last executing test programs: 2.612671876s ago: executing program 2 (id=7262): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r0, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000640)={{r0, &(0x7f0000000000)='taprio\x00', 0x4000, &(0x7f0000000100)={@align=0x8, {0x2, 0x49, 0x1000000, 0x8}}, 0x1, &(0x7f0000000500)={@_ha_fsid}, &(0x7f0000000540)=0xfffff001}, 0x1, &(0x7f0000000600)=[{0x2, 0x6d, &(0x7f0000000580)='taprio\x00', &(0x7f00000005c0)="1d176600bdd0c82b0057f7af9c598ffc", 0x10, 0x2}]}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x50, 0x24, 0x1, 0x7ffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1ff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x6000050}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x2000c855) sendmsg$802154_dgram(r0, &(0x7f0000002040)={&(0x7f0000000440)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14, &(0x7f0000002000)={&(0x7f0000001000)="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", 0x1000}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = accept4$netrom(r0, 0x0, &(0x7f0000000400), 0x400) sendto(r3, &(0x7f00000001c0)="733af51c04f2516d82999a59b19ce57de25cafd1a2d74d023239b9554c5aea8085fd564fff595b24eaa95af0486e5334781c7f3c95cdb98254970d22833f4487bd9e95ab7dcd03ada1b9ed673c51ea9fe9", 0x51, 0x10, &(0x7f0000000380)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.601436648s ago: executing program 2 (id=7264): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000140001000000000000000b31e1b61300", @ANYRES32, @ANYBLOB], 0x18}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) recvmsg(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006800010000000000000000000200010000000000043fa62452e0d214"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c00000caa01533b4400050601040000000000000000050000020900030073797a31000000000900020073797a30000000000900030073797a320000000005000100070000000900020073797a31000000000900020073797a30000000000900030073797a30000000000500"], 0x6c}}, 0x40) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x0, 0x401, 0xffffffff, 0x2, 0x5]}, &(0x7f00000001c0)=0x54) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x20, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x5421, 0x110e22ffff) r11 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r11, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r11, 0x0) poll(&(0x7f0000000040)=[{r11, 0x82}], 0x1, 0x800) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r12, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r13}, 0x4) 1.448156838s ago: executing program 1 (id=7269): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x388, 0x248, 0x0, 0xfeffffff, 0xa8, 0x150, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast1, @multicast1, @icmp_id=0x65, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @port=0x4e22, @port=0x4e20}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key=0x4, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x6c, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @multicast2, @icmp_id=0x267, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x388, 0x248, 0x0, 0xfeffffff, 0xa8, 0x150, 0x2f0, 0x2f0, 0xffffffff, 0x2f0, 0x2f0, 0x5, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast1, @multicast1, @icmp_id=0x65, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @port=0x4e22, @port=0x4e20}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key=0x4, @gre_key}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x6c, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @multicast2, @icmp_id=0x267, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) (async) 1.336187026s ago: executing program 3 (id=7272): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f00000002c0)={&(0x7f0000000240)=[{0x2, 0x8}, {0x72f, 0x9, 0x1}, {0x8, 0x5, 0x1}, {0x7, 0x25b, 0x2}, {0x8, 0xcfeb5d71, 0x1}, {0x360, 0x6, 0x2}], 0x6, 0x10, 0x3eb, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) (async) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f00000002c0)={&(0x7f0000000240)=[{0x2, 0x8}, {0x72f, 0x9, 0x1}, {0x8, 0x5, 0x1}, {0x7, 0x25b, 0x2}, {0x8, 0xcfeb5d71, 0x1}, {0x360, 0x6, 0x2}], 0x6, 0x10, 0x3eb, 0x1}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async) 1.189291035s ago: executing program 1 (id=7275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r0, r0, 0x1f, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, &(0x7f0000000500)}}, 0x30) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x446b81, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a0108000000000000000001008feabe2e7bbf24346056a0121300000900010073797a300000000014000000030a0102000000000000000001000000140000001100010000000000000000000a00000a"], 0x5c}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket(0x400000000010, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, 0x0, 0x0) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1023, 0x3a, 0x1000, 0x3a}, 0x1c) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000f50703030002001400"], 0x36) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000180)={'ip6gretap0\x00', {0x2, 0x0, @private}}) write(r11, &(0x7f00000003c0)='\x00\x00', 0x2) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r12, 0x800442d2, &(0x7f0000000280)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @remote}]}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r1, r4, 0x4, r0}, 0x10) 1.187840265s ago: executing program 3 (id=7276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r2}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xe, 0xf, 0x2, 0x502, r0, 0x8, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x467237f2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x0, 0x0, 0xb, 0xb, 0x7, 0xc}, @call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0xd, &(0x7f0000000340)=""/13, 0x41100, 0x8, '\x00', r5, @fallback=0x2c, r0, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x8, 0x0, 0x6}, 0x10, 0x0, r0, 0x7, &(0x7f0000000480)=[r3, r6, r3, r3, r2, r0], &(0x7f00000004c0)=[{0x0, 0x4, 0x10, 0xaddac912782a7e04}, {0x1, 0x4, 0x3, 0x7}, {0x3, 0x5, 0xb, 0x9}, {0x4, 0x5, 0xc, 0x4}, {0x1, 0x3, 0xb, 0x3}, {0x0, 0x5, 0xa, 0xc}, {0x5, 0x2, 0xc, 0x9}], 0x10, 0x9}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) mmap(&(0x7f000051b000/0x3000)=nil, 0x3000, 0x0, 0x50, r3, 0xaed34000) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000000880)={0x80}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xf, 0x9, 0x6, 0x40000, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x31}], &(0x7f0000000180)='GPL\x00', 0x10000, 0x8b, &(0x7f0000000600)=""/139, 0x40f00, 0x4, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r7, r8, r6, r3, r2, r3, r9, r6, r0], 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.171582975s ago: executing program 2 (id=7277): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x29}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x6, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r3, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000000)) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d0000000000070000002000000095ea7a27b2000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x4, r7, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf0, r10, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4}, {0x7, 0x2}, {0x3, 0xa}, {0x7}, {0x4, 0x5}, {0x3, 0xa}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x7, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x8}, {0x1}, {0x3, 0x7}, {0x3, 0x5}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x9}, {0x2, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x9}, {0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x4, 0xa}, {0x0, 0x1}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x9}, {0x2, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xb, 0x69a9, 0x8, 0xfffc, 0x101, 0x1, 0x3c]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8b0, 0x6, 0x6b, 0x1, 0x8406, 0x7fff, 0x7fff, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x8, 0x10, 0x2, 0x3, 0xffe7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x9, 0xe45, 0x5, 0x7fff, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xb, 0xfffd, 0x6, 0xb, 0x7, 0x1, 0x1ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044005) socket$netlink(0x10, 0x3, 0x14) 1.164328248s ago: executing program 0 (id=7278): socketpair(0x3, 0x80000, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40cd0000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000001c0004800500030001000000050003000000000005000300800000000800020002000000"], 0x40}}, 0xc000) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000180)=0x80000001, &(0x7f00000001c0)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xf4, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x4000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0x416, "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"}, &(0x7f0000001440)=0x41e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000000000000000000000600000061100400000000009500800000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000240), 0x0}, 0x20) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0xdf2, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x80, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=0x0], 0x0) 1.034898252s ago: executing program 4 (id=7279): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x3ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000100)=0x3ff, 0x12) (async) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async) 953.396933ms ago: executing program 0 (id=7280): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0xfffffffffffffeb1, 0x2c, 0xd27, 0x170bd2b, 0x65dfdbfe, {0x0, 0x0, 0x0, r5, {0x3, 0x10}, {}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c801}, 0x2) (async) close(0x3) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0xd23e}}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_raw(r4, &(0x7f00000001c0)={0x27, r7, 0x1, 0x7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r8, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0xd1383000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0x2000}) (async) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 941.458659ms ago: executing program 4 (id=7281): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) connect$inet6(r1, &(0x7f0000000680)={0xa, 0x4e22, 0x3, @mcast1, 0x30}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000740)={@void, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x78, 0x11, 0xff, @empty, @mcast2, {[@fragment={0x4, 0x0, 0x3, 0x0, 0x0, 0x8, 0x65}, @srh={0x33, 0xa, 0x4, 0x5, 0x7, 0x0, 0xffff, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0x21}]}], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0xae) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb, 0x3, 0xa7, 0x101, 0xd8d6, 0x4001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) (async) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000140)="1d8263f75563e4e6d07cb385a2b91f04f4f5508f970330bd7d99c488cfde214254366953b9827f159b120aa07650c4b7dec32e0a5d5cfdecd202a54a1c00e066d4da90438ff1a47c5f005ab6b44feaf4420cd6233d28b3cb5a9ec3f454228f3db28d672c27497e863b261ed29fd6d2ce580269858aca12397872631642b0f572925b68912938a91e7848ecfc6c2714cc556b0a86cb8af92420cab361c15ab6c4bb23a21b6b0c74ca6c", 0xa9}, {&(0x7f0000000200)="707550a1314d2607f92c4c5f7dfa03a7a9f7c9a99ad046974c7e00e9076c3c95f3641d672f6ad6ebfc6b47554869db484154acd629d242f82a6cfcac4692b2ecdad9a867431262066f6eeaf49e0a3586d2a41a942214a204482180415be4138f", 0x60}, {&(0x7f0000000280)="5aff98887df3799043575ffe481d6d7db9068db29ba820f8f1137f731e69640b1f1bbcca255515d23f52744b6507bf09e6ecb7b4d2f3042300cba9de6ada5ada8d46700f36a0e801d864d6e15d7dd706ce51301a1c795e8fe9b0c967a42ad8d4c5326b0d4225b9e4bbd73556256b10c3eac5b97433ce72fd115eb941ff2c7b5bd5ed6db51c558413df02b758308c7dedd9c577d842e7ac1ca47aafab677c0fea4d5baa1fd20d1515425f4e5a86b723ba416486339fa16f304ef8e5cf", 0xbc}, {&(0x7f0000000340)="66c90815a3b42f0030d12a24b1e77c5a785cfd05d059a765c5d1c5b92140ae01686eb31c1cb865be75372cc5a05316eea6edbdd0ddcdb326a862b9214a86d71d1852ec9b0dac9ce7e5541bb722caf527c0319fbc919b5b17e0dd9997c64d4f3685952e18e60af1e20b582594b9733104adc0153b23d58b66732960fdf0363c7eea48a01bacc5a4df8895cadefbf08c3d04f80faa68659a85cfd254175b83169ddbfac4a2c0b220aa1c0c83755136824b1b29fc9cbfc6c4a4cf80cde2d6cc762fc7a1adf3c3d290cc5fcf1304045d000ce130af7eb0450efa00", 0xd9}], 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c00000500f3ffffffffffff07000000e64d4e1da0f9cb78b2f89dd6138008978b15ef7557dabb1dbc87745fd859be0a779a99257a351131125847d9900e22026c73502d2669871315fe2e8b780288a213fda0d140726184c1d31c9ee100c014f4f91176a24a91ea6555173ba39fdfb5c1c508ea9cf56e6f18a7d6a65af710a070179811fb3db8ad4193b70f57f8d0e06d7b2774552acd3655bec9d1b56c7310d53f7cc1450a378f6b388db1048eef3147e761dbf06d5186160a1118cb73967645f681e892d209d7477fb0150208000000000000000d80989da4aa8df7fda7aca08de33784b1", @ANYRES32=r5, @ANYBLOB="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"], 0x180}, 0x840) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x1) (async) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r9, 0x0, 0x4004840) syz_genetlink_get_family_id$tipc(&(0x7f0000002f80), r9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xe6701000) writev(r7, &(0x7f0000000640)=[{&(0x7f0000000100)="af", 0x1}], 0x1) recvmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) close(r8) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) (async) sendmmsg$inet6(r6, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x9, @remote, 0x9}, 0x1c, &(0x7f0000001c00)}}], 0x1, 0x5dc) 790.438393ms ago: executing program 3 (id=7282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="a406caabcda9e3ed0b08790c04a7c2ae0000", @ANYRES16=r1, @ANYBLOB="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"], 0x6a4}, 0x1, 0x0, 0x0, 0x884}, 0x4040004) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xce23, 0x1, @loopback, 0x5}, 0x1c) write(r2, 0x0, 0x0) 748.328434ms ago: executing program 3 (id=7283): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000400000000000000000000009500000000000000f36cbb5aa79a99d59c9a948781f1d0d43d5998db43c4d8f5912aa5c3ab4af610bdb00a87fcd94c373e3e03e11d19aae6f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1163346eda1b95d2eca01a620254eb69f233a38e7897252f45ed3d554af063037bd2cf904c4b02f860a8304908ec15e1dcd4a5a6f85ff1a4ac72e6ff7f0000ca970f0000000000000000000000139a98bb66f82c91bc63463b6ff94cb230381a7e930000000000000028232e96d11f006b7c4437885b0dcb50e806f47449f4fe0e86bbed59725f9962bb151c3332033917efc74f4140315b5649a7390edb7dc0b936e8f9447b94b9b8dd9eb8dcadcc49889bc1ba21450baa5790a63be00ed30c228329c00729f066276577d20e4dac6c7712cfd70bb868f33f370d857edcf8eb6ef1f98c54cb46fc27ee215f220937d7b441e6ccd0ce915fbabb04106931cbed29c7f47b40e2d634cbfedc66bc00735935168612594ef2177dd082d86128147f"], 0x2c}}, 0x2400c090) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x40, 0x2, 0xfd, 0xa, 0x9, 0x2768}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x8000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="3e00004a795e2df26f27ce6abee3ecb13a369f0cbf0cf978d0b9e1ec00", @ANYRES16=r7, @ANYBLOB="0100fcffffff000000001e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008003e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) syz_emit_ethernet(0x18f, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000001400128009000100766574680000d06bdc78f8fa4972f594d4bbbf5e638e0000040002800800040000000000", @ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0], 0x3c}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002004e20ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000005014cbc349fbcbb16a3f144993c090f0eb"], 0x80}}, 0x0) 716.883155ms ago: executing program 1 (id=7284): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000100)) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x94) 634.609218ms ago: executing program 2 (id=7285): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 633.542974ms ago: executing program 0 (id=7286): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001900010927bd70002000000002182000ff03fd000001000008000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001900010927bd70002000000002182000ff03fd000001000008000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x80002, 0x1003, &(0x7f0000001e40)=""/4099}, 0x94) 623.609003ms ago: executing program 4 (id=7287): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001000900140001807bf438da6a9e782159ac060001000200"], 0x28}}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0xc5, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x200, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd60}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb453}, {0x6, 0x11, 0x8}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xa}, {0x8, 0x13, 0xff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x80}, {0x8, 0x13, 0xff}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x1ca}, {0x8, 0x13, 0xdba}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000800) 550.792835ms ago: executing program 0 (id=7288): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008001f0005000000ae3c3071dc1f893809d2c9f1ee5bd7ff88d700b247ba3cfb9b25662908e40e6f1549875649d49e98507ee2a014eb32af39157112a1d55ec61235979eacd9986ea919e0dff979e6cc5f3eeeab9a4a9d343560a3af414ab1fc9eb9f155f3bb78e0d6a5f8c90ee3fe5c3e2d90391a8e81295f18260fb616989859b1c1e8af955a04b90467165c49afc286d455be030c4257808325edda26b3363d70e3f15970cee584149cc23c67f1d691f922720317648bbe5f86c7cb594de600cf347dabe7daa121003a7f06aad6b018edf64f482700"/258], 0x3c}}, 0x0) 470.998374ms ago: executing program 3 (id=7289): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x7}}) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x10}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @private}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x7, 0xe3, 0x65bf, {{0xd, 0x4, 0x1, 0x1, 0x34, 0x66, 0x0, 0xfe, 0x4, 0x0, @loopback, @rand_addr=0x64010100, {[@cipso={0x86, 0x1e, 0x2, [{0x6, 0xa, "767ea8cba73131b0"}, {0x6, 0x3, "90"}, {0x6, 0xb, "107067575d44bcbceb"}]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x58, 0x80, 0x2a, @local, @local, 0x20, 0x20, 0x6}}) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_newroute={0x68, 0x18, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0xfe, 0x4, 0x0, 0xa, 0x1f00}, [@RTA_MULTIPATH={0xc, 0x9, {0x401, 0x10, 0x13, r4}}, @RTA_IIF={0x8, 0x3, r5}, @RTA_IIF={0x8, 0x3, r8}, @RTA_MARK={0x8, 0x10, 0x200}, @RTA_OIF={0x8, 0x4, r9}, @RTA_EXPIRES={0x8, 0x17, 0x9}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000}, 0x40004010) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001040)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1824000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c00)={0x3e4, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0x1b}}}}, [@NL80211_ATTR_FRAME_MATCH={0x5e, 0x5b, "80b159f1323ddd5d68943b42bc61573af9a8de2b303ac7fcb9e9d635b3f8d59024eea9bc73938bef765c7e32c609fde8d03efe92cb2fffeac45e95a50c03439e93b470afbcc46dde9876b59adf9e117eb28d2b14c4b9a7a8e690"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0xc3, 0x5b, "186f137ee2bfd3c9a132b9ed534d2ef136ba32bb42fc52d319a0b144621f42f02c92a7e51dc377de06df83d311ab5326149a12fb9de6f65fd4d74ac68bdc8ddadb74028057684732dfb6e6b6686a84c023d1121cbbd6642497a34f61c93c46e068f42fd7207eeb2d57e0cf07e2752da791913d19d28fb7067b34e4b3849f9dacb0d0182b9f5b112c6db7e930a5e66d8068341af60d151ab8ef9a2ea6b904a01520f142c6eb37691382751dd6d45298ca5f6d2d180050db07f46e57b9b29054"}, @NL80211_ATTR_FRAME_MATCH={0x94, 0x5b, "bb99c5ddea0bdb10dbaa3495d1d27158f12b21bd4d311afb43c446eb1996f9ed5fbe1de3b787e5b3b6bbaa043f656a7ca960a1c8c3b63b9d0e275cfbce69ac8711d91f336576cfbe87090e8d86ccaae44d06ce735784998b740e560d598d9325472a9afaa499d694819aa0d142f1cf5dc72f43f5d42d3348f7a5597a71bc8b4b38cfdde262c8cc4d7b016a844fec2dd1"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xb8, 0x5b, "0257450fa0771f714ed4b246c901b1465eb08ac83855702753c52ba2db46a0270940db20671194bb3b90556c32886f40288494028235bf0b7af5ca7b9fd586203d200f5cdc2bccd36b0fbf893966e20356645ace7539ef624deaa9a968b6b61fec343327cdb5a4e7782f3d9ec750b171db2c855c94b3aec44f0c9aaf8d4d77651ae454786004963ef8ab972a7be524c2302ac2ba3fce3ca9ba239013233e3f8222cbd4e45949a7eee676640ae145d1031da45ca2"}, @NL80211_ATTR_FRAME_MATCH={0x67, 0x5b, "49777f6a0bb992b3e235d70d72ea4fc98b5ed3b5a3ff9a9668e5be4f6b54559a015f331786dcd16d6e46e2d120e8f2ecef9f8bea5947a8474718a98120eb40ee563b19d998cdceeda49a1d0ac769d36d8cffb88d11fff6fea91928412864d46e17a273"}, @NL80211_ATTR_FRAME_MATCH={0x2b, 0x5b, "68cf18d84339ff1851b676599cc5f0363bf43f5b5a46171e2f48a78aef9790cbc6e1381c7674e4"}, @NL80211_ATTR_FRAME_MATCH={0xa7, 0x5b, "dc138533f37f7b2d9ca855a0f12e95b924d54f87255609f644c317503afaf3d0f17beb39a30299586c18ccea4e9869dc10373db1c94c9ddf6935791a18c1686e722ffe0d67fa323df8fd4bad4a6c28eaad6794d53cb4ec137d0cbb5b73916c588373a6dbd9c8a060a177cbfa2ad030bc94d83e227fe819b732c50e7e0c513d7c1284de03f3243f8de6938dd24aec4b9decfa5585c876d750080b55ab64737cf1597ace"}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x8c0}, 0x805) 468.914186ms ago: executing program 2 (id=7290): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r1}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1a, 0x7, 0x4, 0x7fffffff, 0x4000, r2, 0x42, '\x00', 0x0, r3, 0x1, 0x2, 0x4}, 0x50) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}}, 0x4008801) 435.361281ms ago: executing program 4 (id=7291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x29, 0x5, 0x6, 0x4, 0x8, @mcast1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8, 0x700, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', r2, 0x29, 0x4, 0xfe, 0x2, 0x19, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x700, 0x4, 0x101}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x4b, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv4_delroute={0x0, 0x19, 0xb04, 0x70bd2d, 0x25dfdbfe, {0x2, 0xb0, 0x80, 0x6, 0xfd, 0x2, 0xff, 0x9}, [@RTA_FLOW={0x0, 0xb, 0x7}, @RTA_PRIORITY={0x0, 0x6, 0x3}, @RTA_MULTIPATH={0x0, 0x9, {0x6, 0x28, 0xe, r3}}, @RTA_FLOW={0x0, 0xb, 0x3}, @RTA_PRIORITY={0x0, 0x6, 0x7}, @RTA_NH_ID={0x0, 0x1e, 0x3be6}, @RTA_PRIORITY={0x0, 0x6, 0x1}, @RTA_DPORT={0x0, 0x1d, 0x4e23}]}, 0x58}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000005e07000402000000f880000000000000"], 0x14}], 0x1}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', 0x100}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 419.108182ms ago: executing program 0 (id=7292): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 395.720874ms ago: executing program 1 (id=7293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) 210.50923ms ago: executing program 4 (id=7294): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x0, 0xe3c1, 0x2, 0x6, 0xfffa, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x0, 0x9, 0x18, 0xef, 0x5e6d, 0x3], 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0x873054bc4ee3b02d}, {0xff}, 0x89, 0xb8, 0x5, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0xe25, 0x664}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3d, "52a7c9017ed5048ad31b0477f146377ff2b6d287373519532f5bff53ee26"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/55, 0x37}], 0x1, &(0x7f0000000240)=""/122, 0x7a}, 0x2100) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/101, 0x65}, {&(0x7f0000000380)=""/49, 0x31}, {&(0x7f0000000840)=""/185, 0xb9}, {&(0x7f0000000900)=""/140, 0x8c}], 0x4, &(0x7f0000000a00)=""/4096, 0x1000}, 0x40012042) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) 209.854756ms ago: executing program 0 (id=7295): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x20000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="4e303a5d8d1e98dd3930e38e9ae22f7dc0c12cddd7a50cf6bab201b9dcb2d16e3504c5c1445e150e1ac54735859a85d0304acc7e9df567043df67010577f7dda41d21c", 0x43}], 0x1, &(0x7f0000000340)=[{0x1010, 0x11, 0x3, "5776ace7c9fde961998197f25b542ae29ab2753969dd840bc6039fba26b7307f36cbe7f8c6166f012a95f5d7a24c51deda417afb16cab77df06389eeeb6d63d88d040e75fc81f0924d64b2b894c82fa6e5f025d5e20451f6cf78f29eac17914d99f1e4cc1c4f59dfa0153dafdbf7561f3e6217bf905c5db448cd1e58c480684b1ca9d370e14e17ddb2eda9ab6563ec485751de96fd4efa8e51ced629f614a0bc842eb55df863ac370af2a66eb03b2a4035b0d45ebab6a47b5430f087a453ec9c723ace019ab1f40b87c42c9baa24770cb449f5d22709e7f41863e136ac8bf187fac2dc8e2322e85807dc455179648243156c1802108c2ceb8d8908403aea0a215c577fb8fa1141fc079a46ad11d869e144062ba2991eeac3ec629b0417280f577e9deaf34d01e92c209baf3cec5f1661debd51509ef089e71a3e4a1af3c84028794815801cda21577a6412cc32d41f522cb37b79a1e2895d876afc354d6e842f6619d3ef986624258973a7a1b1f91cd003f415a44454858cacbb9a557da7be243872421293d4cf99b0d307c8e0248e7b683dd39c4495527e0559110dadf006c343fe87603573e7ed65a25b1b0ee5bff4abec7f8b6d154eaad213f84e45accec34c31c575d2ff2356111615cfa01c27062a061db8a165eea28df8914adc7c1492e74e5ca1ebc6f6ec44b5961bf40c8222b60926542736a36a02ba646efa262f2f58f663f8d1b92889ec94605983891a447fea7518963441248aa17c762bd29a95bf1cac379853d0ec7cc8156c724c2cd418c2fb000167c63061a535350d1daae3e07cb3b955dce6f9f771bdc8f4349b5c64e7262e9b6adcf12dab98d5fc797e76c8d89b45768b4423df1e5c588977511fe2db523dcc1c71eb28292dcd58e278539ceaeddbbbb456af22a1933ca1ce859865b26e59dd4b51c0fd3ac2f33544fd1c8076b2cf1e35279fe2b711a6d5dc97ebb369d46965866ab66658400732a03359e58fb99bdbc7f5efc010c2d3459bcc0d2564f155d230b46b24306eda50096843b0fe77ff06b942a18f36a3f7aec8c46ce4c5e459f0e55548bb1adf8d2f94c907516c671fb7d46dae5da82815aa256664e02c541eae75347dbadd1c05ac70268d7f4eeb10c98a40c9e9b73d279aa3df4edeb4efd3417f48e9505efec1f863d42797f4511f22eabfcd0da6f7ae999060bf4ff87ec34682c87483ffb2f8b2ff56f7b3e3a02040dd66e48c7359aaae655ac37df47b3463614e30867a22738099cfcfbcccce9f3eb6489186d8661a2d6f445710ee3b8ccc449b70ed6cbb8605e2f6ffe07b338b33fea2cc241006f5c755962ad0fbef54b2a893af0adfed5f155a0cfd0587586ccf8aacf42a0df9f2014e71374dfb34fef06154a1aa5a65407b03c0047f6876852aa1ca643e2bf84fffdf84d081839bbb94593747faa14450e8b48c086a6b251acdd7d3bbea1735ed72ef8974f4d0f7d435067e40c155f66dc179e8b396a6a2271dd1cc4694cfadbc22d37650939c068c75b82dcdc27a021aa3af36c69d3a56da9a376c8c9ee779f2cd7b868a31be487856c654c1887115f2d4c8bfb9b5b2f04f7d6f0bb508e4583681cd43d6e229fb36558201f18508e9857d49fa1adf292c1387344ecaf99be795c0ad6de792b8ccd00705e7aa37bb0e7337d75224d4c3a79168b33e93e2ab34b0bba03f5be707a9cff610f0cf77bde5026e46cb5f036b4066dff6cc72ce663777d7667aeed957c425884175d41d58db51d47aa10d223bd7efb3461076423e96060f009c26b7eec153d07c62c79e011f2e93fcfb05463353b9f1bbf919ff0c481a2d7fa03f713ed48ba0388e39132b1f678ea6486f03ae6cd39c2af63e5084293c098e860d1788fc7458d13df07603aafdc58a17274e0a9b0d46b759bd046572b0e3671b1a8b829446c0ef7f28a77d74a9879682d7f698dd004cc474b169b086bf173b2da0e60ad09fc5b2edc59225e905a6a75ac224ce3ac5c1954beaa8c32f84285c98d9cfcffd6d93d01d9e29f75cdff995d504dbe3d8efbac6d3f4502f69a7039897a21c5287ee143127c29395a4e7af1198f33e8727eaac5cf47c43d1689467c90949537e9fa4c82d2752edf1dab810a63537baa8f703dbd1d3fbad837208c118d1b2fb5ec7a3344eb7fee2fdc49ce906007da2eb79f451724887d8a4f6e6832926cc0036870562846b03f9ec6b5d75397da5c7caaba4154c2cb8470c1d20b6ffde966a37ac5c34f0cca198b5c5a440c99205758d0d261622367c1c6f52a9dc4a5a98abe9c62f667dff535e48b65a656f708685b19c621d94aa6a3fdd6be798100a77a8ee6d1307ca043607601d4838ffeec3468831ee7191f881953fe10bd91df8ee5f2b5baf7def630e65aaddd3335e22351425a997a4005cbc85a2ea2a5b7f1f06c2245b2eb50f885b6666223e70c3524c540da1045d1fe630a6eccb25b4f3e87a1d3abe7d6cae4e79852d56e5dd62e3e9727f9127d816f820edd4869b657d8dc7f08779ff08c27b0bb6bbf7aae0143da575a3f0305673e299aa17ae7f3d2861e7844bba6f044241c045bda7652c4f892937419d67fc2ef7396a306343c4ef2756fd8bef33e58a214911225ef19a570d00d141275fa345670edf2fbcd4a5dcf04af436e1dda279ead57d3b9de6a6d84fa1ccfea3b8eb5f97fe5fa662e3da05afe1c55a3c3d9aaccdbd955e44fa8de1800e2514c20a3efd0954ba319c27d6be0d064b42fc89c0ae816f853f3da796f04447f8fa38a166d6ac6773d75bc03a4f78aeb7a86b6a8624280439fa4c72c1dd57169ea024a7f32ac1f10bed263a7a9d64385725ac66b64ae5795590f172cd0fb50c4957ff8013b799f63db4b17e41753cb2b86fec25f7f6b421184ab480303a8169abc87633c6dbb7cc3a2063fa4377b65af8fc9104617e35752f4efe5d91d51ca06fac3666ccf8be8491ad520f2e3698dca7d7e565942480e42a45e874e9fa26e2fef58fca05b985cfcd832b1f0a6c09085e99e45bae5a44490ca3cca5daa65992356d2b334fea00c27a74222110cda550d85404053c576290eacb04d71d57aa76ab70ff518ac66515c9b27ffbfa6c78ea46d271f7fa0a9ea20a80d5dcf169c48294586912acf72a9eded8e919f2f189ef30bf2a9e1e65290aaf2a32c030aad5fe60530a89fe308e68e1a5e1e483cc55ff040cb32b72f760c95229365e3a6860abc088141ef8afcc7ab8379bca8fc5fd1538a4067c6f76c5fea11b87e5dc64aa50d76206912654b23ac403740fff5041448e06f72c434e361d335d5fd3be95c40a679a01ef2348aedc61fa74b250795039da2d29a2151b7243b1e8932f72121f0a5b39febe7b8d446eb9b1e04ef177c2166978f4978c81c43c8ac42e0b3347127fac4eca3bcf90f4ee60ba2309ce3b8ddddef0dd307591ab468022d94f7099f6dc9175bb01343490cdc14e0ec9c644aea8029aa4e4dcab10763728a41953076c492c6d32153c61197dd2c6547bb9e1b4b9b975350b8b96cda7da7cbe90f2419255edd47816feb56489b1120e0cc6df8c9a589c91a535cced23c7269f6fc603da7a14c716f2297c4c1bfaee510d1d476faceebd12d5cc7a1e52baf5de31bbd30cf60f70456d531bde39d6fcdbc234551362f943cc8cb64f58ec34117535ed5766e0e4b3aeea570540420b5997d97022cd1b301401b83908c1046c536d41c106869991daad3c5aae12b0f86366d5a4aec4d77a485ff6b530af5db86e31108973e16ddfe0acba72444eff5dedbf7183e9a20a7c3d522cb90406233d5f18b5dfebdbfd891457aa2933153cf3d231088509759eb377da4f25b518bb12aac3f8c3ed27ad9d9165aa9e627adef96248af865d10cbe311c9e06f81ab25219e6c2e211274e926e5a885f68c59471cfc9dcf5d97926ba9f2dab46d60464f54b6ea2b647155370b58ee1b6b9ae1b7d6472199db3eee214d85be11fdc71e569bd0cb4277e2ca040457cfbfccf618fd2aa40fd02244c23db63a0f64d37d258e6409bd0b6d0a5373b603cccabd44b7399216f5f80143566bec98df21e2b7ce926c42b8d142d0ce8ea44532f9670683793b081dfc06bf1bbe3e97571cb31fadb3cb804843394ffe9c3a81da854a686b74602c7e3161cab76f74d60def08a962815cbdc07e0648f409a47d2c767468e1681eb111692e3025b62ab3b66cc59c77c7248701a31aa513d1d8b23656dd6923d26cf2f8b46f850391259228f22b629e05a3286e7bf798dcbc19ad4c9971636f0ce045a83b6aaff052da04151e16a1d2d969f54c0d68547424e065f30ee8fe2e079e637fb170131957d2af3dcbc77c1019df7a6074a147881a8f7f9afa731645f01cf04c85242b9b847a3a635b55999ef379e9340212b59ab0122e500d1a3706d7a0721583ebfaa4ac1047a90197ab687f5f3285bcfcdcbd6a32028a089d2ed3c981bd4fd519b27dbc4bb71afe7386583d6f1a3ad9cf12b52b2f8405aa37915984b0a7437d994db1f7df060d90d4a354a085d6626c88c7aa9c2222c164f449ec6ddaf39631a1d464251ea636667f356c4dbb8bf2d36fb5cab691d8f0101ad74c702b8b5ca651de7d8e1a37a9eb878cc7db409e03812851f3e372d14c9b367961fcf36399f26599a358f96cd9069e7886ad6bf8fa882646ac7a6731af3f512cdec6ab9bfdd217def3289bbbb518c401b940b1615b429e97c0b6e83859db2d425a0a7c2729e7d1b1136b2c595f0a7b1e3b668f891e6d989815c26923c05ae8aee1baef16b8919aa52144a3ece2be6e60865b8d8a9d7af44132b004ff62149c79623ec681cc60faebfd0af0f11388cfbb846f994dffc6b8e3b681131b76e6f58c8383e27feb5d1d92506b663ee8d8275d1fbd8d6eb2b187ecc068fbacd1cbd58bdde7b67bcf64afde3396340143a31cc3db58b092c5d8026f62096a509f9d6d03afa855d987f9938b74084ee8f5a330c88b17f074cf95f6507ab70ff4bcf453f2012708bed0644be0c067ba7fc1554598fabdb9b4e1a03a5aa347d626e34e6f7fe0a45e7d6229b84bfdd72d1e9d75dbc9f3034dad3e18772bb0cbdbd1129282e7d32633a915cbc8a228e649112a853dcc47fe32eaa3207fad6d2d1979f2d16deb2b1cac38c4891d88ebefc77f41d6fcba884ab03c2421e60fc902a996fbcbbc9c6724be0d3c0d8d0d98046041ca2991ac9242b927f56da882058c8a8bec869e15aca15fe5d223f2546730bc7677cc80947ffd6c1682fd13b8436299b64c02102e34c02fa3f19eab2c99d0afa4ad68763e0b3d193b37cb406c496699bf0ae0d2f08c5c150068de8a7f2baec0844f1324c5401fc290b2560c48b7a38c53932d348a4c3cbe34f168e3a8485abd1d859097a89386fd6b2a582cf67ce3897be4b69e3106d4b150e582749e7fc1ed0c8c6383dccc9b2f5151d1de82018eb01d2fb84d28391f8fa95490f6f5b9ca0284bd9a1f49c314c4362b3e1cbb859ab795ac60fe9ec93b61ccdc09b922066699f37f9049f3989715a6c0eacfca03522076bf9202da8133e5ae0e3bffd93764bd5eafbfcd75dc18851950daa44dc4813cb91cf86becb70e6ae20ec71ebbee32e5e99568a5da7c3c2a7e536abc0717d1537cd15f7b614f6f1325a71da234fce64e7c74ba629789c24bcd1de5dfdddc9ed012b94ae2d97cd1bee59b31b63e773957ac47da9c575f25aa15c620c141013fca376b459fa849239fadedd0e95cb31de2742cba8a5448d9aa71e57955a31043068fe85a1c758f4901cccfd9375f8cb1e5cd1f00797a89b6677629e7f2d7a7ea"}, {0xc8, 0x116, 0x9, "4ae45d528a4f76a5c15f80d84029935e3f4be071acc8bebf78108d2071ccd2959b771edc223f1a78ebf2f8f95c82ef426c17635d6adc8d7d41ef0f2998f71577cf7935cca23170bdec9a5cf6decee124c68566afa41236d0f132a7a19c0fc29be4187dcd340d92663f5ac4b3eaeaf90e038e748be807abd8bb0253d1f62874ef0771f3a7f6de519453cd1a03acffab38468e2c6b36a57c4a483156cabb47cf87daabf378e23cdf9a3b4bf7741b36f8b45244b3bccb02"}, {0x90, 0x107, 0x8, "39b8752971bdb64104ebd91fa5b53921ab00882cbe4dd42e773ce8bf14787c9b1090a5ef74c0e8b4f85f9827b2a9843898104680c62570efaef1f006d79fb6cf55b4661d86686e62a0cec0a75147b3270d562d14f617a30ad2f6eacc14fe5e85c722f328cc6ae6444f10b920a76e37fdedc76d9ac0acbbfe2f8a23fe"}, {0x68, 0x103, 0x5, "e91ae0c4cbdcc5c7486648adfb375b524e9f7539c395166d7836b4bd7a207aa797f46a107b6ab56146edd901d40267eba33fc73ef98dee4bb6d517bdb07bf282fb2a6804f6ec680bce35d9d73bf6fa1655102756a79b3792"}, {0x28, 0x109, 0x800, "a633e341611f617ff8b8f91ef6fc93a737ae828618"}, {0xc0, 0x84, 0x1, "d9c06b85243c5ee7f5c08cfbc53a87a17f4c288eb8dbe13e4e3485120dc949e9dad371815f459a81ef6e818d44d2a1feda3815f9718e206a4f4fbeba1dd2b8c94a49502c81b57df016f5675c50a0daa73f7609caf1f4a0f7f7b3e132d98ccfc45d4a32a6bf7043fe1dc6046cd2f9ce9e6c854969a83b07d62527fa4ba579daffa804adb43584fcbcb7b85dce31e5931446f74fff397e934ba6008687d2f810fff61103bfa9cbb781952f27"}, {0x98, 0x109, 0x5, "f6e165f8ddf64281648f31bf375510de8d22ec7b1a1b587fff3c1a772e8ee47d829eae0fa3de276bd442ab834c856918b6753fdaf60c7607c4f55eb0b64243a5dd4638de4c2cc68c853557575b21997b941c95f0fce8a99a89a75cffabb693fa1344cfda9db66b4c598d54bb82f9283af1216f6bb96a2b8f58127a3fa48fb951e61f45756750be"}], 0x1350}, 0x800) r3 = socket(0x2a, 0x2, 0x13) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001700)={0x1, {{0xa, 0x4e23, 0x10, @mcast1, 0x1}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x8}}]}, 0x110) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4004854) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xfe5a}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x64}}, 0x4000080) 197.143982ms ago: executing program 1 (id=7296): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) 116.543011ms ago: executing program 3 (id=7297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000001640)="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"/1504, 0x5e0}, {&(0x7f0000000300)="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", 0x1b7}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f00000000c0)="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", 0x110}, {&(0x7f0000000240)="91772050c88ab48b5b8aebed", 0xc}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0xb0, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@typed={0x95, 0x7, 0x0, 0x0, @binary="eb975ded82ee95660069eff6d16c4d88607cb493cc7a8652c68e530e1d686fb9d57c2326ec068160b262576f5d271425844a7899b11d686973bd8b13884f2eab3b8a26c1f97432f00ac0a9f7e3d81fd8f5518f172089770f89812a0b9185f3bb8a11256690fc1bb38e65794e62dd3809d3f4ec0ad3f9efb8be9aeb70fd6aa56c6f2f73a92b024c1b0846983b567988afd8"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018"], 0x58}, 0x1, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x0, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000cc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x1, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x42}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20040000) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) sendmsg$inet_sctp(r2, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00), 0x0, 0x0, 0x0, 0x20000080}, 0x10) 50.02281ms ago: executing program 2 (id=7298): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0x40, 0xae, 0xe, 0x6a8bdb41}, {0xa5, 0x34, 0x3, 0x5}, {0x10, 0x1, 0x0, 0x7}, {0xff, 0x0, 0xfd, 0x1}, {0x4, 0x2, 0x83, 0x7}, {0x8, 0x6, 0xf, 0x101}, {0x1, 0x7, 0x1, 0x2}, {0x3, 0xfb, 0x4, 0x1}]}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '4'}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 49.130089ms ago: executing program 4 (id=7299): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0x0, [{0xe1170df307341ec5, 0x2}]}]}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff80}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040000}, 0x48000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r7, @ANYBLOB="01000000000000047fc9010000000400048008000200010000000800010000000000d00008802c00078008000600c500000008000500aee6633708000600d9000000080005002d7c9172080005006d67491d0c0007800800050024da98751c00078008000500878f000008000600df0000de"], 0x10c}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') r8 = socket(0x2d, 0x2, 0x0) bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000100)={r9}) r11 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000340)={r11}) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r12, &(0x7f00000005c0)={0x2d, 0x0, r14, 0xc}, 0x10) bind$xdp(r10, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) syz_emit_ethernet(0x2f, &(0x7f0000000000)={@remote, @local, @val={@val={0x88a8, 0x7, 0x0, 0x4}, {0x8100, 0x1, 0x1}}, {@arp={0x806, @generic={0x312, 0x6006, 0x6, 0x5, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, "db5ebb4953", @remote}}}}, &(0x7f0000000080)={0x1, 0x2, [0xcc3, 0x7e2, 0x4a9, 0x7b2]}) 0s ago: executing program 1 (id=7300): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, r2, 0x25, 0x2, @val=@tcx}, 0x1c) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x34, r6, 0xa5c59466aaff822d, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x48805}, 0x64040) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f00000011c0)={0x3a0, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1b0, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0x7, 0x1, 'lc\x00'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x1, '*'}, {0x4}, {0x6, 0x1, '-*'}, {0xe, 0x1, ']/\')+@):,#'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '$'}, {0xe, 0x1, 'NLBL_MGMT\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}, {0xa, 0x1, 'wpan0\x00'}, {0x15, 0x1, '/dev/virtual_nci\x00'}, {0xb, 0x1, '*!!\']],'}, {0x6, 0x1, '-%'}, {0xa, 0x1, '-\\,${]'}, {0x7, 0x1, '&#!'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0xa, 0x1, 'wpan0\x00'}]}, {0x44, 0x0, 0x0, 0x1, [{0xb, 0x1, 'geneve\x00'}, {0x5, 0x1, '\x00'}, {0x7, 0x1, 'lc\x00'}, {0x7, 0x1, 'lc\x00'}, {0x7, 0x1, 'lc\x00'}, {0x7, 0x1, '\xf4\xff\x003?\xe8\x14\xbc\x1a\xa5\xbf1L\xfe\xb0\xf89]\xc1\xa2\'\nG,\xf5i\xfaj5\xb0>,\xbf\x84\xc2\xd2\x01\xa7Bw`\xbc\v\'\xc6\xc9\xb4\xa8\xdeVe\xcd\xec\x9d\xe9\x84\x1e\x99\xb3\xd3`r\"\xa9\xd45\x00'}, {0xb, 0x1, 'geneve\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0xb, 0x1, 'geneve\x00'}, {0xb, 0x1, 'geneve\x00'}]}, {0x1e, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0x15, 0x1, '/dev/virtual_nci\x00'}, {0x15, 0x1, '/dev/virtual_nci\x00'}, {0x4}, {0x15, 0x1, '/dev/virtual_nci\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x8, 0x1, '\xe9--@'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x108, 0x13, 0x0, 0x1, [{0x17, 0x0, 0x0, 0x1, [{0x8, 0x1, '*&-('}, {0x9, 0x1, ',&@\\\\'}, {0x7, 0x1, 'lc\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x8, 0x1, '{$\\-'}, {0xd, 0x1, ':&:!!\'^:\''}, {0x6, 0x1, '&}'}, {0x11, 0x1, 'bond_slave_1\x00'}, {0x5, 0x1, 'u'}, {0x6, 0x1, 'Ie'}]}, {0x10, 0x0, 0x0, 0x1, [{0x8, 0x1, '&,\\#'}, {0x4}]}, {0x2c, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, ']'}, {0x5, 0x1, '\x00'}, {0x11, 0x1, 'bond_slave_1\x00'}]}, {0x18}, {0x48, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan0\x00'}, {0x9, 0x1, '(+)*]'}, {0x4}, {0x4}, {0x18, 0x1, 'ns/pid_for_children\x00'}, {0xb, 0x1, 'geneve\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x30, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x18, 0x1, 'ns/pid_for_children\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, 'geneve\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x4c, 0x13, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [{0xb, 0x1, 'geneve\x00'}, {0x4}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, 'lc\x00'}, {0x7, 0x1, 'lc\x00'}, {0x9, 0x1, '-#$%\''}]}, {0x14, 0x0, 0x0, 0x1, [{0x4, 0x1, 'wWT8\x05\xe4\xac\xab\x91\x9da\x1e\x80u\xb6\xba\xe3\xcd\x18Mm\x17\x89\xa4\x86\x8cm\x1a\xd3\xdadf\xf3\xff\x93\x89, priority 10 [ 576.582137][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.591104][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 576.599206][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 576.663103][T11751] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.672718][T11751] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 576.682549][T11751] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 576.699866][ T35] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.720450][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 576.728849][ T35] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 576.781455][T27074] __nla_validate_parse: 2 callbacks suppressed [ 576.781468][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5707'. [ 576.808393][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5707'. [ 577.119436][T27100] xt_hashlimit: size too large, truncated to 1048576 [ 577.195532][T27102] sctp: [Deprecated]: syz.1.5713 (pid 27102) Use of int in maxseg socket option. [ 577.195532][T27102] Use struct sctp_assoc_value instead [ 577.603097][T27123] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.650432][ T5899] tipc: Node number set to 1 [ 577.745931][T27129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5725'. [ 577.794172][T27129] openvswitch: netlink: Flow actions attr not present in new flow. [ 577.835250][T27132] TCP: TCP_TX_DELAY enabled [ 577.849544][T27129] netlink: 393 bytes leftover after parsing attributes in process `syz.1.5725'. [ 578.014149][T27140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5729'. [ 578.025522][T27140] netlink: 'syz.1.5729': attribute type 9 has an invalid length. [ 578.034983][T27140] netlink: 'syz.1.5729': attribute type 11 has an invalid length. [ 578.050520][T27140] netlink: 'syz.1.5729': attribute type 12 has an invalid length. [ 578.068880][T27140] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.5729'. [ 578.100320][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'. [ 578.294793][T27153] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5734'. [ 578.909091][T27183] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5745'. [ 578.989322][T27185] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5746'. [ 579.056515][T27187] netlink: 'syz.2.5747': attribute type 1 has an invalid length. [ 579.390819][T27202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.407475][T27202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.426468][T27202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.440996][T27202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.491486][T27204] bridge0: port 1(batadv2) entered blocking state [ 579.498406][T27204] bridge0: port 1(batadv2) entered disabled state [ 579.514580][T27204] batadv2: entered allmulticast mode [ 579.536571][T27204] batadv2: entered promiscuous mode [ 579.677775][T27221] netlink: 'syz.2.5757': attribute type 1 has an invalid length. [ 579.836641][T27231] syzkaller1: entered promiscuous mode [ 579.844936][T27231] syzkaller1: entered allmulticast mode [ 579.930341][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 579.938396][ C0] lec:lec_tx_timeout: lec0 [ 579.943191][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 579.991068][ T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 580.000686][ T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 580.223940][T27257] netlink: 'syz.1.5768': attribute type 1 has an invalid length. [ 580.642292][T27272] netlink: set zone limit has 4 unknown bytes [ 580.802332][T27284] netlink: 'syz.1.5777': attribute type 1 has an invalid length. [ 583.018662][T27341] netlink: 'syz.2.5790': attribute type 25 has an invalid length. [ 583.026925][T27341] netlink: 'syz.2.5790': attribute type 28 has an invalid length. [ 583.181681][T27350] __nla_validate_parse: 7 callbacks suppressed [ 583.181697][T27350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5795'. [ 583.250471][T27347] nbd1: detected capacity change from 0 to 127 [ 583.280837][T27359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5796'. [ 583.301748][ T5836] block nbd1: Receive control failed (result -104) [ 583.549204][T27379] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 583.696643][T27384] syzkaller0: entered promiscuous mode [ 583.704530][T27384] syzkaller0: entered allmulticast mode [ 583.885379][T27394] bond10: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 583.898362][T27394] bond10 (unregistering): Released all slaves [ 583.987862][T27406] netlink: 'syz.3.5811': attribute type 1 has an invalid length. [ 584.117331][T27413] gre2: entered promiscuous mode [ 584.142685][T27417] netlink: 'syz.1.5814': attribute type 24 has an invalid length. [ 584.151317][T27413] gre2: entered allmulticast mode [ 584.189052][T27422] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5812'. [ 584.207513][T27425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5814'. [ 584.221021][T27425] netlink: 'syz.1.5814': attribute type 1 has an invalid length. [ 584.229062][T27425] netlink: 'syz.1.5814': attribute type 1 has an invalid length. [ 584.260965][T27425] netlink: 'syz.1.5814': attribute type 2 has an invalid length. [ 584.289283][T27425] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5814'. [ 584.326225][T27415] : entered promiscuous mode [ 584.372929][T27422] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 584.397939][T27422] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 584.412017][T27422] bond0 (unregistering): Released all slaves [ 584.412037][T27435] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 584.474136][T27417] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 584.503068][T27417] bond10: (slave lo): Enslaving as an active interface with an up link [ 584.533913][T27417] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 584.666656][T27444] SET target dimension over the limit! [ 584.798420][T27463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.950200][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 584.958275][ C0] lec:lec_tx_timeout: lec0 [ 584.962980][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 585.008524][T27475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5828'. [ 585.075223][T27477] netlink: 'syz.4.5829': attribute type 1 has an invalid length. [ 585.126108][T27479] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 585.247776][T27477] 8021q: adding VLAN 0 to HW filter on device bond9 [ 585.283352][T27475] macvlan0: entered promiscuous mode [ 585.288887][T27475] macvlan0: entered allmulticast mode [ 585.297814][T27475] bond0: entered promiscuous mode [ 585.303491][T27475] bridge7: entered promiscuous mode [ 585.310362][T27475] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 585.333224][T27475] bond0: left promiscuous mode [ 585.338033][T27475] bridge7: left promiscuous mode [ 585.429103][T27507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5836'. [ 585.444105][T27508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5836'. [ 585.582120][T27514] tunl0: Caught tx_queue_len zero misconfig [ 585.640340][T27522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5841'. [ 585.687311][T27528] netlink: 'syz.4.5842': attribute type 1 has an invalid length. [ 585.716020][T27522] netlink: 'syz.0.5841': attribute type 10 has an invalid length. [ 585.735605][T27528] bond10: entered promiscuous mode [ 585.742454][T27528] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.750628][T27522] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 585.805822][T27536] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.813109][T27536] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 585.824623][T27536] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 585.836570][T27536] bond10: (slave ip6gre1): making interface the new active one [ 585.846184][T27536] ip6gre1: entered promiscuous mode [ 585.854216][T27536] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 586.044400][T27553] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5847'. [ 586.385842][T27583] netlink: 'syz.0.5856': attribute type 10 has an invalid length. [ 586.403591][T27583] team0: Device vxcan1 is of different type [ 587.219088][T27643] netlink: 'syz.2.5871': attribute type 1 has an invalid length. [ 587.229285][T27639] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 587.314711][T27643] bond2: entered promiscuous mode [ 587.320085][T27643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.428771][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 587.449199][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 587.459509][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 587.475571][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 587.491853][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.613406][T27653] lo speed is unknown, defaulting to 1000 [ 587.701739][T27664] netlink: 'syz.0.5875': attribute type 2 has an invalid length. [ 588.049320][T27687] erspan0: entered promiscuous mode [ 588.062118][T27687] gretap0: entered promiscuous mode [ 588.067459][T27690] sctp: [Deprecated]: syz.4.5885 (pid 27690) Use of int in max_burst socket option. [ 588.067459][T27690] Use struct sctp_assoc_value instead [ 588.091033][T27691] sctp: [Deprecated]: syz.3.5882 (pid 27691) Use of int in maxseg socket option. [ 588.091033][T27691] Use struct sctp_assoc_value instead [ 588.150755][T27685] netlink: 'syz.3.5882': attribute type 16 has an invalid length. [ 588.152117][T27653] chnl_net:caif_netlink_parms(): no params data found [ 588.343380][T27653] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.350937][T27653] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.358957][T27653] bridge_slave_0: entered allmulticast mode [ 588.363523][T27700] __nla_validate_parse: 12 callbacks suppressed [ 588.363540][T27700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5887'. [ 588.372467][T27653] bridge_slave_0: entered promiscuous mode [ 588.408561][T27653] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.425531][ T29] audit: type=1800 audit(1776205317.716:6): pid=27707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5889" name="memory.events" dev="tmpfs" ino=2611 res=0 errno=0 [ 588.458830][T27709] sctp: [Deprecated]: syz.3.5887 (pid 27709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.458830][T27709] Use struct sctp_sack_info instead [ 588.473068][T27653] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.484023][ T29] audit: type=1804 audit(1776205317.716:7): pid=27708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5889" name="/newroot/510/memory.events" dev="tmpfs" ino=2611 res=1 errno=0 [ 588.508520][T27653] bridge_slave_1: entered allmulticast mode [ 588.522491][T27653] bridge_slave_1: entered promiscuous mode [ 588.628054][T27716] netlink: 'syz.2.5892': attribute type 2 has an invalid length. [ 588.660841][T27653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.704420][T27720] xt_TCPMSS: Only works on TCP SYN packets [ 588.714571][T27653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.822100][T27653] team0: Port device team_slave_0 added [ 588.830735][T27730] netlink: 'syz.3.5893': attribute type 1 has an invalid length. [ 588.839824][T27653] team0: Port device team_slave_1 added [ 588.916536][T27653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.929565][T27653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.957310][T27653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.008748][T27653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.015945][T27653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.042679][T27653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.070387][T27740] netlink: 'syz.2.5898': attribute type 1 has an invalid length. [ 589.078226][T27740] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5898'. [ 589.191620][T27653] hsr_slave_0: entered promiscuous mode [ 589.198273][T27653] hsr_slave_1: entered promiscuous mode [ 589.223022][T27653] debugfs: 'hsr0' already exists in 'hsr' [ 589.240014][T27653] Cannot create hsr debugfs directory [ 589.418214][T27766] veth1_macvtap: mtu less than device minimum [ 589.445962][T27761] geneve0: entered allmulticast mode [ 589.454919][T11751] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.484919][T11751] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.517585][T11751] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.531463][ T5822] Bluetooth: hci5: command tx timeout [ 589.554865][T11751] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.705186][T27774] siw: device registration error -23 [ 589.711882][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.746447][T27653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.758787][T27653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.784643][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.795934][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.825151][T27781] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 589.893703][T27653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.905057][T27653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.918356][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5913'. [ 589.930731][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.940569][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.954755][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.968774][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.970331][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 589.982635][ C0] lec:lec_tx_timeout: lec0 [ 589.983058][T27781] wg1 speed is unknown, defaulting to 1000 [ 589.987439][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 590.026193][T27653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.029663][T27802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5915'. [ 590.036807][T27653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.065463][T27781] wg1 speed is unknown, defaulting to 1000 [ 590.086134][T27802] bond9: entered promiscuous mode [ 590.092509][T27802] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.107835][T27803] bridge8: entered promiscuous mode [ 590.114828][T27803] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 590.124166][T27781] wg1 speed is unknown, defaulting to 1000 [ 590.182291][T27781] wg1 speed is unknown, defaulting to 1000 [ 590.186541][T27808] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.5916'. [ 590.205348][T27781] wg1 speed is unknown, defaulting to 1000 [ 590.344779][T27810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5917'. [ 590.345507][T27813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5919'. [ 590.370944][T27810] netlink: 'syz.0.5917': attribute type 4 has an invalid length. [ 590.376296][T27813] hsr0: entered promiscuous mode [ 590.379233][T27810] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5917'. [ 590.385153][T27813] macvlan3: entered allmulticast mode [ 590.399199][T27815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5918'. [ 590.408296][T27813] hsr0: entered allmulticast mode [ 590.409004][T27815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5918'. [ 590.430059][T27813] hsr_slave_0: entered allmulticast mode [ 590.436099][T27813] hsr_slave_1: entered allmulticast mode [ 590.446650][T27653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 590.459097][T27653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.475297][T27653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 590.515433][T27653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.523613][T27653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 590.554273][T27653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.568042][T27653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 590.591337][T27653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.642492][T27834] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.906298][T27653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.973706][T27653] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.991904][T11751] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.999088][T11751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.030758][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.037934][T11751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.363472][T27878] ip6tnl5: entered promiscuous mode [ 591.547893][T27653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.572380][T27893] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 591.609594][T27897] validate_nla: 3 callbacks suppressed [ 591.609614][T27897] netlink: 'syz.2.5943': attribute type 16 has an invalid length. [ 591.612548][ T5822] Bluetooth: hci5: command tx timeout [ 591.657536][T27897] netlink: 'syz.2.5943': attribute type 17 has an invalid length. [ 591.768520][T27897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.783656][T27915] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 591.814247][T27653] veth0_vlan: entered promiscuous mode [ 591.845204][T27653] veth1_vlan: entered promiscuous mode [ 591.867947][T27913] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 591.937306][T27922] tipc: Enabling of bearer rejected, failed to enable media [ 591.991574][T27653] veth0_macvtap: entered promiscuous mode [ 592.043754][T27653] veth1_macvtap: entered promiscuous mode [ 592.098818][T27653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.153029][T27653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.201354][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.222642][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.248311][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.266248][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.429083][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.453985][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.511538][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.524669][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.662980][T27954] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.943422][T27966] tipc: Enabling of bearer rejected, failed to enable media [ 593.372310][T27995] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 593.567237][T28003] __nla_validate_parse: 15 callbacks suppressed [ 593.567260][T28003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5969'. [ 593.692201][ T5822] Bluetooth: hci5: command tx timeout [ 593.947730][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5973'. [ 594.128660][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.143565][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.160876][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.168819][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 594.177706][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 594.263682][T28025] lo speed is unknown, defaulting to 1000 [ 594.272087][T28025] wg1 speed is unknown, defaulting to 1000 [ 594.727624][T28049] syzkaller0: entered promiscuous mode [ 594.742665][T28049] syzkaller0: entered allmulticast mode [ 594.759354][T28025] chnl_net:caif_netlink_parms(): no params data found [ 594.783402][T28049] netlink: 'syz.1.5979': attribute type 2 has an invalid length. [ 594.791412][T28049] netlink: 'syz.1.5979': attribute type 2 has an invalid length. [ 594.906238][T28025] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.916043][T28025] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.935252][T28025] bridge_slave_0: entered allmulticast mode [ 594.952821][T28025] bridge_slave_0: entered promiscuous mode [ 594.965272][T28025] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.980461][T28025] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.988470][T28025] bridge_slave_1: entered allmulticast mode [ 594.997167][T28025] bridge_slave_1: entered promiscuous mode [ 595.033868][T28071] IPv6: sit1: Disabled Multicast RS [ 595.040012][T28071] sit1: entered allmulticast mode [ 595.113544][T28025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.126859][T28025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.165880][T28075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5988'. [ 595.179761][T28025] team0: Port device team_slave_0 added [ 595.188806][T28025] team0: Port device team_slave_1 added [ 595.229218][T28075] sctp: [Deprecated]: syz.4.5988 (pid 28075) Use of int in max_burst socket option deprecated. [ 595.229218][T28075] Use struct sctp_assoc_value instead [ 595.230571][T28025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.252303][T28025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.279393][T28025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.315230][T28025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.316243][T28075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5988'. [ 595.322426][T28025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.357689][T28025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.416493][T28025] hsr_slave_0: entered promiscuous mode [ 595.423900][T28025] hsr_slave_1: entered promiscuous mode [ 595.430818][T28025] debugfs: 'hsr0' already exists in 'hsr' [ 595.436690][T28025] Cannot create hsr debugfs directory [ 595.693365][T28087] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 595.770143][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 595.786545][ C0] lec:lec_tx_timeout: lec0 [ 595.791411][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 595.797498][ T5822] Bluetooth: hci5: command tx timeout [ 595.969287][T28109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5996'. [ 596.053026][T28114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5997'. [ 596.064160][T28025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 596.077163][T28025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 596.153350][T28116] netlink: 'syz.4.5998': attribute type 8 has an invalid length. [ 596.193994][T28116] "syz.4.5998" (28116) uses obsolete ecb(arc4) skcipher [ 596.227299][T28025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 596.248320][T28025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 596.262646][ T5822] Bluetooth: hci3: command tx timeout [ 596.360902][T28025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 596.392221][T28025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 596.392896][T28128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6001'. [ 596.469720][T28128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6001'. [ 596.498079][T28025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 596.515821][T28025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 596.655728][T28142] netlink: 372 bytes leftover after parsing attributes in process `syz.3.6004'. [ 596.664624][T28146] netlink: 'syz.1.6006': attribute type 29 has an invalid length. [ 596.674634][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6006'. [ 596.744494][T28146] netlink: 'syz.1.6006': attribute type 3 has an invalid length. [ 596.812878][T28025] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 596.859392][T28025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 596.879188][T28025] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 596.902879][T28025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 596.921753][T28025] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 596.954191][T28025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 596.972552][T28025] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 596.991918][T28161] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 597.005509][T28025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.115275][T28161] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 597.343024][T28188] syzkaller0: entered allmulticast mode [ 597.388281][T28025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.437988][T28025] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.465046][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.472255][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.522363][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.529505][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.866930][T28025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.958277][T28025] veth0_vlan: entered promiscuous mode [ 597.988649][T28025] veth1_vlan: entered promiscuous mode [ 598.001048][T28226] netlink: 'syz.2.6024': attribute type 9 has an invalid length. [ 598.059189][ T35] nci: nci_rx_work: unknown MT 0x4 [ 598.105644][T28229] netlink: 'syz.1.6026': attribute type 1 has an invalid length. [ 598.172090][T28025] veth0_macvtap: entered promiscuous mode [ 598.183376][T28025] veth1_macvtap: entered promiscuous mode [ 598.199926][T28025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.224082][T28025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.237689][ T145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.247198][ T145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.266819][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.277526][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.341187][ T5822] Bluetooth: hci3: command tx timeout [ 598.352867][T28242] netlink: 'syz.4.6029': attribute type 5 has an invalid length. [ 599.322553][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.331535][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.339875][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.350087][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.359570][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.368909][T28264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.378326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.389525][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.398559][T28263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.610988][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.411446][ T5822] Bluetooth: hci3: command tx timeout [ 600.610480][T28206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.694205][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.710225][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.770428][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 600.778281][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.810398][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 600.818315][T28271] __nla_validate_parse: 7 callbacks suppressed [ 600.818333][T28271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6039'. [ 600.818423][ C0] lec:lec_tx_timeout: lec0 [ 600.838551][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 600.844660][T28271] netlink: 'syz.4.6039': attribute type 13 has an invalid length. [ 600.854341][T28274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6038'. [ 600.866195][T28271] netlink: 'syz.4.6039': attribute type 17 has an invalid length. [ 600.930833][T28279] xt_hashlimit: size too large, truncated to 1048576 [ 601.009999][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.029741][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.047725][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.063818][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.649450][T28273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.862498][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6048'. [ 601.973111][T28315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6050'. [ 602.234236][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6054'. [ 602.294258][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6054'. [ 602.303956][T28330] netlink: 'syz.0.6054': attribute type 3 has an invalid length. [ 602.492973][ T5822] Bluetooth: hci3: command tx timeout [ 602.513274][T28356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6057'. [ 602.677476][T28365] netlink: 'syz.0.6061': attribute type 1 has an invalid length. [ 602.768184][T28368] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 602.777049][T28369] Cannot find add_set index 0 as target [ 602.828050][T28368] netlink: 'syz.4.6062': attribute type 11 has an invalid length. [ 602.829900][T28369] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6061'. [ 603.367681][T28392] xt_TCPMSS: Only works on TCP SYN packets [ 604.424016][ T5935] net_ratelimit: 11 callbacks suppressed [ 604.424037][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.810692][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.254872][T28332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.290334][T28394] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6071'. [ 605.647853][T28430] netlink: 'syz.2.6078': attribute type 4 has an invalid length. [ 605.679250][T28430] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6078'. [ 605.690896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.732811][T28436] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 605.850384][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 605.867688][ C0] lec:lec_tx_timeout: lec0 [ 605.872539][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 605.879011][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.923408][T28456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.932084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.992391][T28467] netem: unknown loss type 0 [ 605.997572][T28467] netem: change failed [ 606.815438][ T5841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.894850][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.882414][T28506] syzkaller0: entered promiscuous mode [ 607.888483][T28506] syzkaller0: entered allmulticast mode [ 607.930696][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.372926][T28541] delete_channel: no stack [ 608.461196][T28549] syzkaller1: entered promiscuous mode [ 608.466891][T28549] syzkaller1: entered allmulticast mode [ 608.487725][T28551] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 608.521451][T28551] __nla_validate_parse: 2 callbacks suppressed [ 608.521471][T28551] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6112'. [ 608.539872][T28551] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6112'. [ 608.583898][T28553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6113'. [ 608.685220][T28562] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6117'. [ 608.723931][T28562] 0: renamed from hsr_slave_1 (while UP) [ 608.736225][T28562] 0: entered allmulticast mode [ 608.775688][T28569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.858342][T28580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6119'. [ 608.904937][T28584] netlink: 'syz.1.6122': attribute type 1 has an invalid length. [ 608.987823][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6124'. [ 609.023819][T28588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6125'. [ 609.054698][T28592] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6127'. [ 609.322958][T28606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.371510][T28623] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6134'. [ 609.388168][T28626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6135'. [ 609.523321][T28635] : renamed from virt_wifi0 [ 609.702677][T28652] net_ratelimit: 6 callbacks suppressed [ 609.702696][T28652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.864252][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.012997][ T5899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.462431][T28718] batadv0: entered promiscuous mode [ 610.479070][T28720] openvswitch: netlink: Key type 30 is not supported [ 610.499352][T28718] macsec1: entered promiscuous mode [ 610.516796][T28718] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 610.560825][T28718] batadv0: left promiscuous mode [ 610.725802][T28720] lo speed is unknown, defaulting to 1000 [ 610.822479][T28720] wg1 speed is unknown, defaulting to 1000 [ 610.880158][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 610.888197][ C0] lec:lec_tx_timeout: lec0 [ 610.893442][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 611.051317][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.310818][T28776] xt_socket: unknown flags 0x50 [ 611.453732][T11751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.464563][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.474611][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.716420][T28805] openvswitch: netlink: Flow actions attr not present in new flow. [ 611.725052][T28806] netlink: 'syz.0.6178': attribute type 2 has an invalid length. [ 611.736304][T28806] netlink: 'syz.0.6178': attribute type 2 has an invalid length. [ 612.097426][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.145613][T11892] IPVS: starting estimator thread 0... [ 612.231478][T28837] netlink: 'syz.1.6186': attribute type 1 has an invalid length. [ 612.252172][T28834] IPVS: using max 57 ests per chain, 136800 per kthread [ 612.504216][T28856] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 612.585170][T28860] netlink: 'syz.2.6195': attribute type 6 has an invalid length. [ 612.643861][T28866] netlink: 'syz.1.6197': attribute type 1 has an invalid length. [ 612.657795][T28866] netlink: 'syz.1.6197': attribute type 1 has an invalid length. [ 612.675179][T28866] netlink: 'syz.1.6197': attribute type 8 has an invalid length. [ 612.909953][T28879] lo speed is unknown, defaulting to 1000 [ 612.918151][ T5935] IPVS: starting estimator thread 0... [ 612.926106][T28879] wg1 speed is unknown, defaulting to 1000 [ 612.939989][T28886] team0: No ports can be present during mode change [ 613.030763][T28887] IPVS: using max 37 ests per chain, 88800 per kthread [ 613.379307][ T29] audit: type=1107 audit(1776205342.666:8): pid=28907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3' [ 613.412039][ T2089] block nbd1: Possible stuck request ffff888026e00000: control (read@0,1024B). Runtime 30 seconds [ 613.428582][ T2089] block nbd1: Possible stuck request ffff888026e00200: control (read@1024,1024B). Runtime 30 seconds [ 613.440374][ T2089] block nbd1: Possible stuck request ffff888026e00400: control (read@2048,1024B). Runtime 30 seconds [ 613.452586][ T2089] block nbd1: Possible stuck request ffff888026e00600: control (read@3072,1024B). Runtime 30 seconds [ 613.464102][T28923] netlink: 'syz.1.6214': attribute type 83 has an invalid length. [ 613.622467][T28931] __nla_validate_parse: 25 callbacks suppressed [ 613.622481][T28931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6220'. [ 613.675640][T28932] netlink: 'syz.1.6214': attribute type 3 has an invalid length. [ 613.791902][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6222'. [ 613.835154][T28931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6220'. [ 613.977771][T28957] bridge10: entered promiscuous mode [ 613.983702][T28957] bridge10: entered allmulticast mode [ 614.202110][T28979] batadv1: entered allmulticast mode [ 614.218888][T28981] validate_nla: 1 callbacks suppressed [ 614.218908][T28981] netlink: 'syz.4.6232': attribute type 8 has an invalid length. [ 614.549029][T29003] lo: entered allmulticast mode [ 614.555631][T29003] lo: left allmulticast mode [ 614.664458][T29014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6240'. [ 614.676964][T29013] netlink: 'syz.4.6241': attribute type 1 has an invalid length. [ 614.766532][T29018] netlink: 'syz.3.6243': attribute type 1 has an invalid length. [ 614.855048][T29018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6243'. [ 615.109392][T29026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6246'. [ 615.213238][ T10] net_ratelimit: 70 callbacks suppressed [ 615.213258][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.239041][T29031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6246'. [ 615.512707][T29048] lo speed is unknown, defaulting to 1000 [ 615.536084][T29048] wg1 speed is unknown, defaulting to 1000 [ 615.572758][T29043] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6251'. [ 615.900214][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 615.908280][ C0] lec:lec_tx_timeout: lec0 [ 615.913273][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 616.151875][T29071] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 616.185499][T29078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6257'. [ 616.250498][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.259002][T29071] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 616.262699][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6260'. [ 616.293944][T29081] block nbd2: Unsupported socket: should be TCP or UNIX. [ 616.313137][T29071] gretap5: entered promiscuous mode [ 616.340636][T29071] gretap5: entered allmulticast mode [ 616.394062][T29083] syz_tun: entered allmulticast mode [ 616.572475][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.581624][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.598278][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.778479][T29107] netlink: 'syz.1.6267': attribute type 30 has an invalid length. [ 616.976267][T29128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.047522][T29125] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 617.283015][T29147] bond0: entered allmulticast mode [ 617.502370][T29160] hsr_slave_0 (unregistering): left promiscuous mode [ 617.630535][T29166] syzkaller0: entered promiscuous mode [ 617.635203][T29174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.638521][T29166] syzkaller0: entered allmulticast mode [ 617.732473][T29179] netlink: 'syz.2.6292': attribute type 1 has an invalid length. [ 617.804200][T29179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.827574][T29188] vlan2: entered allmulticast mode [ 617.832933][T29188] bond4: entered allmulticast mode [ 618.059295][T29201] netlink: 'syz.2.6298': attribute type 2 has an invalid length. [ 618.093568][T29201] netlink: 'syz.2.6298': attribute type 2 has an invalid length. [ 618.289543][T29216] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.298186][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 618.310961][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 618.319779][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 618.329896][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 618.341253][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 618.352679][T29200] nbd2: detected capacity change from 0 to 63 [ 618.371973][ T5831] block nbd2: Receive control failed (result -32) [ 618.381223][ T5836] block nbd2: Receive control failed (result -32) [ 618.421165][T27658] block nbd2: Dead connection, failed to find a fallback [ 618.429476][T27658] block nbd2: shutting down sockets [ 618.467183][T27658] blk_print_req_error: 134 callbacks suppressed [ 618.467201][T27658] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.530476][T27658] buffer_io_error: 138 callbacks suppressed [ 618.530493][T27658] Buffer I/O error on dev nbd2, logical block 0, async page read [ 618.539755][T29215] lo speed is unknown, defaulting to 1000 [ 618.556265][T27658] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.569016][T27658] Buffer I/O error on dev nbd2, logical block 1, async page read [ 618.577210][T27658] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.608252][T29215] wg1 speed is unknown, defaulting to 1000 [ 618.651624][T27658] Buffer I/O error on dev nbd2, logical block 2, async page read [ 618.659449][T27658] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.705014][T27658] Buffer I/O error on dev nbd2, logical block 3, async page read [ 618.779997][T27658] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.828437][T27658] Buffer I/O error on dev nbd2, logical block 0, async page read [ 618.863074][T27658] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.881201][T27658] Buffer I/O error on dev nbd2, logical block 1, async page read [ 618.889309][T27658] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.920702][T27658] Buffer I/O error on dev nbd2, logical block 2, async page read [ 618.928539][T27658] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.939819][T27658] Buffer I/O error on dev nbd2, logical block 3, async page read [ 618.949930][T27658] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.964485][T27658] Buffer I/O error on dev nbd2, logical block 0, async page read [ 618.973942][T27658] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 618.983838][T27658] Buffer I/O error on dev nbd2, logical block 1, async page read [ 618.985230][T29248] netlink: 'syz.0.6313': attribute type 2 has an invalid length. [ 618.992375][T27658] ldm_validate_partition_table(): Disk read failed. [ 619.008589][T27658] Dev nbd2: unable to read RDB block 0 [ 619.016123][T27658] nbd2: unable to read partition table [ 619.027644][T27658] ldm_validate_partition_table(): Disk read failed. [ 619.034862][T27658] Dev nbd2: unable to read RDB block 0 [ 619.041282][T27658] nbd2: unable to read partition table [ 619.188745][T29259] __nla_validate_parse: 18 callbacks suppressed [ 619.188765][T29259] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6318'. [ 619.221086][T29256] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6317'. [ 619.596794][T29215] chnl_net:caif_netlink_parms(): no params data found [ 619.799214][T29215] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.806833][T29215] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.814745][T29215] bridge_slave_0: entered allmulticast mode [ 619.823982][T29215] bridge_slave_0: entered promiscuous mode [ 619.833027][T29288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6323'. [ 619.833292][T29215] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.852122][T29215] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.859442][T29215] bridge_slave_1: entered allmulticast mode [ 619.868743][T29215] bridge_slave_1: entered promiscuous mode [ 619.984972][T29215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.998224][T29215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.089239][T29215] team0: Port device team_slave_0 added [ 620.117941][T29215] team0: Port device team_slave_1 added [ 620.162803][T29215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.170013][T29215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.198954][T29215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.227622][T29215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.248557][T29215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.278650][T29215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.351768][T29215] hsr_slave_0: entered promiscuous mode [ 620.359184][T29215] hsr_slave_1: entered promiscuous mode [ 620.366846][T29215] debugfs: 'hsr0' already exists in 'hsr' [ 620.373071][T29215] Cannot create hsr debugfs directory [ 620.399154][T29309] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 620.412682][ T5836] Bluetooth: hci2: command tx timeout [ 620.435326][T29309] bond5 (unregistering): Released all slaves [ 620.476503][T29321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.491504][T29323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.531332][T29322] syzkaller0: entered promiscuous mode [ 620.536929][T29322] syzkaller0: entered allmulticast mode [ 620.855456][T29342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.867531][T29342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.923549][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 620.931608][ C0] lec:lec_tx_timeout: lec0 [ 620.936173][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 620.952651][T29215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.963818][T29215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.983488][T29352] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6339'. [ 621.005522][T29342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.017348][T29342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.044057][T29352] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6339'. [ 621.097808][T29342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.108299][T29342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.176807][T29215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.191108][T29215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.427898][T29367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6344'. [ 621.437160][T29367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6344'. [ 622.491716][ T5836] Bluetooth: hci2: command tx timeout [ 622.714369][T29342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.724902][T29342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.763528][T29215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.774613][T29215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.936716][T29215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.974228][T29215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.080515][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.088732][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.197805][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.208617][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.286054][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.305151][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.352733][T29390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6350'. [ 623.397659][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.399222][T29390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6350'. [ 623.420279][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.473214][T29402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6352'. [ 623.475998][T29381] netlink: 'syz.1.6348': attribute type 25 has an invalid length. [ 623.791166][T29215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 623.824516][T29215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.841983][T29215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 623.896442][T29215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.974105][T29215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.005960][T29215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 624.022542][T29436] netlink: 'syz.2.6359': attribute type 10 has an invalid length. [ 624.031595][T29215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.055315][T29215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 624.077600][T29436] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.092051][T29436] bridge_slave_1: left allmulticast mode [ 624.097996][T29436] bridge_slave_1: left promiscuous mode [ 624.106805][T29436] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.126521][T29436] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 624.260722][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.306424][T29458] xt_hashlimit: size too large, truncated to 1048576 [ 624.391108][T29215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.429665][T29466] __nla_validate_parse: 1 callbacks suppressed [ 624.429685][T29466] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.6364'. [ 624.486176][T29215] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.515187][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.522387][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.564411][T29337] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.571619][T29337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.582841][ T5836] Bluetooth: hci2: command tx timeout [ 625.188053][T29215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.418910][T29215] veth0_vlan: entered promiscuous mode [ 625.484529][T29215] veth1_vlan: entered promiscuous mode [ 625.539510][T29515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6376'. [ 625.571533][T29215] veth0_macvtap: entered promiscuous mode [ 625.623046][T29215] veth1_macvtap: entered promiscuous mode [ 625.764415][T29215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.812956][T29215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.896076][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.928988][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.943057][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.951968][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 625.951998][ C0] lec:lec_tx_timeout: lec0 [ 625.964615][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 626.018847][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.048197][T29528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6380'. [ 626.242494][T11749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.250856][T11749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.339777][T29540] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6384'. [ 626.392433][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.415742][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.458120][T29544] sock: sock_timestamping_bind_phc: sock not bind to device [ 626.623652][T29554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6387'. [ 626.649858][T29554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6387'. [ 626.653982][ T5836] Bluetooth: hci2: command tx timeout [ 626.768696][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.778609][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.787095][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.795508][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 626.803666][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 626.929092][T29556] lo speed is unknown, defaulting to 1000 [ 626.937222][T29556] wg1 speed is unknown, defaulting to 1000 [ 627.384604][T29577] netlink: 'syz.1.6392': attribute type 27 has an invalid length. [ 627.422983][T29578] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6391'. [ 627.532871][T29579] syzkaller1: entered promiscuous mode [ 627.540432][T29579] syzkaller1: entered allmulticast mode [ 627.549334][T29556] chnl_net:caif_netlink_parms(): no params data found [ 627.743926][ T35] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.764136][ T35] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 627.778523][ T35] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 627.804940][T29591] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.873735][ T35] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.885896][ T35] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 627.896365][ T35] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 627.917127][T29596] netlink: 'syz.1.6397': attribute type 9 has an invalid length. [ 628.055369][ T35] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.094455][ T35] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 628.131306][ T35] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 628.248511][ T35] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.280770][ T35] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 628.299634][ T35] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 628.316231][T29610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6399'. [ 628.345645][T29606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6400'. [ 628.388530][T29556] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.418494][T29556] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.448460][T29556] bridge_slave_0: entered allmulticast mode [ 628.474006][T29556] bridge_slave_0: entered promiscuous mode [ 628.498058][ T10] wg1 speed is unknown, defaulting to 1000 [ 628.514573][T29556] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.521945][ T10] syz2: Port: 1 Link DOWN [ 628.527648][T29556] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.537299][T29556] bridge_slave_1: entered allmulticast mode [ 628.549114][T29556] bridge_slave_1: entered promiscuous mode [ 628.555518][T29623] netlink: 'syz.1.6403': attribute type 58 has an invalid length. [ 628.565503][T29623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6403'. [ 628.721054][T29619] syzkaller0: entered promiscuous mode [ 628.726568][T29619] syzkaller0: entered allmulticast mode [ 628.793189][T29628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.801572][T29556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.817372][T29556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.840260][T29630] x_tables: duplicate underflow at hook 1 [ 628.894610][ T5822] Bluetooth: hci4: command tx timeout [ 630.975996][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 630.981242][ T5822] Bluetooth: hci4: command tx timeout [ 630.984068][ C0] lec:lec_tx_timeout: lec0 [ 630.994308][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 631.245301][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.364079][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.397152][T29556] team0: Port device team_slave_0 added [ 631.418564][T29556] team0: Port device team_slave_1 added [ 631.514254][T29659] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6411'. [ 631.529955][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.570664][T29556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.577642][T29556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.667602][T29668] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6414'. [ 631.672657][T29556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.688447][T29668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6414'. [ 631.708178][T29556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.735643][T29556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.790405][T29556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.814112][ T13] netdevsim netdevsim4 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.853717][T29675] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6417'. [ 631.864638][T29675] netlink: 'syz.2.6417': attribute type 11 has an invalid length. [ 631.873002][T29675] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6417'. [ 632.317654][ T35] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 632.337406][ T35] bond10 (unregistering): (slave ip6gre1): Releasing backup interface [ 632.345876][ T35] ip6gre1 (unregistering): left promiscuous mode [ 632.458983][ T35] bond7 (unregistering): (slave gretap1): Releasing active interface [ 632.796620][ T35] bond3 (unregistering): (slave bridge4): Releasing active interface [ 632.956283][ T35] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 632.964777][ T35] bridge7 (unregistering): left promiscuous mode [ 633.025425][ T35] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 633.034333][ T35] bridge8 (unregistering): left promiscuous mode [ 633.050600][ T5822] Bluetooth: hci4: command tx timeout [ 633.204727][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.217218][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.233352][ T35] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 633.245220][ T35] bond0 (unregistering): Released all slaves [ 633.258818][ T35] bond1 (unregistering): Released all slaves [ 633.276509][ T35] bond2 (unregistering): Released all slaves [ 633.296650][ T35] bond3 (unregistering): Released all slaves [ 633.317264][ T35] bond4 (unregistering): Released all slaves [ 633.338465][ T35] bond5 (unregistering): (slave lo): Releasing backup interface [ 633.347564][ T35] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 633.364550][ T35] bond5 (unregistering): Released all slaves [ 633.386292][ T35] bond6 (unregistering): Released all slaves [ 633.403428][ T35] bond7 (unregistering): Released all slaves [ 633.423758][ T35] bond8 (unregistering): Released all slaves [ 633.444345][ T35] bond9 (unregistering): Released all slaves [ 633.465007][ T35] bond10 (unregistering): Released all slaves [ 633.683199][ T35] : left promiscuous mode [ 633.765991][T29556] hsr_slave_0: entered promiscuous mode [ 633.795844][T29556] hsr_slave_1: entered promiscuous mode [ 633.818782][T29556] debugfs: 'hsr0' already exists in 'hsr' [ 633.838007][T29708] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6425'. [ 633.840984][T29556] Cannot create hsr debugfs directory [ 633.862266][T29711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.949462][ T35] tipc: Disabling bearer [ 633.966493][ T35] tipc: Left network mode [ 634.082262][T29715] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 634.083078][T29719] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 634.246916][T29729] netlink: 'syz.3.6429': attribute type 39 has an invalid length. [ 634.358523][T29725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6428'. [ 634.382242][T29729] hsr_slave_1 (unregistering): left promiscuous mode [ 634.834875][T29556] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.925271][T29741] tipc: Started in network mode [ 634.950241][T29741] tipc: Node identity 060da9c77acd, cluster identity 4711 [ 634.966334][T29741] tipc: Enabled bearer , priority 0 [ 635.050939][T29757] syzkaller0: entered promiscuous mode [ 635.080253][T29757] syzkaller0: entered allmulticast mode [ 635.132076][ T5822] Bluetooth: hci4: command tx timeout [ 635.213555][T29556] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.357891][T29755] tipc: Resetting bearer [ 635.504960][T29755] tipc: Disabling bearer [ 635.601939][T29556] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.800812][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 635.808172][T29795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6441'. [ 636.447639][T29805] tipc: Started in network mode [ 636.470570][T29805] tipc: Node identity 7a31cc2de266, cluster identity 4711 [ 636.477922][T29805] tipc: Enabled bearer , priority 0 [ 636.602255][T29801] tipc: Disabling bearer [ 636.748517][T29556] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.810210][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 636.818384][ C0] lec:lec_tx_timeout: lec0 [ 636.823671][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 636.832797][T29823] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6447'. [ 637.044568][T29830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6448'. [ 637.094972][ T35] hsr0: left allmulticast mode [ 637.099987][ T35] veth1_macvtap: left promiscuous mode [ 637.118099][ T35] veth0_macvtap: left promiscuous mode [ 637.145034][ T35] veth1_vlan: left promiscuous mode [ 637.342879][T29842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6451'. [ 637.368632][ T35] pimreg3 (unregistering): left allmulticast mode [ 637.383153][T29843] netlink: 'syz.0.6450': attribute type 21 has an invalid length. [ 637.427136][ T35] pim6reg (unregistering): left allmulticast mode [ 638.032775][T29842] netlink: 'syz.1.6451': attribute type 1 has an invalid length. [ 638.050425][T29842] netlink: 'syz.1.6451': attribute type 2 has an invalid length. [ 638.253924][T29847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6452'. [ 638.354528][T29851] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6454'. [ 638.439870][T29851] syzkaller0: entered promiscuous mode [ 638.480318][T29851] syzkaller0: entered allmulticast mode [ 638.517615][T29556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 638.552517][T29556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.595249][T29556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 638.667494][T29556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.836721][T29556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 638.905624][T29556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.942913][T29556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 639.028370][T29556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.172195][T29876] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6458'. [ 639.175810][ T35] IPVS: stop unused estimator thread 0... [ 639.414356][T29556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.431487][T29892] netlink: 'syz.1.6460': attribute type 1 has an invalid length. [ 639.515903][T29556] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.562768][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.569924][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.608485][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.615704][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.748219][T29900] netlink: 'syz.1.6462': attribute type 30 has an invalid length. [ 639.833825][T29908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 639.907781][T29913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6462'. [ 639.920343][T29912] netlink: 'syz.2.6464': attribute type 21 has an invalid length. [ 639.951718][T29900] bond1: option arp_missed_max: invalid value (0) [ 639.976528][T29900] bond1: option arp_missed_max: allowed values 1 - 255 [ 640.007198][T29900] bond1 (unregistering): Released all slaves [ 640.179327][T29912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6464'. [ 640.196265][T29917] ip6gre1: entered allmulticast mode [ 640.360082][T29923] nftables ruleset with unbound chain [ 640.523477][T29556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.592981][T29933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6470'. [ 640.807911][T29935] veth1_macvtap: left promiscuous mode [ 640.817601][T29935] macsec0: entered promiscuous mode [ 640.836562][T29935] macsec0: entered allmulticast mode [ 640.868368][T29936] veth1_macvtap: entered promiscuous mode [ 640.887192][T29936] veth1_macvtap: entered allmulticast mode [ 640.937627][T29936] macsec0: left promiscuous mode [ 640.960363][T29936] macsec0: left allmulticast mode [ 640.973668][T29936] veth1_macvtap: left allmulticast mode [ 641.231902][T29945] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 641.260428][T29945] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 641.830647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 641.838662][ C0] lec:lec_tx_timeout: lec0 [ 641.848389][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 642.284671][T29556] veth0_vlan: entered promiscuous mode [ 642.345664][T29556] veth1_vlan: entered promiscuous mode [ 642.444677][T29975] syzkaller1: entered promiscuous mode [ 642.445829][T29979] __nla_validate_parse: 1 callbacks suppressed [ 642.445845][T29979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6481'. [ 642.460153][T29975] syzkaller1: entered allmulticast mode [ 642.523812][T29556] veth0_macvtap: entered promiscuous mode [ 642.548163][T29982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6482'. [ 642.583596][T29982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6482'. [ 642.614509][T29556] veth1_macvtap: entered promiscuous mode [ 642.691102][T29556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.897620][T29556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.964431][T30003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6487'. [ 642.981021][T30003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6487'. [ 642.983706][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.989981][T30003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6487'. [ 643.062206][T30003] netlink: 'syz.0.6487': attribute type 1 has an invalid length. [ 643.071039][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.092237][T30003] netlink: 'syz.0.6487': attribute type 2 has an invalid length. [ 643.111063][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.135944][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.152230][T30003] syzkaller0: entered promiscuous mode [ 643.159854][T30003] syzkaller0: entered allmulticast mode [ 643.272630][T30015] wg1: entered promiscuous mode [ 643.277666][T30015] wg1: entered allmulticast mode [ 643.398365][T30013] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 643.419330][T30013] bond5 (unregistering): Released all slaves [ 643.451707][ T2089] block nbd1: Possible stuck request ffff888026e00000: control (read@0,1024B). Runtime 60 seconds [ 643.464028][ T2089] block nbd1: Possible stuck request ffff888026e00200: control (read@1024,1024B). Runtime 60 seconds [ 643.475501][ T2089] block nbd1: Possible stuck request ffff888026e00400: control (read@2048,1024B). Runtime 60 seconds [ 643.501631][ T2089] block nbd1: Possible stuck request ffff888026e00600: control (read@3072,1024B). Runtime 60 seconds [ 643.643188][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.674545][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.737673][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.762088][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.874721][T30044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.904929][T30044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.941318][T30044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.946982][T30053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.963729][T30051] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6498'. [ 643.963854][T30044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.416195][T30078] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6503'. [ 644.551818][T30090] netlink: 'syz.4.6511': attribute type 1 has an invalid length. [ 644.559965][T30090] netlink: 'syz.4.6511': attribute type 1 has an invalid length. [ 644.583953][T30090] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.6511'. [ 644.652696][T30100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6509'. [ 645.371574][T30091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 645.631964][T30160] netlink: 'syz.2.6529': attribute type 13 has an invalid length. [ 645.639824][T30160] netlink: 'syz.2.6529': attribute type 17 has an invalid length. [ 645.727231][T30155] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.940510][T30160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.948474][T30160] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.958433][T30160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.025808][T29337] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.056378][T29337] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.075219][T29337] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.099369][T29337] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.127973][T29337] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.141653][T29337] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.153743][T29337] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.203135][T29337] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.278043][T30193] syz_tun: entered allmulticast mode [ 646.285529][T30191] syz_tun: left allmulticast mode [ 646.325124][T30202] netlink: 'syz.0.6540': attribute type 1 has an invalid length. [ 646.381049][T30204] vlan2: entered allmulticast mode [ 646.386208][T30204] bond0: entered allmulticast mode [ 646.392749][T30204] bond_slave_0: entered allmulticast mode [ 646.398495][T30204] bond_slave_1: entered allmulticast mode [ 646.860253][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 646.868336][ C0] lec:lec_tx_timeout: lec0 [ 646.873331][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 646.928199][T30233] netlink: 'syz.0.6548': attribute type 1 has an invalid length. [ 647.485636][T30254] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 647.492926][T30254] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 647.711214][T30274] __nla_validate_parse: 8 callbacks suppressed [ 647.711242][T30274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6560'. [ 647.769084][T30269] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.777950][T30269] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.915128][T30269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.932453][T30269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.015288][T29337] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.090469][ T1030] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.124576][ T1030] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.144999][ T1030] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.365609][T30309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6572'. [ 648.392116][T30315] tipc: Cannot configure node identity twice [ 648.401935][T30309] netlink: 'syz.2.6572': attribute type 2 has an invalid length. [ 648.409776][T30309] netlink: 'syz.2.6572': attribute type 2 has an invalid length. [ 648.412513][ T5878] hid-generic 0005:0D36:0006.0004: item fetching failed at offset 0/1 [ 648.433775][ T5878] hid-generic 0005:0D36:0006.0004: probe with driver hid-generic failed with error -22 [ 648.468465][T30321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6577'. [ 648.483283][T30321] netlink: 'syz.1.6577': attribute type 1 has an invalid length. [ 648.587013][T30329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6579'. [ 648.602956][T30327] netlink: 'syz.0.6578': attribute type 2 has an invalid length. [ 648.623026][T30327] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6578'. [ 648.628713][T30335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6581'. [ 648.802380][T30350] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6584'. [ 648.821031][T30350] netlink: zone id is out of range [ 648.839555][T30350] netlink: zone id is out of range [ 648.853888][T30350] netlink: zone id is out of range [ 648.861461][T30350] netlink: zone id is out of range [ 648.866595][T30350] netlink: zone id is out of range [ 648.873572][T30350] netlink: zone id is out of range [ 648.878779][T30350] netlink: zone id is out of range [ 648.972866][T30365] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.033555][T30365] bridge_slave_0 (unregistering): left allmulticast mode [ 649.040816][T30365] bridge_slave_0 (unregistering): left promiscuous mode [ 649.047945][T30365] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.083739][T30373] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6594'. [ 649.302023][T30394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6596'. [ 649.419531][T30398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 649.439681][T30400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6601'. [ 649.577128][T30419] sit1: entered promiscuous mode [ 649.601313][T30419] sit1: entered allmulticast mode [ 649.965913][T30451] netlink: 'syz.1.6609': attribute type 2 has an invalid length. [ 650.018451][T30451] 9: entered promiscuous mode [ 650.189820][T30462] : entered promiscuous mode [ 650.451304][T30483] x_tables: duplicate underflow at hook 1 [ 650.654104][T30494] ip6t_srh: unknown srh match flags 4000 [ 650.666143][T30497] x_tables: duplicate underflow at hook 1 [ 650.731606][T30496] netlink: 'syz.0.6622': attribute type 4 has an invalid length. [ 650.925634][T30513] syzkaller1: entered promiscuous mode [ 650.931953][T30513] syzkaller1: entered allmulticast mode [ 650.990573][T30516] netlink: 'syz.4.6630': attribute type 1 has an invalid length. [ 651.353929][T30547] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 651.436047][ T5193] udevd[5193]: worker [27357] /devices/virtual/block/nbd1 is taking a long time [ 651.880165][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 651.888231][ C0] lec:lec_tx_timeout: lec0 [ 652.161002][T30622] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 652.161480][T30610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 652.646239][T30642] xt_hashlimit: size too large, truncated to 1048576 [ 652.839316][T30661] __nla_validate_parse: 9 callbacks suppressed [ 652.839335][T30661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6674'. [ 653.131959][T30670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6676'. [ 659.610553][ T5821] page_pool_release_retry() stalled pool shutdown: id 181, 1 inflight 60 sec [ 665.221335][T11749] bridge_slave_1: left promiscuous mode [ 665.227021][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.237112][T11749] bridge_slave_0: left allmulticast mode [ 665.242982][T11749] bridge_slave_0: left promiscuous mode [ 665.248787][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.363509][T11749] bond12 (unregistering): (slave ip6gretap1): Releasing active interface [ 665.372135][T11749] ip6gretap1 (unregistering): left allmulticast mode [ 665.456712][T11749] bond8 (unregistering): (slave gretap3): Releasing active interface [ 665.535328][T11749] bond2 (unregistering): (slave bridge1): Releasing active interface [ 665.544098][T11749] bridge1 (unregistering): left promiscuous mode [ 665.550585][T11749] bridge1 (unregistering): left allmulticast mode [ 665.803981][T11749] bond9 (unregistering): (slave bridge7): Releasing backup interface [ 665.812174][T11749] bridge7 (unregistering): left promiscuous mode [ 665.884731][T11749] team0: Port device bridge9 removed [ 665.951698][T11749] bond0 (unregistering): (slave lo): Releasing backup interface [ 665.959729][T11749] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 665.971340][T11749] bond0 (unregistering): Released all slaves [ 665.983810][T11749] bond1 (unregistering): Released all slaves [ 666.001684][T11749] bond2 (unregistering): Released all slaves [ 666.016782][T11749] bond3 (unregistering): Released all slaves [ 666.038261][T11749] bond4 (unregistering): Released all slaves [ 666.053504][T11749] bond5 (unregistering): Released all slaves [ 666.065713][T11749] bond6 (unregistering): Released all slaves [ 666.078783][T11749] bond7 (unregistering): Released all slaves [ 666.093924][T11749] bond8 (unregistering): Released all slaves [ 666.112589][T11749] bond9 (unregistering): Released all slaves [ 666.125806][T11749] bond10 (unregistering): Released all slaves [ 666.138361][T11749] bond11 (unregistering): Released all slaves [ 666.154424][T11749] bond12 (unregistering): Released all slaves [ 666.175327][T11749] bond13 (unregistering): Released all slaves [ 666.296093][T11749] tipc: Left network mode [ 666.779607][T11749] hsr_slave_1: left promiscuous mode [ 666.793792][T11749] veth1_macvtap: left promiscuous mode [ 666.799282][T11749] veth0_macvtap: left promiscuous mode [ 666.848336][T11749] pim6reg (unregistering): left allmulticast mode [ 666.953212][T11749] team0 (unregistering): Port device team_slave_1 removed [ 666.969396][T11749] team0 (unregistering): Port device team_slave_0 removed [ 667.308660][T11749] IPVS: stop unused estimator thread 0... [ 668.961671][T20119] lec:lec_start_xmit: lec0:No lecd attached [ 673.531612][ T2089] block nbd1: Possible stuck request ffff888026e00000: control (read@0,1024B). Runtime 90 seconds [ 673.542991][ T2089] block nbd1: Possible stuck request ffff888026e00200: control (read@1024,1024B). Runtime 90 seconds [ 673.554073][ T2089] block nbd1: Possible stuck request ffff888026e00400: control (read@2048,1024B). Runtime 90 seconds [ 673.565228][ T2089] block nbd1: Possible stuck request ffff888026e00600: control (read@3072,1024B). Runtime 90 seconds [ 673.970305][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 673.978315][ C0] lec:lec_tx_timeout: lec0 [ 685.692574][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.700171][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 690.811134][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 690.819256][ C0] lec:lec_tx_timeout: lec0 [ 691.975510][ T5822] Bluetooth: hci2: link tx timeout [ 691.981747][ T5822] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 691.993150][ T5822] Bluetooth: hci2: link tx timeout [ 691.998817][ T5822] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 694.010287][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 696.090466][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 700.809734][T30793] netlink: 'syz.1.6680': attribute type 1 has an invalid length. [ 700.822070][T30798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6679'. [ 700.891381][T30806] netlink: 'syz.2.6684': attribute type 21 has an invalid length. [ 700.930257][T30806] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6684'. [ 700.947813][T30809] nbd: must specify a device to reconfigure [ 701.203853][T30806] netlink: 'syz.2.6684': attribute type 5 has an invalid length. [ 701.220363][T30806] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6684'. [ 701.327889][T30820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6687'. [ 701.529014][T30833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6690'. [ 701.555860][ T1325] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 701.578889][T30834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6689'. [ 701.745019][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6691'. [ 702.178997][T30853] syzkaller0: entered promiscuous mode [ 702.215056][T30853] syzkaller0: entered allmulticast mode [ 702.304375][T30866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6700'. [ 702.393808][T30866] : entered promiscuous mode [ 702.714728][T30896] IPv6: NLM_F_REPLACE set, but no existing node found! [ 702.721685][T30897] IPv6: NLM_F_REPLACE set, but no existing node found! [ 702.751549][T30892] dvmrp0: entered allmulticast mode [ 703.021245][T30913] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 703.133865][T30920] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6717'. [ 703.134347][T30917] xfrm1: entered allmulticast mode [ 703.307236][T30929] netlink: 'syz.2.6720': attribute type 1 has an invalid length. [ 703.337995][T30929] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6720'. [ 703.520655][T30943] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 703.619206][ T2089] block nbd1: Possible stuck request ffff888026e00000: control (read@0,1024B). Runtime 120 seconds [ 703.630469][ T2089] block nbd1: Possible stuck request ffff888026e00200: control (read@1024,1024B). Runtime 120 seconds [ 703.642157][ T2089] block nbd1: Possible stuck request ffff888026e00400: control (read@2048,1024B). Runtime 120 seconds [ 703.645133][T30950] nbd: must specify a device to reconfigure [ 703.653396][ T2089] block nbd1: Possible stuck request ffff888026e00600: control (read@3072,1024B). Runtime 120 seconds [ 703.745398][T30955] bond2: Removing last ns target with arp_interval on [ 703.815619][T30964] syzkaller0: entered promiscuous mode [ 703.821209][T30964] syzkaller0: entered allmulticast mode [ 704.263028][T30940] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 704.431700][T30987] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 704.641614][T30997] IPVS: persistence engine module ip_vs_pe_ not found [ 704.777714][T31012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 704.801145][T31014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 704.856047][T31016] h: entered promiscuous mode [ 704.940509][T31016] vlan2: entered promiscuous mode [ 704.947631][T31016] gretap0: entered promiscuous mode [ 704.953148][T31027] block nbd4: not configured, cannot reconfigure [ 705.000344][T31026] erspan0: entered promiscuous mode [ 705.005697][T31026] erspan0: entered allmulticast mode [ 705.387745][T31060] netlink: 'syz.3.6756': attribute type 21 has an invalid length. [ 705.917026][T31060] netlink: 'syz.3.6756': attribute type 5 has an invalid length. [ 705.937278][T31060] __nla_validate_parse: 12 callbacks suppressed [ 705.937300][T31060] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6756'. [ 705.970986][T31067] tipc: Started in network mode [ 705.975991][T31067] tipc: Node identity 1e442e8e3a3a, cluster identity 4711 [ 705.988840][T31067] tipc: Enabled bearer , priority 0 [ 706.013474][T31065] syzkaller0: entered promiscuous mode [ 706.023765][T31065] syzkaller0: entered allmulticast mode [ 706.076119][T31065] tipc: Resetting bearer [ 706.087295][T31064] tipc: Resetting bearer [ 706.118641][T31064] tipc: Disabling bearer [ 706.216578][T31075] lo speed is unknown, defaulting to 1000 [ 706.325115][T31086] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6766'. [ 706.334465][T31088] net_ratelimit: 56 callbacks suppressed [ 706.334482][T31088] openvswitch: netlink: IP tunnel dst address not specified [ 706.373189][T31090] IPVS: length: 31 != 24 [ 706.392201][T31090] netlink: 'syz.2.6768': attribute type 10 has an invalid length. [ 706.401919][T31084] syz_tun: refused to change device tx_queue_len [ 706.409228][T31086] 8021q: VLANs not supported on ip_vti0 [ 706.458350][T31094] netlink: 'syz.1.6769': attribute type 61 has an invalid length. [ 706.466701][T31094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6769'. [ 706.489998][T31094] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 706.822562][T31115] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6777'. [ 706.987757][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.017751][T31141] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6781'. [ 707.046092][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.087373][T31140] netlink: 'syz.1.6783': attribute type 2 has an invalid length. [ 707.099251][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.108817][T31140] netlink: 'syz.1.6783': attribute type 1 has an invalid length. [ 707.171044][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.204715][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.240631][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.260688][T31152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.312486][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.336659][T31151] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6787'. [ 707.411072][T31136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 707.531404][T31174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6795'. [ 707.633671][T31174] team1: entered promiscuous mode [ 707.640654][T31174] team1: entered allmulticast mode [ 707.641786][T31178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6797'. [ 707.925922][T31203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6804'. [ 707.989132][T31209] netlink: 'syz.1.6806': attribute type 1 has an invalid length. [ 708.003455][T31207] netlink: 'syz.0.6805': attribute type 1 has an invalid length. [ 708.021167][T31210] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6805'. [ 708.058093][T31214] netlink: 'syz.2.6807': attribute type 19 has an invalid length. [ 708.153044][T31221] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 708.560747][T31250] IPv6: NLM_F_CREATE should be specified when creating new route [ 708.714837][T31258] mac80211_hwsim hwsim65 syzkaller0: left promiscuous mode [ 708.737053][T31258] mac80211_hwsim hwsim65 syzkaller0: left allmulticast mode [ 708.901520][T31266] netlink: 'syz.4.6828': attribute type 5 has an invalid length. [ 708.990793][T31275] netlink: 'syz.0.6830': attribute type 1 has an invalid length. [ 709.061196][T31280] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 709.092118][T31285] bond0: entered promiscuous mode [ 709.110543][T31285] bond_slave_0: entered promiscuous mode [ 709.116345][T31285] bond_slave_1: entered promiscuous mode [ 709.162276][T31285] gretap0: entered promiscuous mode [ 709.176885][T31285] debugfs: 'hsr1' already exists in 'hsr' [ 709.210280][T31285] Cannot create hsr debugfs directory [ 709.220799][T31285] hsr1: entered promiscuous mode [ 709.261503][T31275] lo speed is unknown, defaulting to 1000 [ 709.579169][T31301] syzkaller0: entered promiscuous mode [ 709.616229][T31301] syzkaller0: entered allmulticast mode [ 709.626602][T31320] nbd: socks must be embedded in a SOCK_ITEM attr [ 709.736659][T31308] syzkaller0: entered promiscuous mode [ 709.744910][T31308] syzkaller0: entered allmulticast mode [ 712.984037][T31353] __nla_validate_parse: 12 callbacks suppressed [ 712.984057][T31353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6848'. [ 713.124899][T31364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.371029][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 713.441926][T31393] netlink: 5574 bytes leftover after parsing attributes in process `syz.0.6860'. [ 713.463790][T31397] validate_nla: 2 callbacks suppressed [ 713.463812][T31397] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 713.583169][T31400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6861'. [ 713.606882][T31407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6865'. [ 713.618453][T31407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6865'. [ 713.629752][T31407] net_ratelimit: 12 callbacks suppressed [ 713.629769][T31407] openvswitch: netlink: Flow actions attr not present in new flow. [ 713.803974][T31426] netlink: 'syz.0.6866': attribute type 11 has an invalid length. [ 713.813409][T31426] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6866'. [ 713.841813][T31413] netlink: 'syz.4.6861': attribute type 1 has an invalid length. [ 713.859606][T31418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6864'. [ 713.927148][T31400] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 713.938559][T31400] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 713.991862][T31400] bond3: (slave vxcan3): making interface the new active one [ 714.003843][T31400] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 714.039177][T31415] syzkaller0: entered promiscuous mode [ 714.047428][T31415] syzkaller0: entered allmulticast mode [ 714.337282][T31445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6873'. [ 714.502991][T31452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6873'. [ 715.970735][T31449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.078151][T31478] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6881'. [ 716.088007][T31478] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 716.105911][T31449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.149007][T31483] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 716.268684][T31492] netlink: 'syz.1.6884': attribute type 1 has an invalid length. [ 716.280413][T31492] netlink: 'syz.1.6884': attribute type 1 has an invalid length. [ 716.288242][T31492] netlink: 'syz.1.6884': attribute type 1 has an invalid length. [ 716.303347][T31492] netlink: 'syz.1.6884': attribute type 2 has an invalid length. [ 716.340574][T31490] batadv_slave_1: entered promiscuous mode [ 716.399600][T31449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.435273][T31479] batadv_slave_1: left promiscuous mode [ 716.498209][T31449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.734387][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.779645][T31514] netlink: 'syz.3.6889': attribute type 1 has an invalid length. [ 716.799341][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.816865][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.827521][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.198100][T31549] sock: sock_set_timeout: `syz.0.6902' (pid 31549) tries to set negative timeout [ 717.200976][T31551] x_tables: duplicate underflow at hook 1 [ 717.364076][T31561] hsr_slave_0: left promiscuous mode [ 719.132406][T31610] __nla_validate_parse: 76 callbacks suppressed [ 719.132419][T31610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6917'. [ 720.625574][T31580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 720.838441][T31629] netlink: 'syz.4.6923': attribute type 12 has an invalid length. [ 721.105658][T31650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.303377][T31662] geneve2: entered promiscuous mode [ 721.317633][T31662] geneve2: entered allmulticast mode [ 721.443168][T31670] xt_l2tp: invalid flags combination: 8 [ 721.456309][T31670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6930'. [ 721.738473][T31683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6932'. [ 721.809192][T31688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6934'. [ 721.828728][T31688] netlink: 'syz.3.6934': attribute type 10 has an invalid length. [ 721.854065][T31688] veth0_vlan: left promiscuous mode [ 721.878615][T31688] veth0_vlan: entered promiscuous mode [ 721.893982][T31688] team0: Device veth0_vlan failed to register rx_handler [ 721.989553][T31697] netlink: 'syz.2.6937': attribute type 1 has an invalid length. [ 722.004665][T31697] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 722.149469][T31713] veth3: entered promiscuous mode [ 722.163490][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6943'. [ 722.175182][T31713] veth3: entered allmulticast mode [ 722.184495][T31715] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6943'. [ 722.211071][T31712] ipt_REJECT: TCP_RESET invalid for non-tcp [ 722.339588][T31727] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.6948'. [ 722.347840][T31731] lo: Caught tx_queue_len zero misconfig [ 722.353631][T31727] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 722.366146][T31726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6946'. [ 722.400745][T31726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6946'. [ 722.409844][T31726] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6946'. [ 722.488740][T31739] netlink: 'syz.3.6952': attribute type 10 has an invalid length. [ 722.605630][T31748] netlink: 'syz.3.6955': attribute type 58 has an invalid length. [ 722.848310][T31773] bond2: entered allmulticast mode [ 723.039729][T31786] veth0_virt_wifi: entered promiscuous mode [ 723.405385][T31818] bridge_slave_0: left allmulticast mode [ 723.411221][T31818] bridge_slave_0: left promiscuous mode [ 723.416982][T31818] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.427163][T31818] bridge_slave_1: left allmulticast mode [ 723.432897][T31818] bridge_slave_1: left promiscuous mode [ 723.438676][T31818] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.449360][T31818] bond0: (slave bond_slave_0): Releasing backup interface [ 723.464361][T31818] bond_slave_0: left allmulticast mode [ 723.473257][T31818] bond0: (slave bond_slave_1): Releasing backup interface [ 723.482916][T31818] bond_slave_1: left allmulticast mode [ 723.490685][T31818] team0: Port device team_slave_0 removed [ 723.498467][T31818] team0: Port device team_slave_1 removed [ 723.504869][T31818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.514274][T31818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.004340][T31795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.502100][T31875] __nla_validate_parse: 13 callbacks suppressed [ 724.502163][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6995'. [ 724.531467][T31873] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 724.722645][T31890] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20000 [ 724.909950][T31902] tipc: Enabled bearer , priority 0 [ 724.928659][T31908] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7005'. [ 725.030009][T31912] netlink: 288 bytes leftover after parsing attributes in process `syz.1.7005'. [ 725.472843][T31932] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.7012'. [ 725.492462][T31932] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7012'. [ 725.583780][T31944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7014'. [ 725.704514][T31944] batadv0: entered promiscuous mode [ 725.716582][T31944] macsec1: entered promiscuous mode [ 725.723499][T31944] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 725.737805][T31944] batadv0: left promiscuous mode [ 725.963729][T31971] netlink: 'syz.0.7019': attribute type 16 has an invalid length. [ 725.965297][T31964] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.987353][T31978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7022'. [ 726.000841][T31964] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.023435][T31971] netlink: 'syz.0.7019': attribute type 17 has an invalid length. [ 726.073470][T31981] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7022'. [ 726.337378][T32009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7029'. [ 726.400390][T31971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.537391][T32017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.576767][T32017] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 726.579436][T32023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7035'. [ 726.732739][T32037] Cannot find set identified by id 65534 to match [ 726.783290][T32036] bond5: entered allmulticast mode [ 727.123856][T32065] lo speed is unknown, defaulting to 1000 [ 727.208064][T32071] lo speed is unknown, defaulting to 1000 [ 727.487941][T32091] netlink: 'syz.4.7055': attribute type 8 has an invalid length. [ 727.511405][T32091] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.679793][T32106] netlink: 'syz.3.7059': attribute type 3 has an invalid length. [ 728.245956][T32146] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 728.884459][T32177] lo speed is unknown, defaulting to 1000 [ 729.210375][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 729.486979][T32221] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.587512][T32221] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.616512][T32232] __nla_validate_parse: 16 callbacks suppressed [ 729.616530][T32232] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7099'. [ 729.707097][T32236] netlink: 'syz.0.7100': attribute type 9 has an invalid length. [ 729.725940][T32221] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.847704][T32221] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.967461][T32250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7103'. [ 730.012683][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.024021][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.071831][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.082491][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.103015][T32259] geneve1: Caught tx_queue_len zero misconfig [ 730.131056][T32259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7104'. [ 730.370716][T32274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7109'. [ 730.422456][T32275] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7109'. [ 730.744698][T32301] netlink: 'syz.0.7120': attribute type 11 has an invalid length. [ 730.782367][T32301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7120'. [ 730.847481][T32314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7120'. [ 730.899826][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7123'. [ 730.950061][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7123'. [ 731.000933][T32325] xt_hashlimit: max too large, truncated to 1048576 [ 731.036291][T32314] syzkaller0: entered promiscuous mode [ 731.054851][T32314] syzkaller0: entered allmulticast mode [ 731.076741][T32329] netlink: 'syz.1.7125': attribute type 5 has an invalid length. [ 731.454414][T32348] netlink: 4312 bytes leftover after parsing attributes in process `syz.1.7132'. [ 732.169360][T32358] IPVS: length: 8 != 1152 [ 732.694958][T32343] netlink: 'syz.4.7131': attribute type 12 has an invalid length. [ 732.819630][T32365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.841474][T32365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.457150][T20119] lec:lec_start_xmit: lec0:No lecd attached [ 733.642185][T32421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 733.700315][ T2089] block nbd1: Possible stuck request ffff888026e00000: control (read@0,1024B). Runtime 150 seconds [ 733.711268][ T2089] block nbd1: Possible stuck request ffff888026e00200: control (read@1024,1024B). Runtime 150 seconds [ 733.722468][ T2089] block nbd1: Possible stuck request ffff888026e00400: control (read@2048,1024B). Runtime 150 seconds [ 733.739255][ T2089] block nbd1: Possible stuck request ffff888026e00600: control (read@3072,1024B). Runtime 150 seconds [ 733.849057][T32430] netlink: 'syz.0.7155': attribute type 1 has an invalid length. [ 733.911914][T32430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 733.952585][T32440] bond2: (slave veth3): Enslaving as an active interface with a down link [ 734.031407][T32430] netlink: 'syz.0.7155': attribute type 10 has an invalid length. [ 734.059607][T32430] bond0: (slave wlan1): Opening slave failed [ 734.189571][T32430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.544780][T32476] block nbd3: server does not support multiple connections per device. [ 734.557400][T32476] block nbd3: shutting down sockets [ 734.805028][T32501] __nla_validate_parse: 5 callbacks suppressed [ 734.805048][T32501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7168'. [ 734.986143][T32506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7171'. [ 735.419118][T32555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7176'. [ 735.534099][T32563] block nbd0: reconnected socket [ 735.543986][ T5836] block nbd0: Receive control failed (result -32) [ 735.567658][T32565] netlink: 'syz.4.7180': attribute type 4 has an invalid length. [ 735.642838][T32567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.650201][T32567] IPv6: NLM_F_CREATE should be set when creating new route [ 735.657466][T32567] IPv6: NLM_F_CREATE should be set when creating new route [ 735.758026][T32583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7185'. [ 735.802744][ T35] bond3 (unregistering): (slave ip6gre3): Releasing backup interface [ 735.854178][T32589] netlink: 'syz.2.7186': attribute type 1 has an invalid length. [ 735.987978][ T35] bond7 (unregistering): (slave geneve2): Releasing backup interface [ 736.224678][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.235366][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.246016][ T35] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 736.255948][ T35] bond0 (unregistering): Released all slaves [ 736.266946][ T35] bond1 (unregistering): Released all slaves [ 736.279569][ T35] bond2 (unregistering): Released all slaves [ 736.292236][ T35] bond3 (unregistering): Released all slaves [ 736.310477][ T35] bond4 (unregistering): Released all slaves [ 736.323282][ T35] bond5 (unregistering): Released all slaves [ 736.335788][ T35] bond6 (unregistering): Released all slaves [ 736.354115][ T35] bond7 (unregistering): Released all slaves [ 736.366479][ T35] bond8 (unregistering): Released all slaves [ 736.378889][ T35] bond9 (unregistering): Released all slaves [ 736.398669][ T35] bond10 (unregistering): (slave veth7): Releasing backup interface [ 736.407498][ T35] veth7: left promiscuous mode [ 736.412715][ T35] veth7: left allmulticast mode [ 736.418576][ T35] bond10 (unregistering): Released all slaves [ 736.465209][T32589] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 736.580210][T32596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7186'. [ 736.630257][ T35] : left promiscuous mode [ 736.718906][T32615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7190'. [ 736.729088][ T35] 9: left promiscuous mode [ 736.818361][T32621] netlink: 'syz.2.7193': attribute type 1 has an invalid length. [ 736.861545][ T35] tipc: Left network mode [ 736.913199][T32620] vlan4: entered allmulticast mode [ 736.949169][ T35] IPVS: stopping backup sync thread 6233 ... [ 736.957201][T32621] bond6: entered promiscuous mode [ 736.976625][T32621] bond6: entered allmulticast mode [ 736.985906][T32621] 8021q: adding VLAN 0 to HW filter on device bond6 [ 737.007488][T32630] netlink: 'syz.4.7196': attribute type 1 has an invalid length. [ 737.025358][T32630] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7196'. [ 737.044481][T32637] netlink: 'syz.3.7194': attribute type 83 has an invalid length. [ 737.293434][T32649] netlink: 'syz.4.7198': attribute type 4 has an invalid length. [ 737.319534][T32650] netlink: 'syz.1.7200': attribute type 1 has an invalid length. [ 737.363573][T32650] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7200'. [ 737.407502][T32653] netlink: 'syz.1.7200': attribute type 1 has an invalid length. [ 737.424901][T32653] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7200'. [ 737.489006][T32651] netlink: 'syz.3.7199': attribute type 3 has an invalid length. [ 737.893935][ T35] hsr_slave_0: left promiscuous mode [ 737.917673][ T35] hsr_slave_1: left promiscuous mode [ 737.935913][T32678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 737.956606][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.988104][T32682] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7206'. [ 738.002724][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.023575][ T35] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 738.030723][ T35] batman_adv: batadv0: Removing interface: ipvlan2 [ 738.102831][ T35] pim6reg (unregistering): left allmulticast mode [ 738.394500][T32688] netlink: 'syz.2.7210': attribute type 2 has an invalid length. [ 738.410422][T32688] netlink: 'syz.2.7210': attribute type 3 has an invalid length. [ 738.561285][T32707] xt_connbytes: Forcing CT accounting to be enabled [ 738.712621][T32717] IPv6: NLM_F_CREATE should be specified when creating new route [ 738.747409][T32717] openvswitch: netlink: Missing key (keys=40, expected=100) [ 738.757005][ T35] IPVS: stop unused estimator thread 0... [ 738.810392][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 738.818458][ C0] lec:lec_tx_timeout: lec0 [ 738.900433][T32722] netlink: 'syz.2.7219': attribute type 1 has an invalid length. [ 739.088335][T32722] 8021q: adding VLAN 0 to HW filter on device bond7 [ 739.195161][T32739] bridge0: port 3(batadv1) entered blocking state [ 739.219682][T32739] bridge0: port 3(batadv1) entered disabled state [ 739.251618][T32739] batadv1: entered allmulticast mode [ 739.269297][T32739] batadv1: entered promiscuous mode [ 739.376816][T32756] xt_hashlimit: size too large, truncated to 1048576 [ 739.654192][ T1030] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 739.663610][ T1030] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 739.944406][ T331] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 740.006773][ T335] __nla_validate_parse: 8 callbacks suppressed [ 740.006792][ T335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7244'. [ 740.181093][ T351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7248'. [ 740.203921][ T351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7248'. [ 740.312342][ T362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7250'. [ 742.513460][ T414] openvswitch: netlink: IP tunnel dst address not specified [ 742.555594][ T421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.646033][ T428] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 742.698610][ T436] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 742.882281][ T452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7276'. [ 742.924996][ T452] ipvlan2: entered allmulticast mode [ 742.932322][ T452] syz_tun: entered allmulticast mode [ 743.027149][ T462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7277'. [ 743.170092][ T462] hsr_slave_0 (unregistering): left promiscuous mode [ 743.358661][ T485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7283'. [ 743.464183][ T498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7287'. [ 743.550829][ T500] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7289'. [ 743.559814][ T500] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7289'. [ 743.642445][ T511] validate_nla: 3 callbacks suppressed [ 743.642464][ T511] netlink: 'syz.4.7291': attribute type 1 has an invalid length. [ 743.678446][ T518] netlink: 'syz.0.7292': attribute type 29 has an invalid length. [ 743.687156][ T511] netlink: 'syz.4.7291': attribute type 2 has an invalid length. [ 743.866123][ T530] xt_l2tp: missing protocol rule (udp|l2tpip) [ 744.014007][ T536] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 744.049812][ T536] bond3 (unregistering): Released all slaves [ 744.069766][ T540] IPv6: sit1: Disabled Multicast RS [ 744.079554][ T540] sit1: entered allmulticast mode [ 744.093729][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 744.105785][ T5836] [ 744.108130][ T5836] ====================================================== [ 744.115166][ T5836] WARNING: possible circular locking dependency detected [ 744.122223][ T5836] syzkaller #0 Not tainted [ 744.126428][ T555] xt_hashlimit: size too large, truncated to 1048576 [ 744.126636][ T5836] ------------------------------------------------------ [ 744.126646][ T5836] kworker/u9:7/5836 is trying to acquire lock: [ 744.146458][ T5836] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 744.157115][ T5836] [ 744.157115][ T5836] but task is already holding lock: [ 744.164484][ T5836] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 744.174855][ T5836] [ 744.174855][ T5836] which lock already depends on the new lock. [ 744.174855][ T5836] [ 744.185244][ T5836] [ 744.185244][ T5836] the existing dependency chain (in reverse order) is: [ 744.194245][ T5836] [ 744.194245][ T5836] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 744.202220][ T5836] down_write+0x96/0x200 [ 744.206968][ T5836] kernfs_add_one+0x41/0x5c0 [ 744.212072][ T5836] kernfs_create_dir_ns+0xde/0x130 [ 744.217711][ T5836] internal_create_group+0x425/0x1180 [ 744.223601][ T5836] cpuhp_invoke_callback+0x445/0x860 [ 744.229395][ T5836] cpuhp_issue_call+0x430/0x7a0 [ 744.234755][ T5836] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 744.241333][ T5836] __cpuhp_setup_state+0x3f/0x60 [ 744.246781][ T5836] do_one_initcall+0x250/0x8d0 [ 744.252056][ T5836] do_initcall_level+0x104/0x190 [ 744.257513][ T5836] do_initcalls+0x59/0xa0 [ 744.262354][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 744.268062][ T5836] kernel_init+0x1d/0x1d0 [ 744.272897][ T5836] ret_from_fork+0x51e/0xb90 [ 744.277995][ T5836] ret_from_fork_asm+0x1a/0x30 [ 744.283278][ T5836] [ 744.283278][ T5836] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 744.291082][ T5836] [ 744.291082][ T5836] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 744.298803][ T5836] cpus_read_lock+0x42/0x160 [ 744.303903][ T5836] static_key_slow_inc+0x12/0x30 [ 744.309352][ T5836] nbd_genl_reconfigure+0x132f/0x1ea0 [ 744.315230][ T5836] genl_family_rcv_msg_doit+0x22a/0x330 [ 744.321301][ T5836] genl_rcv_msg+0x61c/0x7a0 [ 744.326313][ T5836] netlink_rcv_skb+0x232/0x4b0 [ 744.332361][ T5836] genl_rcv+0x28/0x40 [ 744.336848][ T5836] netlink_unicast+0x80f/0x9b0 [ 744.342113][ T5836] netlink_sendmsg+0x813/0xb40 [ 744.347384][ T5836] ____sys_sendmsg+0x972/0x9f0 [ 744.352654][ T5836] ___sys_sendmsg+0x2a5/0x360 [ 744.357838][ T5836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.363320][ T5836] do_syscall_64+0x14d/0xf80 [ 744.368419][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.374818][ T5836] [ 744.374818][ T5836] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 744.382453][ T5836] __mutex_lock+0x19f/0x1300 [ 744.387556][ T5836] nbd_queue_rq+0x37b/0x1100 [ 744.392655][ T5836] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 744.398708][ T5836] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 744.405545][ T5836] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 744.412033][ T5836] blk_mq_run_hw_queue+0x348/0x4f0 [ 744.417649][ T5836] blk_mq_dispatch_list+0xd16/0xe10 [ 744.423354][ T5836] blk_mq_flush_plug_list+0x48d/0x570 [ 744.429239][ T5836] __blk_flush_plug+0x3ed/0x4d0 [ 744.434599][ T5836] __submit_bio+0x28d/0x580 [ 744.439612][ T5836] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 744.445751][ T5836] block_read_full_folio+0x599/0x830 [ 744.451544][ T5836] filemap_read_folio+0x137/0x3b0 [ 744.457077][ T5836] do_read_cache_folio+0x358/0x590 [ 744.462695][ T5836] read_part_sector+0xb6/0x2b0 [ 744.467962][ T5836] adfspart_check_ICS+0xa5/0xa40 [ 744.473406][ T5836] bdev_disk_changed+0x7ba/0x1550 [ 744.478934][ T5836] blkdev_get_whole+0x380/0x510 [ 744.484299][ T5836] bdev_open+0x31e/0xd30 [ 744.489048][ T5836] blkdev_open+0x470/0x610 [ 744.493970][ T5836] do_dentry_open+0x785/0x14e0 [ 744.499240][ T5836] vfs_open+0x3b/0x340 [ 744.503814][ T5836] path_openat+0x2e08/0x3860 [ 744.508907][ T5836] do_file_open+0x23e/0x4a0 [ 744.513913][ T5836] do_sys_openat2+0x113/0x200 [ 744.519124][ T5836] __x64_sys_openat+0x138/0x170 [ 744.524483][ T5836] do_syscall_64+0x14d/0xf80 [ 744.529588][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.535982][ T5836] [ 744.535982][ T5836] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 744.543177][ T5836] __mutex_lock+0x19f/0x1300 [ 744.548281][ T5836] nbd_queue_rq+0xc6/0x1100 [ 744.553294][ T5836] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 744.559351][ T5836] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 744.566193][ T5836] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 744.572683][ T5836] blk_mq_run_hw_queue+0x348/0x4f0 [ 744.578305][ T5836] blk_mq_dispatch_list+0xd16/0xe10 [ 744.584011][ T5836] blk_mq_flush_plug_list+0x48d/0x570 [ 744.589914][ T5836] __blk_flush_plug+0x3ed/0x4d0 [ 744.595274][ T5836] __submit_bio+0x28d/0x580 [ 744.600377][ T5836] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 744.606518][ T5836] block_read_full_folio+0x599/0x830 [ 744.612319][ T5836] filemap_read_folio+0x137/0x3b0 [ 744.617854][ T5836] do_read_cache_folio+0x358/0x590 [ 744.623498][ T5836] read_part_sector+0xb6/0x2b0 [ 744.628774][ T5836] adfspart_check_ICS+0xa5/0xa40 [ 744.634224][ T5836] bdev_disk_changed+0x7ba/0x1550 [ 744.639756][ T5836] blkdev_get_whole+0x380/0x510 [ 744.645124][ T5836] bdev_open+0x31e/0xd30 [ 744.649875][ T5836] blkdev_open+0x470/0x610 [ 744.654798][ T5836] do_dentry_open+0x785/0x14e0 [ 744.660071][ T5836] vfs_open+0x3b/0x340 [ 744.664652][ T5836] path_openat+0x2e08/0x3860 [ 744.669752][ T5836] do_file_open+0x23e/0x4a0 [ 744.674770][ T5836] do_sys_openat2+0x113/0x200 [ 744.679976][ T5836] __x64_sys_openat+0x138/0x170 [ 744.685352][ T5836] do_syscall_64+0x14d/0xf80 [ 744.690463][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.696881][ T5836] [ 744.696881][ T5836] -> #4 (set->srcu){.+.+}-{0:0}: [ 744.704004][ T5836] __synchronize_srcu+0xca/0x300 [ 744.709467][ T5836] elevator_switch+0x1e8/0x7a0 [ 744.714747][ T5836] elevator_change+0x2cc/0x450 [ 744.720459][ T5836] elevator_set_default+0x36c/0x430 [ 744.726180][ T5836] blk_register_queue+0x366/0x430 [ 744.731721][ T5836] __add_disk+0x677/0xd50 [ 744.736563][ T5836] add_disk_fwnode+0xfb/0x480 [ 744.741754][ T5836] nbd_dev_add+0x72c/0xb50 [ 744.746677][ T5836] nbd_init+0x168/0x1f0 [ 744.751342][ T5836] do_one_initcall+0x250/0x8d0 [ 744.756618][ T5836] do_initcall_level+0x104/0x190 [ 744.762069][ T5836] do_initcalls+0x59/0xa0 [ 744.766906][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 744.772610][ T5836] kernel_init+0x1d/0x1d0 [ 744.777443][ T5836] ret_from_fork+0x51e/0xb90 [ 744.782547][ T5836] ret_from_fork_asm+0x1a/0x30 [ 744.787826][ T5836] [ 744.787826][ T5836] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 744.795631][ T5836] __mutex_lock+0x19f/0x1300 [ 744.800733][ T5836] elevator_change+0x1b3/0x450 [ 744.806090][ T5836] elevator_set_none+0xb5/0x140 [ 744.811448][ T5836] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 744.817772][ T5836] nbd_start_device+0x17f/0xb10 [ 744.823144][ T5836] nbd_genl_connect+0x165b/0x1cf0 [ 744.828673][ T5836] genl_family_rcv_msg_doit+0x22a/0x330 [ 744.834729][ T5836] genl_rcv_msg+0x61c/0x7a0 [ 744.839742][ T5836] netlink_rcv_skb+0x232/0x4b0 [ 744.845013][ T5836] genl_rcv+0x28/0x40 [ 744.849511][ T5836] netlink_unicast+0x80f/0x9b0 [ 744.854779][ T5836] netlink_sendmsg+0x813/0xb40 [ 744.860050][ T5836] ____sys_sendmsg+0x972/0x9f0 [ 744.865322][ T5836] ___sys_sendmsg+0x2a5/0x360 [ 744.870514][ T5836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.875961][ T5836] do_syscall_64+0x14d/0xf80 [ 744.881061][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.887469][ T5836] [ 744.887469][ T5836] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 744.896070][ T5836] blk_alloc_queue+0x546/0x680 [ 744.901350][ T5836] __blk_mq_alloc_disk+0x197/0x390 [ 744.906970][ T5836] nbd_dev_add+0x499/0xb50 [ 744.911894][ T5836] nbd_init+0x168/0x1f0 [ 744.916572][ T5836] do_one_initcall+0x250/0x8d0 [ 744.921848][ T5836] do_initcall_level+0x104/0x190 [ 744.927291][ T5836] do_initcalls+0x59/0xa0 [ 744.932140][ T5836] kernel_init_freeable+0x2a6/0x3e0 [ 744.937847][ T5836] kernel_init+0x1d/0x1d0 [ 744.942686][ T5836] ret_from_fork+0x51e/0xb90 [ 744.948309][ T5836] ret_from_fork_asm+0x1a/0x30 [ 744.953582][ T5836] [ 744.953582][ T5836] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 744.960779][ T5836] fs_reclaim_acquire+0x71/0x100 [ 744.966230][ T5836] kmem_cache_alloc_noprof+0x40/0x650 [ 744.972104][ T5836] __kernfs_iattrs+0xdf/0x340 [ 744.977292][ T5836] kernfs_iop_setattr+0xea/0x3f0 [ 744.982742][ T5836] notify_change+0xc1a/0xf40 [ 744.987841][ T5836] do_truncate+0x1c2/0x250 [ 744.992768][ T5836] path_openat+0x2f89/0x3860 [ 744.997865][ T5836] do_file_open+0x23e/0x4a0 [ 745.002878][ T5836] do_sys_openat2+0x113/0x200 [ 745.008071][ T5836] __x64_sys_openat+0x138/0x170 [ 745.013432][ T5836] do_syscall_64+0x14d/0xf80 [ 745.018539][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.024936][ T5836] [ 745.024936][ T5836] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 745.033434][ T5836] __lock_acquire+0x15a5/0x2cf0 [ 745.038809][ T5836] lock_acquire+0xf0/0x2e0 [ 745.043746][ T5836] down_write+0x96/0x200 [ 745.048497][ T5836] kernfs_unlink_sibling+0x71/0x180 [ 745.054205][ T5836] __kernfs_remove+0x3e7/0x660 [ 745.059482][ T5836] kernfs_remove_by_name_ns+0xaf/0x130 [ 745.065457][ T5836] sysfs_unmerge_group+0xd4/0x140 [ 745.071003][ T5836] dpm_sysfs_remove+0x76/0xd0 [ 745.076210][ T5836] device_del+0x250/0x8f0 [ 745.081052][ T5836] device_unregister+0x21/0xf0 [ 745.086328][ T5836] hci_conn_del+0xc36/0x1230 [ 745.091425][ T5836] hci_abort_conn_sync+0xdd0/0x1190 [ 745.097137][ T5836] hci_cmd_sync_work+0x213/0x400 [ 745.102590][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 745.108656][ T5836] worker_thread+0xa53/0xfc0 [ 745.113761][ T5836] kthread+0x388/0x470 [ 745.118348][ T5836] ret_from_fork+0x51e/0xb90 [ 745.123459][ T5836] ret_from_fork_asm+0x1a/0x30 [ 745.128747][ T5836] [ 745.128747][ T5836] other info that might help us debug this: [ 745.128747][ T5836] [ 745.138964][ T5836] Chain exists of: [ 745.138964][ T5836] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 745.138964][ T5836] [ 745.153379][ T5836] Possible unsafe locking scenario: [ 745.153379][ T5836] [ 745.160814][ T5836] CPU0 CPU1 [ 745.166172][ T5836] ---- ---- [ 745.171528][ T5836] lock(&root->kernfs_rwsem); [ 745.176284][ T5836] lock(cpuhp_state_mutex); [ 745.183380][ T5836] lock(&root->kernfs_rwsem); [ 745.190649][ T5836] lock(&root->kernfs_iattr_rwsem); [ 745.195935][ T5836] [ 745.195935][ T5836] *** DEADLOCK *** [ 745.195935][ T5836] [ 745.204068][ T5836] 5 locks held by kworker/u9:7/5836: [ 745.209343][ T5836] #0: ffff88807c37c148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 745.220130][ T5836] #1: ffffc90003fe7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 745.232906][ T5836] #2: ffff8880353b8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 745.242729][ T5836] #3: ffff8880353b80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 745.252456][ T5836] #4: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 745.263140][ T5836] [ 745.263140][ T5836] stack backtrace: [ 745.269014][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 745.269030][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 745.269040][ T5836] Workqueue: hci3 hci_cmd_sync_work [ 745.269061][ T5836] Call Trace: [ 745.269069][ T5836] [ 745.269076][ T5836] dump_stack_lvl+0xe8/0x150 [ 745.269096][ T5836] print_circular_bug+0x2e1/0x300 [ 745.269118][ T5836] check_noncircular+0x12e/0x150 [ 745.269140][ T5836] __lock_acquire+0x15a5/0x2cf0 [ 745.269159][ T5836] ? __lock_acquire+0x6b5/0x2cf0 [ 745.269180][ T5836] lock_acquire+0xf0/0x2e0 [ 745.269196][ T5836] ? kernfs_unlink_sibling+0x71/0x180 [ 745.269214][ T5836] down_write+0x96/0x200 [ 745.269227][ T5836] ? kernfs_unlink_sibling+0x71/0x180 [ 745.269241][ T5836] ? __pfx_down_write+0x10/0x10 [ 745.269258][ T5836] ? kernfs_root+0x1c/0x230 [ 745.269277][ T5836] ? kernfs_root+0x1c/0x230 [ 745.269295][ T5836] ? kernfs_root+0x1c/0x230 [ 745.269313][ T5836] ? kernfs_root+0x1ea/0x230 [ 745.269332][ T5836] kernfs_unlink_sibling+0x71/0x180 [ 745.269347][ T5836] __kernfs_remove+0x3e7/0x660 [ 745.269362][ T5836] kernfs_remove_by_name_ns+0xaf/0x130 [ 745.269377][ T5836] sysfs_unmerge_group+0xd4/0x140 [ 745.269398][ T5836] dpm_sysfs_remove+0x76/0xd0 [ 745.269419][ T5836] device_del+0x250/0x8f0 [ 745.269437][ T5836] ? klist_iter_exit+0xc1/0x100 [ 745.269458][ T5836] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 745.269473][ T5836] ? __pfx_device_del+0x10/0x10 [ 745.269494][ T5836] device_unregister+0x21/0xf0 [ 745.269513][ T5836] hci_conn_del+0xc36/0x1230 [ 745.269530][ T5836] ? hci_abort_conn_sync+0xa7b/0x1190 [ 745.269544][ T5836] hci_abort_conn_sync+0xdd0/0x1190 [ 745.269560][ T5836] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 745.269576][ T5836] ? abort_conn_sync+0x26/0x210 [ 745.269593][ T5836] ? abort_conn_sync+0x26/0x210 [ 745.269609][ T5836] ? abort_conn_sync+0x19c/0x210 [ 745.269624][ T5836] ? __pfx_abort_conn_sync+0x10/0x10 [ 745.269641][ T5836] hci_cmd_sync_work+0x213/0x400 [ 745.269660][ T5836] ? process_scheduled_works+0xa8d/0x18c0 [ 745.269678][ T5836] process_scheduled_works+0xb6e/0x18c0 [ 745.269704][ T5836] ? __pfx_process_scheduled_works+0x10/0x10 [ 745.269724][ T5836] ? assign_work+0x3d5/0x5e0 [ 745.269741][ T5836] worker_thread+0xa53/0xfc0 [ 745.269766][ T5836] kthread+0x388/0x470 [ 745.269780][ T5836] ? __pfx_worker_thread+0x10/0x10 [ 745.269796][ T5836] ? __pfx_kthread+0x10/0x10 [ 745.269809][ T5836] ret_from_fork+0x51e/0xb90 [ 745.269827][ T5836] ? __pfx_ret_from_fork+0x10/0x10 [ 745.269843][ T5836] ? __switch_to+0xc7d/0x1450 [ 745.269860][ T5836] ? __pfx_kthread+0x10/0x10 [ 745.269872][ T5836] ret_from_fork_asm+0x1a/0x30 [ 745.269896][ T5836] [ 747.131790][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.138925][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 747.145078][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 752.810675][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 752.818775][ C0] lec:lec_tx_timeout: lec0