last executing test programs: 2.6067404s ago: executing program 4 (id=7012): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e", 0xad}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmmsg$unix(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f00000005c0)=""/235, 0xeb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/244, 0xf4}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffffffff00000003, 0x0, 0x4060040}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c00010006"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r5, 0x200, 0x70bd25, 0x9, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) 2.34993803s ago: executing program 4 (id=7013): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x10, 0xb}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000f0dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="350c040000000000240012800b0001006d6163736563000014000280050006000100000005000b000000000008000500", @ANYRES32=r4, @ANYBLOB="9646e2ebb488700a9e9f1db79696b004df0878f5edb64d318a4f367ceed2cd4992506779e392bed476c024d5f88c79185809a00b666508af78864c1a596acb134f7e2acff56e13beeca79308f17c8a65a52f38248cb738"], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000180)) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.316694582s ago: executing program 4 (id=7014): syz_emit_ethernet(0x267, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x259, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @remote}, "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"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000007000010000000000800000073119d000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x9, &(0x7f0000000040)={@empty, r1}, 0x14) 2.169012304s ago: executing program 4 (id=7017): socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r11, 0x6f6) (async) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r14, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.849126549s ago: executing program 2 (id=7022): r0 = socket(0x10, 0x3, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000900)=ANY=[@ANYBLOB="44100000aec57109f6170806ea91220ba7231052fd76487b6c59cd21db928b4e042d2985f85bcbc98c7528760ba9114e7027bfe3f403f31e86eec9f3150c4dccf0bd4efe6fe50003edf8517c50d39b056f74ebeec9ba7fa3a0dea40b39209d3dee3b54f50d3f4c3f023c4258eff4d9b001", @ANYRES16=r3, @ANYBLOB="070600000000000000002d00000005002b0001000000060006000100000008002f00050000000c0005000201aaaaaaaaaaaa0a0001007770616e30000000"], 0x44}}, 0x20048840) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480)=r4, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5800000010001fff2dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x0, 0x0, 0xffffffff, 0x0, 0x210, 0x570, 0x570, 0xffffffff, 0x570, 0x570, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@multicast1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @icmp_id=0x64, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffff00], 'bond_slave_0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0xc65ec123d57cf83, 0x7, 0x8, 0x12}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast1, @ipv4=@private=0xa010101, @port=0x4e20, @gre_key=0xabfc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff000000, 0xffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'nicvf0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x3c, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@broadcast, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x64, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv4=@rand_addr=0x64010101, @ipv6=@mcast1, @port=0x4e21, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x75, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0xfffff000, 0x0, 0x10000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x200, 0x0, {0x11}, [@typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x1c}}, 0x8000) 1.848373635s ago: executing program 1 (id=7023): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) 1.777757373s ago: executing program 1 (id=7025): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x687, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0xffffffff, 0x400, {0x0, 0x0, 0x0, r2, {0xffe4}, {0x6, 0xffff}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x48004) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00'], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000240)="11000702", 0x4}, {&(0x7f0000000540)="a4920021", 0x4}], 0x3) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x6, &(0x7f0000000240)={0x14, {{0x29, 0x0, 0x43000000, @private1, 0x6}}, {{0xa, 0x0, 0x4, @empty}}}, 0x108) recvmmsg(r4, &(0x7f0000004480), 0x40000c2, 0x12, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r9, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r3}, 0xc) 1.573047539s ago: executing program 0 (id=7028): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.473755721s ago: executing program 0 (id=7029): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffe0, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100003, 0x3, 0x6361, 0x5, 0x9, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\b1?:\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000002000000bf00"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='\b1?:\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0500000002000000bf00"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xc, [@struct={0x200, 0x2, 0x0, 0x4, 0x0, 0x800, [{0x0, 0x0, 0x1}, {0x0, 0x4, 0x8488}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x400}}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x61, 0x5f, 0x0]}}, &(0x7f0000001700)=""/79, 0x60, 0x4f, 0x0, 0x3, 0x10000}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001900)={'syztnl0\x00', &(0x7f00000017c0)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x2, 0x32e0, 0x5, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x8000, 0x4, 0x2}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001840)={r2, 0x9, 0x1, 0x3}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001840)={r2, 0x9, 0x1, 0x3}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYRESOCT=r3, @ANYRES64=r6, @ANYBLOB="ffff00"/20, @ANYRES32=r4, @ANYRES32, @ANYRES8=r3], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r5, 0x13}, 0x80, &(0x7f0000000740)}, 0x2000c111) (async) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r5, 0x13}, 0x80, &(0x7f0000000740)}, 0x2000c111) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x28800}, 0x4) recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000100)={0x10000008}) socket(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r12, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000014bd7f0428bd3f15384f7000fddbdf250a1074fd", @ANYRES32=r5, @ANYBLOB="08000a0003000000080008000002000008000a0003000000"], 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40010) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000014bd7f0428bd3f15384f7000fddbdf250a1074fd", @ANYRES32=r5, @ANYBLOB="08000a0003000000080008000002000008000a0003000000"], 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40010) 1.472043517s ago: executing program 1 (id=7030): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000140)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x101, 0x5, 0x7, 0xfffffffffffffff9, 0x3, 0xfff]}, &(0x7f0000000080)=0x78) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x7, 0x5}, 0x8) 1.434022436s ago: executing program 1 (id=7031): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0xaf67bbcfed886658, 0x2, 0x70, 0x140, 0x10, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x40, 0xb, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r2, 0x2f, 0x1, 0x7, 0x3, 0x10, @private0, @loopback, 0x7800, 0x10, 0xcc4, 0x25}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) getsockname$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000340)=0x1c) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000380)=0x1000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) write$bt_hci(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="010d0417ffffffffffff07db39a309a49dfd15aff3000000000000"], 0x1b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0x8) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r10, 0x400000000000003a, 0x7, 0x0, 0x0) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'gre0\x00', r6, 0x40, 0x1, 0xd9, 0xa, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x6e, 0x0, 0x7, 0x2f, 0x0, @local, @local}}}}) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB='c'], 0xa) 1.34603359s ago: executing program 0 (id=7032): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x1fd87, 0x4) socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x2}}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000040009"], 0x174}}, 0x0) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0300000000000000380012800b0001006970366772650000c8f370082800028006000f008000000014000700ff010000000000000000000000000001060010004e210000"], 0x58}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x1, 0x7bca, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="1a2383166cfb08b7551aec27228cee5136c1c6063f6e42c3f993a621a2f62a7a172a8df0ee2209ebede6179d447d68013f2a066ff3f0c577eaf85e6ce50127215f50d4c80cde5e812c22da01e8d0a84ab4861ca4bce84935c9394e18501ea3fa2fd8d3cc06", @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f0000000280)={0x6, 0x3, 0x7, 0xffff, 0x7, 0x2cb, 0xeea, 0x3}, &(0x7f0000000300)={0x8, 0xf, 0x97d, 0x100, 0x6, 0x3, 0x2, 0x8}, &(0x7f0000000340)={0x6, 0x9, 0x10001, 0x8000, 0x3, 0x4, 0x20000000000000, 0x9}, &(0x7f0000000880), &(0x7f0000000900)={&(0x7f00000008c0)={[0x52e]}, 0x8}) setsockopt$packet_int(r9, 0x107, 0xe, &(0x7f0000000000)=0x9, 0x4) 1.197787838s ago: executing program 1 (id=7033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/124, 0x7c, 0x10082, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "e4fffffffffffbff", "9da152000004b4991192c0029200", "b6730761", "cbc5f9dc4dab64ec"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x90, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffff9d5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x0, 0x86b7}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8}]}, 0x90}}, 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xffff, 0x3, 0x2, 0xb9c}, {0xfa, 0x0, 0x6, 0x4, 0x2, 0x87d}, 0x80, 0xfffff001, 0xf3f}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5a90d3d52efb08c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0xb6, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff49, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@empty}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xfffffff7}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="1b60b9c0cd9e47cef5afe8f3631ed556", 0x10) 1.19109436s ago: executing program 3 (id=7034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x3c, 0x3, 0x0, 0x10000000, 0xa, 0x2}, {@in=@private=0xa010101, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a0100000000000036b439d3bb3f7b5800010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000038000000160a0101000b000000000000010000000900010073797a30000000000900020073797a3000000000040003800800075b46edd7c9cf19f5a140000000031400000010f1000000000000000000000000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r5, @ANYBLOB="410328bd7000fedbdf250700000004000280f40002802c"], 0x1b4}, 0x1, 0x0, 0x0, 0x8810}, 0x14) 1.178067323s ago: executing program 4 (id=7035): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="005dbd7db88b9d57fb739a73b503eacaa300cca2942e6c3ab33ee869fd3e43624b4d1846b348cf6899cf90bffff6585a62a45af32bd0c388b7958e412856c9f3be480685e67f071052f9cf72f5f7e953a4f931acd681b426b40c0310ed9dae0fe7c8aa991db50c7bf4753022877f11389738925ce95ad1c185d3461916d8da51328ad5b4fd3d7b3f881fb8654bcdf786330b35c0", 0x94}], 0x1}}], 0x1, 0x8000080) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000001a14010028bd7000fddbdf25080001"], 0x18}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) r4 = socket(0xa, 0x3, 0x3a) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/223}, {&(0x7f0000000800)=""/89}, {&(0x7f0000000880)=""/154}, {&(0x7f0000000940)=""/14}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/108}, {&(0x7f0000001d40)=""/101}], 0x0, &(0x7f0000001e40)=""/133}, 0x1000}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/17}, {&(0x7f0000001f40)=""/48}, {&(0x7f0000001f80)=""/133}]}, 0xff}, {{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/71}, 0x1}], 0x400023e, 0x300, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @mld={0x6, 0x0, 0x0, 0x4, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240c0080}, 0x81) syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000029}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x44, r8, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r9, 0xd) sendmmsg(r9, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x200, @dev={0xfe, 0x80, '\x00', 0x19}, 0xa, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)="83", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x80) 961.727716ms ago: executing program 3 (id=7036): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="040100001600010025bd7000ffdbdf2500000000000000000000ffff64010100fe8000000000000000000000000000214e2300004e200003020020103a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d533000000ac1414aa00000000000000000000000001000000000000001000000000000000040000000000000001800000000000000800000000000000f707000000000000f0aa0000000000000200000000000000000050000000000004000000000000000400000000000000020000000000000008c900008a262721080000002bbd7000073500000a0000001000000000000000ff000000020000880c002000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r5, @ANYRES32=r8, @ANYRESHEX=r3], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000200", @ANYRES16=r1, @ANYBLOB="080025bd7000fddbdf250200000008000400000000002c00018008000700", @ANYRES32=r5, @ANYBLOB="0500020010000000060005004e240000080006000700000008000300e000000108000400000000050800030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r12) getsockname$packet(r12, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x1, 0x21, 0xfa40, 0x11, 0x0, 0xce26}}, {0x0, 0x2, [0xff, 0x0, 0x4, 0x1000, 0xe7c0]}}, {{0x0, 0x1, {0x81, 0x8, 0xd, 0xb697, 0x1, 0x4, 0x6}}}, {{0x0, 0x1, {0xa, 0x4, 0x3134, 0x29, 0x2, 0x8, 0x1}}, {0x0, 0x2, [0x2]}}]}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x1, 0x7, 0xa28, 0xd, 0x0, 0x7fffffff}}, {0x0, 0x2, [0x5, 0xfff, 0x2, 0x5, 0x8a2b, 0x10, 0x4, 0x5]}}, {{0x0, 0x1, {0x7, 0xc0, 0x100, 0x7fffffff, 0x0, 0x4, 0x9}}, {0x0, 0x2, [0x200, 0x3, 0x3, 0x81, 0x6]}}, {{0x0, 0x1, {0x1, 0x3, 0xb16b, 0x1000, 0x1, 0x3, 0xff}}, {0x0, 0x2, [0x1, 0x1, 0x7fff]}}, {{0x0, 0x1, {0x5, 0x8, 0xb, 0x1, 0x2, 0x40, 0x1}}, {0x0, 0x2, [0x1ff, 0x200, 0xf, 0x8, 0x62]}}, {{0x0, 0x1, {0x1, 0x80, 0xdb4, 0x80000001, 0x1, 0x6, 0xfa}}, {0x0, 0x2, [0x6, 0x7, 0x952, 0x7, 0x8, 0xd]}}, {{0x0, 0x1, {0x2, 0x3, 0x7f, 0x1, 0x1, 0x6, 0x6}}, {0x0, 0x2, [0x2]}}]}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x81}, @qdisc_kind_options=@q_fq_pie={{}, {0x0, 0x2, [@TCA_FQ_PIE_TARGET={0x0, 0x3, 0xf}]}}]}, 0xfeaa}}, 0x4000800) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x21, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$unix(0x1, 0x5, 0x0) 859.587295ms ago: executing program 2 (id=7037): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14010}, 0x4000) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x80800) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x174, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3aede98a22953d6e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x108, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "14eb3b038e1af29aa844033a2016350bf394aad71ba6f290b9f17cece8fd7eb1"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e1a9c71d18ee8d40d2c797ed4627db7fe693e8dcbf0c5cfe5b743e915fc03ed8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a88174b44a90b7d4bd570989ed63097d585e4d689a30f7133cfc461848b22f12"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "10fe30e30eb4ad1141599815e0e360dcd4245d91c0d1e0967d2603fd94a3a2f5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "13d57143ad3440a966b6c6ee9165bfa6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3c8d812371a1a466fc92d08443019e5e"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x174}, 0x1, 0x0, 0x0, 0xa94809ed2d2edfab}, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x4000) r8 = socket$inet6(0xa, 0x2, 0x6) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000980)={{r8, &(0x7f00000007c0)='NLBL_UNLBL\x00', 0x0, &(0x7f0000000800)={@_ha_fsid={[0x1, 0x3]}, {0x3a5, 0x75d, 0x2, 0x6}}, 0xc4b1ae6, &(0x7f0000000840), &(0x7f0000000880)=0x5}, {[0x9, 0x7fffffff, 0x9, 0xfffffc01]}, 0x5, 0xb8, &(0x7f00000008c0)=""/184}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000c80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x108, 0x0, 0x21c, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xe, 0x5, &(0x7f0000000cc0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], &(0x7f0000000d00)='syzkaller\x00', 0x751, 0xb5, &(0x7f0000000d40)=""/181, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e00)={0x2, 0x9, 0x8, 0x10}, 0x10, 0xffffffffffffffff, r11, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=[{0x2, 0x2, 0x8, 0x5}, {0x2, 0x4, 0xe, 0x3}, {0x5, 0x2, 0x2, 0x3}, {0x2, 0x2, 0xa, 0x6}], 0x10, 0x4}, 0x94) preadv(r10, &(0x7f0000002400)=[{&(0x7f0000000f80)=""/243, 0xf3}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/142, 0x8e}, {&(0x7f0000002140)=""/166, 0xa6}, {&(0x7f0000002200)=""/168, 0xa8}, {&(0x7f00000022c0)=""/9, 0x9}, {&(0x7f0000002300)=""/100, 0x64}, {&(0x7f0000002380)=""/90, 0x5a}], 0x8, 0x1, 0xb2) sendmsg$nl_generic(r10, &(0x7f0000002840)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002800)={&(0x7f00000024c0)={0x340, 0x16, 0x100, 0x70bd2a, 0x25dfdbfe, {0x4}, [@generic="0dc23ea171cbcd090a4681c551a2d2557dae2080c0aa2c", @generic="a570183ac2d2a8f7543c8d39790904d671fdcf040ca5375c1395fe02432e23e38c5c12a0e2151ab0aca397ba91ca8af46d9f81c7d79d9a3b47493df998d70b58f0515d181b559fa680a4b4161095bfa2752ffec7b2f0ba36caa48d251e0fbd14d60576562e1b959eb06c3b6acecd437a4e7b9dd011c9c9fa05be25d83d6df1f5f20bd28b9a3432b66a7f66205e5d00efa6db5afb92068d74282156db7b34ecfbc62488943dc9a9e699ed1e91aaa5c88332cd98e8c4607ecd83155a53c78b41a0750d4b12536a9754ee9b2157acae5a8b58a70af04820d1c3644632696b46a3c82fbc0dfa696f46e5d03eaff5483fdd0b99", @nested={0x1b8, 0x91, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @ipv4=@multicast2}, @generic="881fcc99d514b3d322f52ee9efb1b9d848e6d0d45c6c777c6ecf62c4e5fa438583df8df15e7289786a6599461232df30a4e102603f194e984c1b405bd661affd66ad79bf47c57a1e5c3a2917d99b249300c9fb6f4e92d246cfeed4dd08bda0b26cd6c7b0146d143332d5d56c7ae6e1644356385cf8e20b", @typed={0xc, 0x19, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x34, 0x0, 0x0, @fd=r16}, @generic="d71f33e674a5b0cf9853b78cb7f00bcd5650d792f15f5af08f1394cb8682592fb9d9322e82542c95cefb", @generic="8573d16a5ba12d49ef12d5017f040bb2b7d95850c925579da50720d4323cfc62640e11447beff31e13de6c998722fda3ad6d42a3d6cfa05430bedfac30ca23ecc9b0311bfada0979648b8c9ca41f87b16565f7e441190973f7548bb2ec3433327518776c159fc1a73cd05f881af86edef15d20f41dd216accf6a4a60d05d9dbd13b1530fd07d2658a5080db7208f7474ece9829279cf8e027478526844449ef3e182401ab4486ad80ade3851a1904475b88295978e08da11c92683d6785bd6ad0cfd029c2ca1cec07db4dfa0a53f72184321e2c6962e697942735c2792", @nested={0x4, 0x111}, @nested={0x4, 0x28}, @generic="fdbf2d9d6ade8e329c974b232abe975706c0"]}, @generic="1578b9a687d5da074da74c12c5a75a5f0644be66cd79eb7b3319daf41b9a56c491a02eb8f8de680d84c8b8a7f0cb54bbe5670deb1027eb2af41cbc0080223e16353f3448860995fc602612e617f44b2a78f98536bb48874c72df3df853e1a9422d9ce55e5d3c534eb6ef7c"]}, 0x340}, 0x1, 0x0, 0x0, 0x40881}, 0x4000004) r17 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r17, 0x400c6615, &(0x7f0000002880)={0x0, @aes256, 0x0, @desc2}) r18 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r18, 0x0, 0x23, &(0x7f00000028c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0x8) vmsplice(r14, &(0x7f0000002d80)=[{&(0x7f0000002900)="5f29d8c7d446a3f681cf8628877fcccc798a712000c9a116452f995dcdee05af5df56ff5a23859bfc4c49205f82f7aba847c35da07770ba0c02f365798cf303d380de5eb2b6ade6fff714d666e958601605f20e3e87247d3270eb59c6d8408cf70596cdfb948ba8597db3d3f97c7c442556e7e20b18bfc19ab1b9ba9119fa42737deeb72fc14651cfffde15152d6ffe0a025f17aff122b90de0ba63cae29d94c307262955c15358c1f64302260fc29cbeba6652b59bd97f902e1326f13ffd1a6a169ad4bb95660", 0xc7}, {&(0x7f0000002a00)}, {&(0x7f0000002a40)="81e474e4d397b7eb93dc0309461c7b5047dc655f3b122c960582a929e61be8a9df7f98521cdaa59b434579c152aee3d77d7d7e2932bf9614fa4f8d725455747471bf4455629d501a3d8ae79574b10868a134143752955058516b315a", 0x5c}, {&(0x7f0000002ac0)="f2647d0e896ebf957879b1b49672d09008945c1c8845f9e9b9a71c", 0x1b}, {&(0x7f0000002b00)="7357395e665ea6b150584752fcda181f3b2c81cf3849c16cf1d451cde2a10009f5c23dda8bc6e26e199a7c242749b734728863c1855b9a5b2e403f3c4b0384c094544f98747e2f85863885c1bcc07b06419fb8204fea5cd43ecc6e1bac815570abd5f4a6084259b53b1a3c4ce18a4805cc3e0d702315f6e0c2222cdadfd50f382067b8990967a20290c031d14aab2adac1a8fa18ca6cc057b2d4b03e75854537e301daad8430b4152b8eda0028442cde04733ba52ad1cdbe95eb0cca233ae27f3392baa2166dc7e95f7a52f5d4654ad0b9f317ce4b1ee4b8", 0xd8}, {&(0x7f0000002c00)="e9139e8ef84d8ccf2f3fc8ea938912b9090c725be543d27db9a0ed19c5bfa20b949d4650c8f53f3d08963636164d3c19b7a4fcb49eca529daf25c6887f79259e", 0x40}, {&(0x7f0000002c40)="aa9e47c2ac4d9bb2d4338df19ef3e327d09a67c2b14389e8bb5163bcd2d6e3eb0d4a3a6bb8dd7b0ad8d03536b74adc0c33ba182c2480d5ac8c1470b1a26431bc32c96db0353e21b0497cb8273eb6eed4900a0c1959fd75789cc694f463f6d1796586456305d1b37883750074ad28f38bf1aae131065cc140468d748cd496", 0x7e}, {&(0x7f0000002cc0)="0c2c147ef9f86b91b2d1b2e7dbcf5390ec74912bb3f9b4a216aa87a3108d48a85c0065706470167733eaefa8a4c4261b15ef47928c48b7d7753418d0b2f6362d6d931574fc4230f27b70ad111cec1de5ab739dd4ab949e03fcbf1f183cb3365976cdecb1fc51f209f36b5be6500d5e98ffaccdbcbb86bf68f6ac61366844165109123ec35cf37b2925d0936229d2def35ba6b064e062d2046a84e54309243ee2b8b65a272e5113577b", 0xa9}], 0x8, 0x3) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002e80)={0x0, 0x7, 0x9, 0x0, 0x661, 0x6}, &(0x7f0000002ec0)=0x14) 792.504008ms ago: executing program 3 (id=7038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'lo\x00', 0x20}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x8, 0x2}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000140)=0x1ff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=r1], 0x50) socketpair(0x2, 0xa, 0x1, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000300000000000000250100000005000500010000000800030005000000050005000400000005000600028000a59a2b970005000600e4ef635f204e3c5780ebfcd4eae44b819dcbfb65675cbcb77ae79915ce89e69a5b28a87181120b29ec8f97"], 0x3c}}, 0x4004080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r3, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r4}, 0x20) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x8, 0x40, 0x0, 0xf9, @local}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000000c0)=0xa, 0x4) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'pimreg\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x1, 0x0, 0xfff}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r9}, 0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x20132, 0xffffffffffffffff, 0xb299c000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) unshare(0x20400) r11 = socket(0x11, 0x2, 0x7) connect$vsock_stream(r11, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x6, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x2) connect$can_bcm(r7, &(0x7f0000000100)={0x1d, r10}, 0x10) 489.138966ms ago: executing program 2 (id=7039): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)=0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f00000003c0)="93235bfcc6d177f3f4dbc8fd2e002081c824466261070f8a6ba0abe933f3b3fe46ae5d8533cd2a7f6e2ad6df7b96e6475caaf20ada7d52de4a6b608b64a4b0db8c21e1058614062128c8527ff009b9e10a694ca17d799f22a33cac7847703d8d777a1792f05be0845da22d6ea8a15b459e8ce491"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a000a808000000000000000000005001b001100"/36], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000680)={0x28, 0x0, 0x2711}, 0x10) connect$vsock_stream(r6, &(0x7f0000001300)={0x28, 0x0, 0x0, @local}, 0x10) (async) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000140)={@empty, @dev, @empty}, &(0x7f0000000180)=0xc) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x23, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) (async) connect$netlink(r9, &(0x7f0000000180), 0xc) (async) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042bbd7000fedbd725010000000900030073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004c000}, 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000480)='./file0\x00', r1}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="39d52dbd7000fedbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="0a00f50008022d800a00000002020202020200000400000004000000040000000f0000001f73f4bfda97843c9ddacc00"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 488.776321ms ago: executing program 3 (id=7040): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) close(0x3) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {0xfff1}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xfffffffffffffeb2}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xd0) (async, rerun: 64) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64) close(r11) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="4fae", 0x2}], 0x1}, 0x4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x24040840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1}, 0x8) 463.275974ms ago: executing program 2 (id=7041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x48}}, 0x0) 418.959731ms ago: executing program 2 (id=7042): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x40801) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1000000000000191, 0x0, 0x0, 0x7400}, 0x400c0) 413.198777ms ago: executing program 3 (id=7043): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001cc0)={@cgroup, 0xffffffffffffffff, 0x18, 0x1}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r6, 0x1, 0x6, @random="58336850e7d4"}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) syz_emit_ethernet(0xe6, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x1d, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x1e, 0x3, [{0x1, 0x12, "9c95b835be0890d33d8fa841a61b9b47"}, {0x1, 0x6, "621e105f"}]}, @timestamp_prespec={0x44, 0x2c, 0xb, 0x3, 0x0, [{@broadcast, 0x2}, {@private=0xa010101, 0x9}, {@private=0xa010102, 0x10000}, {@remote, 0x8}, {@rand_addr=0x64010100, 0x6}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x6f, [@local, @private=0xa010102, @loopback]}, @noop]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @rand_addr=0x64010100, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}]}}}}}}}, 0x0) r8 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) sendmsg$netlink(r7, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x14, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r9, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x24c71499}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 309.872244ms ago: executing program 0 (id=7044): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1d, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x0, 0x3, 0x19, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x4}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffff27, 0x8, 0x7, 0x1, 0xa, 0x17, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7ff, 0x9, 0x679a00, 0x0, 0x15, 0x4, 0x4}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x2c4}}, 0x0) 309.468926ms ago: executing program 1 (id=7045): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r0, &(0x7f0000000140)=')(%.){*/[/@\x00', 0x10000, &(0x7f00000001c0)={@align=0x4, {0x2, 0x2, 0x8000, 0x62}}, 0xfe8, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x101}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0xfffc, 0xfffffffc, @mcast1}], 0x1c) socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) readv(r8, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 263.754369ms ago: executing program 2 (id=7046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={r2, &(0x7f0000000000)='.)}/+\x00', 0x10000, &(0x7f0000000040)={@align=0x9, {0x2, 0x0, 0x1000, 0x100}}, 0x10000, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xb3}) sendmsg$AUDIT_USER(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x180, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x5, 0x642f, 0xa, 0xb, 0x4, 0x2, 0xc, 0x7, 0x2, 0x59, 0xc, 0x19, 0xc7, 0x20000401, 0x81}}, @TCA_GRED_MAX_P={0xfffffffffffffe0d, 0x4, 0x8}]}}]}, 0x180}}, 0x24008004) 214.15127ms ago: executing program 4 (id=7047): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, @private=0xa010101, 0x8, 0x4}}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5daa, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xb439, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x3, 0xf8b4, 0x8, 0x1, r2, 0x0, '\x00', 0x0, r3, 0x1, 0x4, 0x0, 0x1}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4010080) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000100ba8000001201", 0x2e}], 0x1}, 0x40840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r5) 113.796822ms ago: executing program 0 (id=7048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}}, 0x20000804) 109.192727ms ago: executing program 3 (id=7049): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000ffff2bbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500480012800e00010069703665727370616e0000003400028006000300300000001400060000000000000000000000ffffac141427140007"], 0x68}, 0x1, 0x0, 0x0, 0x40000c0}, 0x9080) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001"], 0xe8}}, 0x80) 0s ago: executing program 0 (id=7050): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x8000000}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x80000001}, {0xffff4c74, 0xc3}, {0x0, 0x5, 0x0, 0x9}, {0x5}, {}, {0x0, 0x10, 0x0, 0xfffffffd}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x947, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0xd9f7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x5, 0x0, 0x0, 0x4}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x5}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x49}, {0x0, 0xffffffff, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0xe3b6, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0xfa48}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {}, {}, {0x0, 0x5, 0xe}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, {0x10000008, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x200000}, {0x0, 0x10000, 0xffffffff, 0x0, 0xfffffffd}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x3, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x1010000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x87}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x200c0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0xe8, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000140), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @remote, @empty, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681f9ab1313f4ccad8e0ded61a6f250426f9eac"], 0x3c}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbeef, 0x4000010, 0xffffffffffffffff, 0x16bb6000) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="1100000000001d0000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x6, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.1.5835'. [ 702.245894][T29150] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5834'. [ 702.255404][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 702.344872][T29155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5839'. [ 702.365438][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5839'. [ 702.396444][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 702.412222][T29162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5840'. [ 702.515368][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 702.675951][T29189] netlink: 'syz.3.5850': attribute type 7 has an invalid length. [ 702.686324][T29188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5849'. [ 702.696321][T29189] netlink: 'syz.3.5850': attribute type 8 has an invalid length. [ 702.704658][T29188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5849'. [ 702.809844][T29197] syzkaller0: entered promiscuous mode [ 702.824445][T29197] syzkaller0: entered allmulticast mode [ 702.925738][ T29] audit: type=1804 audit(1781985421.314:22): pid=29211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5857" name="/newroot/570/cgroup.controllers" dev="tmpfs" ino=2937 res=1 errno=0 [ 702.972898][ T29] audit: type=1800 audit(1781985421.324:23): pid=29211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5857" name="cgroup.controllers" dev="tmpfs" ino=2937 res=0 errno=0 [ 703.003106][ T29] audit: type=1800 audit(1781985421.324:24): pid=29211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5857" name="cgroup.controllers" dev="tmpfs" ino=2937 res=0 errno=0 [ 703.145377][T29224] netlink: 'syz.1.5861': attribute type 1 has an invalid length. [ 703.609613][T29251] netlink: 'syz.0.5869': attribute type 4 has an invalid length. [ 703.730124][T29255] syzkaller1: entered promiscuous mode [ 703.736867][T29255] syzkaller1: entered allmulticast mode [ 704.263005][T29267] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20006 [ 704.379996][T29280] validate_nla: 1 callbacks suppressed [ 704.380032][T29280] netlink: 'syz.2.5876': attribute type 1 has an invalid length. [ 704.411423][T29280] bond15: entered promiscuous mode [ 704.417312][T29280] 8021q: adding VLAN 0 to HW filter on device bond15 [ 704.447292][T29280] macvtap1: entered allmulticast mode [ 704.468809][T29280] macvtap2: entered allmulticast mode [ 704.503559][T29280] bond15: (slave bridge8): making interface the new active one [ 704.511850][T29280] bridge8: entered promiscuous mode [ 704.521019][T29280] bond15: (slave bridge8): Enslaving as an active interface with an up link [ 704.633470][T29285] ip6gre3: entered promiscuous mode [ 704.641624][T29285] ip6gre3: entered allmulticast mode [ 704.653198][T29285] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 704.757803][T29296] netlink: 'syz.2.5882': attribute type 21 has an invalid length. [ 704.766678][T29296] IPv6: NLM_F_CREATE should be specified when creating new route [ 705.145755][T29325] x_tables: duplicate underflow at hook 1 [ 705.291067][T20466] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 705.311276][T20466] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 705.322163][T11318] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 705.367168][T29344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.376165][T29344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.408694][T29344] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 705.419505][T29344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.432897][T29344] veth1_vlan: left promiscuous mode [ 705.439405][T29344] veth0_vlan: left promiscuous mode [ 705.445777][T29344] veth0_vlan: entered promiscuous mode [ 705.453186][T29344] tipc: Resetting bearer [ 705.459256][T29344] veth1_vlan: entered promiscuous mode [ 705.469979][T29344] veth0_macvtap: left promiscuous mode [ 705.476588][T29344] veth0_macvtap: entered promiscuous mode [ 705.488296][T29344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 705.496909][T29344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 705.510505][T29344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 705.518759][T29344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.531007][T29344] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 705.555840][T29344] 8021q: adding VLAN 0 to HW filter on device bond5 [ 705.565807][T29344] 8021q: adding VLAN 0 to HW filter on device eth0 [ 705.575252][T29344] 8021q: adding VLAN 0 to HW filter on device eth1 [ 705.583416][T29344] 8021q: adding VLAN 0 to HW filter on device eth2 [ 705.592376][T29344] 8021q: adding VLAN 0 to HW filter on device eth3 [ 705.649650][T20461] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.669470][T20466] bond5: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 705.681969][T20466] bond5: (slave veth11): making interface the new active one [ 705.705203][T20466] bond5: active interface up! [ 705.719234][T20451] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.734455][T20451] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.735142][T11318] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 705.769005][T20451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.915036][T11318] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 706.021310][T15357] block nbd8: Receive control failed (result -32) [ 706.021318][T18075] block nbd8: Receive control failed (result -32) [ 706.468379][T29412] ip6gre1: entered promiscuous mode [ 706.486702][T29412] ip6gre1: entered allmulticast mode [ 706.514716][T20466] net_ratelimit: 32 callbacks suppressed [ 706.514749][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 706.727841][T20475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.734589][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 706.753605][T20475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.854696][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 706.974330][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 707.097012][T20468] bond2: (slave bridge1): failed to get link speed/duplex [ 707.227426][T29433] __nla_validate_parse: 11 callbacks suppressed [ 707.227446][T29433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5917'. [ 707.272305][T29433] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5917'. [ 707.283546][T29433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5917'. [ 707.295898][T29433] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5917'. [ 707.308245][T29433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5917'. [ 707.365221][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 707.487835][T29454] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5924'. [ 707.506734][T29455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5923'. [ 707.544486][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 707.552720][T29455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5923'. [ 707.598350][T29468] tipc: Enabling of bearer rejected, already enabled [ 707.653693][T29475] tipc: Resetting bearer [ 707.676112][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 707.744761][T29475] tipc: Resetting bearer [ 707.835560][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 707.954204][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 707.994044][T29487] syzkaller1: entered promiscuous mode [ 708.016594][T29487] syzkaller1: entered allmulticast mode [ 708.047023][T15357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.058566][T15357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.068834][T15357] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.081479][T15357] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.092940][T15357] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 708.154380][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 708.260031][T29500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5936'. [ 708.384024][T29493] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5934'. [ 708.721535][T29531] bond0: Caught tx_queue_len zero misconfig [ 708.736104][T29534] syzkaller1: entered promiscuous mode [ 708.762733][T29534] syzkaller1: entered allmulticast mode [ 708.769261][T20468] wlan1: Trigger new scan to find an IBSS to join [ 708.794608][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 708.812720][T29537] dvmrp0: entered allmulticast mode [ 709.026850][T29561] pimreg: entered allmulticast mode [ 709.047292][T29561] pimreg: left allmulticast mode [ 709.096263][T29565] veth1_to_bond: Caught tx_queue_len zero misconfig [ 709.180804][T29490] lo speed is unknown, defaulting to 1000 [ 709.274560][T29584] netlink: 'syz.3.5951': attribute type 1 has an invalid length. [ 709.359316][T29584] 8021q: adding VLAN 0 to HW filter on device bond12 [ 709.398524][T29590] netlink: 'syz.0.5954': attribute type 8 has an invalid length. [ 709.834416][ T57] wlan1: Trigger new scan to find an IBSS to join [ 709.955825][T29490] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.963841][T29490] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.972139][T29490] bridge_slave_0: entered allmulticast mode [ 709.985317][T29490] bridge_slave_0: entered promiscuous mode [ 710.002014][T29490] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.010479][T29490] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.018862][T29490] bridge_slave_1: entered allmulticast mode [ 710.029267][T29490] bridge_slave_1: entered promiscuous mode [ 710.097089][T29490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.111702][T29490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.152671][T29490] team0: Port device team_slave_0 added [ 710.160749][T18075] Bluetooth: hci2: command tx timeout [ 710.171274][T29490] team0: Port device team_slave_1 added [ 710.204943][T29490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.212560][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.240795][T29490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.255039][T29602] bond0: entered promiscuous mode [ 710.260974][T29602] batadv_slave_0: entered promiscuous mode [ 710.267243][T29602] debugfs: 'hsr1' already exists in 'hsr' [ 710.272970][T29602] Cannot create hsr debugfs directory [ 710.279469][T29490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.286422][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.312283][T29490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.339478][T29490] hsr_slave_0: entered promiscuous mode [ 710.351305][T29490] hsr_slave_1: entered promiscuous mode [ 710.358428][T29490] debugfs: 'hsr0' already exists in 'hsr' [ 710.364675][T29490] Cannot create hsr debugfs directory [ 710.448694][T29490] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.459203][T29490] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.511888][T29490] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.522735][T29490] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.550941][T29490] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.561680][T29490] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.591732][T29490] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.602247][T29490] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.534546][T20466] net_ratelimit: 23 callbacks suppressed [ 711.534592][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 711.654733][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 711.765782][T20461] bond2: (slave bridge1): failed to get link speed/duplex [ 711.884704][T20468] bond2: (slave bridge1): failed to get link speed/duplex [ 711.997599][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 712.114244][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 712.137290][T29571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.147223][T20466] wlan1: Trigger new scan to find an IBSS to join [ 712.181762][T29490] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 712.231481][T29490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.244672][T29490] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 712.247067][T18075] Bluetooth: hci2: command tx timeout [ 712.281618][T29490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.316894][T29490] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 712.329160][T29608] x_tables: duplicate underflow at hook 1 [ 712.345801][T29490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.356604][T29490] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 712.376166][T29490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.393906][T29608] tipc: Enabled bearer , priority 0 [ 712.452690][T29608] syzkaller0: entered promiscuous mode [ 712.459505][T29608] syzkaller0: entered allmulticast mode [ 712.467008][T29608] tipc: Resetting bearer [ 712.486420][T29607] tipc: Resetting bearer [ 712.571828][T29607] tipc: Disabling bearer [ 712.604714][T20468] bond2: (slave bridge1): failed to get link speed/duplex [ 712.634364][ C1] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3 [ 712.733049][T29490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.779212][T29490] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.789933][T29643] __nla_validate_parse: 5 callbacks suppressed [ 712.789951][T29643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5964'. [ 712.791056][T20475] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.812128][T20475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.815484][T29643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5964'. [ 712.841230][T29490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 712.851599][T29490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 712.879656][T20451] wlan1: Trigger new scan to find an IBSS to join [ 712.886341][T20466] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.886440][T20466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.924485][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 713.058587][T29652] xt_hashlimit: size too large, truncated to 1048576 [ 713.083914][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 713.440031][T29675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5973'. [ 713.464975][T29678] syzkaller0: entered promiscuous mode [ 713.479696][T29678] syzkaller0: entered allmulticast mode [ 713.523736][T29684] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.5976'. [ 713.545361][T29685] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5976'. [ 713.608118][T29684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5976'. [ 713.715218][T29490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.738645][T29673] lo speed is unknown, defaulting to 1000 [ 713.782981][T20475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.881112][T29490] veth0_vlan: entered promiscuous mode [ 713.897864][T29703] bridge0: port 3(batadv1) entered disabled state [ 713.962164][T29707] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 713.977933][T29707] bond13 (unregistering): Released all slaves [ 714.051290][T29490] veth1_vlan: entered promiscuous mode [ 714.203918][T29724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5984'. [ 714.218073][T29490] veth0_macvtap: entered promiscuous mode [ 714.228372][T29490] veth1_macvtap: entered promiscuous mode [ 714.248791][T29490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.269925][T29490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.316495][T18075] Bluetooth: hci2: command tx timeout [ 714.358659][T20475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.370563][T20475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.402253][T20475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.404834][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5989'. [ 714.426036][T20475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.459440][T29738] syzkaller0: entered promiscuous mode [ 714.478955][T29738] syzkaller0: entered allmulticast mode [ 714.678243][T29754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5991'. [ 714.750502][T29746] netlink: 'syz.4.5991': attribute type 1 has an invalid length. [ 714.942340][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.959356][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.011650][T20464] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 715.035672][T20475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.065294][T29766] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 715.070872][T20475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.107613][T29766] ip6gre0: entered promiscuous mode [ 715.128538][T29766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5997'. [ 715.243733][T29779] lo: entered allmulticast mode [ 715.260964][T29782] netlink: 'syz.3.6001': attribute type 1 has an invalid length. [ 715.459415][T29790] syzkaller1: entered promiscuous mode [ 715.478307][T29790] syzkaller1: entered allmulticast mode [ 715.528413][T29796] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 715.570032][T15357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 715.577981][T15357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 715.587122][T15357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 715.605965][T15357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 715.613558][T15357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 715.836999][T20475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.081174][T29826] netlink: 'syz.0.6014': attribute type 1 has an invalid length. [ 716.394761][T18075] Bluetooth: hci2: command tx timeout [ 716.462637][T29797] lo speed is unknown, defaulting to 1000 [ 716.519275][T29852] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 716.561941][T29852] batman_adv: batadv0: Adding interface: gretap1 [ 716.581074][T29852] batman_adv: batadv0: Interface activated: gretap1 [ 716.605477][T20461] net_ratelimit: 23 callbacks suppressed [ 716.605497][T20461] bond2: (slave bridge1): failed to get link speed/duplex [ 716.884692][T20461] bond2: (slave bridge1): failed to get link speed/duplex [ 717.004294][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 717.260338][T29797] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.268649][T29797] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.277236][T29797] bridge_slave_0: entered allmulticast mode [ 717.285294][T29797] bridge_slave_0: entered promiscuous mode [ 717.293656][T29797] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.301262][T29797] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.309425][T29797] bridge_slave_1: entered allmulticast mode [ 717.317196][T29797] bridge_slave_1: entered promiscuous mode [ 717.383362][T20461] bond2: (slave bridge1): failed to get link speed/duplex [ 717.411595][T29797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.435461][T29797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.471275][T29797] team0: Port device team_slave_0 added [ 717.479386][T29797] team0: Port device team_slave_1 added [ 717.501041][T29797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.508418][T29797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.551219][T29797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.577169][T29797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.590888][T29797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.654036][T29797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.675040][T18075] Bluetooth: hci4: command tx timeout [ 717.689348][T29897] netlink: 'syz.0.6036': attribute type 2 has an invalid length. [ 717.706342][T29897] netlink: 'syz.0.6036': attribute type 8 has an invalid length. [ 717.754285][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 717.863450][T29797] hsr_slave_0: entered promiscuous mode [ 717.903748][T29797] hsr_slave_1: entered promiscuous mode [ 717.918953][T29797] debugfs: 'hsr0' already exists in 'hsr' [ 717.925431][T29797] Cannot create hsr debugfs directory [ 717.927172][T29911] __nla_validate_parse: 9 callbacks suppressed [ 717.927199][T29911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6040'. [ 717.955070][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 717.962894][T29914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.004802][T29911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6040'. [ 718.078030][T29911] netlink: 'syz.1.6040': attribute type 8 has an invalid length. [ 718.091271][T29911] sch_fq: defrate 0 ignored. [ 718.099186][T29911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6040'. [ 718.205780][T29931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6045'. [ 718.217070][T29932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.228547][T29931] netlink: 'syz.4.6045': attribute type 32 has an invalid length. [ 718.237034][T29933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6045'. [ 718.237057][T29933] netlink: 'syz.4.6045': attribute type 32 has an invalid length. [ 718.266694][T29933] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 718.278558][T29931] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 718.319579][T29939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6047'. [ 718.324570][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 718.360895][T29797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.372612][T29797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.383398][T29797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 45045 - 0 [ 718.415850][T29942] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6048'. [ 718.442006][T29942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6048'. [ 718.465822][T29797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.477203][T29797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.492011][T29797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 45045 - 0 [ 718.506766][T29948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6048'. [ 718.524291][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 718.539160][T29947] syzkaller0: entered promiscuous mode [ 718.545655][T29947] syzkaller0: entered allmulticast mode [ 718.571344][T29951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6051'. [ 718.590103][T29797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.601564][T29797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.612037][T29797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 45045 - 0 [ 718.644489][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 718.765738][T29797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.777920][T29797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.807182][T29797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 45045 - 0 [ 718.856278][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 718.950983][T29797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 718.965476][T29797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.984654][T29797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 719.011223][T29797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.020154][T29797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 719.055319][T29797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.083414][T29797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 719.108528][T29797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 719.373703][T29797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.431161][T29797] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.451098][T30006] netlink: 'syz.2.6062': attribute type 11 has an invalid length. [ 719.479367][T20475] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.487043][T20475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.523520][T20464] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.531214][T20464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.758792][T18075] Bluetooth: hci4: command tx timeout [ 719.876558][T30035] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 720.008228][T30047] netlink: 'syz.2.6072': attribute type 4 has an invalid length. [ 720.043525][T30047] netlink: 'syz.2.6072': attribute type 4 has an invalid length. [ 720.415310][T29797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.522771][T29797] veth0_vlan: entered promiscuous mode [ 720.549704][T29797] veth1_vlan: entered promiscuous mode [ 720.612768][T29797] veth0_macvtap: entered promiscuous mode [ 720.642718][T29797] veth1_macvtap: entered promiscuous mode [ 720.732596][T29797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.759938][T29797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.797805][T20461] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.830075][T20461] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.850054][T20461] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.888147][T20461] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.001154][T20469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.044480][T20469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.062928][T30105] : renamed from veth0_to_bond (while UP) [ 721.101035][T20475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.127488][T30109] netlink: 'syz.0.6087': attribute type 11 has an invalid length. [ 721.131718][T20475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.286935][T30123] netlink: 'syz.1.6091': attribute type 13 has an invalid length. [ 721.302152][T30123] netlink: 'syz.1.6091': attribute type 17 has an invalid length. [ 721.314772][T30123] lo: left allmulticast mode [ 721.324467][T30123] tunl0: left allmulticast mode [ 721.330655][T30123] gre0: left allmulticast mode [ 721.336808][T30123] gretap0: left allmulticast mode [ 721.346617][T30123] erspan0: left allmulticast mode [ 721.357487][T30123] ip_vti0: left allmulticast mode [ 721.363903][T30123] ip6_vti0: left allmulticast mode [ 721.369818][T30123] sit0: left allmulticast mode [ 721.377220][T30123] ip6tnl0: left allmulticast mode [ 721.383316][T30123] ip6gre0: left allmulticast mode [ 721.389843][T30123] bridge0: left allmulticast mode [ 721.396428][T30123] vcan0: left allmulticast mode [ 721.402126][T30123] bond0: left allmulticast mode [ 721.409597][T30123] nlmon0: left allmulticast mode [ 721.416143][T30123] batadv0: left allmulticast mode [ 721.422265][T30123] veth0: left allmulticast mode [ 721.428829][T30123] veth1: left allmulticast mode [ 721.437035][T30123] wg0: left allmulticast mode [ 721.442600][T30123] wg1: left allmulticast mode [ 721.448853][T30123] wg2: left allmulticast mode [ 721.455171][T30123] veth0_to_bridge: left allmulticast mode [ 721.461959][T30123] bridge_slave_0: left allmulticast mode [ 721.470279][T30123] veth1_to_bridge: left allmulticast mode [ 721.477648][T30123] bridge_slave_1: left allmulticast mode [ 721.485044][T30123] veth0_to_bond: left allmulticast mode [ 721.491666][T30123] bond_slave_0: left allmulticast mode [ 721.498725][T30123] veth0_to_team: left allmulticast mode [ 721.505744][T30123] team_slave_0: left allmulticast mode [ 721.512227][T30123] veth1_to_team: left allmulticast mode [ 721.520726][T30123] team_slave_1: left allmulticast mode [ 721.527717][T30123] veth0_to_batadv: left allmulticast mode [ 721.536016][T30123] batadv_slave_0: left allmulticast mode [ 721.542835][T30123] veth1_to_batadv: left allmulticast mode [ 721.550023][T30123] batadv_slave_1: left allmulticast mode [ 721.558514][T30123] veth0_to_hsr: left allmulticast mode [ 721.566979][T30123] veth1_to_hsr: left promiscuous mode [ 721.572390][T30123] veth1_to_hsr: left allmulticast mode [ 721.580490][T30123] hsr0: left allmulticast mode [ 721.585860][T30123] hsr_slave_0: left allmulticast mode [ 721.591303][T30123] hsr_slave_1: left allmulticast mode [ 721.600160][T30123] veth1_virt_wifi: left allmulticast mode [ 721.607487][T30123] veth0_virt_wifi: left allmulticast mode [ 721.617383][T30123] vlan0: left allmulticast mode [ 721.623211][T30123] vlan1: left allmulticast mode [ 721.629449][T30123] macvlan1: left allmulticast mode [ 721.636687][T30123] ipvlan0: left allmulticast mode [ 721.642547][T30123] ipvlan1: left allmulticast mode [ 721.648184][T30123] veth0_vlan: left allmulticast mode [ 721.657327][T30123] macvtap0: left allmulticast mode [ 721.662507][T30123] veth0_macvtap: left allmulticast mode [ 721.678377][T30123] geneve0: left allmulticast mode [ 721.685247][T30123] geneve1: left allmulticast mode [ 721.691404][T30123] mac80211_hwsim hwsim55 wlan0: left allmulticast mode [ 721.699771][T30123] mac80211_hwsim hwsim56 wlan1: left allmulticast mode [ 721.708848][T30123] bond1: left allmulticast mode [ 721.716224][T30123] mac80211_hwsim hwsim56 nicvf0: left allmulticast mode [ 721.724267][T30123] bond2: left allmulticast mode [ 721.730533][T30123] veth2: left allmulticast mode [ 721.736995][T30123] veth3: left allmulticast mode [ 721.743134][T30123] macvlan2: left allmulticast mode [ 721.748495][T30123] veth1_vlan: left allmulticast mode [ 721.756427][T30123] veth1_macvtap.1: left allmulticast mode [ 721.762602][T30123] veth1_macvtap: left allmulticast mode [ 721.771138][T30123] veth4: left allmulticast mode [ 721.777657][T30123] veth5: left allmulticast mode [ 721.834925][T18075] Bluetooth: hci4: command tx timeout [ 721.846052][T30123] geneve2: left promiscuous mode [ 721.851064][T30123] net_ratelimit: 19 callbacks suppressed [ 721.851080][T30123] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 721.895275][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 722.014546][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 722.049532][T30140] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 722.144183][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 722.181827][T30145] netlink: 'syz.2.6100': attribute type 1 has an invalid length. [ 722.286194][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 722.288129][T15357] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.302797][T15357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.311060][T15357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.321465][T15357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.329778][T15357] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.435454][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 722.604253][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 722.734419][T20461] bond2: (slave bridge1): failed to get link speed/duplex [ 722.837306][T18074] syz_tun (unregistering): left allmulticast mode [ 722.884259][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 722.982852][T30158] lo speed is unknown, defaulting to 1000 [ 723.024521][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 723.121650][T30177] netlink: 'syz.2.6105': attribute type 1 has an invalid length. [ 723.289296][T30194] tipc: Enabling not permitted [ 723.297550][T30194] tipc: Enabling of bearer rejected, failed to enable media [ 723.490874][T30158] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.499962][T30158] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.512845][T30212] xt_ipcomp: unknown flags 1D [ 723.518659][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 723.535196][T30158] bridge_slave_0: entered allmulticast mode [ 723.544640][T30158] bridge_slave_0: entered promiscuous mode [ 723.559183][T30158] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.570090][T30158] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.578326][T30158] bridge_slave_1: entered allmulticast mode [ 723.587423][T30158] bridge_slave_1: entered promiscuous mode [ 723.629102][T30158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.652511][T30158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.699169][T30212] __nla_validate_parse: 12 callbacks suppressed [ 723.699188][T30212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6113'. [ 723.737560][T30158] team0: Port device team_slave_0 added [ 723.753683][T30158] team0: Port device team_slave_1 added [ 723.774001][T30226] xfrm0: entered allmulticast mode [ 723.801586][T30224] netlink: 'syz.2.6116': attribute type 4 has an invalid length. [ 723.838298][T30158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.848527][T30224] netlink: 'syz.2.6116': attribute type 4 has an invalid length. [ 723.864025][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.899270][T30158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.915791][T15357] Bluetooth: hci4: command tx timeout [ 723.938135][T30158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.947815][T30158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.974884][T30158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.081199][T30158] hsr_slave_0: entered promiscuous mode [ 724.099490][T30158] hsr_slave_1: entered promiscuous mode [ 724.113737][T30158] debugfs: 'hsr0' already exists in 'hsr' [ 724.120944][T30243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6124'. [ 724.131427][T30158] Cannot create hsr debugfs directory [ 724.136864][T30243] unsupported nlmsg_type 40 [ 724.145111][T30243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6124'. [ 724.302279][T30253] tipc: Enabled bearer , priority 10 [ 724.394595][T15357] Bluetooth: hci5: command tx timeout [ 724.396785][T30158] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.473956][ T5805] IPVS: starting estimator thread 0... [ 724.482277][T30158] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.645507][T30261] IPVS: using max 44 ests per chain, 105600 per kthread [ 724.665400][T30158] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.709117][T30158] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.851150][T30158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 724.861491][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.876847][T30158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 724.891365][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.901797][T30158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 724.926853][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.937927][T30158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.959750][T30158] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 725.129667][T30158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.156245][T30300] sctp: [Deprecated]: syz.4.6139 (pid 30300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.156245][T30300] Use struct sctp_sack_info instead [ 725.177086][T30300] sctp: [Deprecated]: syz.4.6139 (pid 30300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.177086][T30300] Use struct sctp_sack_info instead [ 725.182713][T30158] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.220991][T20466] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.228876][T20466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.263514][T20475] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.270700][T20475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.300522][T30307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6142'. [ 725.527495][T30318] netlink: 820 bytes leftover after parsing attributes in process `syz.1.6143'. [ 725.542558][T30318] netlink: 820 bytes leftover after parsing attributes in process `syz.1.6143'. [ 725.579634][T30318] netlink: 'syz.1.6143': attribute type 1 has an invalid length. [ 725.597917][T30318] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6143'. [ 725.664970][T30325] netlink: 'syz.2.6145': attribute type 2 has an invalid length. [ 725.687781][T30325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6145'. [ 725.786422][T30333] netlink: 'syz.3.6147': attribute type 21 has an invalid length. [ 725.807297][T30333] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6147'. [ 725.807812][T30336] sit1: entered promiscuous mode [ 725.827881][T30333] netlink: 'syz.3.6147': attribute type 4 has an invalid length. [ 725.844231][T30333] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6147'. [ 725.911902][T30158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.018345][T30158] veth0_vlan: entered promiscuous mode [ 726.048467][T30158] veth1_vlan: entered promiscuous mode [ 726.168296][T30357] IPVS: Error joining to the multicast group [ 726.277486][T30158] veth0_macvtap: entered promiscuous mode [ 726.301294][T30372] netlink: 'syz.1.6158': attribute type 1 has an invalid length. [ 726.349716][T30368] syzkaller0: entered promiscuous mode [ 726.370691][T30377] netlink: 'syz.1.6158': attribute type 4 has an invalid length. [ 726.387921][T30368] syzkaller0: entered allmulticast mode [ 726.397042][T30158] veth1_macvtap: entered promiscuous mode [ 726.422218][T30372] netlink: 'syz.1.6158': attribute type 4 has an invalid length. [ 726.450064][T30380] netlink: 'syz.2.6159': attribute type 1 has an invalid length. [ 726.459523][T30158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.476246][T15357] Bluetooth: hci5: command tx timeout [ 726.504014][T30158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.539292][T20468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.567254][T20468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.588496][T30376] netlink: 'syz.3.6160': attribute type 1 has an invalid length. [ 726.588928][T20468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.624862][T20468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.689930][T30393] netlink: 'syz.1.6161': attribute type 1 has an invalid length. [ 726.716070][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.746147][T30393] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 726.747249][T30385] lo speed is unknown, defaulting to 1000 [ 726.852336][T20469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.860188][T20469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.880843][ T57] net_ratelimit: 19 callbacks suppressed [ 726.880864][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 726.963422][T20469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.982423][T20469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.076273][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 727.184906][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 727.198883][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 727.213144][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 727.228224][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 727.365383][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 727.412128][T11318] IPVS: starting estimator thread 0... [ 727.505874][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 727.516500][T30436] IPVS: using max 48 ests per chain, 115200 per kthread [ 727.718674][T30439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.879010][T30419] infiniband syz0: set active [ 727.884362][T30419] infiniband syz0: added xfrm0 [ 727.921019][T30419] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 727.944741][T30419] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 727.989274][T30419] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 728.023167][T30419] RDS/IB: syz0: added [ 728.030617][T30419] smc: adding ib device syz0 with port count 1 [ 728.037588][T30419] smc: ib device syz0 port 1 has no pnetid [ 728.247436][T18075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 728.255532][T18075] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 728.262868][T18075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 728.271631][T18075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 728.279711][T18075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 728.396915][T30451] tipc: Resetting bearer [ 728.533704][T30451] bridge2: left promiscuous mode [ 728.544256][T30451] bridge2: left allmulticast mode [ 728.550036][T30451] bond7: left promiscuous mode [ 728.555472][T18075] Bluetooth: hci5: command tx timeout [ 728.564954][T30451] ip6gre1: left promiscuous mode [ 728.569962][T30451] ip6gre1: left allmulticast mode [ 728.599936][T11319] xfrm0 speed is unknown, defaulting to 1000 [ 728.618324][T20475] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.634840][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 728.665596][T20475] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.693792][ T5724] xfrm0 speed is unknown, defaulting to 1000 [ 728.701456][T20475] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.732102][T30474] gre2: entered allmulticast mode [ 728.741206][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 728.753412][T30475] __nla_validate_parse: 7 callbacks suppressed [ 728.753429][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6177'. [ 728.755620][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 728.824285][T20475] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.826078][T30483] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6178'. [ 728.852882][T30475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.893286][T30475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.932003][T30483] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6178'. [ 728.956219][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 728.962752][T30485] syzkaller0: entered promiscuous mode [ 728.987405][T30485] syzkaller0: entered allmulticast mode [ 729.025542][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 729.164431][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 729.295090][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 729.311843][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 729.401605][T30503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6183'. [ 729.530674][T30509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6184'. [ 729.542847][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 729.554984][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 729.572784][T30465] lo speed is unknown, defaulting to 1000 [ 729.712654][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 730.021010][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 730.151051][T30465] xfrm0 speed is unknown, defaulting to 1000 [ 730.202134][T30543] syzkaller0: entered promiscuous mode [ 730.210171][T30543] syzkaller0: entered allmulticast mode [ 730.315975][T18075] Bluetooth: hci1: command tx timeout [ 730.333942][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 730.540242][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 730.560308][ T4951] block nbd2: Possible stuck request ffff88807a397000: control (read@0,1024B). Runtime 60 seconds [ 730.572025][ T4951] block nbd2: Possible stuck request ffff88807a3971c0: control (read@1024,1024B). Runtime 60 seconds [ 730.584015][ T4951] block nbd2: Possible stuck request ffff88807a397380: control (read@2048,1024B). Runtime 60 seconds [ 730.585166][T30555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 730.596706][ T4951] block nbd2: Possible stuck request ffff88807a397540: control (read@3072,1024B). Runtime 60 seconds [ 730.637973][T18075] Bluetooth: hci5: command tx timeout [ 730.708796][T30560] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 730.716093][T30560] syzkaller1: linktype set to 769 [ 730.802280][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 730.854329][T30465] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.861570][T30465] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.869687][T30465] bridge_slave_0: entered allmulticast mode [ 730.879143][T30465] bridge_slave_0: entered promiscuous mode [ 730.907724][T30465] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.915393][T30465] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.922703][T30465] bridge_slave_1: entered allmulticast mode [ 730.932306][T30465] bridge_slave_1: entered promiscuous mode [ 730.982577][T30465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.009672][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 731.018380][T30465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.085055][T30465] team0: Port device team_slave_0 added [ 731.096863][T30465] team0: Port device team_slave_1 added [ 731.098598][T30571] xt_hashlimit: size too large, truncated to 1048576 [ 731.136588][T30465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.149950][T30465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.192919][T30465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.200335][T30579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6198'. [ 731.214926][T30465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.216344][T30576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6200'. [ 731.222440][T30465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.244470][T30579] nbd: couldn't find a device at index 65546 [ 731.271516][T30465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.299935][T30579] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6198'. [ 731.322991][T30419] xfrm0 speed is unknown, defaulting to 1000 [ 731.372583][T30465] hsr_slave_0: entered promiscuous mode [ 731.385066][T30465] hsr_slave_1: entered promiscuous mode [ 731.398066][T30465] debugfs: 'hsr0' already exists in 'hsr' [ 731.429138][T30465] Cannot create hsr debugfs directory [ 731.665312][T30596] syzkaller0: entered promiscuous mode [ 731.676916][T30596] syzkaller0: entered allmulticast mode [ 731.718647][T30599] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6205'. [ 731.743087][T30465] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.754968][T30465] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 731.783175][T30609] erspan0: entered promiscuous mode [ 731.789463][T30609] erspan0: left promiscuous mode [ 731.834850][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 731.863387][T30465] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.880080][T30465] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 731.918670][T20451] net_ratelimit: 9 callbacks suppressed [ 731.918701][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 731.959139][T30465] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.970095][T30465] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 731.981224][T30622] x_tables: duplicate underflow at hook 1 [ 732.022632][T30465] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.033795][T30465] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 732.054311][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 732.174172][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 732.285664][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 732.394293][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 732.404591][T18075] Bluetooth: hci1: command tx timeout [ 732.505452][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 732.614653][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 732.724468][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 732.834202][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 732.944445][ T57] bond2: (slave bridge1): failed to get link speed/duplex [ 733.764539][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 734.474263][T18075] Bluetooth: hci1: command tx timeout [ 734.683076][T30599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.699316][T30465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 734.723240][T30465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.740229][T30465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 734.760202][T30465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 734.776530][T30465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 734.800048][T30465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.819210][T30465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 734.843007][T30465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.910664][T30653] __nla_validate_parse: 3 callbacks suppressed [ 734.910682][T30653] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6221'. [ 734.981409][T30465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.010466][T30465] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.036928][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.042650][T30658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6223'. [ 735.044116][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.058535][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.069184][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.101957][T30662] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6225'. [ 735.513784][T30693] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.533779][T30697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6231'. [ 735.536147][T30693] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.622411][T30465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.753420][T30707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6233'. [ 735.800834][T30706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6233'. [ 735.972927][T30717] bond1: entered allmulticast mode [ 735.985524][T30717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.012367][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6235'. [ 736.159497][T30465] veth0_vlan: entered promiscuous mode [ 736.188384][T30465] veth1_vlan: entered promiscuous mode [ 736.213012][T30733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6239'. [ 736.233745][T30733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6239'. [ 736.247521][T30465] veth0_macvtap: entered promiscuous mode [ 736.255458][T30734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6238'. [ 736.270879][T30734] validate_nla: 3 callbacks suppressed [ 736.270896][T30734] netlink: 'syz.2.6238': attribute type 1 has an invalid length. [ 736.289639][T30465] veth1_macvtap: entered promiscuous mode [ 736.329360][T30465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.356695][T30465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.381669][T20464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.402365][T20464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.447767][T20464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.511220][T20464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.556832][T18075] Bluetooth: hci1: command tx timeout [ 736.564898][T30744] bond2: entered promiscuous mode [ 736.587822][T30744] bond2: entered allmulticast mode [ 736.593716][T30750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.630024][T20475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.660872][T20475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.726228][T20466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.738949][T20466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.776640][T30754] batadv_slave_1: entered promiscuous mode [ 736.785272][T30753] batadv_slave_1: left promiscuous mode [ 736.802285][T30752] syzkaller0: entered promiscuous mode [ 736.825892][T30752] syzkaller0: entered allmulticast mode [ 736.877549][T30757] syzkaller0: entered promiscuous mode [ 736.887909][T30757] syzkaller0: entered allmulticast mode [ 736.943748][T30762] ip6tnl1: entered allmulticast mode [ 736.984538][T20466] net_ratelimit: 30 callbacks suppressed [ 736.984588][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 737.146125][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 737.231451][T30783] syz_tun: entered allmulticast mode [ 737.258281][T30782] syz_tun: left allmulticast mode [ 737.264881][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 737.384326][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 737.404912][T30797] syz_tun: entered allmulticast mode [ 737.504451][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 737.624668][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 737.744881][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 737.864161][T20474] bond2: (slave bridge1): failed to get link speed/duplex [ 737.930802][ T29] audit: type=1804 audit(1781985456.324:25): pid=30815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6264" name="/newroot/12/cgroup.controllers" dev="tmpfs" ino=82 res=1 errno=0 [ 737.966670][ T29] audit: type=1800 audit(1781985456.324:26): pid=30815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6264" name="cgroup.controllers" dev="tmpfs" ino=82 res=0 errno=0 [ 738.015352][T20474] bond2: (slave bridge1): failed to get link speed/duplex [ 738.033401][T30831] netlink: 'syz.1.6267': attribute type 1 has an invalid length. [ 738.065602][T30834] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 738.119977][T30838] netlink: 'syz.2.6269': attribute type 9 has an invalid length. [ 738.131288][T30838] netlink: 'syz.2.6269': attribute type 4 has an invalid length. [ 738.139229][T30838] netlink: 'syz.2.6269': attribute type 2 has an invalid length. [ 738.157075][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 738.176552][T30842] netlink: 'syz.0.6271': attribute type 1 has an invalid length. [ 738.221726][T30841] bridge0: port 2(bridge_slave_1) entered listening state [ 738.237769][T30841] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.446921][T30868] erspan1: entered allmulticast mode [ 738.738864][T30895] tipc: Trying to set illegal importance in message [ 738.766096][ T29] audit: type=1804 audit(1781985457.164:27): pid=30897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6286" name="/newroot/88/cgroup.controllers" dev="tmpfs" ino=470 res=1 errno=0 [ 738.778723][T30897] netlink: 'syz.2.6286': attribute type 29 has an invalid length. [ 738.791476][ T29] audit: type=1800 audit(1781985457.164:28): pid=30897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6286" name="cgroup.controllers" dev="tmpfs" ino=470 res=0 errno=0 [ 738.903057][T30901] netlink: 'syz.0.6287': attribute type 1 has an invalid length. [ 738.912887][T30901] netlink: 'syz.0.6287': attribute type 6 has an invalid length. [ 738.922848][T30901] netlink: 'syz.0.6287': attribute type 3 has an invalid length. [ 739.079841][T30907] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 739.127364][T30907] bond3: Removing last arp target with arp_interval on [ 739.311980][T30933] syzkaller0: entered promiscuous mode [ 739.329551][T30933] syzkaller0: entered allmulticast mode [ 739.738694][T30969] syzkaller1: entered promiscuous mode [ 739.787889][T30969] syzkaller1: entered allmulticast mode [ 739.826170][T15357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 739.833507][T15357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 739.841299][T15357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 739.849151][T15357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 739.857615][T15357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 740.221124][T30999] __nla_validate_parse: 61 callbacks suppressed [ 740.221411][T30999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6312'. [ 740.243938][T30997] netlink: 'syz.0.6313': attribute type 11 has an invalid length. [ 740.272344][T30997] netlink: 'syz.0.6313': attribute type 11 has an invalid length. [ 740.292343][T30993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6311'. [ 740.479467][T30997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 740.557001][ T5747] xfrm0 speed is unknown, defaulting to 1000 [ 740.808940][T31031] vlan2: entered promiscuous mode [ 740.831776][T31031] bridge0: entered promiscuous mode [ 740.984734][T30976] lo speed is unknown, defaulting to 1000 [ 741.032947][T31037] syzkaller1: entered promiscuous mode [ 741.059975][T31037] syzkaller1: entered allmulticast mode [ 741.282901][T30976] xfrm0 speed is unknown, defaulting to 1000 [ 741.750558][T31068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6331'. [ 741.822934][T31068] IPv6: sit1: Disabled Multicast RS [ 741.831444][T31068] sit1: entered allmulticast mode [ 741.897564][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 741.915607][T18075] Bluetooth: hci3: command tx timeout [ 741.933072][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 741.963782][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 741.992165][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 742.009982][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 742.023973][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 742.041655][T31074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6333'. [ 742.247333][T31074] bond1: left allmulticast mode [ 742.281960][T31074] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 742.305306][T20451] net_ratelimit: 24 callbacks suppressed [ 742.305356][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 742.541829][T30976] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.571737][T30976] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.583868][T30976] bridge_slave_0: entered allmulticast mode [ 742.592422][T30976] bridge_slave_0: entered promiscuous mode [ 742.629123][T31093] bond2: option lacp_rate: invalid value (128) [ 742.653888][T31093] bond2 (unregistering): Released all slaves [ 742.685751][T20464] bond2: (slave bridge1): failed to get link speed/duplex [ 742.704697][T31101] validate_nla: 192 callbacks suppressed [ 742.704715][T31101] netlink: 'syz.4.6339': attribute type 21 has an invalid length. [ 742.719594][T30976] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.737386][T30976] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.751375][T30976] bridge_slave_1: entered allmulticast mode [ 742.772551][T30976] bridge_slave_1: entered promiscuous mode [ 742.793289][T31101] netlink: 'syz.4.6339': attribute type 4 has an invalid length. [ 742.815583][T31101] netlink: 'syz.4.6339': attribute type 5 has an invalid length. [ 742.965337][T30976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.010778][T30976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.132257][T30976] team0: Port device team_slave_0 added [ 743.155235][T30976] team0: Port device team_slave_1 added [ 743.196580][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 743.307319][T30976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.329575][T30976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.388831][T30976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.437951][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 743.448083][T30976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.464220][T30976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.516026][T30976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.576471][ T4986] udevd[4986]: worker [21313] /devices/virtual/block/nbd2 is taking a long time [ 743.630886][T30976] hsr_slave_0: entered promiscuous mode [ 743.655512][T30976] hsr_slave_1: entered promiscuous mode [ 743.673866][T30976] debugfs: 'hsr0' already exists in 'hsr' [ 743.691250][T30976] Cannot create hsr debugfs directory [ 743.958203][T31155] gre1: entered promiscuous mode [ 743.995019][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 744.003394][T18075] Bluetooth: hci3: command tx timeout [ 744.074785][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 744.335898][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 744.570324][T31183] netlink: 'syz.3.6362': attribute type 1 has an invalid length. [ 744.669777][T31179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 744.681115][T31179] sit1: left promiscuous mode [ 744.726620][T31179] bond2: left promiscuous mode [ 744.749538][T31179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.776454][T31179] 8021q: adding VLAN 0 to HW filter on device bond3 [ 744.803651][T31179] vlan2: left promiscuous mode [ 744.818492][T31179] bridge0: left promiscuous mode [ 744.875578][T31183] bond2: entered promiscuous mode [ 744.881719][T31183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.962612][T31187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.977080][T31187] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 744.989081][T31187] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 745.012604][T31187] bond2: (slave vti0): making interface the new active one [ 745.028249][T31187] vti0: entered promiscuous mode [ 745.039603][T31187] bond2: (slave vti0): Enslaving as an active interface with an up link [ 745.065066][T20475] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.079174][T20475] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.096478][T20475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.113536][T20475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.143085][T31196] macsec1: entered promiscuous mode [ 745.278083][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 745.332554][T31198] netlink: 'syz.2.6366': attribute type 1 has an invalid length. [ 745.378512][T31198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 745.415654][T30976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 745.430898][T30976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 745.444573][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 745.467474][T30976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 745.495361][T30976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 745.582830][T31202] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 745.607764][T30976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 745.622647][T30976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 745.637054][T30976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 745.647683][T30976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 745.670317][T31198] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 745.685085][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 745.704569][T20475] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 745.718524][ T5724] hsr0: entered promiscuous mode [ 745.746105][T31211] __nla_validate_parse: 76 callbacks suppressed [ 745.746126][T31211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6370'. [ 745.833111][T31219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6372'. [ 745.858783][T31219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6372'. [ 745.911219][T31219] macsec1: entered allmulticast mode [ 745.937010][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.940906][T31219] bond0: entered allmulticast mode [ 745.963491][T31219] bond_slave_0: entered allmulticast mode [ 745.976478][T31219] bond_slave_1: entered allmulticast mode [ 745.985611][T31219] bond_slave_0: entered promiscuous mode [ 745.991828][T31219] bond_slave_1: entered promiscuous mode [ 746.002467][T31219] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 746.016845][T31228] sctp: [Deprecated]: syz.3.6374 (pid 31228) Use of int in max_burst socket option. [ 746.016845][T31228] Use struct sctp_assoc_value instead [ 746.074946][T18075] Bluetooth: hci3: command tx timeout [ 746.089665][T30976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.128259][T30976] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.152743][T20469] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.159968][T20469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.216479][T20451] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.223642][T20451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.377263][T31246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6379'. [ 746.763205][T31253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6380'. [ 747.079380][T31250] veth3: entered allmulticast mode [ 747.097166][T31250] bond2: (slave veth3): Enslaving as an active interface with an up link [ 747.131798][T31251] bond2 (unregistering): (slave veth3): Releasing backup interface [ 747.163822][T31251] bond2 (unregistering): Released all slaves [ 747.363144][T31260] bond_slave_0: left promiscuous mode [ 747.380339][T31260] bond_slave_1: left promiscuous mode [ 747.604956][T31260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.637546][T31260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.853402][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.960130][T31260] bond0: left allmulticast mode [ 747.965389][T31260] bond_slave_0: left allmulticast mode [ 747.970865][T31260] bond_slave_1: left allmulticast mode [ 748.006591][T20468] net_ratelimit: 5 callbacks suppressed [ 748.006633][T20468] bond2: (slave bridge1): failed to get link speed/duplex [ 748.108611][T20464] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.123808][T20464] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.127897][T31273] x_tables: duplicate underflow at hook 1 [ 748.154927][T20464] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.176027][T20464] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.200216][T18075] Bluetooth: hci3: command tx timeout [ 748.206563][T20464] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.224967][T20464] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.255767][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 748.290585][T20464] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.373380][T20464] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.408658][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 748.491792][T31289] No such timeout policy "syz1" [ 748.570661][T20468] bond2: (slave bridge1): failed to get link speed/duplex [ 748.683551][T31299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6389'. [ 748.698752][T20468] bond2: (slave bridge1): failed to get link speed/duplex [ 748.735685][T31299] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 748.757913][T31299] gretap0: entered promiscuous mode [ 748.792378][T31299] debugfs: 'hsr0' already exists in 'hsr' [ 748.813189][T31299] Cannot create hsr debugfs directory [ 748.864177][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 748.917749][T31307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6391'. [ 748.971556][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6392'. [ 748.984198][T20474] bond2: (slave bridge1): failed to get link speed/duplex [ 749.008950][T30976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.095425][T20451] bond2: (slave bridge1): failed to get link speed/duplex [ 749.182910][T30976] veth0_vlan: entered promiscuous mode [ 749.236950][T30976] veth1_vlan: entered promiscuous mode [ 749.286029][T31321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6396'. [ 749.295124][T20461] bond2: (slave bridge1): failed to get link speed/duplex [ 749.349321][T30976] veth0_macvtap: entered promiscuous mode [ 749.392137][T30976] veth1_macvtap: entered promiscuous mode [ 749.438097][T20474] bond2: (slave bridge1): failed to get link speed/duplex [ 749.482646][T30976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.517069][T30976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.578364][T20474] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.587996][T20474] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.605900][T20474] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.645743][T20474] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.852394][T31335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6401'. [ 749.857991][T31336] ipt_ECN: cannot use operation on non-tcp rule [ 749.952366][T31338] NCSI netlink: No device for ifindex 566712438 [ 749.973182][T20461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.988328][T20461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.060675][T20461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.074665][T20461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.301800][T31359] netlink: 'syz.0.6409': attribute type 4 has an invalid length. [ 750.399835][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 751.030574][T31404] __nla_validate_parse: 7 callbacks suppressed [ 751.030593][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6419'. [ 751.186876][T31408] netlink: 'syz.2.6421': attribute type 1 has an invalid length. [ 751.228160][T31410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6422'. [ 751.345010][T31412] gretap2: entered allmulticast mode [ 751.377321][T31412] bond5: (slave gretap2): making interface the new active one [ 751.388892][T31412] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 751.511363][T31423] netlink: 5548 bytes leftover after parsing attributes in process `syz.1.6425'. [ 751.598484][T31430] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6428'. [ 751.630621][T31435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6430'. [ 751.652068][T31435] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 751.750507][T31451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6434'. [ 751.888571][T31456] netlink: 'syz.3.6437': attribute type 11 has an invalid length. [ 752.087630][T23698] udevd[23698]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 752.244285][T31481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6441'. [ 752.302812][T31481] netlink: 'syz.2.6441': attribute type 1 has an invalid length. [ 752.338436][T31481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.356234][T31481] bond6: (slave geneve2): making interface the new active one [ 752.365552][T31481] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 752.375457][T20475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.430356][T20475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.442161][T20475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.452824][T31493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6446'. [ 752.453209][T20475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.531143][T31494] xt_socket: unknown flags 0x8 [ 752.751927][T31504] mac80211_hwsim hwsim95 wlan0: entered promiscuous mode [ 752.772143][T31504] mac80211_hwsim hwsim95 wlan0: entered allmulticast mode [ 752.867527][T31492] lo speed is unknown, defaulting to 1000 [ 753.064206][ T77] net_ratelimit: 26 callbacks suppressed [ 753.064226][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 753.137468][T31523] netlink: 'syz.3.6454': attribute type 1 has an invalid length. [ 753.184403][T31425] bond2: (slave bridge1): failed to get link speed/duplex [ 753.239790][T31492] xfrm0 speed is unknown, defaulting to 1000 [ 753.294382][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 753.313481][T31530] netlink: 'syz.3.6456': attribute type 26 has an invalid length. [ 753.416773][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 753.563084][T31538] openvswitch: netlink: Actions may not be safe on all matching packets [ 753.613439][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 753.744579][T31552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6462'. [ 753.885467][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 753.997923][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 754.126159][T31425] bond2: (slave bridge1): failed to get link speed/duplex [ 754.140070][T31558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6463'. [ 754.244192][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 754.660666][T31575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.678120][T31575] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.688173][T31575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.751638][T31575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.760835][T31575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.787346][T31575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 754.799915][T31575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.839723][T31575] veth1_vlan: left promiscuous mode [ 754.862834][T31575] veth0_vlan: left promiscuous mode [ 754.877068][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 754.889967][T31575] veth0_vlan: entered promiscuous mode [ 754.943815][T31575] veth1_vlan: entered promiscuous mode [ 754.985474][T31575] veth1_macvtap: left promiscuous mode [ 754.993915][T31575] veth0_macvtap: left promiscuous mode [ 755.002973][T31575] veth0_macvtap: entered promiscuous mode [ 755.011309][T31575] veth1_macvtap: entered promiscuous mode [ 755.032305][T31575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 755.043133][T31575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.069448][T31575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.087651][T31575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 755.103826][T31575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.142871][T31575] bond2: left allmulticast mode [ 755.149190][T31575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 755.160333][T31575] ip6tnl1: left allmulticast mode [ 755.171515][T31575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 755.210901][T31575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 755.259868][T31575] bond0: entered allmulticast mode [ 755.268441][T31575] bond_slave_0: entered allmulticast mode [ 755.282265][T31575] bond_slave_1: entered allmulticast mode [ 755.291442][T31575] bond_slave_0: entered promiscuous mode [ 755.297541][T31575] bond_slave_1: entered promiscuous mode [ 755.307401][T31575] macsec1: left allmulticast mode [ 755.312460][T31575] bond0: left allmulticast mode [ 755.317361][T31575] bond_slave_0: left allmulticast mode [ 755.322832][T31575] bond_slave_1: left allmulticast mode [ 755.328734][T31575] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 755.337911][T31575] 8021q: adding VLAN 0 to HW filter on device bond5 [ 755.345359][T31575] gretap2: left allmulticast mode [ 755.356388][T31425] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.363598][T31425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.373738][T31425] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.380912][T31425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.427918][T20475] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.458039][T20475] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.467356][T20475] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.476094][T20475] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.503355][T31591] vxlan0: entered promiscuous mode [ 755.546893][T31425] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 755.559223][T31425] bond4: active interface up! [ 755.567272][T20475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.581615][T31591] tipc: Failed to remove unknown binding: 66,1,1/0:1721504933/1721504935 [ 755.640007][T31593] bond7: entered promiscuous mode [ 755.653061][T31593] bond7: entered allmulticast mode [ 755.685063][T31593] 8021q: adding VLAN 0 to HW filter on device bond7 [ 755.710859][T20475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.728430][T20475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.750099][T20475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.782627][T31601] netlink: 'syz.4.6476': attribute type 1 has an invalid length. [ 755.965190][T31620] netlink: 'syz.3.6480': attribute type 11 has an invalid length. [ 756.061330][T31629] __nla_validate_parse: 99 callbacks suppressed [ 756.061349][T31629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6483'. [ 756.153830][T31636] syzkaller0: entered promiscuous mode [ 756.191050][T31636] syzkaller0: entered allmulticast mode [ 756.468192][T31664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6492'. [ 756.496082][T31669] lo: entered allmulticast mode [ 756.512237][T31669] lo: left allmulticast mode [ 756.671682][T31674] nft_compat: unsupported protocol 0 [ 756.680280][T31675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6495'. [ 756.691003][T31680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6495'. [ 756.755039][T31684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6496'. [ 756.880367][T31695] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6499'. [ 756.915362][T31697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6500'. [ 757.037829][T31710] x_tables: duplicate underflow at hook 1 [ 757.086768][T31713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6506'. [ 757.156545][T31719] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6508'. [ 757.266172][T31719] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6508'. [ 757.322887][T31731] netlink: 'syz.2.6511': attribute type 9 has an invalid length. [ 757.656746][T31742] 8021q: adding VLAN 0 to HW filter on device bond8 [ 757.967235][T31767] syzkaller0: entered promiscuous mode [ 757.973324][T31767] syzkaller0: entered allmulticast mode [ 758.002652][T31780] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 758.005247][T31778] netlink: 'syz.1.6522': attribute type 63 has an invalid length. [ 758.058018][T31778] netlink: 'syz.1.6522': attribute type 1 has an invalid length. [ 758.066337][T31778] netlink: 'syz.1.6522': attribute type 2 has an invalid length. [ 758.082599][T31778] netlink: 'syz.1.6522': attribute type 3 has an invalid length. [ 758.912674][T31790] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 758.937222][T31791] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 758.966006][T31791] bond9 (unregistering): Released all slaves [ 759.046434][T31426] net_ratelimit: 54 callbacks suppressed [ 759.046455][T31426] bond4: (slave dummy0): failed to get link speed/duplex [ 759.122497][T31763] lo speed is unknown, defaulting to 1000 [ 759.162833][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 759.196334][T14962] bond4: (slave dummy0): failed to get link speed/duplex [ 759.284964][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 759.326145][ T77] bond4: (slave dummy0): failed to get link speed/duplex [ 759.404851][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 759.433057][T31763] xfrm0 speed is unknown, defaulting to 1000 [ 759.454501][T14962] bond4: (slave dummy0): failed to get link speed/duplex [ 759.497379][T31834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 759.544739][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 759.575961][T14962] bond4: (slave dummy0): failed to get link speed/duplex [ 759.718363][T31847] netlink: 'syz.1.6541': attribute type 1 has an invalid length. [ 759.740574][T31847] bond1: entered promiscuous mode [ 759.747758][T31847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 759.776673][T31847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 759.786557][T31847] bond1: (slave bond2): making interface the new active one [ 759.793914][T31847] bond2: entered promiscuous mode [ 759.799976][T31847] bond1: (slave bond2): Enslaving as an active interface with an up link [ 759.815525][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 760.252560][T31870] netlink: 'syz.2.6549': attribute type 1 has an invalid length. [ 760.294395][T31870] netlink: 'syz.2.6549': attribute type 1 has an invalid length. [ 760.378116][T31874] veth1_to_batadv: entered promiscuous mode [ 760.634669][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 760.646279][ T4951] block nbd2: Possible stuck request ffff88807a397000: control (read@0,1024B). Runtime 90 seconds [ 760.658077][ T4951] block nbd2: Possible stuck request ffff88807a3971c0: control (read@1024,1024B). Runtime 90 seconds [ 760.669202][ T4951] block nbd2: Possible stuck request ffff88807a397380: control (read@2048,1024B). Runtime 90 seconds [ 760.680424][ T4951] block nbd2: Possible stuck request ffff88807a397540: control (read@3072,1024B). Runtime 90 seconds [ 761.188381][T31924] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.292739][T31924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.307505][T31924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.415614][T31924] erspan1: left allmulticast mode [ 761.432341][T20475] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.459153][T31426] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.483215][T31426] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.495893][T31426] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.520183][T31945] __nla_validate_parse: 21 callbacks suppressed [ 761.520213][T31945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6567'. [ 761.551552][T31947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6568'. [ 761.561920][T31947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6568'. [ 761.586741][T31948] =v: renamed from veth0_to_bond [ 761.840665][T31954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6571'. [ 761.935352][T31981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6577'. [ 762.449370][T32037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6591'. [ 762.488915][T32042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6594'. [ 762.500510][T32042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6594'. [ 762.523722][T32042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6594'. [ 762.844406][T32074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6600'. [ 762.949150][T11316] IPVS: starting estimator thread 0... [ 762.962724][T32081] validate_nla: 1 callbacks suppressed [ 762.962747][T32081] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 763.046377][T32082] IPVS: using max 57 ests per chain, 136800 per kthread [ 764.084891][T14962] net_ratelimit: 753 callbacks suppressed [ 764.084913][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 764.174367][ T77] bond4: (slave dummy0): failed to get link speed/duplex [ 764.199659][T32171] netlink: 'syz.4.6626': attribute type 1 has an invalid length. [ 764.244181][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 764.306010][T32189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.315881][T32195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.326762][T20475] bond4: (slave dummy0): failed to get link speed/duplex [ 764.340581][T32193] tipc: Started in network mode [ 764.347871][T32193] tipc: Node identity 86bde5e67e9b, cluster identity 4711 [ 764.359395][T32193] tipc: Enabled bearer , priority 0 [ 764.378880][T32193] syzkaller0: entered promiscuous mode [ 764.400272][T32193] syzkaller0: entered allmulticast mode [ 764.427594][T32193] bond4: (slave dummy0): Releasing backup interface [ 764.453369][T32193] bridge_slave_0: left allmulticast mode [ 764.474487][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 764.479780][T32193] bridge_slave_0: left promiscuous mode [ 764.504357][T32193] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.506848][ T5805] hid-generic 0005:15C2:0440.0002: item fetching failed at offset 2/3 [ 764.526707][ T5805] hid-generic 0005:15C2:0440.0002: probe with driver hid-generic failed with error -22 [ 764.560955][T32193] bridge_slave_1: left allmulticast mode [ 764.584231][T32193] bridge_slave_1: left promiscuous mode [ 764.590505][T32193] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.624717][T32193] bond0: (slave bond_slave_0): Releasing backup interface [ 764.646036][T32193] bond_slave_0: left promiscuous mode [ 764.686260][T32193] bond0: (slave bond_slave_1): Releasing backup interface [ 764.710978][T32193] bond_slave_1: left promiscuous mode [ 764.746491][T32193] team0: Port device team_slave_0 removed [ 764.782692][T32193] team0: Port device team_slave_1 removed [ 764.799894][T32193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.808622][T32193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.829079][T32193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.837557][T32193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.847191][T32193] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 764.865597][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 764.930192][T32191] tipc: Resetting bearer [ 764.956456][T32228] netlink: 'syz.0.6641': attribute type 11 has an invalid length. [ 764.972117][T32191] tipc: Disabling bearer [ 764.989369][T32228] netlink: 'syz.0.6641': attribute type 13 has an invalid length. [ 765.010902][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 765.146438][T31425] bond2: (slave bridge1): failed to get link speed/duplex [ 765.360148][T32252] bridge3: entered promiscuous mode [ 765.377722][T32252] bridge3: entered allmulticast mode [ 765.706166][T32294] netlink: 'syz.1.6661': attribute type 20 has an invalid length. [ 766.394266][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 766.768587][T32311] __nla_validate_parse: 14 callbacks suppressed [ 766.768619][T32311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6665'. [ 767.093533][T32297] bond7: left promiscuous mode [ 767.105003][T32297] bond7: left allmulticast mode [ 767.168672][T32294] netlink: 'syz.1.6661': attribute type 20 has an invalid length. [ 767.228572][T32305] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.236071][T32305] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.332478][T32305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.559374][T14962] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.569043][T14962] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.597697][T14962] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.609368][T14962] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.636417][T14962] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.659182][T14962] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.682737][T14962] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.701437][T14962] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.712949][T14962] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.719263][T32330] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 767.729300][T14962] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.752162][T14962] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.783676][T14962] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 767.814996][T14962] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.835537][T14962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.858034][T14962] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.879975][T14962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.894955][T14962] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.905273][T14962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.920166][T32337] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 767.923919][T32350] netlink: 'syz.0.6675': attribute type 2 has an invalid length. [ 767.937919][T32349] netlink: 'syz.0.6675': attribute type 2 has an invalid length. [ 767.939647][T14962] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.956931][T14962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.345991][T32369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6680'. [ 768.549723][T32381] geneve2: entered promiscuous mode [ 768.651486][T32390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6686'. [ 768.707190][ T29] audit: type=1800 audit(1781985487.104:29): pid=32392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6687" name="blkio.bfq.time_recursive" dev="tmpfs" ino=639 res=0 errno=0 [ 768.711433][T32392] netlink: 'syz.3.6687': attribute type 1 has an invalid length. [ 768.927077][T32392] 8021q: adding VLAN 0 to HW filter on device bond4 [ 768.983335][T32393] bond4: (slave geneve2): making interface the new active one [ 768.993396][T32393] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 769.003020][T20466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.023746][T20466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.050888][T32403] tipc: Started in network mode [ 769.059637][T32403] tipc: Node identity eafeac2c5bc8, cluster identity 4711 [ 769.075866][T32403] tipc: Enabled bearer , priority 0 [ 769.093371][T20466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.108612][T32403] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 769.129928][T20466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.175207][T32403] netlink: 211280 bytes leftover after parsing attributes in process `syz.4.6690'. [ 769.195514][T14963] net_ratelimit: 12 callbacks suppressed [ 769.195534][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 769.309717][T32402] tipc: Disabling bearer [ 769.324464][T32411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6693'. [ 769.356864][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 769.440762][T32408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6692'. [ 769.494469][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 769.547599][T32431] xt_l2tp: v2 doesn't support IP mode [ 769.572369][T32431] netlink: 'syz.0.6697': attribute type 4 has an invalid length. [ 769.608768][T32431] Bluetooth: MGMT ver 1.23 [ 769.617492][T32433] ip6gre2: entered promiscuous mode [ 769.623327][T32431] netlink: 'syz.0.6697': attribute type 4 has an invalid length. [ 769.628707][T32433] ip6gre2: entered allmulticast mode [ 769.646462][T14962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.657217][T32434] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.665850][T14962] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.676352][ T5747] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.694687][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 769.694706][T32437] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 769.800359][T32426] lo speed is unknown, defaulting to 1000 [ 769.816503][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 769.935058][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 769.994915][ T5747] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 770.054845][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 770.175805][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 770.195699][T32426] xfrm0 speed is unknown, defaulting to 1000 [ 770.294575][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 770.372818][T32468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6707'. [ 770.407619][T32468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6707'. [ 770.427737][T32468] netlink: 'syz.3.6707': attribute type 7 has an invalid length. [ 770.467457][T32468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6707'. [ 770.502590][T32468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6707'. [ 770.537800][T32468] netlink: 'syz.3.6707': attribute type 7 has an invalid length. [ 770.554969][ T5747] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 770.555054][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 770.665657][T32481] tipc: Enabled bearer , priority 0 [ 770.818706][T32481] syzkaller0: entered promiscuous mode [ 770.830608][T32481] syzkaller0: entered allmulticast mode [ 770.837049][T32481] tipc: Resetting bearer [ 770.880306][T32499] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20004 [ 770.959096][T32479] tipc: Resetting bearer [ 771.152489][T32479] tipc: Disabling bearer [ 771.454882][T32532] block nbd9: server does not support multiple connections per device. [ 771.569926][T32532] block nbd9: shutting down sockets [ 771.813661][T32554] netlink: 'syz.4.6726': attribute type 1 has an invalid length. [ 771.831389][T32556] netlink: 'syz.3.6727': attribute type 1 has an invalid length. [ 771.876959][T32554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 771.889463][T32554] __nla_validate_parse: 3 callbacks suppressed [ 771.889481][T32554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6726'. [ 771.954288][T32554] bond2: (slave geneve0): making interface the new active one [ 771.968911][T32554] bond2: (slave geneve0): Enslaving as an active interface with an up link [ 771.995488][T32580] netlink: 'syz.2.6732': attribute type 1 has an invalid length. [ 772.017246][T32568] bond5: entered promiscuous mode [ 772.035928][T32568] bond5: entered allmulticast mode [ 772.047213][T32568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.059903][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.142496][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.159833][T32580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6732'. [ 772.178089][T32588] bond9: (slave geneve3): making interface the new active one [ 772.187617][T32588] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 772.200280][T32595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6736'. [ 772.237074][T32595] netlink: 252 bytes leftover after parsing attributes in process `syz.1.6736'. [ 772.272272][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.296390][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.318253][T32580] 8021q: adding VLAN 0 to HW filter on device bond9 [ 772.333514][T32605] syzkaller1: entered promiscuous mode [ 772.352584][T32605] syzkaller1: entered allmulticast mode [ 772.385527][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 772.395739][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 772.415937][T32591] veth1_to_bond: entered promiscuous mode [ 772.435632][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 772.446236][T32611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6739'. [ 772.460816][T32591] veth1_to_bond: entered allmulticast mode [ 772.473379][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6737'. [ 772.520891][T32611] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 772.536523][T32611] bond3 (unregistering): Released all slaves [ 772.565626][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 772.598035][T32591] veth1_to_bond (unregistering): left promiscuous mode [ 772.616851][T32591] veth1_to_bond (unregistering): left allmulticast mode [ 772.651917][T32591] bond0: (slave bond_slave_1): Releasing backup interface [ 772.812015][T32630] syzkaller0: entered promiscuous mode [ 772.827533][T32630] syzkaller0: entered allmulticast mode [ 772.864211][T32635] tipc: Started in network mode [ 772.884897][T32635] tipc: Node identity , cluster identity 4711 [ 772.902880][T32635] tipc: Failed to obtain node identity [ 772.911328][T32635] tipc: Enabling of bearer rejected, failed to enable media [ 772.937786][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6749'. [ 772.967035][T32622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 773.020734][T32622] ip6gretap0: entered promiscuous mode [ 773.108101][T32648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6749'. [ 773.391778][T32678] netlink: 'syz.3.6754': attribute type 4 has an invalid length. [ 773.403854][T32678] netlink: 'syz.3.6754': attribute type 4 has an invalid length. [ 773.434545][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 774.254253][ T13] net_ratelimit: 17 callbacks suppressed [ 774.254292][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 774.384492][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 774.494300][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 774.541098][T32693] netlink: 'syz.1.6757': attribute type 13 has an invalid length. [ 774.603528][T32693] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 774.618176][T32693] syzkaller0: entered promiscuous mode [ 774.623837][T32693] syzkaller0: entered allmulticast mode [ 774.645115][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 774.738789][T32696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6758'. [ 774.756472][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 774.874349][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 774.920959][T32704] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6760'. [ 774.931252][T32704] 0ªX¹¦À: renamed from batadv0 (while UP) [ 774.940162][T32704] 0ªX¹¦À: entered allmulticast mode [ 774.946831][T32704] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 774.994600][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 775.104817][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 775.214528][T20475] bond2: (slave bridge1): failed to get link speed/duplex [ 775.908185][T32649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.118695][T32740] pim6reg99999999: entered allmulticast mode [ 776.169109][T32746] ·: option downdelay: invalid value (18446744073709547007) [ 776.222127][T32746] ·: option downdelay: allowed values 0 - 2147483647 [ 776.248145][T32746] · (unregistering): Released all slaves [ 776.369867][T32763] Bluetooth: MGMT ver 1.23 [ 776.390531][T32758] 0·: renamed from hsr0 [ 776.481912][T32758] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 776.504785][T32758] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 776.531266][T32758] 0·: entered allmulticast mode [ 776.541576][T32758] hsr_slave_0: entered allmulticast mode [ 776.556101][T32758] hsr_slave_1: entered allmulticast mode [ 776.575328][T32746] syzkaller1: entered promiscuous mode [ 776.586928][T32746] syzkaller1: entered allmulticast mode [ 776.588368][T32766] netlink: 'syz.2.6778': attribute type 178 has an invalid length. [ 776.607709][T32759] syzkaller1: entered promiscuous mode [ 776.623927][T32759] syzkaller1: entered allmulticast mode [ 777.066316][T20475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.394311][T18075] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 778.401967][T18075] Bluetooth: hci2: command 0x0401 tx timeout [ 779.097751][ T306] Cannot find set identified by id 0 to match [ 779.203434][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 779.284530][T14962] net_ratelimit: 13 callbacks suppressed [ 779.284550][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 779.323385][ T321] pim6reg1: entered promiscuous mode [ 779.330044][ T321] pim6reg1: entered allmulticast mode [ 779.419683][ T343] __nla_validate_parse: 2 callbacks suppressed [ 779.419702][ T343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6789'. [ 779.736241][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 779.864384][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 779.994597][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 780.013092][ T368] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6795'. [ 780.114800][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 780.124724][ T342] lo speed is unknown, defaulting to 1000 [ 780.168375][ T376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6799'. [ 780.295944][ T47] bond2: (slave bridge1): failed to get link speed/duplex [ 780.312770][ T342] xfrm0 speed is unknown, defaulting to 1000 [ 780.514715][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 780.529399][ T391] tipc: Enabling of bearer rejected, failed to enable media [ 780.676011][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 780.794928][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 780.946061][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 781.063259][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6806'. [ 781.097548][ T413] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 781.114946][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 781.139012][ T415] netlink: 'syz.3.6809': attribute type 1 has an invalid length. [ 781.215882][ T422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6810'. [ 781.238037][ T422] netlink: 'syz.3.6810': attribute type 1 has an invalid length. [ 781.390515][ T437] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6816'. [ 781.492414][ T447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6819'. [ 781.514759][ T447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6819'. [ 781.528163][ T447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6819'. [ 781.699202][ T462] netlink: 'syz.1.6821': attribute type 89 has an invalid length. [ 781.712729][ T464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6822'. [ 781.940038][ T468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.958551][ T468] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.999541][ T468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.009049][ T483] netlink: 'syz.1.6828': attribute type 1 has an invalid length. [ 782.036029][ T483] netlink: 'syz.1.6828': attribute type 11 has an invalid length. [ 782.112509][ T468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.153798][ T468] veth1_vlan: left promiscuous mode [ 782.168740][ T468] veth0_vlan: left promiscuous mode [ 782.175868][ T468] veth0_vlan: entered promiscuous mode [ 782.188563][ T468] veth1_vlan: entered promiscuous mode [ 782.209956][ T468] veth1_macvtap: left promiscuous mode [ 782.218400][ T468] veth0_macvtap: left promiscuous mode [ 782.227206][ T468] veth0_macvtap: entered promiscuous mode [ 782.238662][ T468] veth1_macvtap: entered promiscuous mode [ 782.258224][ T468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.282148][ T468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.308222][ T468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.329255][ T489] "syz.4.6826" (489) uses obsolete ecb(arc4) skcipher [ 782.329867][ T468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.359361][ T468] mac80211_hwsim hwsim95 wlan0: left promiscuous mode [ 782.386287][ T468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 782.398237][T14963] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 782.400587][ T468] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 782.418806][ T468] bond2: left promiscuous mode [ 782.423720][ T468] vti0: left promiscuous mode [ 782.429584][ T468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 782.440751][ T468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 782.453012][ T468] vxlan0: left promiscuous mode [ 782.479446][ T468] veth0: entered promiscuous mode [ 782.487275][ T468] bridge3: left promiscuous mode [ 782.496816][ T468] ip6gre2: left promiscuous mode [ 782.502388][ T468] bond5: left promiscuous mode [ 782.524484][ T5724] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 782.525284][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.539965][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.555145][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.562673][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.593705][T14963] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.614012][T14963] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.635981][T20466] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.675729][T20466] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.895834][T11316] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 783.508085][ T553] netlink: 'syz.0.6845': attribute type 33 has an invalid length. [ 783.883541][ T583] smbdirect: ib_dev[syz0] renamed to [syz2] [ 784.318809][T14962] net_ratelimit: 22 callbacks suppressed [ 784.318830][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 784.434550][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 784.564706][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 784.583584][ T611] lo speed is unknown, defaulting to 1000 [ 784.684526][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 784.710867][ T640] __nla_validate_parse: 80 callbacks suppressed [ 784.710908][ T640] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6868'. [ 784.727861][ T640] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6868'. [ 784.739228][ T611] xfrm0 speed is unknown, defaulting to 1000 [ 784.804377][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 784.914801][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 784.920621][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6869'. [ 785.030225][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 785.047294][ T644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6869'. [ 785.063245][ T644] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6869'. [ 785.072750][ T644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6869'. [ 785.154162][ T13] bond2: (slave bridge1): failed to get link speed/duplex [ 785.277486][T20466] bond2: (slave bridge1): failed to get link speed/duplex [ 785.404493][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 787.285016][ T622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 787.430851][ T656] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6874'. [ 787.442936][ T656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6874'. [ 787.461511][ T660] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6875'. [ 787.794612][ T693] netlink: 'syz.0.6882': attribute type 4 has an invalid length. [ 787.808655][ T662] lo speed is unknown, defaulting to 1000 [ 787.818978][ T693] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6882'. [ 787.997510][ T662] xfrm0 speed is unknown, defaulting to 1000 [ 788.067667][ T700] netlink: 'syz.0.6884': attribute type 12 has an invalid length. [ 788.090357][ T700] netlink: 'syz.0.6884': attribute type 29 has an invalid length. [ 788.113419][ T700] netlink: 'syz.0.6884': attribute type 2 has an invalid length. [ 788.611042][ T739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 788.618340][ T739] IPv6: NLM_F_CREATE should be set when creating new route [ 788.849851][ T753] netlink: 'syz.1.6899': attribute type 1 has an invalid length. [ 788.870350][ T755] block nbd10: Unsupported socket: should be TCP or UNIX. [ 788.910735][ T754] netlink: 'syz.2.6901': attribute type 1 has an invalid length. [ 788.939815][ T754] netlink: 'syz.2.6901': attribute type 8 has an invalid length. [ 788.962306][ T754] sch_fq: defrate 0 ignored. [ 789.436477][ T77] net_ratelimit: 35 callbacks suppressed [ 789.436499][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 789.574419][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 789.714243][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 789.833663][ T804] __nla_validate_parse: 15 callbacks suppressed [ 789.833697][ T804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6915'. [ 789.873439][ T804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6915'. [ 789.924110][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 789.941105][ T810] syzkaller0: entered promiscuous mode [ 789.956836][ T817] block nbd10: Unsupported socket: should be TCP or UNIX. [ 789.964941][ T810] syzkaller0: entered allmulticast mode [ 789.999443][ T819] netlink: 'syz.3.6914': attribute type 12 has an invalid length. [ 790.027683][ T819] netlink: 'syz.3.6914': attribute type 29 has an invalid length. [ 790.045758][ T819] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6914'. [ 790.058134][ T819] netlink: 59 bytes leftover after parsing attributes in process `syz.3.6914'. [ 790.090099][ T821] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6920'. [ 790.145027][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 790.148982][ T821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6920'. [ 790.158471][ T835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6923'. [ 790.211854][ T835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6923'. [ 790.254251][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 790.342854][ T841] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 790.424683][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 790.437272][ T847] netlink: 'syz.0.6929': attribute type 5 has an invalid length. [ 790.658299][T30462] IPVS: starting estimator thread 0... [ 790.688339][ T864] hsr0: entered promiscuous mode [ 790.716961][ T47] bond2: (slave bridge1): failed to get link speed/duplex [ 790.724570][ T4951] block nbd2: Possible stuck request ffff88807a397000: control (read@0,1024B). Runtime 120 seconds [ 790.735431][ T4951] block nbd2: Possible stuck request ffff88807a3971c0: control (read@1024,1024B). Runtime 120 seconds [ 790.746819][ T4951] block nbd2: Possible stuck request ffff88807a397380: control (read@2048,1024B). Runtime 120 seconds [ 790.759240][ T4951] block nbd2: Possible stuck request ffff88807a397540: control (read@3072,1024B). Runtime 120 seconds [ 790.771088][ T869] IPVS: using max 50 ests per chain, 120000 per kthread [ 790.779539][ T864] hsr0: left promiscuous mode [ 790.869226][ T880] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6936'. [ 790.881255][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 791.016125][ T890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6938'. [ 791.580182][ T929] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 791.587754][ T929] pim6reg0: linktype set to 805 [ 791.853847][ T970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 792.149854][ T999] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 792.397341][ T1007] hmac(sha2: entered promiscuous mode [ 794.854735][T14963] net_ratelimit: 19 callbacks suppressed [ 794.854756][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 794.869177][ T973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 794.974437][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 795.000331][ T1025] batman_adv: batadv0: Adding interface: dummy0 [ 795.030766][ T1025] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.076269][ T1025] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 795.119956][ T1040] ip6tnl0: Caught tx_queue_len zero misconfig [ 795.130323][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 795.140581][ T1047] __nla_validate_parse: 6 callbacks suppressed [ 795.140598][ T1047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6975'. [ 795.158772][ T1047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6975'. [ 795.184161][ T1047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6975'. [ 795.344692][ T47] bond2: (slave bridge1): failed to get link speed/duplex [ 795.359666][ T1060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6980'. [ 795.477032][ T1068] syzkaller0: entered promiscuous mode [ 795.492876][ T1068] syzkaller0: entered allmulticast mode [ 795.513895][ T1081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6979'. [ 795.544222][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 795.618730][ T1092] validate_nla: 4 callbacks suppressed [ 795.618761][ T1092] netlink: 'syz.3.6985': attribute type 1 has an invalid length. [ 795.619234][ T1073] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6982'. [ 795.650931][ T1099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.765037][ T1092] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 795.795075][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 795.879468][ T1110] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6988'. [ 795.898177][ T1110] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6988'. [ 795.924587][ T1110] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6988'. [ 795.994660][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 796.128180][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 796.206915][ T1103] lo speed is unknown, defaulting to 1000 [ 796.254434][T14963] bond2: (slave bridge1): failed to get link speed/duplex [ 796.368225][ T1132] Bluetooth: MGMT ver 1.23 [ 796.389222][ T1132] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 796.448905][ T1132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 796.471975][ T1103] xfrm0 speed is unknown, defaulting to 1000 [ 796.483157][ T1132] netlink: 'syz.0.6994': attribute type 2 has an invalid length. [ 796.484856][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 796.739720][ T1143] veth3: entered allmulticast mode [ 796.903541][ T1149] team_slave_1: Caught tx_queue_len zero misconfig [ 797.193723][ T1174] tipc: Started in network mode [ 797.207358][ T1174] tipc: Node identity 2e2d9356e575, cluster identity 4711 [ 797.220743][ T1174] tipc: Enabled bearer , priority 0 [ 797.239736][ T1174] +: renamed from syzkaller0 [ 797.255395][ T1174] tipc: Disabling bearer [ 798.193079][ T1217] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.200610][ T1217] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.723018][ T1255] sch_fq: defrate 0 ignored. [ 798.746743][ T1256] sch_fq: defrate 0 ignored. [ 798.780301][ T1262] xt_hashlimit: size too large, truncated to 1048576 [ 798.993708][ T1268] netlink: 'syz.0.7032': attribute type 9 has an invalid length. [ 799.261758][ T1287] netlink: 'syz.3.7036': attribute type 32 has an invalid length. [ 799.516866][ T1300] sctp: [Deprecated]: syz.3.7038 (pid 1300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 799.516866][ T1300] Use struct sctp_sack_info instead [ 799.936056][T14962] net_ratelimit: 28 callbacks suppressed [ 799.936075][T14962] bond2: (slave bridge1): failed to get link speed/duplex [ 800.074450][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 800.092330][ T1345] netlink: 'syz.4.7047': attribute type 10 has an invalid length. [ 800.148147][ T1346] __nla_validate_parse: 13 callbacks suppressed [ 800.148164][ T1346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7046'. [ 800.173416][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7049'. [ 800.204741][ T77] bond2: (slave bridge1): failed to get link speed/duplex [ 800.213980][T14962] ------------[ cut here ]------------ [ 800.219603][T14962] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 800.233402][T14962] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#1: kworker/u8:16/14962 [ 800.244518][T14962] Modules linked in: [ 800.248545][T14962] CPU: 1 UID: 0 PID: 14962 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 800.258662][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.268799][T14962] Workqueue: events_unbound cfg80211_wiphy_work [ 800.275186][T14962] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 800.281633][T14962] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 800.301500][T14962] RSP: 0018:ffffc900047ef4a0 EFLAGS: 00010293 [ 800.307636][T14962] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 800.315664][T14962] RDX: ffff88803f080d44 RSI: ffff88801d7f9998 RDI: ffffffff90430cd0 [ 800.323656][T14962] RBP: ffffc900047ef610 R08: ffff888059d02abf R09: 1ffff1100b3a0557 [ 800.332394][T14962] R10: dffffc0000000000 R11: ffffed100b3a0558 R12: ffff88803f080d44 [ 800.340521][T14962] R13: 0000000000000001 R14: ffff88801d7f9998 R15: dffffc0000000000 [ 800.345893][ T1348] ip6erspan0: entered allmulticast mode [ 800.348737][T14962] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 800.348760][T14962] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.348773][T14962] CR2: 00007f10b4be8158 CR3: 000000000e746000 CR4: 00000000003526f0 [ 800.348789][T14962] Call Trace: [ 800.348798][T14962] [ 800.348814][T14962] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 800.348852][T14962] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 800.348953][T14962] invoke_tx_handlers_late+0xb5/0x1830 [ 800.348974][T14962] ? sta_info_get+0x2ec/0x300 [ 800.394687][T20469] bond2: (slave bridge1): failed to get link speed/duplex [ 800.399487][T14962] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 800.399529][T14962] ieee80211_tx+0x2d7/0x4b0 [ 800.399554][T14962] ? __pfx_ieee80211_tx+0x10/0x10 [ 800.399578][T14962] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 800.399671][T14962] ? ieee80211_xmit+0x2e5/0x3c0 [ 800.399690][T14962] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 800.399712][T14962] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 800.399736][T14962] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 800.399789][T14962] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 800.399822][T14962] ieee80211_scan_work+0x488/0x1ab0 [ 800.399860][T14962] cfg80211_wiphy_work+0x29e/0x420 [ 800.399882][T14962] ? process_scheduled_works+0xa20/0x14e0 [ 800.399903][T14962] process_scheduled_works+0xa8e/0x14e0 [ 800.399936][T14962] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.399955][T14962] ? do_raw_spin_lock+0x12b/0x2f0 [ 800.399978][T14962] ? assign_work+0x3cf/0x5d0 [ 800.400000][T14962] worker_thread+0xa47/0xfb0 [ 800.400030][T14962] kthread+0x388/0x470 [ 800.400046][T14962] ? __pfx_worker_thread+0x10/0x10 [ 800.442810][ T1353] netlink: 'syz.0.7050': attribute type 1 has an invalid length. [ 800.443228][T14962] ? __pfx_kthread+0x10/0x10 [ 800.443252][T14962] ret_from_fork+0x514/0xb70 [ 800.443272][T14962] ? __pfx_ret_from_fork+0x10/0x10 [ 800.443288][T14962] ? __switch_to+0xc89/0x1420 [ 800.549125][T14962] ? __pfx_kthread+0x10/0x10 [ 800.553742][T14962] ret_from_fork_asm+0x1a/0x30 [ 800.558609][T14962] [ 800.561930][T14962] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 800.569315][T14962] CPU: 1 UID: 0 PID: 14962 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 800.579048][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.589210][T14962] Workqueue: events_unbound cfg80211_wiphy_work [ 800.595492][T14962] Call Trace: [ 800.598803][T14962] [ 800.601747][T14962] vpanic+0x56c/0xa60 [ 800.605753][T14962] ? __pfx__printk+0x10/0x10 [ 800.610380][T14962] ? __pfx_vpanic+0x10/0x10 [ 800.616032][T14962] ? is_bpf_text_address+0x292/0x2b0 [ 800.621345][T14962] ? is_bpf_text_address+0x26/0x2b0 [ 800.626666][T14962] panic+0xc5/0xd0 [ 800.630414][T14962] ? __pfx_panic+0x10/0x10 [ 800.634856][T14962] ? ret_from_fork_asm+0x1a/0x30 [ 800.639821][T14962] __warn+0x315/0x4c0 [ 800.643848][T14962] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 800.649683][T14962] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 800.655509][T14962] __report_bug+0x331/0x530 [ 800.660112][T14962] ? arch_stack_walk+0x11b/0x150 [ 800.665081][T14962] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 800.670949][T14962] ? __pfx___report_bug+0x10/0x10 [ 800.676013][T14962] ? stack_depot_save_flags+0x33/0x800 [ 800.681576][T14962] report_bug_entry+0x19a/0x290 [ 800.686451][T14962] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 800.692278][T14962] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 800.698105][T14962] handle_bug+0xce/0x200 [ 800.702377][T14962] exc_invalid_op+0x1a/0x50 [ 800.707690][T14962] asm_exc_invalid_op+0x1a/0x20 [ 800.712555][T14962] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 800.719164][T14962] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 08 b8 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 a5 b3 a3 f6 48 [ 800.738788][T14962] RSP: 0018:ffffc900047ef4a0 EFLAGS: 00010293 [ 800.744872][T14962] RAX: ffffffff8b224258 RBX: ffffffff90430cd0 RCX: 0000000000000005 [ 800.752855][T14962] RDX: ffff88803f080d44 RSI: ffff88801d7f9998 RDI: ffffffff90430cd0 [ 800.760866][T14962] RBP: ffffc900047ef610 R08: ffff888059d02abf R09: 1ffff1100b3a0557 [ 800.768855][T14962] R10: dffffc0000000000 R11: ffffed100b3a0558 R12: ffff88803f080d44 [ 800.776965][T14962] R13: 0000000000000001 R14: ffff88801d7f9998 R15: dffffc0000000000 [ 800.784958][T14962] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 800.790893][T14962] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 800.796982][T14962] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 800.803180][T14962] invoke_tx_handlers_late+0xb5/0x1830 [ 800.808752][T14962] ? sta_info_get+0x2ec/0x300 [ 800.813485][T14962] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 800.819321][T14962] ieee80211_tx+0x2d7/0x4b0 [ 800.823856][T14962] ? __pfx_ieee80211_tx+0x10/0x10 [ 800.828908][T14962] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 800.834388][T14962] ? ieee80211_xmit+0x2e5/0x3c0 [ 800.839255][T14962] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 800.845257][T14962] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 800.851090][T14962] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 800.857441][T14962] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 800.863636][T14962] ieee80211_scan_work+0x488/0x1ab0 [ 800.868868][T14962] cfg80211_wiphy_work+0x29e/0x420 [ 800.874003][T14962] ? process_scheduled_works+0xa20/0x14e0 [ 800.879744][T14962] process_scheduled_works+0xa8e/0x14e0 [ 800.885328][T14962] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.891330][T14962] ? do_raw_spin_lock+0x12b/0x2f0 [ 800.896419][T14962] ? assign_work+0x3cf/0x5d0 [ 800.901034][T14962] worker_thread+0xa47/0xfb0 [ 800.905682][T14962] kthread+0x388/0x470 [ 800.909777][T14962] ? __pfx_worker_thread+0x10/0x10 [ 800.914900][T14962] ? __pfx_kthread+0x10/0x10 [ 800.919513][T14962] ret_from_fork+0x514/0xb70 [ 800.924124][T14962] ? __pfx_ret_from_fork+0x10/0x10 [ 800.929257][T14962] ? __switch_to+0xc89/0x1420 [ 800.933956][T14962] ? __pfx_kthread+0x10/0x10 [ 800.938558][T14962] ret_from_fork_asm+0x1a/0x30 [ 800.943343][T14962] [ 800.946750][T14962] Kernel Offset: disabled [ 800.951078][T14962] Rebooting in 86400 seconds..