process `syz.4.16478'. [ 1751.924286][ T2916] netlink: 'syz.0.16477': attribute type 10 has an invalid length. [ 1751.932546][ T2916] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16477'. [ 1751.962294][ T2914] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 1751.975977][ T2914] bond4 (unregistering): Released all slaves [ 1752.174479][ T2837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.204444][ T2837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34032 - 0 [ 1752.352438][ T2837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.375817][ T2837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34032 - 0 [ 1752.478840][ T2947] ip6tnl0: Caught tx_queue_len zero misconfig [ 1752.501270][ T2942] sctp: [Deprecated]: syz.0.16486 (pid 2942) Use of int in max_burst socket option. [ 1752.501270][ T2942] Use struct sctp_assoc_value instead [ 1752.542543][ T2950] netlink: 'syz.4.16487': attribute type 18 has an invalid length. [ 1752.571890][ T2942] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1752.937444][ T9940] net_ratelimit: 55 callbacks suppressed [ 1752.937467][ T9940] bond3: (slave bridge16): failed to get link speed/duplex [ 1752.986294][ T2971] netlink: 'syz.5.16491': attribute type 2 has an invalid length. [ 1753.054738][ T9955] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 34032 - 0 [ 1753.071825][ T9955] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1753.113550][ T2979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16494'. [ 1753.139317][ T2984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16494'. [ 1753.401519][ T9955] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 34032 - 0 [ 1753.426765][ T9955] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1753.459819][ T9940] bond3: (slave bridge16): failed to get link speed/duplex [ 1753.523771][ T9953] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 34032 - 0 [ 1753.570370][ T9953] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1753.665504][ T3005] bond7: entered allmulticast mode [ 1753.672001][ T9953] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 34032 - 0 [ 1753.681585][ T9953] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1753.703728][ T3008] bridge5: entered promiscuous mode [ 1753.708981][ T3008] bridge5: entered allmulticast mode [ 1753.761453][ T3008] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1753.776919][ T3003] netlink: 'syz.5.16497': attribute type 178 has an invalid length. [ 1753.789670][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1753.889577][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1753.897752][ C1] lec:lec_tx_timeout: lec0 [ 1753.931091][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1753.945995][ T3034] netlink: 'syz.4.16505': attribute type 1 has an invalid length. [ 1754.020757][ T3025] netlink: 'syz.4.16505': attribute type 1 has an invalid length. [ 1754.043383][ T3025] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1754.044665][ T3034] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1754.070425][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1754.270029][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1754.281298][ T3048] syzkaller0: entered promiscuous mode [ 1754.307516][ T3048] syzkaller0: entered allmulticast mode [ 1754.428569][ T3062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16515'. [ 1754.440817][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1754.549626][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1754.661105][ T9940] bond3: (slave bridge16): failed to get link speed/duplex [ 1754.674663][ T3074] netlink: 68 bytes leftover after parsing attributes in process `syz.5.16520'. [ 1754.780690][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1754.865640][ T3088] netlink: 'syz.5.16524': attribute type 1 has an invalid length. [ 1754.877158][ T3088] netlink: 'syz.5.16524': attribute type 2 has an invalid length. [ 1754.885616][ T3088] netlink: 'syz.5.16524': attribute type 1 has an invalid length. [ 1754.894443][ T3088] netlink: 'syz.5.16524': attribute type 3 has an invalid length. [ 1754.902786][ T3088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16524'. [ 1755.097311][ T3103] erspan0: entered promiscuous mode [ 1755.420915][ T3123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16537'. [ 1755.495817][ T3128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16536'. [ 1755.569119][ T3133] netlink: 'syz.5.16541': attribute type 3 has an invalid length. [ 1755.585421][ T3133] xt_TCPMSS: Only works on TCP SYN packets [ 1755.755521][ T3147] netlink: 'syz.4.16545': attribute type 4 has an invalid length. [ 1755.875459][ T3152] geneve3: entered promiscuous mode [ 1755.999084][ T3162] netlink: 'syz.0.16551': attribute type 3 has an invalid length. [ 1756.396331][ T3187] delete_channel: no stack [ 1756.417382][ T3184] syzkaller0: entered promiscuous mode [ 1756.423367][ T3184] syzkaller0: entered allmulticast mode [ 1756.698178][ T3212] net veth1_virt_wifi : renamed from virt_wifi0 [ 1756.842510][ T3220] syzkaller0: entered promiscuous mode [ 1756.852874][ T3220] syzkaller0: entered allmulticast mode [ 1757.364523][ T3248] __nla_validate_parse: 10 callbacks suppressed [ 1757.364543][ T3248] netlink: 666 bytes leftover after parsing attributes in process `syz.4.16574'. [ 1757.665838][ T3265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16579'. [ 1757.689206][ T3268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16580'. [ 1757.700388][ T3268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16580'. [ 1757.730505][ T3270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16577'. [ 1757.753165][ T3270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16577'. [ 1757.939737][ T9955] net_ratelimit: 24 callbacks suppressed [ 1757.939759][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1757.964910][ T3283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16583'. [ 1758.070384][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1758.174088][ T3296] netlink: 596 bytes leftover after parsing attributes in process `syz.0.16588'. [ 1758.179615][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1758.209666][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1758.218314][ T3300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16587'. [ 1758.301306][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1758.380561][ T3306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16591'. [ 1758.413522][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1758.531077][ T9940] bond3: (slave bridge16): failed to get link speed/duplex [ 1758.670171][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1758.689019][ T3321] macvlan2: entered promiscuous mode [ 1758.695282][ T3321] macvlan2: entered allmulticast mode [ 1758.880132][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1759.002347][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1759.093345][ T3345] validate_nla: 7 callbacks suppressed [ 1759.093366][ T3345] netlink: 'syz.0.16600': attribute type 2 has an invalid length. [ 1759.136749][ T3343] netlink: 'syz.2.16599': attribute type 30 has an invalid length. [ 1759.149285][ T3345] 9: entered promiscuous mode [ 1759.320300][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1759.896556][ T3384] syzkaller0: entered promiscuous mode [ 1759.925676][ T3384] syzkaller0: entered allmulticast mode [ 1759.976733][ T3398] tipc: Enabled bearer , priority 0 [ 1760.381473][ T3377] tipc: Resetting bearer [ 1760.423279][ T3377] tipc: Disabling bearer [ 1760.471397][ T3447] syzkaller1: entered promiscuous mode [ 1760.477071][ T3447] syzkaller1: entered allmulticast mode [ 1761.011581][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1761.011603][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1761.124978][ T3481] netlink: 'syz.2.16641': attribute type 1 has an invalid length. [ 1761.156320][ T3481] gretap2: entered promiscuous mode [ 1761.649675][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1762.949571][ T9955] net_ratelimit: 29 callbacks suppressed [ 1762.949596][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.069693][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.179841][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.289798][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.399617][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.509825][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.619816][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.730080][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.840033][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1763.889543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 1763.897582][ C1] lec:lec_tx_timeout: lec0 [ 1763.902982][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1763.949575][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.019635][ T9956] net_ratelimit: 36 callbacks suppressed [ 1768.019657][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.139634][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.249919][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.359648][T12855] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.469716][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.579853][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.691016][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.799588][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1768.909637][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1768.917667][ C1] lec:lec_tx_timeout: lec0 [ 1768.922451][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1769.039778][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.030333][T17821] net_ratelimit: 35 callbacks suppressed [ 1773.030350][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.150024][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.260184][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.330380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1773.330880][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 1773.369969][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.480173][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.589943][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.709921][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.819727][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1773.929724][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1774.040809][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1774.450415][ T5200] block nbd10: Possible stuck request ffff888026760000: control (read@0,1024B). Runtime 90 seconds [ 1774.462212][ T5200] block nbd10: Possible stuck request ffff888026760200: control (read@1024,1024B). Runtime 90 seconds [ 1774.473703][ T5200] block nbd10: Possible stuck request ffff888026760400: control (read@2048,1024B). Runtime 90 seconds [ 1774.485780][ T5200] block nbd10: Possible stuck request ffff888026760600: control (read@3072,1024B). Runtime 90 seconds [ 1777.650324][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1778.139775][ T9956] net_ratelimit: 36 callbacks suppressed [ 1778.139798][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.259896][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.370638][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.479870][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.589670][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.699870][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.809932][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.849684][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 1778.857713][ C1] lec:lec_tx_timeout: lec0 [ 1778.862584][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1778.919720][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1778.929740][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1779.029844][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1779.139673][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1783.220068][T24924] net_ratelimit: 36 callbacks suppressed [ 1783.220093][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1783.339927][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1783.449773][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1783.559627][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1783.669893][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1783.779733][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1783.889485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1783.897536][ C1] lec:lec_tx_timeout: lec0 [ 1783.902955][T12855] bond3: (slave bridge16): failed to get link speed/duplex [ 1784.019762][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1784.140099][T12855] bond3: (slave bridge16): failed to get link speed/duplex [ 1784.249616][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1786.245139][ T3493] __nla_validate_parse: 15 callbacks suppressed [ 1786.245163][ T3493] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16645'. [ 1786.574936][ T3514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16652'. [ 1786.682710][ T3522] xt_time: unknown flags 0xf4 [ 1786.939961][ T3538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16659'. [ 1786.979668][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16659'. [ 1786.989298][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16658'. [ 1787.151957][ T3553] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.16661'. [ 1787.372002][ T3562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16664'. [ 1787.389906][ T3562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16664'. [ 1787.458292][ T3567] netlink: 'syz.0.16665': attribute type 10 has an invalid length. [ 1787.468900][ T3562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16664'. [ 1787.468985][ T3567] batman_adv: batadv0: Removing interface: netdevsim0 [ 1787.478254][ T3562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16664'. [ 1787.512727][ T3580] xt_nat: multiple ranges no longer supported [ 1787.514212][ T3567] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1787.537203][ T3567] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1787.783916][ T3593] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1787.806960][ T3593] bond10 (unregistering): Released all slaves [ 1787.930564][ T3604] netlink: 'syz.4.16675': attribute type 10 has an invalid length. [ 1788.023342][ T3607] x_tables: unsorted underflow at hook 2 [ 1788.162306][ T3617] netlink: 'syz.5.16678': attribute type 2 has an invalid length. [ 1788.185060][ T3617] netlink: 'syz.5.16678': attribute type 2 has an invalid length. [ 1788.272149][ T9956] net_ratelimit: 33 callbacks suppressed [ 1788.272171][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1788.389889][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1788.499808][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1788.543826][ T3641] syzkaller0: entered allmulticast mode [ 1788.601374][ T3646] netlink: 'syz.0.16688': attribute type 1 has an invalid length. [ 1788.616961][ T3647] netlink: 'syz.0.16688': attribute type 1 has an invalid length. [ 1788.620733][ T3642] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1788.668666][ T3647] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1788.680752][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1788.823160][T12855] bond3: (slave bridge16): failed to get link speed/duplex [ 1788.940767][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1789.081557][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1789.123429][ T3671] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1789.204598][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1789.296279][ T3680] netlink: 'syz.4.16700': attribute type 9 has an invalid length. [ 1789.363534][ T9955] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.391002][ T9955] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.419201][ T9955] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.450962][ T9955] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1789.520417][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1789.545055][ T3702] netlink: 'syz.1.16704': attribute type 2 has an invalid length. [ 1789.578810][ T3702] : entered promiscuous mode [ 1789.752430][ T3706] netlink: 'syz.5.16707': attribute type 29 has an invalid length. [ 1789.997710][ T3711] netlink: 'syz.5.16707': attribute type 29 has an invalid length. [ 1790.085329][ T3725] xt_hashlimit: size too large, truncated to 1048576 [ 1790.333647][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1790.734149][ T3754] bond0: (slave bond_slave_0): Releasing backup interface [ 1790.771250][ T3754] bond_slave_0: left allmulticast mode [ 1790.803507][ T3754] bond0: (slave bond_slave_1): Releasing backup interface [ 1790.822150][ T3754] bond_slave_1: left allmulticast mode [ 1790.861768][ T3754] team0: Port device team_slave_0 removed [ 1790.906818][ T3754] team0: Port device team_slave_1 removed [ 1790.949184][ T3754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1791.363497][ T3772] syzkaller0: entered promiscuous mode [ 1791.394960][ T3772] syzkaller0: entered allmulticast mode [ 1791.415124][ T3772] tipc: Enabled bearer , priority 0 [ 1791.448477][ T3771] tipc: Resetting bearer [ 1791.533967][ T3771] tipc: Disabling bearer [ 1791.693515][ T3790] xt_TCPMSS: Only works on TCP SYN packets [ 1791.742504][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 1792.043030][ T3814] __nla_validate_parse: 84 callbacks suppressed [ 1792.043052][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16735'. [ 1793.330455][ T9956] net_ratelimit: 21 callbacks suppressed [ 1793.330497][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1793.449743][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1793.559658][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1793.669913][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1793.779577][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1793.890637][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1793.999535][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1794.109620][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1794.219630][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1794.329800][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1796.851788][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1796.859871][ C1] lec:lec_tx_timeout: lec0 [ 1798.399549][T17821] net_ratelimit: 36 callbacks suppressed [ 1798.399573][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1798.519715][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1798.629740][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1798.750004][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1798.859617][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1798.969810][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1799.079814][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1799.189591][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1799.299760][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1799.411375][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1803.500155][ T9955] net_ratelimit: 36 callbacks suppressed [ 1803.500174][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1803.619813][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1803.730061][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1803.839806][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1803.949509][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1804.059879][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1804.169751][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1804.279703][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1804.389604][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1804.499797][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1804.530428][ T5200] block nbd10: Possible stuck request ffff888026760000: control (read@0,1024B). Runtime 120 seconds [ 1804.541640][ T5200] block nbd10: Possible stuck request ffff888026760200: control (read@1024,1024B). Runtime 120 seconds [ 1804.553010][ T5200] block nbd10: Possible stuck request ffff888026760400: control (read@2048,1024B). Runtime 120 seconds [ 1804.564492][ T5200] block nbd10: Possible stuck request ffff888026760600: control (read@3072,1024B). Runtime 120 seconds [ 1808.569703][ T9953] net_ratelimit: 36 callbacks suppressed [ 1808.569727][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1808.690118][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1808.799566][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1808.909732][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1809.019715][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1809.129853][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1809.239780][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1809.349791][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1809.459577][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1809.571734][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1811.570074][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1813.650049][ T2237] net_ratelimit: 36 callbacks suppressed [ 1813.650072][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1813.769817][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1813.879742][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1813.989637][ T9953] bond3: (slave bridge16): failed to get link speed/duplex [ 1814.099873][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1814.209568][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1814.319624][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1814.429807][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1814.539722][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1814.649610][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1815.152295][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16752'. [ 1815.385590][ T3897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16760'. [ 1815.410947][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1815.718425][ T3920] syzkaller1: entered promiscuous mode [ 1815.735486][ T3920] syzkaller1: entered allmulticast mode [ 1815.825277][ T3927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16766'. [ 1816.034825][ T3937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16769'. [ 1816.072234][ T3937] netlink: 'syz.1.16769': attribute type 25 has an invalid length. [ 1816.094891][ T3942] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1816.289048][ T3960] netlink: 'syz.0.16777': attribute type 10 has an invalid length. [ 1816.292737][ T3959] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16776'. [ 1816.412863][ T3966] set match dimension is over the limit! [ 1816.416623][ T3960] veth0_vlan: left promiscuous mode [ 1816.426082][ T3960] veth0_vlan: entered promiscuous mode [ 1816.442675][ T3960] team0: Device veth0_vlan failed to register rx_handler [ 1816.654502][ T3985] delete_channel: no stack [ 1816.663096][ T3985] netlink: 100 bytes leftover after parsing attributes in process `syz.0.16783'. [ 1816.750612][T12005] IPVS: starting estimator thread 0... [ 1816.756605][ T3987] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1816.859475][ T3988] IPVS: using max 28 ests per chain, 67200 per kthread [ 1816.871923][ T3992] netlink: 288 bytes leftover after parsing attributes in process `syz.2.16787'. [ 1816.924645][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16788'. [ 1816.935519][ T3998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16788'. [ 1816.946708][ T3997] nbd: must specify a device to reconfigure [ 1816.953725][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16788'. [ 1816.964502][ T3992] netlink: 'syz.2.16787': attribute type 3 has an invalid length. [ 1816.988420][ T3998] team0: Port device team_slave_1 removed [ 1817.372924][ T4023] netlink: 'syz.4.16799': attribute type 1 has an invalid length. [ 1817.445839][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.453618][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.555101][ T4025] bond9: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1817.568848][ T4025] bond9: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1817.589594][ T4025] bond9: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1817.623531][ T4036] set match dimension is over the limit! [ 1817.626914][ T4027] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 1817.644135][ T4027] bond9: (slave vcan1): making interface the new active one [ 1817.653843][ T4027] bond9: (slave vcan1): Enslaving as an active interface with an up link [ 1818.083067][ T4061] syzkaller0: entered promiscuous mode [ 1818.092446][ T4061] syzkaller0: entered allmulticast mode [ 1818.397306][ T4082] netlink: 'syz.0.16815': attribute type 17 has an invalid length. [ 1818.551536][ T4093] bridge0: port 3(veth1) entered blocking state [ 1818.568220][ T4093] bridge0: port 3(veth1) entered disabled state [ 1818.580616][ T4093] veth1: entered allmulticast mode [ 1818.614878][ T4093] veth1: entered promiscuous mode [ 1818.680324][T17821] net_ratelimit: 32 callbacks suppressed [ 1818.680347][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1818.797386][ T4102] syzkaller0: entered promiscuous mode [ 1818.806797][ T4102] syzkaller0: entered allmulticast mode [ 1818.859891][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1818.935261][ T4115] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1818.958103][ T4115] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1819.061888][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.170027][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.291191][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.352797][ T4142] netlink: 'syz.0.16835': attribute type 2 has an invalid length. [ 1819.409946][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.529973][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.640126][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.759524][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.873256][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1819.994579][ T4177] syzkaller1: entered promiscuous mode [ 1820.009187][ T4177] syzkaller1: entered allmulticast mode [ 1820.276839][ T4195] __nla_validate_parse: 14 callbacks suppressed [ 1820.276862][ T4195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16852'. [ 1820.341796][ T4195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16852'. [ 1820.438782][ T4206] netlink: 'syz.1.16856': attribute type 11 has an invalid length. [ 1820.451811][ T4206] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16856'. [ 1820.757389][ T4222] syzkaller0: entered promiscuous mode [ 1820.788535][ T4222] syzkaller0: entered allmulticast mode [ 1820.808369][ T4226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16862'. [ 1820.837657][ T4232] netlink: 'syz.1.16863': attribute type 39 has an invalid length. [ 1820.840562][ T4226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16862'. [ 1821.078515][ T4232] syz_tun (unregistering): left allmulticast mode [ 1821.233504][ T4247] netlink: 'syz.4.16867': attribute type 1 has an invalid length. [ 1821.241669][ T4247] netlink: 'syz.4.16867': attribute type 3 has an invalid length. [ 1821.260099][ T4247] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16867'. [ 1821.498296][ T4269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16874'. [ 1821.647274][ T4275] sit0: entered promiscuous mode [ 1821.660609][ T4275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16876'. [ 1821.853671][ T4285] xt_hashlimit: size too large, truncated to 1048576 [ 1822.189812][ T4296] veth0: entered promiscuous mode [ 1822.233540][ T4295] veth0: left promiscuous mode [ 1822.248888][ T4300] bond0: option ad_select: unable to set because the bond device is up [ 1822.270851][ T4302] netlink: 256 bytes leftover after parsing attributes in process `syz.4.16887'. [ 1822.333344][ T4279] : entered promiscuous mode [ 1822.397403][ T4305] xt_ecn: cannot match TCP bits for non-tcp packets [ 1822.639097][ T4321] sock: sock_timestamping_bind_phc: sock not bind to device [ 1822.684043][ T4321] netlink: 260 bytes leftover after parsing attributes in process `syz.5.16894'. [ 1823.230765][ T4349] netlink: 'syz.4.16901': attribute type 1 has an invalid length. [ 1823.313142][ T2237] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1823.323951][ T2237] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.340134][ T2237] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1823.351892][ T2237] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1823.392903][ T2237] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.415804][ T2237] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1823.488588][ T4349] bond10: entered promiscuous mode [ 1823.518997][ T4349] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1823.612731][ T4351] bond10: (slave bridge6): making interface the new active one [ 1823.621028][ T4351] bridge6: entered promiscuous mode [ 1823.627565][ T4351] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 1823.653452][ T2237] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1823.673446][ T2237] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.725165][ T2237] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1823.761212][ T4358] batadv4: entered allmulticast mode [ 1823.784994][ T2237] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1823.812562][ T2237] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.830768][ T2237] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 1823.861860][ T2237] net_ratelimit: 22 callbacks suppressed [ 1823.861884][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1823.999755][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1824.120233][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1824.290154][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1824.297437][ T4393] netlink: 'syz.1.16914': attribute type 1 has an invalid length. [ 1824.312438][ T4397] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1824.439628][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1824.567529][ T4412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1824.580966][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1824.700093][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1824.819631][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1825.277790][ T4451] syzkaller1: entered promiscuous mode [ 1825.284529][ T4451] syzkaller1: entered allmulticast mode [ 1825.309963][ T4454] __nla_validate_parse: 12 callbacks suppressed [ 1825.309986][ T4454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.16933'. [ 1825.349448][ T4453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16929'. [ 1825.922330][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16940'. [ 1825.929779][ T4487] netlink: 'syz.4.16941': attribute type 2 has an invalid length. [ 1825.944720][ T4487] netlink: 'syz.4.16941': attribute type 11 has an invalid length. [ 1825.973626][ T4487] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16941'. [ 1826.009294][ T4490] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.16941'. [ 1826.075101][ T4495] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16943'. [ 1826.098939][ T4493] sctp: [Deprecated]: syz.0.16942 (pid 4493) Use of int in maxseg socket option. [ 1826.098939][ T4493] Use struct sctp_assoc_value instead [ 1826.246466][ T1437] IPVS: starting estimator thread 0... [ 1826.252784][ T4502] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1826.340374][ T4503] IPVS: using max 29 ests per chain, 69600 per kthread [ 1826.496851][ T4517] netlink: 'syz.1.16948': attribute type 4 has an invalid length. [ 1826.665366][ T4529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16951'. [ 1826.866203][ T4532] bond2: entered promiscuous mode [ 1826.867386][ T4540] netlink: 'syz.2.16955': attribute type 21 has an invalid length. [ 1826.889274][ T4532] bond2: entered allmulticast mode [ 1826.900159][ T4532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1826.961170][ T4540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16955'. [ 1827.108070][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16949'. [ 1827.154949][ T4555] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1827.538235][ T4571] netlink: 84 bytes leftover after parsing attributes in process `syz.5.16964'. [ 1828.004497][ T4606] tipc: Started in network mode [ 1828.043225][ T4606] tipc: Node identity 72ae328695df, cluster identity 4711 [ 1828.061129][ T4606] tipc: Enabled bearer , priority 0 [ 1828.076345][ T4614] netlink: 'syz.1.16973': attribute type 1 has an invalid length. [ 1828.084936][ T4614] netlink: 'syz.1.16973': attribute type 2 has an invalid length. [ 1828.095612][ T4606] +: renamed from syzkaller0 [ 1828.123941][ T4606] tipc: Disabling bearer [ 1828.190614][ T4621] mac80211_hwsim hwsim189 wlan1: Caught tx_queue_len zero misconfig [ 1828.201329][ T4623] netlink: 'syz.5.16978': attribute type 1 has an invalid length. [ 1828.209241][ T4623] netlink: 'syz.5.16978': attribute type 4 has an invalid length. [ 1828.223436][ T4619] netlink: 'syz.0.16976': attribute type 3 has an invalid length. [ 1828.887822][ T4662] veth0: entered promiscuous mode [ 1828.931234][T24924] net_ratelimit: 31 callbacks suppressed [ 1828.931256][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1828.954084][ T4660] veth0: left promiscuous mode [ 1829.059746][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1829.121134][ T4674] bridge_slave_1: left allmulticast mode [ 1829.136521][ T4674] bridge_slave_1: left promiscuous mode [ 1829.146860][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.333394][ T4674] bridge_slave_0: left allmulticast mode [ 1829.349659][ T4674] bridge_slave_0: left promiscuous mode [ 1829.358376][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.880530][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1830.990096][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1831.105200][ T4697] __nla_validate_parse: 8 callbacks suppressed [ 1831.105220][ T4697] netlink: 176 bytes leftover after parsing attributes in process `syz.1.17003'. [ 1831.140216][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1831.319891][ T9955] bond3: (slave bridge16): failed to get link speed/duplex [ 1831.357450][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17005'. [ 1831.440971][ T4713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.483301][ T4713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.530738][ T4713] bond0 (unregistering): Released all slaves [ 1831.579781][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1831.610324][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17008'. [ 1831.631054][ T4718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17008'. [ 1831.689140][ T4716] xt_hashlimit: size too large, truncated to 1048576 [ 1831.697290][T24924] bond3: (slave bridge16): failed to get link speed/duplex [ 1831.783479][ T4724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17009'. [ 1831.783696][ T4726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17010'. [ 1831.828121][T17821] bond3: (slave bridge16): failed to get link speed/duplex [ 1831.878729][ T4733] netlink: 81 bytes leftover after parsing attributes in process `syz.1.17012'. [ 1831.952091][ T4733] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1831.974532][ T4733] bond3 (unregistering): Released all slaves [ 1832.010209][ T2237] bond3: (slave bridge16): failed to get link speed/duplex [ 1832.095588][ T4738] netlink: 'syz.4.17014': attribute type 1 has an invalid length. [ 1832.206434][ T4748] netlink: 56 bytes leftover after parsing attributes in process `syz.5.17013'. [ 1832.267769][ T4754] bridge4: entered promiscuous mode [ 1832.273805][ T4754] bridge4: entered allmulticast mode [ 1832.301135][ T4754] team0: Port device bridge4 added [ 1832.327309][ T4744] wireguard0: entered promiscuous mode [ 1832.337480][ T4744] wireguard0: entered allmulticast mode [ 1832.398105][ T4744] team0: Port device wireguard0 added [ 1832.421161][ T4755] bridge0: port 4(team0) entered blocking state [ 1832.440005][ T4755] bridge0: port 4(team0) entered disabled state [ 1832.446568][ T4755] team0: entered allmulticast mode [ 1832.478687][ T4755] team_slave_0: entered allmulticast mode [ 1832.496286][ T4755] team_slave_1: entered allmulticast mode [ 1832.516717][ T4755] veth3: entered allmulticast mode [ 1832.531731][ T4755] veth0_to_bond: entered allmulticast mode [ 1832.538804][ T4755] veth5: entered allmulticast mode [ 1832.551452][ T4755] team0: entered promiscuous mode [ 1832.556690][ T4755] team_slave_0: entered promiscuous mode [ 1832.563525][ T4755] team_slave_1: entered promiscuous mode [ 1832.569812][ T4755] veth3: entered promiscuous mode [ 1832.575105][ T4755] veth0_to_bond: entered promiscuous mode [ 1832.582467][ T4755] veth5: entered promiscuous mode [ 1832.622106][ T4761] bond0: Device is already in use. [ 1832.810334][ T4773] sctp: [Deprecated]: syz.1.17025 (pid 4773) Use of int in maxseg socket option. [ 1832.810334][ T4773] Use struct sctp_assoc_value instead [ 1832.834918][ T4774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17025'. [ 1832.969770][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17026'. [ 1833.074678][ T4787] bond0: entered promiscuous mode [ 1833.090496][ T4787] bond_slave_0: entered promiscuous mode [ 1833.096432][ T4787] bond_slave_1: entered promiscuous mode [ 1833.135199][ T4787] batadv0: entered promiscuous mode [ 1833.162439][ T4787] debugfs: 'hsr1' already exists in 'hsr' [ 1833.168223][ T4787] Cannot create hsr debugfs directory [ 1833.204595][ T4787] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1833.260492][ T4787] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1833.299743][ T4787] hsr1: entered promiscuous mode [ 1833.309534][ T4787] hsr1: entered allmulticast mode [ 1833.324852][ T4787] bond0: entered allmulticast mode [ 1833.350355][ T4787] bond_slave_0: entered allmulticast mode [ 1833.359736][ T4787] bond_slave_1: entered allmulticast mode [ 1833.379984][ T4787] batadv0: entered allmulticast mode [ 1833.385851][ T4787] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1833.426114][ T4787] bond0: left promiscuous mode [ 1833.431394][ T4787] bond_slave_0: left promiscuous mode [ 1833.449797][ T4787] bond_slave_1: left promiscuous mode [ 1833.477517][ T4787] batadv0: left promiscuous mode [ 1833.989880][ T4828] net_ratelimit: 10 callbacks suppressed [ 1833.989914][ T4828] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1834.003188][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1834.119638][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1834.139600][ T4741] Bluetooth: hci5: command 0x0405 tx timeout [ 1834.262148][ T4841] netlink: 'syz.0.17041': attribute type 1 has an invalid length. [ 1834.271707][ T4841] netlink: 'syz.0.17041': attribute type 2 has an invalid length. [ 1834.280220][ T4841] netlink: 'syz.0.17041': attribute type 1 has an invalid length. [ 1834.282417][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1834.503632][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1834.620792][ T5200] block nbd10: Possible stuck request ffff888026760000: control (read@0,1024B). Runtime 150 seconds [ 1834.642273][ T5200] block nbd10: Possible stuck request ffff888026760200: control (read@1024,1024B). Runtime 150 seconds [ 1834.654093][ T5200] block nbd10: Possible stuck request ffff888026760400: control (read@2048,1024B). Runtime 150 seconds [ 1834.665449][ T5200] block nbd10: Possible stuck request ffff888026760600: control (read@3072,1024B). Runtime 150 seconds [ 1834.686722][ T4862] netlink: 'syz.2.17045': attribute type 5 has an invalid length. [ 1834.703656][ T2236] bond3: (slave bridge16): failed to get link speed/duplex [ 1834.783697][ T4866] syzkaller0: entered promiscuous mode [ 1834.789225][ T4866] syzkaller0: entered allmulticast mode [ 1834.839868][ T9956] bond3: (slave bridge16): failed to get link speed/duplex [ 1834.895842][ T4875] netlink: zone id is out of range [ 1834.902023][ T4875] netlink: zone id is out of range [ 1834.907529][ T4875] netlink: zone id is out of range [ 1836.179774][ T4956] net veth1_virt_wifi : renamed from virt_wifi0 [ 1836.201730][ T4959] __nla_validate_parse: 7 callbacks suppressed [ 1836.201750][ T4959] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17075'. [ 1836.714691][ T4944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1836.721170][ T4944] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1836.740003][ T4944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1836.746912][ T4944] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1836.796629][ T4944] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1836.803823][ T4944] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1836.825489][ T4944] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1836.837439][ T4944] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1836.845852][ T4944] CPU: 1 UID: 0 PID: 4944 Comm: syz.5.17070 Not tainted syzkaller #0 PREEMPT(full) [ 1836.855220][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1836.865286][ T4944] RIP: 0010:klist_remove+0x156/0x340 [ 1836.870667][ T4944] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 3d c2 98 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1e c2 98 f6 49 8b 44 24 58 48 89 44 24 08 [ 1836.890278][ T4944] RSP: 0018:ffffc9000b70f820 EFLAGS: 00010202 [ 1836.896433][ T4944] RAX: 000000000000000b RBX: ffff888022e8dac0 RCX: 0000000000000000 [ 1836.904437][ T4944] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1836.912397][ T4944] RBP: ffffc9000b70f920 R08: ffffffff8ff712e3 R09: 1ffffffff1fee25c [ 1836.920362][ T4944] R10: dffffc0000000000 R11: fffffbfff1fee25d R12: 0000000000000000 [ 1836.928324][ T4944] R13: 1ffff11005181d0c R14: ffff888028c0e860 R15: dffffc0000000000 [ 1836.936292][ T4944] FS: 00007fc764fca6c0(0000) GS:ffff8881255ae000(0000) knlGS:0000000000000000 [ 1836.945310][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1836.951890][ T4944] CR2: 000000110c34a036 CR3: 00000000639e2000 CR4: 00000000003526f0 [ 1836.959881][ T4944] Call Trace: [ 1836.963162][ T4944] [ 1836.966087][ T4944] ? __pfx_klist_remove+0x10/0x10 [ 1836.971114][ T4944] ? kobject_move+0x5de/0x720 [ 1836.975789][ T4944] ? __pfx_kobject_move+0x10/0x10 [ 1836.980813][ T4944] ? do_raw_spin_unlock+0xf5/0x210 [ 1836.985923][ T4944] ? get_device_parent+0x366/0x3a0 [ 1836.991031][ T4944] device_move+0x193/0x730 [ 1836.995808][ T4944] hci_conn_del_sysfs+0xb8/0x1a0 [ 1837.000835][ T4944] hci_conn_del+0xc36/0x1230 [ 1837.005419][ T4944] hci_conn_hash_flush+0x191/0x260 [ 1837.010529][ T4944] hci_dev_close_sync+0x821/0x10e0 [ 1837.015642][ T4944] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1837.021180][ T4944] ? do_raw_spin_lock+0x12b/0x2f0 [ 1837.026287][ T4944] hci_dev_do_close+0x30/0xc0 [ 1837.030979][ T4944] hci_rfkill_set_block+0x1f4/0x290 [ 1837.036169][ T4944] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 1837.041880][ T4944] rfkill_set_block+0x1d2/0x440 [ 1837.046722][ T4944] rfkill_fop_write+0x461/0x5a0 [ 1837.051585][ T4944] ? apparmor_file_permission+0x17f/0x1f0 [ 1837.057301][ T4944] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1837.062683][ T4944] ? security_kernfs_init_security+0x220/0x270 [ 1837.068830][ T4944] ? rw_verify_area+0x255/0x4d0 [ 1837.073676][ T4944] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1837.079039][ T4944] vfs_write+0x29a/0xb90 [ 1837.083295][ T4944] ? __pfx_vfs_write+0x10/0x10 [ 1837.088144][ T4944] ? __fget_files+0x2a/0x420 [ 1837.092724][ T4944] ? __fget_files+0x2a/0x420 [ 1837.097299][ T4944] ? __fget_files+0x3a0/0x420 [ 1837.102052][ T4944] ? __fget_files+0x2a/0x420 [ 1837.106632][ T4944] ksys_write+0x150/0x270 [ 1837.110966][ T4944] ? __pfx_ksys_write+0x10/0x10 [ 1837.115812][ T4944] do_syscall_64+0x14d/0xf80 [ 1837.120397][ T4944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.126453][ T4944] ? trace_irq_disable+0x37/0x100 [ 1837.131471][ T4944] ? clear_bhb_loop+0x40/0x90 [ 1837.136144][ T4944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.142061][ T4944] RIP: 0033:0x7fc76419c629 [ 1837.146465][ T4944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.166067][ T4944] RSP: 002b:00007fc764fca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1837.174494][ T4944] RAX: ffffffffffffffda RBX: 00007fc764415fa0 RCX: 00007fc76419c629 [ 1837.182456][ T4944] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1837.190422][ T4944] RBP: 00007fc764232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1837.198398][ T4944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1837.206357][ T4944] R13: 00007fc764416038 R14: 00007fc764415fa0 R15: 00007ffc4753cf38 [ 1837.214410][ T4944] [ 1837.217417][ T4944] Modules linked in: [ 1837.223518][ T4944] ---[ end trace 0000000000000000 ]--- [ 1837.235424][ T4944] RIP: 0010:klist_remove+0x156/0x340 [ 1837.241199][ T4944] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 3d c2 98 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1e c2 98 f6 49 8b 44 24 58 48 89 44 24 08 [ 1837.262242][ T4944] RSP: 0018:ffffc9000b70f820 EFLAGS: 00010202 [ 1837.268355][ T4944] RAX: 000000000000000b RBX: ffff888022e8dac0 RCX: 0000000000000000 [ 1837.276646][ T4944] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1837.284858][ T4944] RBP: ffffc9000b70f920 R08: ffffffff8ff712e3 R09: 1ffffffff1fee25c [ 1837.294169][ T4944] R10: dffffc0000000000 R11: fffffbfff1fee25d R12: 0000000000000000 [ 1837.302315][ T4944] R13: 1ffff11005181d0c R14: ffff888028c0e860 R15: dffffc0000000000 [ 1837.310516][ T4944] FS: 00007fc764fca6c0(0000) GS:ffff8881255ae000(0000) knlGS:0000000000000000 [ 1837.319842][ T4944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1837.326598][ T4944] CR2: 000000110c34a036 CR3: 00000000639e2000 CR4: 00000000003526f0 [ 1837.334732][ T4944] Kernel panic - not syncing: Fatal exception [ 1837.341266][ T4944] Kernel Offset: disabled [ 1837.345584][ T4944] Rebooting in 86400 seconds..