last executing test programs: 6.42329395s ago: executing program 3 (id=3731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x9f9a5409bbeb433f}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r12, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 4.984979582s ago: executing program 0 (id=3736): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x188, 0x2c0, 0x390, 0x0, 0x390, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x5, 0x3, 0x0, 0x0, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x43}, [0xffffff00, 0x0, 0xffffff], [0x0, 0xffffffff, 0xff000000], [], 0x24, 0x810}}, @common=@inet=@ecn={{0x28}, {0x70, 0x20, 0xf1, 0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0x0, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xffffff00], 'bridge0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x4}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@frag={{0x30}, {[0x800, 0x3], 0x1000, 0x30}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x3}, {0x0, 0x2}, {0x0, 0x4}, 0x300, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0x9e5cedeefe11c265, 0xffffff00], 'bridge0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x3, 0x4, 0x45}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x24}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0x0, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x18}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x6, 0x1, 0x6}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) unshare(0x22020600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4097, 0x1001}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x8004, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd, 0xff, 0x48000000}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6, 0x0, 0x0, 0x5f9}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc, 0x0, 0x400001}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bind$vsock_stream(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x601, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x10, 0xc, "caace04ae165a4cec3a9f385"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xb, 0x0, 0x1}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0xec, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x22c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x7}, {0x6, 0xfc, 0xa}]}) 2.812297396s ago: executing program 3 (id=3737): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000340)={0x9, 0x30, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}, 0x5}], 0x1, 0x2000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, 0x0, &(0x7f0000000180)) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="3babe6fe51c8606ad3b8f41b40799c3982f4cd776cb4e2ae4a29be7d14ae30c37c0ed35f02591b5bd1ded065809ada074bf231012b0a8229e609cc9db04054d9f0bfe6eb45838527d57384a887395657bdaad8629c995399f26314c30139be42548b3e2158c67909405a21e6cdd527439fdfeea4dac6a811dc6287baf496b294f6fbbf146ca5b58ab5dd2622df4c53f8f58b998797d992b6801706463db54c8a30d31d", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x40090) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)=0x1, 0x12) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001008000000000000fcdb4a768ed17e169220744873ad41de8b81df2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008000f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r9, 0x2000) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$can_bcm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r12, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2.713876699s ago: executing program 1 (id=3739): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '$\xfa\xe2\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4300030}, 0xc, &(0x7f0000000380)={&(0x7f0000000600)={0x24c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1053af1e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1453}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, 0xd}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xbf, 0x3, "fd7e60b3f07fd1e9b3d1ef639ba9a9c0749183d8ae857d6dbdd278a263481f0a4db7e1c38635a0cb0c4c9f289659576b202fda7f408c84ddded22de3b35b45444c7b6a7f8af1b4f691c358988700d2551f6031f8ce921cc01f0f0e807166d1faba5eb97f33a81d6e135d1ce79935aecf70e9a6a9d8c4ae34bf6bcd29a7f8e0a6120c6d653a4f87446dbc6fd839a19e46315c6b45cb3de2cd0961e214f568eda6cd8eec0eeb0a21326668db8d00ffeec24cbd172b9920a098156e01"}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "d55b795f9debf04de201a9dc7a2b1373cb2d8e2f94bf4531d5023ba6bc5a8aea2c93f79e6e7a3dbce0ead075142933f511c36ffc6c2ea901"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0xdac0ca1acad562a6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r2) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0x48}}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b705000008000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4801) 2.486685027s ago: executing program 3 (id=3742): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r5, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0xc4, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x0, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x1b, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='NLBL_UNLBL\x00', 0x20000, &(0x7f0000000040)={@align, {0x81, 0x51d6, 0x4, 0xffffffffffff7c7f}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x6]}, 0x2, 0x17, &(0x7f0000000100)=""/23}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000a3e05825ab693700", @ANYRES16=r6, @ANYBLOB="37effdffffff0000000005000000"], 0x14}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 2.375785123s ago: executing program 2 (id=3745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000440)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000000), 0x0, 0x20040001) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) (async) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x12141, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001a80), 0x2, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) socket(0x2b, 0x1, 0x1) (async) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000580)={0x11, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x5, 0x4) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x5, 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r6, &(0x7f00000001c0)="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", 0x1000, 0x20000800, &(0x7f00000011c0)={0x2, 0x0, @multicast2, 0x3}, 0x10) (async) sendto$l2tp(r6, &(0x7f00000001c0)="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", 0x1000, 0x20000800, &(0x7f00000011c0)={0x2, 0x0, @multicast2, 0x3}, 0x10) 1.860554344s ago: executing program 2 (id=3748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0xd, 0xfffffffffffffc01, 0x1, 0x8, 0x2, 0xbdda, 0xfffffffffffffffe, 0x2}, &(0x7f0000000140)={0x3, 0x1, 0x9, 0x7fffffff, 0x3, 0x0, 0x892, 0x1}, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000980)={{r0, &(0x7f0000000000)='-\x00', 0x325c0, &(0x7f0000000040)={@_ha_fsid={[0x2, 0xb]}, {0x8, 0x86b, 0x0, 0x6}}, 0x7a0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x10000}, 0x7, &(0x7f0000000880)=[{0x2, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="52da914e04b25472ca4bdab22382024d20acf0cd18e6ed7988eb85a12d1518c5ae61f9c6d71ebf2304217e22a5a58494af208080d5e2f2a5024d3d8a9f79073c2264663119fde954c225fc2f65416f7f8152deaee562888a5165a8525533248d4742bbeb571ae9cd13501bdad89c8c83b1ddd5a675b601d7658d830a207588856dba0ac94b834b2903c2b6b269dc969a74e3810b0e5b3f52bdc6f48338f4eb382584c3d56f2815bec44d1acde156a1f6d902d15f7bac0da23cad8430a1957039244788cf312f30f7cb1412c0d06a73a6302a6edd733094", 0xd7, 0x1}, {0x3, 0x7, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="5b7c146013eec5e37534b465e09cee1e53b13bdbe34bc96b99469d33a2dbac7c74ae206c4ad90e00a8bc0826b93c11341b5b943b9cdaab641a797d5308296f5bee7eb6f3ab5db608b0cbce54ecd3ea8f64671bdec69e06fbc547383dc011598058f03a665addbd7151533f2b927bd10a79836381872e3dd347dd9c455af393d9a3ee3442613d69c71cf6f905945720b190ff3d5dd579850151852b5d593c427aedb6a25ab8662d2bec0c04f8223fea95d488c4d2437f76ba", 0xb8, 0x12}, {0x3, 0x3, &(0x7f00000003c0)='\x00', &(0x7f0000000400)="2a2327979c4dced25d7af6adb1cde17a8c3747628e2e528709bd894e2bb1faa5b9010a3aa565955edfdefb98aece865a19", 0x31, 0x10}, {0x3, 0x6, &(0x7f0000000440)='\x00', &(0x7f00000004c0)="71b7e8143d394ca0568c44bd3bcd2990f14edbd36253517b48f03c08edad530602a3d6e7aab73c32e964e1c168dd2d1e8f97357603753512b77f382162431e8de7a7fa0f46f3b37cbf365d26e41924405ba8e690ad1f52ae7f5637301198633411a7f4ecbbcca8094c0376c1", 0x6c, 0x20}, {0x3, 0x8000, &(0x7f0000000540)='\x00', &(0x7f0000000580)="8a463e9c9e892806413111d420507b7cd23fdc24a465955fa7e11fcfa0440d2952271b724568a1c03d74826d275acdd0dc6340aa77f7692bbe771a8596a54a4940", 0x41, 0x20}, {0x1, 0xf, &(0x7f00000006c0)='*]:,*\'\x8b-])\x00', &(0x7f0000000700)="3f1d49f1a214ad8d0804678eb7405fbbdc9c3dd0339421df76f924872dd92d75f17118c17f0a045a1f668e09c1a77b94dd7e75e017067ce40ab6c38666d5199a503563fadc36d3b609998924416021acfb7a09fc070dfe0cd729b0739b3ec2d33777f19684c9db768becf51d89da0cbe14d8e232143ec5c9cc50c5552a30fd4014b7d88e8338241965d1a1d73c13dbcd7a9073", 0x93}, {0x1, 0x8, &(0x7f00000007c0)='syzkaller\x00', &(0x7f0000000800)="a94df09bbe5676411a771ae5b5be15b7981b862a7d027f7aa6664704c139ab3ac0d703f55697a117b90086046b8b43cfacac5de7d30e116636dfe849d29a666c003a9be67d55ac148ea5152b7fab79e8a8f4879218cbdcf98c45fab7cd7bd5026d5018f73f4b6c8afa34", 0x6a}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 1.742776664s ago: executing program 1 (id=3749): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000000000c00bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000100001b6a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3efd9af115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b0600000016cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d394d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d2889ac04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc30000000000000000c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20ba82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818709e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec527c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f128ddfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac45f0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38509582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c6d6e7c9d49db1b2a6082bb0e8b013bd1ee3612cd43cd2a3cb83754bb34081599ce2a33600d4120353e477237c1dcf66b6a353aa1832d60179da56951d2b77e91c3e73fc7285d1ed2722a30c10f9cfd4a20ae6dc32f5d90a9290b393daff597ad7d5d3e5a73b25002ad928c92bd3d1be2444ff00f6b7719f06ddca6b48db95a746032d5ca0d4c460bb30a43ed735504192cb6ce50eed19a552101cb7bbf82c4924e2a862bd51ebaeb8e15e5428a87b56b81eff64a75baf33ae2b67b55a724cbbe788a8d8ece234a81e90186aca593260d559c0cb2f2be882288db291b231b8d"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="a501000001000000040108"], 0x18) sendmmsg$inet6(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000009500007b00000000850000001300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 1.640226371s ago: executing program 2 (id=3750): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x8, @private0, 0xfffffff7}}}, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x1f8, 0x1f8, 0x1f8, 0x2e0, 0xd0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000000), {[{{@ipv6={@local, @private0, [0xff, 0xff, 0xffffffff, 0x7f7fff00], [0xffffffff, 0xffffff, 0xff, 0xffffff00], 'nr0\x00', 'geneve0\x00', {0xff}, {}, 0xb5, 0x6, 0x2}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x1}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x9], 0x6, 0x0, 0x1}}, @common=@mh={{0x28}, {"0684", 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xffffffff, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0x0, 0xffffffff], 'ip_vti0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2c, 0x40, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfac1, 0x100, @ipv4=@private=0xa010100, 0x4e21}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'team0\x00', 'bond0\x00', {0xff}, {}, 0x1, 0x1c, 0x2, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@frag={{0x30}, {[0x4, 0x6], 0x7, 0x20, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xf, 0x2b, 0x8}}}, {{@ipv6={@private0, @empty, [0x0, 0xff, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffff00], 'dvmrp0\x00', 'geneve1\x00', {}, {}, 0x67, 0x2, 0x3, 0x4c}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x5, 0x3a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) 1.500064843s ago: executing program 4 (id=3752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x12) (async) r1 = socket$netlink(0x10, 0x3, 0x12) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, 0x0, 0x400c000) 1.443571617s ago: executing program 0 (id=3753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/51, 0x33}], 0x1}, 0xfca}], 0x1, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x9e, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) 1.442848286s ago: executing program 3 (id=3754): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x400000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.372240564s ago: executing program 1 (id=3755): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000240)="e3864126f6442b7b0945", 0xa}], 0x1}, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) tee(r2, r3, 0xe0, 0xe) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000140)={0x1d, r7}, 0x10) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x17b4}, 0xe) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(r8, 0xca289435, &(0x7f0000000840)={0x2, 0x7ff, @start={r9, 0x0, "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", "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"}, [0x0, 0x400, 0xb, 0x58b, 0xff, 0x3, 0x1, 0x5, 0x0, 0x137c, 0x4, 0x95, 0xa0000000000000, 0x0, 0x1000000000000, 0x8, 0x7fff, 0x100, 0x4, 0x2, 0xdb, 0x5, 0x1, 0x80000001, 0x3, 0x5, 0x7, 0x5, 0xf245, 0xdda, 0x200, 0x1, 0x96, 0x7, 0x81, 0x8, 0xff, 0x1, 0x2, 0x6, 0x0, 0x7fff, 0x3, 0x2, 0x2, 0x7, 0x9b2, 0xfc, 0x10001, 0x8, 0x3, 0xc3a0, 0x5, 0x4, 0x2b5e, 0xcc8, 0x1, 0x3, 0x1, 0xe, 0x3ff, 0x40, 0x1, 0x4]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, r12, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) r13 = socket(0xa, 0x3, 0x85) getsockopt$inet_sctp_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000002c0)=r14, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 1.276623485s ago: executing program 0 (id=3756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000000bfa1000000000000070100000400ffffb702000008000000b703000002000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x10, 0x10, 0x2, 0x5, {{0x11, 0x4, 0x0, 0x1, 0x44, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x18, 0x3, [{0x2, 0x12, "de02298f967fbf908fbc59b0ad2d812c"}]}, @timestamp={0x44, 0x14, 0xf5, 0x0, 0x9, [0x8d9, 0x1, 0x4, 0x7]}]}}}}}) bind$packet(r0, &(0x7f00000004c0)={0x11, 0x16, r3, 0x1, 0x90, 0x6, @local}, 0x14) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000028c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000002640)=""/223, 0xdf}, {&(0x7f0000002740)=""/144, 0x90}], 0x5}}], 0x1, 0x161, &(0x7f0000002900)={r5, r6+60000000}) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@mcast1}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000140)=0xe8) (async) bind$rds(r0, &(0x7f0000000500)={0x2, 0x4e24, @broadcast}, 0x10) 1.219438536s ago: executing program 4 (id=3757): unshare(0x64000600) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000000000000080000000066a6c3477e5ecd1d9eef448fff09b53bd5fae86840725fc3b8a42258e8c110ca224e088dec6131f1250c48aebc8d7f94e6dda80af7416ed9", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x4000000) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) (async) recvmmsg(r4, &(0x7f0000002440), 0x0, 0x40000001, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom$l2tp6(r1, 0x0, 0x0, 0x61, 0x0, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000540)="00000000000000008a7e84d67aa8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000340)={{r1, &(0x7f0000000000)='hash\x00', 0x400000, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x4]}, {0xa06, 0x3, 0xfffffeff}}, 0x20000, &(0x7f0000000200), &(0x7f0000000240)=0x1665}, {[0x8000, 0x8001, 0x3, 0x5]}, 0x80000001, 0xa, &(0x7f0000000280)=""/10}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800040000000000000000050000070c000f8008000340000000080600124000020000000000000078648f9041dfe34962395afb9332cf46"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c811) (async) r9 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x0, 0xe02, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8081) sendmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048850}, 0x6004094) socket$nl_route(0x10, 0x3, 0x0) 955.346646ms ago: executing program 3 (id=3758): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="250016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 906.834735ms ago: executing program 0 (id=3759): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xf3, &(0x7f0000000940)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@generic={0x9, "170ded76acb2f16834bc363a61ea4869813c305c7e2372e03686fcd7d95ee1bac1cc10487d6e427ebd773f789c5f79c7511e8598e5dd597f4d221ef809774e8dc69eebec3ee6243242249046df5e9710738ca9d3d29f0c600e27df4363311cba889ff41023606a6bef2019d2f8ea2d2a1fa25c7ae28ab490ed8c49ac0d6d13f5901b3ed357589c9f51a3896d91bd4d884fd26c83e34e20dc7b581d4264ba8b86bb0cbd941b1d1650091ec06e18b4a16e742bc68254b3946a3737ebe443017a8ee4388cb8ac95ae6466a92f78bd6acf4f875cd1dd8d740931414c9255bc07165127"}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf2502000000140001800800030004000000080003000000000004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x68, r7, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff2547}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 675.041759ms ago: executing program 4 (id=3760): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a8800", 0x26) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010"], 0x10}], 0x1}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="059cf299cc85becc33b61ae89cf9fcd7f9ffb7fd615f4a8fceb3b835164d38e39de8e613d6c3bdd32f4fc2a6cc3907a888976e1212ea5940a101e79efdd22968418a8a8235610773d5", 0x49}, {&(0x7f0000000180)="610d5c2ff91a93b808e69bea300a3782ef7880a55b495addc967e02a83023fd9fc4e81568fecb9acf58e1cdae06468c1347708a0b5bf53ad9a7bc170f1430d89f807f251b12a80476a0938029b050bca33d56ef71638caff93767cf264dfda0d88437165", 0x64}, {&(0x7f0000000200)="ad4ce2d064de003705c8a47ad99dafce8c985ae6c020fb82b41f4c38509c0715f500760540535f30b553241f1466b4ddfafa3931527f05dbfad9732939ce0f88435dc92c4582b1c0cc52b78d41265cf8f5c5f0222ddafb5b630c1bb7c7ae446b89b5fcca3dcc98788999f39ffce8316e25034011a0e649daf1336b9c3f7b77e9906c373bab26fe301d7bcd620be899f043f7896b782176a1f6377b97c3edf4fc76bd7815404c0bcbfda2d30fc0e39b6140dfb9444e91523f1ca10e53c18cb85d7eb07c1b20310af973", 0xc9}], 0x3}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="a80002803800"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 674.357204ms ago: executing program 2 (id=3761): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) close(r1) listen(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}], 0x18, 0x8045}], 0x1, 0x0) r3 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b160000000000000000020000085400048018000180080001006f7366000c000280080001400000000438000180080001006e6174002c000280080001400000000008000740000000000800034000000514080002400000000208000440000000150900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="e7fe91ff", @ANYRES16=r6, @ANYBLOB="000128bd7000fbdbdf250a0000000c0099000700000028000000640050800e000400576fe2b6dda4baed08f300000500020004000000100004002911d6a880053018974b71a4110001009890c68efe52c5b79e83575cde0000002400088004000200040001000400020004000200040002000400020004000200040001000800090001ac0f0009000700a87358ea60000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10, 0x0}, 0x0) close(0x3) 501.309207ms ago: executing program 1 (id=3762): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = getpid() r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r1, 0x25, 0xe, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=[0xdb55, 0x5, 0x6, 0x1], &(0x7f0000000140)=[0x3, 0x1, 0x2], 0x1, 0x4, 0x0, r2}}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x34, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@fallback=r3, r0, 0x0, 0x8, 0x0, @void, @value=r0, @void, @void, r5}, 0x20) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000840)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000940)=0xe8) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)="ef56db9319fd89784aad95656aa0e9ac69d096a37df62ba843cd5646220021fa7172c3a24bfa1ddb594a115f45253bffc54ff3", 0x33}, {&(0x7f0000000400)="3511737da9122120e227573acab181de2ab4c817f201ddd042bf0a5baf4eb92b0d220ce765b9535ddce705681f3a89b3fa11687cc90733cfbdd476bada6445171505a47448c4a4322b04dd922e2a431a0fa2f4e6d3f4b113ea9a88002d95e5fa566a68cb33d60faf6437917b96d002156ffc2dd240b97ec13ea973c26160b8ba6a6dd52f84398c759a8db3825580328ba58a9131703055a5cc93e1f7211a9e0a167c005af2084861840915767f1820045a6657f54917e15fc1a4f9fba64b9ba8e471b14239141419a83752ba1acc4015727879d8e34e5c1d914bf3df1346c294c6c93a32b6eecf76c3", 0xe9}, {&(0x7f0000000500)="96995778450e5e4adace35b386a16271c70ae86d72317cc3b1301c7d66e5a42f6f039d4afdcf97edfa9385d14ced20392e9a44dc6c315be4cbc8f2add3019a65f26c3321183a119fdb57f308e62170de47b7513592fba10c0b0324bea4f0e0f6419d5790e39bbd00197e4320fc9eefa390d2d002fd7db03680c61789773672bbb06fdd185f0b4c44a78e88047855fd1672a2b265ebfb8216a7", 0x99}, {&(0x7f00000005c0)="e31223b34b65760393ed6baeebd884aa2956eb4e61b752be2825c1ec3f708d5385ad9d69b0cd4243d88b41dd68658ea9f8c1f467850feb5b1d7bfae575b7bc88ac92aa4908ff9e6809d57b", 0x4b}, {&(0x7f0000000640)="160f030f3958ac8d16b0b43cfe451a9b678af0605dda766003ea847752afabaf4576e49e8136217422a30fa18c2fed46a7cf79128d3f233e06d00cf64dbac25031d209e48108fcb71992834848cdb0b08ac1043c44fbcc4897ce54b7dff1493668dc593cd230086f625fca5b0768e6fd5714035893338192b16e10ec45b36b50295fbd693fd4a1f0868ca2561867123a9e254854d8ba5411b1fbb7c595a2375e9659488191210a6a9aea3a6bf3b1fefbec65eb7ebd1c51fc55ad7753774c1edbdfbf1f59cdfe17917c8c093761b3738f0aafae07e81a79a4d262611c0b94e1f08378ed0eaecbfe96c798ad40", 0xec}], 0x5, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [r4, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xffffffffffffffff}}}], 0x40, 0x41}, 0x4000000) r8 = openat$cgroup_ro(r0, &(0x7f0000000a00)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000b40)={r4, &(0x7f0000000a40)='{\x00', 0x20003, &(0x7f0000000a80)={@_ha_fsid={[0xd, 0xf8]}, {0x3, 0x8000, 0x3, 0xfffffffffffffffb}}, 0xff, &(0x7f0000000ac0), &(0x7f0000000b00)=0x6}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000b80)={'pim6reg0\x00', @broadcast}) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000cc0)={r9, &(0x7f0000000bc0)='$\x00', 0x400000, &(0x7f0000000c00)={@align=0x8001, {0x9, 0x800, 0x52653d52, 0x7e8c}}, 0xbda, &(0x7f0000000c40), &(0x7f0000000c80)=0x1}) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000d00)=r8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000d40)={0x0, 0xfffffffffffffffe, 0x2}) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000d80)={0x2, 'veth1_vlan\x00', 0x4}, 0x18) r12 = openat$cgroup_pressure(r0, &(0x7f0000000dc0)='io.pressure\x00', 0x2, 0x0) writev(r12, &(0x7f00000010c0)=[{&(0x7f0000000e00)="09413bc78397be7c6ad392b8457961d4ea3f9645258f92ca77d7f7ddec03f748f9589428deea2af144a5ec9944390b1aed487148155ad774c66a9566f1d1bdcca407f3c38559102658635a50ed6842d60d04f397d30665a62e14f0f3f09d560f2bb4f1cc6107072b198fde97851142d4efcbcbd278a157edefd4f2fe21fbc4b53f2e4ab5d0dcf85b2759ff8a9f465e9575b48aeaf253c37c4081d4c8d5c6e89297ac84faf0a1680c05fbf2ab82986464cd267fd129605eb6d954ea32ecaccd8558f50080e2fdd593f0", 0xc9}, {&(0x7f0000000f00)="188dfe5eed91149d627bb1d48e86399f14cf0584fc1e15b2bf398093c8fe9a213694f5e1473eec0007fd8871512965d7ee33fccfc6bd17a5d69784257bd28c2a43a728c63677b7ac08b6b590d4eac7a7235fe0e7a62ff78a56ef108cdf78263a566a0c5ee0cf9e62ce485e9dff7830aa812f7bc953741748b2f0653313623ed1337ddcb9edd0230091a1660942b0a5e92c4bffd2c0a3e40c", 0x98}, {&(0x7f0000000fc0)="067c97de50da970b7fb60deb0d7d3fbd6df474ce4797a9b1d083e6af53a008e6b8879eac3038a556fef8522ae2c1baf060e92eae9978bd73723fd61fb3f65caea763c40f135488eb359e66b576fec327c4690acf94dd6a417cc55075c16bad0f5e07e8f059544cd395bdd327b730e94c743e6890c940e86e10b179ed0d185d2a119eedc0154e3a73ff09fb22512f4d815f34782b850e46eacf423e898d40640adf43f29a869c3c293e5db79465cd629f0d2b6f19b8c7858825f9e456bb70cf9670cbde37feff67058949e1d93e285f7b84ed798960d8ed6310abec5ca1b920457d5a15ad5ad172f039187de8fd2f21daa9e75e8c2abeb446e5fb2998", 0xfc}], 0x3) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000001140)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x10, "b17321d5ddc749"}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000002140)={r13, 0x7}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003240)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000003300)={0x1e, 0x7, &(0x7f0000003140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xf}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000003180)='syzkaller\x00', 0x6, 0x58, &(0x7f00000031c0)=""/88, 0x41000, 0x22, '\x00', r14, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000003280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000032c0)={0x0, 0x8, 0x7250, 0x267}, 0x10, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x53, &(0x7f00000033c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000003400)=0x28) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000003440), 0x4) write$cgroup_type(r9, &(0x7f0000003480), 0x9) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r15, &(0x7f0000003600)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x12, 0x15}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x400d) 396.325986ms ago: executing program 3 (id=3763): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x0, 0xeb, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}, [@RTA_NH_ID={0x8, 0x1e, 0xfffffff8}, @RTA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0x6, 0xfff1}}}, 0x24}}, 0x24000040) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x2c, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x38}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 366.964276ms ago: executing program 0 (id=3764): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x23, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0x0) connect$phonet_pipe(r1, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0xfffffffd, 0x58, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd03}}) 363.535219ms ago: executing program 1 (id=3765): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x40, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x1c, 0x142, 0x0, 0x1, [@nested={0x18, 0x7, 0x0, 0x1, [@typed={0x14, 0x136, 0x0, 0x0, @ipv6=@empty}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x40}}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000040000e0000000000000000000000000600fb68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000000000000009020000000000"], 0x0, 0x96}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2}, 0x80) epoll_create1(0x80000) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x10, 0x3a, 0xff, @dev, @local, {[], @ni={0x8c, 0x0, 0x0, 0x2, 0xc2, 0x3}}}}}}, 0x0) 361.351809ms ago: executing program 4 (id=3766): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x476903, 0x100408) (async) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000040)=0xffffffff, 0x4) 360.509868ms ago: executing program 2 (id=3767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a00000000206010200000000000000000000000014000780080006400000000308000840000000320500010006000000050005000700000016000300686173683a6e65742c706f72742c6e65770000000900020073797a310000000005000400030000003c0007800500140002000000080008000b4000000004050007005e00000008000a40ffffff91060004404e2200"/160], 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040810) 134.818192ms ago: executing program 4 (id=3768): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x9, 0x3, 0x8, 0x8000, 0x6, 0x8eed, 0x6ea, 0x8001}, &(0x7f00000000c0)={0xa, 0x2, 0x1, 0x6, 0x4, 0x6, 0x9, 0x40}, &(0x7f0000000100)={0xe82c, 0x6, 0xffffffffffffff63, 0x3, 0xd7d1, 0x4, 0x1, 0x9}, &(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x800]}, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x71bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x34}}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x34, 0x66, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xfff3, 0xffe0}, {0x2, 0xfffe}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x4}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 112.615106ms ago: executing program 2 (id=3769): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9c1fe0ad824544b2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000002080)={0x0, 0x81}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000b40)={{r0}, "5c515abf92f296fbd6dff3936072ce7e4e51f3942d2338687a9cdb1d23043dbc40222aa12c44b88029f211ea3f20c7aa5c990b69d379eccde91fc37ce7206ce99dc94cca407f076a93da3deac4ea5ae05621a402c70f348ffad76fb41a60012bf13f06d497844bb8c42b2dcd72462288ee1b236f3c33b1986f6e8c7d95180d929c9130025f06c871f102103756cc669b3d1e0b7e4dbae6c153ccaa78a519ed6ce2cf547dbb22a4b6ed40358d6b6bb0a6413021373bb70fb515ba82a678d20b7484e01a239df47f8c1a6bb0cb272af0f5f539bd6352b7665444bbc0382c4ed51d1c5203b1c42413bb8d50382b31d50316f8c819d951adf7e2dad9fd0adbe12b776a1ca0c6bfde794795cbe7ad23a040d304f694782d44c284e8895c6acfd20689d6e00294fa70625cd76c69b9b033407cd40905c0053f8404341e5dbea21627f9d9a40cb46ef81a19a922047c741f0196d0eab685f081589afaf4b72551df9edb9a5dcabdb16ee53ad27fe2cb4a48cea38d795672570309de72dd950f748806f35e73dae86cd0687323da2955de974714abe84c798f9d01f17f718d57e294f3b40e563223d79a5223c563e42b388c2df80b60138a4c433044532c4137599797850bd87d31ca2960e33a5cc392473735e6330596852285513b53db795d5a4a35b9ee9e5fd9bc97acdfa67f23c0a947f302d31174ac75a45c09e1e24156be4eda8c35e6744fd470d45b775e8dbffee424e7c8faa3c6e1ddd62e4d4705ef62efcfabef65cb1d22df11a91167d99976f97e0482570467a734771cb8b92c372e63a8f344c8ca095cef30115437820e431cbcdaccdab4f9bb011bdc9c0cd51cfcfadf5de72ba94877867d2e7aee881898205eed2d8df1f7e0ead660d7ae9c06d087050ec5b71b83b60f8332d084c7d42f3b32628d69ddae62589d5292e75611764b81e5def8b38cf9970895ccbc5c52413c7449d5b359fa320b294dfb3518fe8c3ab71e381234aa0f97fbf46f81f9b47e7b1f85a02e47b9647cc1cf52c6d958ab54cad1776308f58ceaf6433e6413d029c0e672d7fa1dac93a359ffab51f8c8da96b3d6d2278f2fcf195a4a49166facc26ef41bbc571db006e425ea15f90506910a59a9c7e21d41bb6169f19afd122c1a52e5c4e4adc91ed589335665d29f06e74c169a578508c88bbbef046cf0e55d0c3179a0bc5ea21bb653d10beb51415def6e9426f66ca174d83448b1a884baf8bc3dcde4537ba3d78c390a66b7d75857ea9ea934cd2f22ec674346adcc41684d391104da18ca7720c23b14b8512e4369eb56350b07991e4ba77c7247749763cb3177e152d0947da30e5132028983e2ae32e0170ea69f710a681846fcccdd0162475add44988e848cad19756ed105906e3c846f7df97b17b38acdf0e5a97b1cb8f0f26976bac4dd97928ddc76b5cbbbf6641c75f5c80a1df447e6c71f62907c3054078fbf36e5b2db72ff5dae768b4ec94359f3fff33988e8da67c75f46d88c4c3dc6f18dae5d683fc60d9cbccd145b6d774f0bd362448686b68168dad58892484ddb4eeaabcb317d6ce8c4d0e6ad47a3ace6bdaf8631ad768b8aae48697910404214555c2199338351ae6396f8ad741ce88ce8bd4a1f99c5b69ee31ccd9070cf5168a32c8cd296ca20df5fff67f87897b0e10548a2e2d4d40ff34d68efd33d8786a73001e6bb93d94cc2580e5349b35fc511d5c87d7adcf42a8b7facf0129b7acf90cd459c989752f53e781daa68e3d1ea4c68a2fbb3113b9c314b45f298d9bfaa6fe7fce7d629790c271f82cc008d920371d8476e6d50d72e9a22a833121efd32d8664aa9220450ff7033c3547a8f086a0b26c7d16a90c1736df4cd2f703fcc4463df942e3bf3ec649b3619261f3137a0089868f0b653f42abd51da21e0e4852e5dc2e3ce7ff11a2a0f81142bcd506cdf01b121113bfa0096c7320ee7565a0911a0027a07a3e2b45bb174c4416e7fa24b9bbd1d3f3edbefe4ba9ffd940bd98e6fcd50cd6a143d6e4eeaf448ee6d97581b6802fab1959b228510e3ccf04c5684c92982c1a745fe8a27e0fe39ba30312cf51ace276e87306b0d957300920e426f9d93f628442051692e35f13783496a861878c59b74bf84ff963bec455f13b51de3ee26806d73d4d477b0e99d743602c515df7aee960521d0f67e6f93192fcbbe09e4c3a8dbeb115e28609dac2c15c050dd4ae70dea1b2c6c68456dffa055ddd6634850be5556f73edae8dbc5d2bfdf7b50b4e0d80f45ef7db95481e09542d82129097e522cce4ee582073306a6ddd648a1a3538bedec733800f22ee4a5a8fea5736ec1e706c4166d00f475a99936209e6205a0f5b48f8cbc1c2211bb9ccebabd693c286c7ba77ea1fd81776c11ef7950de7aa1b311f19af3f0b7c5cad081b6e4336a52aec6e312070a4ae1ca7a37ef026b86d908f354bc8a15d62967b3cb7173414b76f0c1a20a811a712b6cad062a2afb85504048dde608071152bfc8f318bbeebca5516e0b89a5def53b533ed7aa65fee837c9634147e4c7c518d870b1bd886d46e161aa29df6e934f8dc3ddcc8f91cfdead4122b7e03be9a80d8ebfc88f8fe1ab8f84a5826d21abe16318688427c723cbeb4c726792936f262ece5eac7e8aea37b0c8ae39bffba5d8d74de122d5db930250ecc07da57d80a5b06618c4da092108eefcadf13c73a934b5835f35b169b199359252978589daf4c2a41ad90264014199ce31a77bf057523c38dbce055bc501a51923ce9ca95f4e5c994df574a7aea05d7033020bc40371ccf19821ed95e6e58b64e9c0e3a9cf3d58c921d44001a36d01e0acd509173b8a9a6bd5326dbc0ffe69b52e9c91ef3cb96ec07887959af84c53bb54854c35f3fb5a412c5f4b3423f1b756e7092d0eb6c2c22b9f945c738f80aade0e61cb6fc5c5fed309a2deb3a23b6e4fe8da94ec0307501fd11f3b2c24c607f26174200f71dbdf90d7294ea808a74704432a81035d9726c22b1ea10bb64a4c58bf473b094359c4a20461719469652646cdd00ab57a146cf07dade1debf57aa2cd8d1dbcdde1e52dc7bd815b8530915d817da5ea5b9163355d93d0c14b101588be949d56072b6ba9564fa545219e21aa91420253545d833d27bb3ef2f654354d2e771b41eb092540376243e164b012c4b5ca73b0cb63256719996c66004a7cc9228002de39e45e7f2ff4172a3074363b5703891253a4d4537398fefd7f9376be45dad3e8f70b42680aff1d873159a0064acef793dedb8c52bc2e2447f9e76a07d39f9113758978d3c638f97c8fa69899d33caebe146ee2cb19e7b151ffe192b2ff1f25caf5e2f73fe26fc4a37b275064fd0487c2821c39aa783f0e43d65adf9b50fccd060f999eb649ad684a0f3ee13b09a072b03ce5c313553c1e9dedb4bc6d070ac3f9d0407d74abc0c3eb1bd6d98cde3b90dc576ebac11a40b68f664e28dbb5b85fc09861c2e9cda00052fe09c4ecaf37bdc4587a0851941e2843f8ac9aac9e2d31ccb0e1d2614f5508e8331b630144f8def35c460f96dc8512d5f1f39feda3c991ae4406cb5b6a74bff78fa3a3a1f29ae8a08d860ea01cb01a673e5a012945dec29e978768521053eeab5d99e518eb2f9579dddcd4d747624998614730a3367b7b47daeb9aa5d4caf782a642ada8a3d1da3e174b061af11a3903a35fb4a36733de1276be05901e40c37241e67cf5acb83e19869cdefec85bc96438405315bd51c7d6f247c04c607cf24082f1c04e0bf3cda8623bbc48bf9f74914209ecd21116677f0c8cd2f3bd732748c1a499aafaa059943a45427a969f8396377c45ffa4104c97ea1557b843af3b3719eabe6d1e6dd885aa0addf5aba7c0bbb792cf50d112f85209e4b43897ab377eea4b110789aec8996df7b0da3c1d62f4edadce209e62b5bcd53163d7546dd0a8069351215b49a3ed4fb74c28ef3b35fb17a52c62368ff0ffdbf92f54efb2054bf55ff4926b582216fc2ab4900d4f56d4ff82d7039006718073032d0c498b43be48741be66dba3c36baf052b43f413107cd230bc028b6b0042265ca260f08347987e99b0ba6f04631c74b1189291d3e3315c894c2c080a13524d8f4d9fdd5d2fabdd846add4b4f596a28e9a7c6a84b4ec37ecf993ed9d074331eb0f7271a90bf447eaa3c00ecfd47bddef47fceb6ed5173a546798ca207b4f77218524ea5b430ebd97e142f42be2dea423bfdff751f31181f9761f69eb63d81f38c1279303f1cffaa8ddc8f153c32537cd080974b639153396b818024d9898e9eb7c5cab0ff87ecbb72a9c6c2f3f1d1b8ff27e280aed46e63f6f06d9ab0a4c5f02a109c8ff8e2404ec81dba9f4544969d44ab3731805fdf8900c92cfad14d308de8bf3e5163789f062942c0c6ef9cdc682a9f9815c5145a1d851bfafff68804d764bbd28ff48c0ab70c4fe5b11674d8a2105d6e6297f72c38902d0ea699eedb93fad31dd17b88bccfad17ff265fa7f01f9a04c3c376e3441ee7b8d295ffcc0824d247f4762176b2ed585ad75b7db2e9e37f5f08cbabcbf43fc8e0af3ece24b39e38f663daee126fdb75a1451084a01dc46204d80a3cf7b4f10ad9ea4cc02d5166460204cf9927603523772133783c613db8170b707a533d9e77aeeef58d2cfb21ac0b58c9c0f0ac9cd41b2c85be1c2ee3c6612ec2e963feb11b6debcb8b719227348462d63420721a4ac8d74a230b4472d085cb189bb45c6c43d62eea2466e2e2e0ce25eaa96e04909978631883682dab9a8c801480b1537be83229eb21bdeff2a59fe57620467d8f2f9bcf953eca837899f3af85eea5065d7e30b8e5c013336b985f598eb6564d2c82b7e390c808b086dcfaa7133fcb81ea40e618663e67d823f05f9c78fe5a6b85dd4e9475596b7b0e4f163c07869e48e3a95be5435cbfd84586df508c1243498df0834fb4a1ea9964b6cb8737bd1f6ef827a1a94f23d6edad1201e1353ae8d4395be72539a62b563b0d0dab501e5da630ce6151f2a7ac5a1135df319b30bed1e7da789beb3c4b0befa07ac1451a3396f21561bd3339b68f46361406e3f3d53c7cc64bb0a9f876b4ce2434f982074d3f0a7c40668d88a5fed18549b50a359b5ee949d2eb6b1c77e3b262771a897cfca87011199d3ca21206e570643c809c6d6dc624aef51cdcf276ef1a8820944b8ea974809d36803903bbae883683a7682ef3ce7a38cffe2956b07816cf90daed96e04df5aeb2b4def89599461a4c0b8cded1ab2d00ad07031ad002c38875628d5878f0a1d84d8afd5d42e0ca22a53093915555338f0dfbb73562e9a3f542e7843e7cd9bbfe2ae8a37c7d9337d49c03c07aef1c1026c709f714f688b1d6c558197f07bcf22e7d2506af4f28830184ccc6d04bfe8aa6bccea4908fda713dabdd6624fe99c88ab66910f0e943e50454af57890f0b935b7141d3577bf14a0e1f43daa7c74656b09870d649dcfbd0290393a9678263819d73dfcae9e2b6e890ba305d7339d69838c8799817998fbeba41db7928987c8b3e9f5b58d0f5cc469f2726e49b1f88330f79808e6f19aa747d5e54b5bea9f43d57e7598c7e768b33544f1e5bc49b36a4a922f3640b3991473cba3948f22679c658c7351c0ca43026c72fcdbcdf59badd56eccec5f30d76a1a9ff95a80be8a78c716d8c5581d6dcd479a794d69aeed385ec74cd0feba0fa48fd83f93ed16bff919e8ff3f15303598edfe8dbce42642f03288d0671cf37e6e74d4fc4b28405e40a86a4d69081be9f3fbf090b6a0fb4f45a70e9198e7cd616b9c2ca"}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005eb93907b4cc2f1affd5020000000900010073797a300000000008000240000000032c000000030a010300651300e6ff0000000002000000090001bfcd74b274b2c7f3c0049be9a9b2cce78d7e0073797a30000000000900030173797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90002000ad9000008000240000000000900010073797a30000000000900020073797a3200000000140005800800014000000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x20004004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 81.411163ms ago: executing program 0 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.073128ms ago: executing program 1 (id=3771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000023000000000134070ca1e1678cff0b0d205d673892905a1c89d75e8bf666150f8e3c3a29b452cc3455e996633f57b157d24ce85ec4ba280160e72670a4497bbcc0b8fcc72965e3ec19bfaf9a79a7717f5129c1f8980c4554e288d05e7d190a"], 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r3, &(0x7f0000000000)='aead\x00', 0x200000, &(0x7f0000000040)={@align=0x7, {0xff, 0x61ce, 0x2a18eb5c, 0x9a}}, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0xfffffff7}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000340)=0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000700)={r4, 0x0, 0x202140, 0x0, 0x6, 0x0, 0x0}) getsockname$qrtr(r6, &(0x7f0000000740), 0x0) bind$alg(r4, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000003380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003340)={&(0x7f00000022c0)={0x1054, r1, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0xa}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x200}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0x5}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3a7}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}]}, 0x1054}, 0x1, 0x0, 0x0, 0x40}, 0x40440c4) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 4 (id=3772): unshare(0x20400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f0000000440)=@ax25={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x4004, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x30, 0x0, 0x1, 0x7}, 0x28) kernel console output (not intermixed with test programs): in process `syz.2.2316'. [ 376.851761][T15423] bridge0: entered promiscuous mode [ 376.899621][T15426] IPVS: Error connecting to the multicast addr [ 377.088761][T15440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2320'. [ 377.257788][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 377.293018][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 377.497829][T15456] syzkaller0: entered promiscuous mode [ 377.520279][T15456] syzkaller0: entered allmulticast mode [ 377.876359][T15472] vlan0: entered allmulticast mode [ 377.895372][T15472] bond0: entered allmulticast mode [ 378.717297][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.901710][T15522] tipc: Enabled bearer , priority 14 [ 378.936333][T15522] 0X: renamed from caif0 [ 378.951806][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 378.959926][ C1] lec:lec_tx_timeout: lec0 [ 378.965785][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.985839][T15522] tipc: Disabling bearer [ 379.045483][T15522] 0X: entered allmulticast mode [ 379.077303][T15522] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 379.297805][T15545] netlink: 'syz.1.2345': attribute type 21 has an invalid length. [ 379.498356][T15556] macvtap0: entered promiscuous mode [ 379.517371][T15556] macvtap0: entered allmulticast mode [ 379.537948][T15556] ip6gretap0: entered allmulticast mode [ 379.621218][T15561] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 379.635430][T15558] macvtap1: entered promiscuous mode [ 379.642009][T15558] macvtap1: entered allmulticast mode [ 379.919956][T15564] gretap1: entered allmulticast mode [ 379.946043][T15568] netlink: 'syz.1.2352': attribute type 13 has an invalid length. [ 379.959985][T15564] bond4: (slave gretap1): making interface the new active one [ 379.971907][T15564] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 380.008307][T15568] netlink: 'syz.1.2352': attribute type 13 has an invalid length. [ 380.010928][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.056905][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.083938][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.106345][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.137018][T15573] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 380.464672][T15592] netlink: 'syz.2.2358': attribute type 3 has an invalid length. [ 380.616162][T15592] nbd: couldn't find device at index 2 [ 380.763941][T15608] smc: net device wlan0 applied user defined pnetid SYZ0 [ 381.308229][T15632] __nla_validate_parse: 13 callbacks suppressed [ 381.308249][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 381.618469][T15652] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2372'. [ 381.915469][T15659] wg1 speed is unknown, defaulting to 1000 [ 381.932748][T15659] lo speed is unknown, defaulting to 1000 [ 382.017444][T15680] netlink: 'syz.2.2379': attribute type 11 has an invalid length. [ 382.092077][T15681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2380'. [ 382.605175][T15701] netlink: zone id is out of range [ 382.620869][T15701] netlink: zone id is out of range [ 382.627903][T15701] netlink: zone id is out of range [ 382.638037][T15701] netlink: zone id is out of range [ 382.651175][T15701] netlink: zone id is out of range [ 382.662888][T15701] netlink: zone id is out of range [ 382.672391][T15701] netlink: zone id is out of range [ 382.683131][T15701] netlink: zone id is out of range [ 383.026994][T15711] netlink: 'syz.2.2387': attribute type 5 has an invalid length. [ 383.177941][T15719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2390'. [ 383.254398][T15725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2391'. [ 383.312002][T15725] ip6gre2: entered promiscuous mode [ 383.331608][T15725] ip6gre2: entered allmulticast mode [ 383.380712][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 383.530375][T15731] netlink: 'syz.2.2391': attribute type 6 has an invalid length. [ 383.542612][T15731] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2391'. [ 383.582285][T15734] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 383.616047][T15735] macvlan1: entered promiscuous mode [ 383.631176][T15735] macvlan1: entered allmulticast mode [ 383.642137][T15735] bond8: entered promiscuous mode [ 383.663656][T15735] bridge5: entered promiscuous mode [ 383.671372][T15735] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 383.692943][T15735] bond8: left promiscuous mode [ 383.700243][T15735] bridge5: left promiscuous mode [ 383.991103][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 383.999254][ C1] lec:lec_tx_timeout: lec0 [ 384.003958][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.020913][T15785] netlink: 'syz.1.2407': attribute type 40 has an invalid length. [ 385.051160][T15785] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2407'. [ 385.181982][T15779] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.198517][T15779] batman_adv: batadv0: Interface activated: dummy0 [ 385.209934][T15779] net_ratelimit: 355 callbacks suppressed [ 385.209951][T15779] batadv0: mtu less than device minimum [ 385.224074][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.236282][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.248263][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.260130][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.271995][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.283891][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.295801][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.308033][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.319866][T15779] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 385.444696][T15795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2410'. [ 385.485144][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2410'. [ 385.594161][T15803] netlink: 'syz.1.2413': attribute type 12 has an invalid length. [ 385.676786][T15805] can: request_module (can-proto-0) failed. [ 386.496693][T15845] netlink: 'syz.1.2419': attribute type 27 has an invalid length. [ 386.525276][T15842] __nla_validate_parse: 1 callbacks suppressed [ 386.525295][T15842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'. [ 386.655024][T15849] netlink: 'syz.1.2420': attribute type 2 has an invalid length. [ 386.677451][T15848] bond3: (slave dummy0): Releasing active interface [ 386.726155][T15848] team_slave_1: left promiscuous mode [ 386.746102][T15848] team0: Port device team_slave_1 removed [ 386.766901][T15848] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 386.795042][T15849] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 386.990434][T15864] syzkaller1: entered promiscuous mode [ 387.005834][T15865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2423'. [ 387.006833][T15864] syzkaller1: entered allmulticast mode [ 387.037171][T15865] nbd: must specify at least one socket [ 387.710436][T15895] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2434'. [ 387.745844][T15897] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2434'. [ 388.146241][T15914] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 388.516403][T15933] veth1_to_bridge: entered allmulticast mode [ 388.722788][T15949] vlan0: entered promiscuous mode [ 388.728183][T15949] geneve1: entered promiscuous mode [ 388.734812][T15949] vlan0: entered allmulticast mode [ 388.740261][T15949] geneve1: entered allmulticast mode [ 388.757613][T15949] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2447'. [ 388.789938][T15949] syzkaller1: entered promiscuous mode [ 388.808895][T15949] syzkaller1: entered allmulticast mode [ 389.009900][T15961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2452'. [ 389.021066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 389.029143][ C1] lec:lec_tx_timeout: lec0 [ 389.034495][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 389.047594][T15960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2451'. [ 389.396860][T15974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2457'. [ 389.780665][T15993] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2464'. [ 389.930699][T15994] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.080124][T16000] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2467'. [ 390.185869][T16002] syzkaller1: entered promiscuous mode [ 390.203213][T16002] syzkaller1: entered allmulticast mode [ 390.302252][T16004] netlink: 'syz.3.2469': attribute type 1 has an invalid length. [ 390.322048][T16004] net_ratelimit: 14 callbacks suppressed [ 390.322072][T16004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.547415][T16011] netlink: 'syz.0.2471': attribute type 2 has an invalid length. [ 391.039623][T16032] wg1 speed is unknown, defaulting to 1000 [ 391.059352][T16032] lo speed is unknown, defaulting to 1000 [ 391.360926][T16048] wg1 speed is unknown, defaulting to 1000 [ 391.515367][T16048] lo speed is unknown, defaulting to 1000 [ 391.710805][T16060] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2482'. [ 391.731818][T16061] netlink: 'syz.0.2483': attribute type 1 has an invalid length. [ 391.774726][T16062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2482'. [ 391.929280][T16061] 8021q: adding VLAN 0 to HW filter on device bond13 [ 392.026130][T16065] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 392.051566][T16065] bond13: (slave batadv2): making interface the new active one [ 392.060639][T16065] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 392.085360][T16066] bond13 (unregistering): (slave batadv2): Releasing active interface [ 392.100345][T16066] bond13 (unregistering): Released all slaves [ 392.190788][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 392.250123][T16064] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2484'. [ 392.324958][T16068] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2484'. [ 393.083261][T16097] sctp: [Deprecated]: syz.2.2492 (pid 16097) Use of int in maxseg socket option. [ 393.083261][T16097] Use struct sctp_assoc_value instead [ 393.230976][T16109] x_tables: duplicate underflow at hook 1 [ 393.339453][T16113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2494'. [ 393.601219][T16119] wg1 speed is unknown, defaulting to 1000 [ 393.645059][T16119] lo speed is unknown, defaulting to 1000 [ 394.026547][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2499'. [ 394.041047][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 394.049238][ C1] lec:lec_tx_timeout: lec0 [ 394.054469][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.337794][T16145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2503'. [ 394.440675][T16146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.483311][T16146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.509727][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2502'. [ 394.556261][T16146] batman_adv: batadv0: Removing interface: vlan3 [ 394.764748][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2505'. [ 395.699058][T16194] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 396.107085][T16206] netlink: 'syz.3.2517': attribute type 2 has an invalid length. [ 396.837820][T16228] xt_ipcomp: unknown flags 1D [ 397.004014][T16237] __nla_validate_parse: 5 callbacks suppressed [ 397.004037][T16237] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2527'. [ 397.733017][T16257] tipc: Trying to set illegal importance in message [ 397.752184][T16254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'. [ 397.782151][T16254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2530'. [ 398.284697][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 398.876538][T16301] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2546'. [ 398.915968][T16301] netlink: 245 bytes leftover after parsing attributes in process `syz.2.2546'. [ 399.052193][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2548'. [ 399.071057][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 399.079176][ C1] lec:lec_tx_timeout: lec0 [ 399.084181][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.126366][T16309] netlink: zone id is out of range [ 399.146570][T16307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2548'. [ 399.149024][T16309] netlink: zone id is out of range [ 399.208335][T16309] netlink: zone id is out of range [ 399.225055][T16309] netlink: zone id is out of range [ 399.242776][T16309] netlink: zone id is out of range [ 399.248749][T16319] netlink: 'syz.3.2551': attribute type 1 has an invalid length. [ 399.257192][T16309] netlink: zone id is out of range [ 399.277935][T16309] netlink: zone id is out of range [ 399.299783][T16309] netlink: zone id is out of range [ 399.328337][T16309] netlink: zone id is out of range [ 399.481492][T16319] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.539887][T16332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2551'. [ 399.588807][T16327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2552'. [ 399.658329][T16319] bond5: (slave gretap2): making interface the new active one [ 399.691957][T16319] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 399.803014][T16337] 8021q: VLANs not supported on ipvlan1 [ 399.851916][T16339] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 399.907502][T16343] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 399.914116][T16339] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 399.914171][T16339] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 399.970191][T16339] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 400.423579][T16367] x_tables: duplicate underflow at hook 1 [ 400.689986][T16369] wg1 speed is unknown, defaulting to 1000 [ 400.727099][T16369] lo speed is unknown, defaulting to 1000 [ 401.173558][T16397] wg1 speed is unknown, defaulting to 1000 [ 401.299734][T16406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.331324][T16406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.363663][T16406] bond0 (unregistering): Released all slaves [ 401.542469][T16397] lo speed is unknown, defaulting to 1000 [ 401.726435][T16416] 8021q: adding VLAN 0 to HW filter on device bond14 [ 402.276813][T16430] geneve0: entered promiscuous mode [ 402.357855][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.383480][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.581117][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.596293][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.622606][T16452] netlink: 'syz.2.2582': attribute type 12 has an invalid length. [ 402.640297][T16452] __nla_validate_parse: 8 callbacks suppressed [ 402.640445][T16452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2582'. [ 402.793429][T16456] wg1 speed is unknown, defaulting to 1000 [ 402.828761][T16456] lo speed is unknown, defaulting to 1000 [ 402.888787][T16464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2586'. [ 402.934455][T16464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.968271][T16464] netlink: 'syz.0.2586': attribute type 9 has an invalid length. [ 402.994697][T16464] netlink: 'syz.0.2586': attribute type 6 has an invalid length. [ 403.010361][T16464] netlink: 'syz.0.2586': attribute type 7 has an invalid length. [ 403.023571][T16464] netlink: 'syz.0.2586': attribute type 8 has an invalid length. [ 403.109107][T16466] macsec1: entered promiscuous mode [ 403.232096][T16470] wg1 speed is unknown, defaulting to 1000 [ 403.239003][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2589'. [ 403.276308][ T30] audit: type=1800 audit(1777237470.455:17): pid=16476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2589" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2707 res=0 errno=0 [ 403.366876][T16478] netlink: 'syz.2.2590': attribute type 3 has an invalid length. [ 403.568767][T16470] lo speed is unknown, defaulting to 1000 [ 404.091073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.099211][ C1] lec:lec_tx_timeout: lec0 [ 404.104335][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 404.278930][T16499] 0X: left allmulticast mode [ 404.297951][T16499] xfrm0: left allmulticast mode [ 404.306084][T16499] .70: left allmulticast mode [ 404.311373][T16499] hsr_slave_0: left allmulticast mode [ 404.316806][T16499] hsr_slave_1: left allmulticast mode [ 404.368479][T16499] macsec2: left promiscuous mode [ 404.377966][T16499] bond1: left allmulticast mode [ 404.386862][T16499] vxcan3: left promiscuous mode [ 404.393168][T16499] vxcan3: left allmulticast mode [ 404.408887][T16499] bond3: left promiscuous mode [ 404.422070][T16499] geneve2: left promiscuous mode [ 404.433027][T16499] gretap1: left allmulticast mode [ 404.451098][T16499] vlan0: left promiscuous mode [ 404.456210][T16499] geneve1: left promiscuous mode [ 404.462219][T16499] vlan0: left allmulticast mode [ 404.467229][T16499] geneve1: left allmulticast mode [ 404.482955][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.510657][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.589868][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.637534][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2596'. [ 404.709475][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.849003][T16518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.117843][T16527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2600'. [ 405.127742][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2600'. [ 405.445412][T16536] syzkaller0: entered promiscuous mode [ 405.452058][T16536] syzkaller0: entered allmulticast mode [ 405.472198][ T1131] tcf_pedit_act: 7 callbacks suppressed [ 405.472218][ T1131] tc action pedit offset -536870912 out of bounds [ 405.486817][ T1131] tc action pedit offset -536870912 out of bounds [ 405.493338][ T1131] tc action pedit offset -536870912 out of bounds [ 405.499807][ T1131] tc action pedit offset -536870912 out of bounds [ 405.506333][ T1131] tc action pedit offset -536870912 out of bounds [ 405.512920][ T1131] tc action pedit offset -536870912 out of bounds [ 405.519386][ T1131] tc action pedit offset -536870912 out of bounds [ 405.525931][ T1131] tc action pedit offset -536870912 out of bounds [ 405.532503][ T1131] tc action pedit offset -536870912 out of bounds [ 405.538976][ T1131] tc action pedit offset -536870912 out of bounds [ 405.545533][ T1131] net_ratelimit: 391 callbacks suppressed [ 405.545553][ T1131] TC_ACT_REPEAT abuse ? [ 405.885617][T16551] netlink: 'syz.1.2607': attribute type 3 has an invalid length. [ 405.898311][T16543] syzkaller0: entered promiscuous mode [ 405.976744][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'. [ 406.022131][T16555] netlink: 'syz.4.2608': attribute type 30 has an invalid length. [ 406.046377][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2608'. [ 406.120059][T16562] netlink: 'syz.2.2610': attribute type 24 has an invalid length. [ 406.153857][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 406.184603][T16562] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 406.256340][T16566] syzkaller0: entered promiscuous mode [ 406.290570][T16566] syzkaller0: entered allmulticast mode [ 406.429917][T16566] syzkaller1: entered promiscuous mode [ 406.444317][T16566] syzkaller1: entered allmulticast mode [ 406.679843][T16576] openvswitch: netlink: IP tunnel dst address not specified [ 406.903079][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 409.121299][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.129507][ C1] lec:lec_tx_timeout: lec0 [ 409.134523][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.728445][T16580] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 409.935950][T16592] netlink: 'syz.4.2618': attribute type 1 has an invalid length. [ 409.986210][T16592] __nla_validate_parse: 2 callbacks suppressed [ 409.986233][T16592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2618'. [ 410.022125][T16592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2618'. [ 410.098327][T16592] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.300430][T16592] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.383573][T16613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2620'. [ 410.395471][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'. [ 410.424633][T16592] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.457393][T16616] netlink: 'syz.3.2623': attribute type 17 has an invalid length. [ 410.470063][T16618] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2620'. [ 410.527889][T16620] x_tables: duplicate underflow at hook 2 [ 410.590643][T16592] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.613139][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 410.940286][T16636] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 410.979361][T16636] bond0 (unregistering): Released all slaves [ 411.158375][ T7639] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.167994][ T7639] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.237927][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.273331][ T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.274016][T16652] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2629'. [ 411.286304][T16643] xt_cgroup: invalid path, errno=-2 [ 412.080711][T16684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.236129][T16690] netlink: 'syz.1.2642': attribute type 7 has an invalid length. [ 412.486103][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 412.499711][T16696] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 412.575069][T16696] bond6 (unregistering): Released all slaves [ 412.661473][T16714] vxcan2: entered allmulticast mode [ 412.762158][T16716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2649'. [ 412.796215][T16716] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2649'. [ 412.997870][T16727] openvswitch: netlink: IP tunnel dst address not specified [ 413.375619][T16745] xt_socket: unknown flags 0x50 [ 413.905108][T16776] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 413.975536][T16776] gretap1: entered allmulticast mode [ 413.985255][T16776] bond0: (slave gretap1): making interface the new active one [ 413.996981][T16776] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 414.121360][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 414.129605][ C1] lec:lec_tx_timeout: lec0 [ 414.134360][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.723271][T16793] wg1 speed is unknown, defaulting to 1000 [ 414.768598][T16793] lo speed is unknown, defaulting to 1000 [ 414.953538][T16809] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 415.113719][T16815] __nla_validate_parse: 8 callbacks suppressed [ 415.113742][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 415.186656][T16815] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.2678'. [ 415.405289][T16824] netlink: ct family unspecified [ 415.421409][T16824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.825323][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 415.861375][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2688'. [ 415.895896][T16846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'. [ 416.022757][T16852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2688'. [ 416.244165][T16865] syz_tun: entered allmulticast mode [ 416.312927][T16863] dvmrp6: entered allmulticast mode [ 416.803448][T16875] wg1 speed is unknown, defaulting to 1000 [ 416.843472][T16875] lo speed is unknown, defaulting to 1000 [ 417.235159][T16858] syz_tun: left allmulticast mode [ 417.455185][T16908] trusted_key: syz.4.2701 sent an empty control message without MSG_MORE. [ 417.792451][T16917] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2702'. [ 417.817517][T16917] openvswitch: netlink: Message has 3 unknown bytes. [ 417.860840][T16917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 418.217101][T16924] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 419.122124][T16974] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2715'. [ 419.141082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 419.149294][ C1] lec:lec_tx_timeout: lec0 [ 419.155437][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.744077][T16994] tap0: tun_chr_ioctl cmd 1074025673 [ 420.153818][T17016] netlink: 'syz.0.2724': attribute type 14 has an invalid length. [ 420.166333][T17011] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 420.184222][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 420.205078][T17016] netlink: 'syz.0.2724': attribute type 14 has an invalid length. [ 420.214670][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 420.340716][T17023] netlink: 'syz.0.2725': attribute type 10 has an invalid length. [ 420.384322][T17023] team0: Port device dummy0 added [ 420.459523][T17026] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2726'. [ 420.478175][T17023] veth0: entered promiscuous mode [ 420.497259][T17023] bond0: entered promiscuous mode [ 420.509158][T17023] gretap1: entered promiscuous mode [ 420.954763][T17032] netlink: 'syz.1.2729': attribute type 3 has an invalid length. [ 420.991760][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'. [ 421.060133][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 421.134397][T17041] vlan0: entered promiscuous mode [ 421.139681][T17041] geneve1: entered promiscuous mode [ 421.145755][T17022] bond0: left promiscuous mode [ 421.150786][T17022] gretap1: left promiscuous mode [ 421.160597][T17022] veth0: left promiscuous mode [ 421.270913][T17051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2732'. [ 421.325489][T17053] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 421.445639][T17048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.456491][T17048] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.474504][T17048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.493267][ T5901] lo speed is unknown, defaulting to 1000 [ 421.503832][ T5901] sqz0: Port: 1 Link ACTIVE [ 421.514467][ T5901] lo speed is unknown, defaulting to 1000 [ 421.640960][T17068] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 421.797086][T17068] macvlan0: entered promiscuous mode [ 421.808725][T17068] macvlan0: entered allmulticast mode [ 421.826487][T17068] bond10: entered promiscuous mode [ 421.841582][T17068] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 421.853383][T17068] bond10: left promiscuous mode [ 421.997420][T17078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2740'. [ 422.099202][T17080] wg1 speed is unknown, defaulting to 1000 [ 422.107926][T17080] lo speed is unknown, defaulting to 1000 [ 422.123267][T17083] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2743'. [ 422.133232][T17085] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2743'. [ 422.412590][T17097] sctp: [Deprecated]: syz.2.2746 (pid 17097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.412590][T17097] Use struct sctp_sack_info instead [ 422.560650][T17100] wg1 speed is unknown, defaulting to 1000 [ 422.670314][T17107] netlink: 'syz.0.2747': attribute type 11 has an invalid length. [ 422.697236][T17108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 422.935072][T17118] netlink: 'syz.3.2750': attribute type 8 has an invalid length. [ 422.960058][T17118] veth1_to_team: entered promiscuous mode [ 422.971786][T17118] gretap0: entered promiscuous mode [ 422.978070][T17118] veth0: entered promiscuous mode [ 422.986196][T17118] debugfs: 'hsr0' already exists in 'hsr' [ 423.005867][T17118] Cannot create hsr debugfs directory [ 423.021444][T17118] hsr0: entered promiscuous mode [ 423.068616][T17100] lo speed is unknown, defaulting to 1000 [ 423.212349][T17122] 8021q: adding VLAN 0 to HW filter on device bond6 [ 423.222170][T17122] team0: Failed to send port change of device bond6 via netlink (err -105) [ 423.231329][T17122] team0: Failed to send options change via netlink (err -105) [ 423.239048][T17122] team0: Port device bond6 added [ 424.171042][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.179221][ C1] lec:lec_tx_timeout: lec0 [ 424.184734][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.559451][T17166] netlink: 'syz.3.2760': attribute type 1 has an invalid length. [ 424.582190][T17166] netlink: 'syz.3.2760': attribute type 7 has an invalid length. [ 425.372773][T17202] __nla_validate_parse: 9 callbacks suppressed [ 425.372795][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 425.401555][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2771'. [ 425.410985][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'. [ 425.420657][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2771'. [ 425.699469][T17215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2774'. [ 425.762341][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 425.800352][T17211] wg1 speed is unknown, defaulting to 1000 [ 425.830623][T17211] lo speed is unknown, defaulting to 1000 [ 426.281246][T17237] nr0: tun_chr_ioctl cmd 1074025677 [ 426.308677][T17237] nr0: linktype set to 774 [ 426.352692][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'. [ 426.449452][T17251] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 426.766089][T17263] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.2786'. [ 426.804705][T17264] netlink: 8752 bytes leftover after parsing attributes in process `syz.3.2786'. [ 427.189190][T17282] IPVS: length: 132 != 8 [ 427.237238][T17282] pimreg: entered allmulticast mode [ 427.909468][T17313] netlink: 'syz.0.2796': attribute type 13 has an invalid length. [ 427.943973][T17313] netlink: 'syz.0.2796': attribute type 17 has an invalid length. [ 428.211549][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 428.252716][T17313] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.279893][T17313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.349328][T17312] wg1 speed is unknown, defaulting to 1000 [ 428.397546][T17312] lo speed is unknown, defaulting to 1000 [ 429.028033][T17364] xt_hashlimit: size too large, truncated to 1048576 [ 430.206165][T17401] bond8: Removing last arp target with arp_interval on [ 430.367036][T17405] vlan0: left promiscuous mode [ 430.398440][T17405] geneve1: left promiscuous mode [ 430.423130][T17405] hsr0: left promiscuous mode [ 430.551046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6370 ms [ 430.559179][ C1] lec:lec_tx_timeout: lec0 [ 430.565293][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.913917][T17429] netlink: 'syz.0.2822': attribute type 13 has an invalid length. [ 430.939667][T17429] __nla_validate_parse: 10 callbacks suppressed [ 430.939688][T17429] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2822'. [ 431.037434][T17434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2823'. [ 431.260530][T17442] bridge0: port 1(bond0) entered blocking state [ 431.274576][T17442] bridge0: port 1(bond0) entered disabled state [ 431.295236][T17442] bond0: entered allmulticast mode [ 431.314261][T17442] bond_slave_0: entered allmulticast mode [ 431.365135][T17442] bond0: entered promiscuous mode [ 431.375348][T17442] bond_slave_0: entered promiscuous mode [ 431.403802][T17446] : renamed from vlan0 [ 431.520742][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2828'. [ 431.640085][T17455] netlink: 'syz.4.2829': attribute type 1 has an invalid length. [ 431.660812][T17453] tipc: Enabling of bearer rejected, already enabled [ 431.681579][T17454] netlink: 'syz.2.2828': attribute type 4 has an invalid length. [ 431.865375][T17455] 8021q: adding VLAN 0 to HW filter on device bond15 [ 431.913311][T17466] openvswitch: netlink: Missing key (keys=40, expected=80) [ 431.923522][T17466] netlink: 'syz.2.2831': attribute type 3 has an invalid length. [ 431.932164][T17466] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 432.316793][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 433.268330][ T5164] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 433.283351][ T5164] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 433.302851][ T5164] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 433.322988][ T5164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 433.334574][ T5164] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.911704][T17489] wg1 speed is unknown, defaulting to 1000 [ 433.933873][T17489] lo speed is unknown, defaulting to 1000 [ 434.593634][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 435.322823][T17489] chnl_net:caif_netlink_parms(): no params data found [ 435.431221][ T5164] Bluetooth: hci5: command tx timeout [ 435.514814][T17489] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.522650][T17489] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.529996][T17489] bridge_slave_0: entered allmulticast mode [ 435.538224][T17489] bridge_slave_0: entered promiscuous mode [ 435.559273][T17489] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.569184][T17489] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.577035][T17489] bridge_slave_1: entered allmulticast mode [ 435.584840][T17489] bridge_slave_1: entered promiscuous mode [ 435.645319][T17489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.663888][ T12] bridge_slave_1: left allmulticast mode [ 435.669780][ T12] bridge_slave_1: left promiscuous mode [ 435.678299][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.087735][ T12] bond4 (unregistering): (slave bridge1): Releasing active interface [ 436.311101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 436.319167][ C1] lec:lec_tx_timeout: lec0 [ 436.323969][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.577364][ T12] bond0 (unregistering): left promiscuous mode [ 436.583847][ T12] bond_slave_0: left promiscuous mode [ 436.589421][ T12] bond_slave_1: left promiscuous mode [ 436.597010][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.607926][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.618027][ T12] bond0 (unregistering): Released all slaves [ 436.629665][ T12] bond1 (unregistering): Released all slaves [ 436.645831][ T12] bond2 (unregistering): Released all slaves [ 436.661756][ T12] bond3 (unregistering): Released all slaves [ 436.678946][ T12] bond4 (unregistering): Released all slaves [ 436.703003][ T12] bond5 (unregistering): Released all slaves [ 436.718805][ T12] bond6 (unregistering): Released all slaves [ 436.736951][ T12] bond7 (unregistering): Released all slaves [ 436.758383][ T12] team0: Port device bond8 removed [ 436.764696][ T12] bond8 (unregistering): Released all slaves [ 436.779922][ T12] bond9 (unregistering): Released all slaves [ 436.796273][ T12] bond10 (unregistering): Released all slaves [ 436.814275][T17489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.863673][T17489] team0: Port device team_slave_0 added [ 436.907852][T17489] team0: Port device team_slave_1 added [ 436.993901][ T12] tipc: Left network mode [ 437.002778][T17489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.009845][T17489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.036366][T17489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.055100][T17489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.064453][T17489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.094482][T17489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.234573][T17489] hsr_slave_0: entered promiscuous mode [ 437.254161][T17489] hsr_slave_1: entered promiscuous mode [ 437.261297][T17489] debugfs: 'hsr0' already exists in 'hsr' [ 437.276674][T17489] Cannot create hsr debugfs directory [ 437.511361][ T5164] Bluetooth: hci5: command tx timeout [ 437.902988][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1 [ 438.172213][ T12] batadv0: left promiscuous mode [ 438.180818][ T12] hsr_slave_0: left promiscuous mode [ 438.187259][ T12] hsr_slave_1: left promiscuous mode [ 438.199284][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.212085][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 438.219008][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 438.589352][ T12] team0 (unregistering): Port device team_slave_1 removed [ 438.615189][ T12] team0 (unregistering): Port device team_slave_0 removed [ 438.950646][T17489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.964175][T17489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.974174][T17489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.984630][T17489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.993397][T17489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.020795][T17489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.036780][T17489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.056183][T17489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.171340][T17489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.197278][T17489] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.213592][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.220728][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.237394][ T12] IPVS: stop unused estimator thread 0... [ 439.238083][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.250678][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.484636][T17489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.536433][T17489] veth0_vlan: entered promiscuous mode [ 439.548560][T17489] veth1_vlan: entered promiscuous mode [ 439.583581][T17489] veth0_macvtap: entered promiscuous mode [ 439.591726][ T5164] Bluetooth: hci5: command tx timeout [ 439.598420][T17489] veth1_macvtap: entered promiscuous mode [ 439.621337][T17489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.635803][T17489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.649813][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.659012][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.670147][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.682790][ T1131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.769525][ T7637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.777966][ T7637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.814999][ T7637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.824590][ T7637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.154862][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.671322][ T5164] Bluetooth: hci5: command tx timeout [ 442.071132][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 442.079256][ C1] lec:lec_tx_timeout: lec0 [ 442.084281][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.091101][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 447.099162][ C1] lec:lec_tx_timeout: lec0 [ 447.104051][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 452.111095][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 452.119175][ C1] lec:lec_tx_timeout: lec0 [ 452.123827][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 455.737662][T17571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 455.776135][T17580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2848'. [ 455.814399][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2846'. [ 456.058981][T17605] tipc: Started in network mode [ 456.065911][T17605] tipc: Node identity 8a9711b2a542, cluster identity 4711 [ 456.074364][T17605] tipc: Enabled bearer , priority 0 [ 456.083086][T17601] syzkaller1: entered promiscuous mode [ 456.089649][T17601] syzkaller1: entered allmulticast mode [ 456.102679][T17605] syzkaller0: entered promiscuous mode [ 456.121123][T17605] syzkaller0: entered allmulticast mode [ 456.164070][T17604] tipc: Enabling of bearer rejected, already enabled [ 456.235678][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2854'. [ 456.352982][T17609] tipc: Resetting bearer [ 456.393996][T17603] tipc: Resetting bearer [ 456.450295][T17603] tipc: Disabling bearer [ 456.668744][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2859'. [ 456.703252][T17627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2859'. [ 456.825431][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2859'. [ 456.853636][T17627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2859'. [ 457.131123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 457.139321][ C1] lec:lec_tx_timeout: lec0 [ 457.144227][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.318296][T17653] netlink: 'syz.2.2863': attribute type 9 has an invalid length. [ 457.405346][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2863'. [ 457.456000][T17670] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 457.625412][T17673] bridge0: port 1(bond0) entered blocking state [ 457.632008][T17673] bridge0: port 1(bond0) entered listening state [ 457.865030][T17682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2873'. [ 458.135656][T17697] openvswitch: netlink: IP tunnel dst address not specified [ 458.255315][T17703] tipc: Enabled bearer , priority 0 [ 459.700119][T17753] xt_TCPMSS: Only works on TCP SYN packets [ 459.818696][T17728] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.826709][T17728] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.110249][T17728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.147165][T17728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.431471][T17753] geneve3: entered promiscuous mode [ 460.482246][ T77] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.514430][ T77] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.546729][ T77] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.578240][ T77] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.148014][T17802] __nla_validate_parse: 148 callbacks suppressed [ 461.148036][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 461.258578][T17803] macvtap1: entered promiscuous mode [ 461.276653][T17803] bridge0: entered promiscuous mode [ 461.297517][T17803] bridge0: port 3(macvtap1) entered blocking state [ 461.312684][T17803] bridge0: port 3(macvtap1) entered disabled state [ 461.327318][T17803] macvtap1: entered allmulticast mode [ 461.341349][T17803] bridge0: entered allmulticast mode [ 461.359989][T17803] macvtap1: left allmulticast mode [ 461.372139][T17803] bridge0: left allmulticast mode [ 461.406528][T17803] bridge0: left promiscuous mode [ 461.716666][T17819] netlink: 'syz.2.2903': attribute type 1 has an invalid length. [ 461.735627][T17702] tipc: Disabling bearer [ 462.129229][T17836] geneve1: entered promiscuous mode [ 462.151070][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 462.159401][ C1] lec:lec_tx_timeout: lec0 [ 462.164762][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 462.383451][T17838] syzkaller1: entered promiscuous mode [ 462.409865][T17838] syzkaller1: entered allmulticast mode [ 462.505997][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2911'. [ 462.708816][T17856] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2912'. [ 462.898455][T17860] netlink: 62561 bytes leftover after parsing attributes in process `syz.4.2913'. [ 463.357624][T17862] gretap1: entered promiscuous mode [ 463.374083][T17862] gretap1: entered allmulticast mode [ 463.629111][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 463.650327][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 463.856882][T17884] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 464.242464][T17900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2926'. [ 464.489818][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2927'. [ 464.524076][T17904] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2927'. [ 464.572509][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2929'. [ 465.518010][T17940] erspan0: entered promiscuous mode [ 465.584690][T17940] macsec2: entered promiscuous mode [ 465.628281][T17940] erspan0: left promiscuous mode [ 466.017024][T17951] sctp: [Deprecated]: syz.0.2940 (pid 17951) Use of int in maxseg socket option. [ 466.017024][T17951] Use struct sctp_assoc_value instead [ 466.354368][T17966] __nla_validate_parse: 1 callbacks suppressed [ 466.354391][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'. [ 466.625195][T17979] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 466.722476][T17984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2947'. [ 467.171031][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 467.179225][ C1] lec:lec_tx_timeout: lec0 [ 467.185702][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 467.196445][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 467.251475][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'. [ 467.482006][T18005] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 467.484326][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 467.765122][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2962'. [ 467.786131][T18017] netem: incorrect ge model size [ 467.803032][T18017] netem: change failed [ 467.867231][T18017] bridge4: entered promiscuous mode [ 468.336744][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 468.346071][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 468.625809][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2971'. [ 469.076631][T18076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2976'. [ 469.197837][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.215994][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.227500][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.242445][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.252156][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.493308][T18080] wg1 speed is unknown, defaulting to 1000 [ 469.638055][T18080] lo speed is unknown, defaulting to 1000 [ 469.987671][T18105] netlink: 'syz.4.2983': attribute type 2 has an invalid length. [ 470.051468][T18105] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 470.088294][T18104] netlink: 'syz.4.2983': attribute type 2 has an invalid length. [ 470.134432][T18104] netlink: 'syz.4.2983': attribute type 1 has an invalid length. [ 470.426076][T18120] netlink: 'syz.1.2986': attribute type 1 has an invalid length. [ 470.565615][T18120] 8021q: adding VLAN 0 to HW filter on device bond10 [ 470.770203][T18136] netlink: 'syz.0.2991': attribute type 83 has an invalid length. [ 470.779318][T18134] netlink: 'syz.0.2991': attribute type 83 has an invalid length. [ 470.979372][T18146] bond0: Device is already in use. [ 471.076303][T18080] chnl_net:caif_netlink_parms(): no params data found [ 471.358350][T18080] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.368895][ T5853] Bluetooth: hci2: command tx timeout [ 471.390619][T18080] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.408222][T18080] bridge_slave_0: entered allmulticast mode [ 471.434457][T18080] bridge_slave_0: entered promiscuous mode [ 471.561733][T18080] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.577074][T18080] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.592745][T18080] bridge_slave_1: entered allmulticast mode [ 471.603153][T18080] bridge_slave_1: entered promiscuous mode [ 471.674649][T18080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.695731][T18080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.751816][T18174] wg1 speed is unknown, defaulting to 1000 [ 471.762981][T18080] team0: Port device team_slave_0 added [ 471.778524][T18174] lo speed is unknown, defaulting to 1000 [ 471.787470][T18080] team0: Port device team_slave_1 added [ 471.850134][T18176] __nla_validate_parse: 6 callbacks suppressed [ 471.850154][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 471.892991][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 471.904703][T18080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.918536][T18080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.977820][T18080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.045017][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 472.055470][T18080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.072921][T18080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.074545][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 472.158745][T18080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.226885][ T77] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.246214][ T77] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.284103][ T77] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.300430][ T77] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.474074][T18080] hsr_slave_0: entered promiscuous mode [ 472.489833][T18080] hsr_slave_1: entered promiscuous mode [ 472.762060][T18199] bond1: option miimon: invalid value (18446744073709551607) [ 472.769700][T18199] bond1: option miimon: allowed values 0 - 2147483647 [ 472.778508][T18199] bond1 (unregistering): Released all slaves [ 472.895645][T18198] bond1: option miimon: invalid value (18446744073709551607) [ 472.903323][T18198] bond1: option miimon: allowed values 0 - 2147483647 [ 472.911966][T18198] bond1 (unregistering): Released all slaves [ 473.153001][T18209] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 473.174380][T18177] lec:lec_atm_close: lec0: Shut down! [ 473.208533][T18211] xt_hashlimit: size too large, truncated to 1048576 [ 473.334769][T18214] netlink: 'syz.2.3009': attribute type 8 has an invalid length. [ 473.357587][T18214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'. [ 473.431134][ T5853] Bluetooth: hci2: command tx timeout [ 473.439403][T18217] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 473.633377][T18219] erspan0: entered promiscuous mode [ 473.639072][T18219] macsec1: entered promiscuous mode [ 473.648135][T18219] erspan0: left promiscuous mode [ 473.864833][T18231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3011'. [ 474.217852][T18247] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 474.236441][T18247] syzkaller1: linktype set to 780 [ 474.275054][T18247] vlan0: entered promiscuous mode [ 474.280356][T18247] bridge0: entered promiscuous mode [ 474.530621][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3021'. [ 474.540220][T18254] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.673508][T18260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3023'. [ 474.691897][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 474.884747][T18080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 474.916583][T18270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3028'. [ 474.948193][T18080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.970406][T18080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 475.019607][T18080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.042842][T18080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 475.123548][T18080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.165896][T18080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 475.192567][T18080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.317074][T18295] openvswitch: netlink: IPv4 tun info is not correct [ 475.335844][T18295] netlink: 'syz.1.3034': attribute type 2 has an invalid length. [ 475.364714][T18295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.503958][T18080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.522834][ T5164] Bluetooth: hci2: command tx timeout [ 475.639973][T18080] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.694734][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.702028][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.738127][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.745433][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.445457][T18080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.705910][T18352] bond1: entered promiscuous mode [ 476.733805][T18352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.846503][T18080] veth0_vlan: entered promiscuous mode [ 476.915595][T18080] veth1_vlan: entered promiscuous mode [ 477.077724][T18080] veth0_macvtap: entered promiscuous mode [ 477.097674][T18080] veth1_macvtap: entered promiscuous mode [ 477.167297][T18080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.272990][T18381] __nla_validate_parse: 3 callbacks suppressed [ 477.273011][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'. [ 477.314231][T18080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.348314][ T7646] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.358841][T18379] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3051'. [ 477.392765][ T7646] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.490242][ T7646] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.534563][ T7646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.572276][T18389] bond13: (slave ip6gretap0): Enslaving as an active interface with an up link [ 477.591180][ T5164] Bluetooth: hci2: command tx timeout [ 477.645123][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3057'. [ 477.730640][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3057'. [ 477.868369][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.894461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.010506][ T7637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.050296][ T7637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.746403][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.759101][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 478.770294][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 478.781576][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 478.801828][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 478.834496][T18439] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 478.850730][T18439] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 478.859070][T18439] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 478.867233][T18439] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 478.875316][T18439] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 478.889945][T18445] netlink: 'syz.4.3069': attribute type 29 has an invalid length. [ 478.926541][T18445] netlink: 'syz.4.3069': attribute type 10 has an invalid length. [ 478.987328][T18437] wg1 speed is unknown, defaulting to 1000 [ 479.005205][T18437] lo speed is unknown, defaulting to 1000 [ 479.191046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6020 ms [ 479.199242][ C1] lec:lec_tx_timeout: lec0 [ 479.204471][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.227989][T18453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3070'. [ 479.258321][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 479.399824][T18455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3071'. [ 479.467021][T18457] syzkaller0: entered promiscuous mode [ 479.486596][T18457] syzkaller0: entered allmulticast mode [ 479.823218][T18462] wg1 speed is unknown, defaulting to 1000 [ 479.841218][T18462] lo speed is unknown, defaulting to 1000 [ 480.051193][T18464] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3074'. [ 480.173081][T18483] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3078'. [ 480.303549][T18437] chnl_net:caif_netlink_parms(): no params data found [ 480.328990][T18490] netlink: 'syz.2.3077': attribute type 1 has an invalid length. [ 480.459158][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3080'. [ 480.505470][T18490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 480.884017][ T5164] Bluetooth: hci1: command tx timeout [ 480.913336][T18437] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.924397][T18437] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.933329][T18437] bridge_slave_0: entered allmulticast mode [ 480.947500][T18437] bridge_slave_0: entered promiscuous mode [ 480.961414][T18437] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.970664][T18437] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.980664][T18437] bridge_slave_1: entered allmulticast mode [ 480.989271][T18437] bridge_slave_1: entered promiscuous mode [ 481.142464][T18437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.179455][T18437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.377745][T18437] team0: Port device team_slave_0 added [ 481.396809][T18437] team0: Port device team_slave_1 added [ 481.426674][T18437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.435466][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.463313][T18437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.478450][T18437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.485960][T18437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.513379][T18437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.567794][T18437] hsr_slave_0: entered promiscuous mode [ 481.576199][T18437] hsr_slave_1: entered promiscuous mode [ 481.582749][T18437] debugfs: 'hsr0' already exists in 'hsr' [ 481.588536][T18437] Cannot create hsr debugfs directory [ 482.391544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.402618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.412831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.421153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.951827][ T5164] Bluetooth: hci1: command tx timeout [ 483.755780][T18512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.813269][T18437] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 483.878647][T18437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.899358][T18437] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 483.948598][T18437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.968010][T18437] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 483.999404][T18437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.022253][T18437] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 484.055353][T18437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.164701][T18555] syzkaller1: entered promiscuous mode [ 484.183720][T18555] syzkaller1: entered allmulticast mode [ 484.232582][T18571] __nla_validate_parse: 3 callbacks suppressed [ 484.232606][T18571] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3091'. [ 484.267729][T18571] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3091'. [ 484.375186][T18575] wg1 speed is unknown, defaulting to 1000 [ 484.398512][T18575] lo speed is unknown, defaulting to 1000 [ 484.449197][T18437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.479919][T18437] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.507107][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.514413][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.565493][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.572811][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.938620][T18437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.951129][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 484.959292][ C1] lec:lec_tx_timeout: lec0 [ 484.964559][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.031300][ T5164] Bluetooth: hci1: command tx timeout [ 485.108232][T18437] veth0_vlan: entered promiscuous mode [ 485.133238][T18437] veth1_vlan: entered promiscuous mode [ 485.188279][T18437] veth0_macvtap: entered promiscuous mode [ 485.207839][T18437] veth1_macvtap: entered promiscuous mode [ 485.237976][T18437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.267946][T18437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.293015][ T7637] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.303259][ T7637] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.326101][ T7637] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.361752][ T7637] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.111317][ T5164] Bluetooth: hci1: command tx timeout [ 487.199431][T18574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.330556][ T7646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.366163][ T7646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.489056][ T7637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.510618][ T7637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.714929][T18618] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3101'. [ 487.960128][T18622] wg1 speed is unknown, defaulting to 1000 [ 487.992877][T18622] lo speed is unknown, defaulting to 1000 [ 488.020075][T18636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3105'. [ 488.048233][T18636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3105'. [ 488.154292][ C1] bridge0: port 1(bond0) entered learning state [ 488.259017][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 488.271769][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 488.282612][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 488.294088][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 488.302305][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 488.378125][T18638] wg1 speed is unknown, defaulting to 1000 [ 488.532821][T18648] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 488.689432][T18653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3112'. [ 488.754600][T18651] vlan2: entered allmulticast mode [ 488.760029][T18651] veth1_to_batadv: entered allmulticast mode [ 488.935720][T18638] lo speed is unknown, defaulting to 1000 [ 489.106842][ T57] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.509737][ T57] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.739646][ T57] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.842362][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'. [ 489.866454][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3119'. [ 489.900865][ T57] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.991893][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 490.000112][ C1] lec:lec_tx_timeout: lec0 [ 490.005530][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 490.392225][ T5164] Bluetooth: hci4: command tx timeout [ 490.955266][T18716] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.3127'. [ 491.095404][T18719] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 491.125892][T18638] chnl_net:caif_netlink_parms(): no params data found [ 491.287850][T18726] netlink: 'syz.2.3130': attribute type 10 has an invalid length. [ 491.319191][T18726] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3130'. [ 491.477694][ T57] bond0: left allmulticast mode [ 491.483098][ T57] bond_slave_0: left allmulticast mode [ 491.496232][ T57] bond0: left promiscuous mode [ 491.502602][ T57] bond_slave_0: left promiscuous mode [ 491.508793][ T57] bridge0: port 1(bond0) entered disabled state [ 491.548339][ T57] dvmrp6: left allmulticast mode [ 492.268437][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.278568][ T57] bond0 (unregistering): Released all slaves [ 492.290600][ T57] bond1 (unregistering): Released all slaves [ 492.310399][ T57] bond2 (unregistering): Released all slaves [ 492.326724][ T57] bond3 (unregistering): Released all slaves [ 492.352035][ T57] bond4 (unregistering): Released all slaves [ 492.368490][ T57] bond5 (unregistering): Released all slaves [ 492.395014][ T57] bond6 (unregistering): Released all slaves [ 492.414846][ T57] bond7 (unregistering): Released all slaves [ 492.431159][ T57] bond8 (unregistering): Released all slaves [ 492.447462][ T57] bond9 (unregistering): Released all slaves [ 492.471165][ T5164] Bluetooth: hci4: command tx timeout [ 492.478806][ T57] bond10 (unregistering): (slave veth39): Releasing active interface [ 492.487507][ T57] batadv0: entered promiscuous mode [ 492.494909][ T57] bond10 (unregistering): (slave batadv0): Releasing active interface [ 492.504857][ T57] bond10 (unregistering): Released all slaves [ 492.525327][ T57] bond11 (unregistering): Released all slaves [ 492.542057][ T57] bond12 (unregistering): Released all slaves [ 492.558869][ T57] bond13 (unregistering): Released all slaves [ 492.577685][ T57] bond14 (unregistering): Released all slaves [ 492.598919][ T57] bond15 (unregistering): Released all slaves [ 492.659503][T18726] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 492.853594][ T5508] 8021q: adding VLAN 0 to HW filter on device eth1 [ 492.907519][ T57] tipc: Disabling bearer [ 492.917044][ T57] tipc: Left network mode [ 493.252293][T18763] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 493.335501][T18763] bond1: (slave lo): Enslaving as an active interface with an up link [ 493.376723][T18763] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 493.439764][T18638] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.457943][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.477815][T18638] bridge_slave_0: entered allmulticast mode [ 493.500047][T18638] bridge_slave_0: entered promiscuous mode [ 493.532825][T18776] syzkaller0: entered promiscuous mode [ 493.539264][T18776] syzkaller0: entered allmulticast mode [ 493.627015][T18638] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.634845][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.645584][T18638] bridge_slave_1: entered allmulticast mode [ 493.655559][T18638] bridge_slave_1: entered promiscuous mode [ 493.667273][T18778] netlink: 'syz.0.3138': attribute type 12 has an invalid length. [ 493.965234][T18638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.024068][T18788] netlink: 'syz.0.3141': attribute type 4 has an invalid length. [ 494.075105][T18794] netlink: 'syz.0.3141': attribute type 4 has an invalid length. [ 494.083173][T18638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.290926][T18638] team0: Port device team_slave_0 added [ 494.349575][T18638] team0: Port device team_slave_1 added [ 494.413060][T18638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.420110][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.446849][T18638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.466373][T18638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.476757][T18638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.505727][T18638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.551410][ T5164] Bluetooth: hci4: command tx timeout [ 494.627016][T18638] hsr_slave_0: entered promiscuous mode [ 494.634303][T18638] hsr_slave_1: entered promiscuous mode [ 494.640907][T18638] debugfs: 'hsr0' already exists in 'hsr' [ 494.647032][T18638] Cannot create hsr debugfs directory [ 494.889316][ T5508] 8021q: adding VLAN 0 to HW filter on device eth2 [ 494.984464][ T57] hsr_slave_0: left promiscuous mode [ 494.990481][ T57] hsr_slave_1: left promiscuous mode [ 495.021066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 495.029215][ C1] lec:lec_tx_timeout: lec0 [ 495.187500][ T57] pim6reg (unregistering): left allmulticast mode [ 495.309558][ T57] team0 (unregistering): Port device team_slave_1 removed [ 495.325837][ T57] team0 (unregistering): Port device team_slave_0 removed [ 495.459485][ T57] team0 (unregistering): Port device dummy0 removed [ 495.496464][ T77] smc: removing ib device sqz0 [ 495.551082][ T5938] lo speed is unknown, defaulting to 1000 [ 495.557074][ T5938] sqz0: Port: 1 Link DOWN [ 495.592896][ T77] smbdirect: ib_dev[sqz0] removed [ 496.641689][ T5164] Bluetooth: hci4: command tx timeout [ 496.897114][T18638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.924173][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.946038][T18638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.968573][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.004415][T18638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 497.038863][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.053884][T18638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 497.089501][T18638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.327036][T18638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.388307][T18638] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.435699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.442975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.472791][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.480109][ T7637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.980447][T18638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.454807][T18638] veth0_vlan: entered promiscuous mode [ 498.496483][T18638] veth1_vlan: entered promiscuous mode [ 498.608216][T18638] veth0_macvtap: entered promiscuous mode [ 498.642671][T18638] veth1_macvtap: entered promiscuous mode [ 498.664242][T18638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.683404][T18638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.714147][ T7637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.725905][ T7637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.737187][ T7637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.757983][ T7637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.781480][ T57] IPVS: stop unused estimator thread 0... [ 498.936275][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.969269][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.045606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.066673][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.595982][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.607267][ T1317] lec:lec_start_xmit: lec0:No lecd attached [ 506.951413][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.959485][ C1] lec:lec_tx_timeout: lec0 [ 511.307240][T11824] lec:lec_start_xmit: lec0:No lecd attached [ 514.238080][T18919] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 514.249749][T18919] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3144'. [ 514.297705][T18919] syzkaller0: entered promiscuous mode [ 514.308625][T18919] syzkaller0: entered allmulticast mode [ 514.369409][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 514.397781][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3147'. [ 514.422922][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3146'. [ 514.464862][T18932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.643465][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.664131][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.673973][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.682800][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.693355][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.888797][T18943] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 514.898435][T18943] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 514.925373][T18938] wg1 speed is unknown, defaulting to 1000 [ 515.656251][T18976] wg1 speed is unknown, defaulting to 1000 [ 516.073666][T18938] chnl_net:caif_netlink_parms(): no params data found [ 516.084658][T18958] lec:lec_atm_close: lec0: Shut down! [ 516.116748][T19001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3163'. [ 516.184720][T19001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.261904][T19001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.517751][T18938] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.534161][T18938] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.549865][T18938] bridge_slave_0: entered allmulticast mode [ 516.568602][T18938] bridge_slave_0: entered promiscuous mode [ 516.592292][T18938] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.607667][T18938] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.615758][T18938] bridge_slave_1: entered allmulticast mode [ 516.625406][T18938] bridge_slave_1: entered promiscuous mode [ 516.751720][T18938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.764891][T19028] netlink: 'syz.2.3170': attribute type 1 has an invalid length. [ 516.779977][T18938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.801256][ T5164] Bluetooth: hci0: command tx timeout [ 516.970716][T19028] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.050067][ T7354] hid-generic 0005:0004:0004.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 517.136136][T18938] team0: Port device team_slave_0 added [ 517.166378][T18938] team0: Port device team_slave_1 added [ 517.306957][T19040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.324582][T19046] delete_channel: no stack [ 517.386365][T18938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.431563][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.522407][T18938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.565016][T18938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.581122][T18938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.664957][T18938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.744012][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3178'. [ 517.999693][T18938] hsr_slave_0: entered promiscuous mode [ 518.016348][T18938] hsr_slave_1: entered promiscuous mode [ 518.033173][T18938] debugfs: 'hsr0' already exists in 'hsr' [ 518.040538][T18938] Cannot create hsr debugfs directory [ 518.283774][T19084] gretap1: left promiscuous mode [ 518.288896][T19084] gretap1: left allmulticast mode [ 518.327547][T19084] bond1: left promiscuous mode [ 518.396446][ T1131] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.427280][ T1131] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.498212][ T1131] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.546419][ T1131] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.630066][T19099] netlink: 'syz.4.3189': attribute type 1 has an invalid length. [ 518.794537][T18938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.867984][T19100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'. [ 518.878104][ T5164] Bluetooth: hci0: command tx timeout [ 518.887364][T19105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 518.908487][T19100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'. [ 518.982344][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'. [ 519.175222][T18938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.212345][T19124] Bluetooth: MGMT ver 1.23 [ 519.248358][T19128] netlink: 'syz.2.3195': attribute type 6 has an invalid length. [ 519.360905][T19130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.428127][T18938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.582787][T18938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.757632][T19150] bridge1: entered promiscuous mode [ 519.769227][T19150] team0: entered promiscuous mode [ 519.776438][T19150] team_slave_0: entered promiscuous mode [ 519.782675][T19150] team_slave_1: entered promiscuous mode [ 519.790106][T19152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3200'. [ 519.948177][T19134] syzkaller0: entered promiscuous mode [ 519.953959][T19134] syzkaller0: entered allmulticast mode [ 520.304806][T19155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3203'. [ 520.961293][ T5164] Bluetooth: hci0: command tx timeout [ 521.095837][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 521.104004][ C1] lec:lec_tx_timeout: lec0 [ 522.817469][T18938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 522.842325][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.865060][T18938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 522.930875][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.004788][T18938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 523.015643][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.031284][ T5164] Bluetooth: hci0: command tx timeout [ 523.146311][T18938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 523.156863][T19191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3213'. [ 523.168533][T18938] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.267838][T19197] syzkaller0: entered promiscuous mode [ 523.276138][T19197] syzkaller0: entered allmulticast mode [ 523.290578][T19203] veth1_macvtap: left promiscuous mode [ 523.301272][T19203] macsec0: entered promiscuous mode [ 523.842068][T19217] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3217'. [ 525.869334][T19203] veth1_macvtap: entered promiscuous mode [ 525.875732][T19203] macsec0: left promiscuous mode [ 526.182990][T19227] syzkaller0: entered promiscuous mode [ 526.198234][T19227] syzkaller0: entered allmulticast mode [ 526.234239][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'. [ 526.297815][T19233] wg1 speed is unknown, defaulting to 1000 [ 526.323565][T19235] tipc: Started in network mode [ 526.329281][T19235] tipc: Node identity c629ff9ea495, cluster identity 4711 [ 526.337330][T19235] tipc: Enabled bearer , priority 0 [ 526.399386][T18938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.543077][T18938] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.598054][T19250] netlink: 'syz.0.3225': attribute type 1 has an invalid length. [ 526.651761][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.659001][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.696527][T19250] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 526.720080][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.727417][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.746311][T19250] macvlan2: entered promiscuous mode [ 526.752984][T19250] macvlan2: entered allmulticast mode [ 526.759622][T19250] bond1: entered promiscuous mode [ 526.766656][T19250] bridge2: entered promiscuous mode [ 526.773153][T19250] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 526.781630][T19250] bond1: left promiscuous mode [ 526.786473][T19250] bridge2: left promiscuous mode [ 526.811125][T19255] C: renamed from team_slave_0 (while UP) [ 526.820338][T19255] netlink: 'syz.4.3226': attribute type 4 has an invalid length. [ 526.828250][T19255] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3226'. [ 526.838258][T19255] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 526.934631][T18938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.994316][T19228] tipc: Disabling bearer [ 527.095795][T19257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3227'. [ 527.194544][T19267] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 527.365844][T19281] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3227'. [ 527.722868][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 527.757774][T19288] vxcan3: entered promiscuous mode [ 528.014632][T19295] wg1 speed is unknown, defaulting to 1000 [ 528.055401][T19304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3236'. [ 528.127250][T19297] wg1 speed is unknown, defaulting to 1000 [ 528.157205][T18938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.264870][T19313] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3238'. [ 528.295169][T19299] tipc: Started in network mode [ 528.300233][T19299] tipc: Node identity , cluster identity 4711 [ 528.310918][T19299] tipc: Failed to obtain node identity [ 528.332562][T19299] tipc: Enabling of bearer rejected, failed to enable media [ 529.703663][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 530.007128][T19344] wg1 speed is unknown, defaulting to 1000 [ 530.029795][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 530.044905][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 530.056133][T18938] veth0_vlan: entered promiscuous mode [ 530.113312][T18938] veth1_vlan: entered promiscuous mode [ 530.304577][T18938] veth0_macvtap: entered promiscuous mode [ 530.316039][T18938] veth1_macvtap: entered promiscuous mode [ 530.341918][T18938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.375366][T18938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.532553][ T7646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.563432][ T7646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.626870][ T7646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.667993][ T7646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.006922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.036053][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.180263][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.233341][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.619730][T19402] __nla_validate_parse: 4 callbacks suppressed [ 531.619750][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 531.729253][T19407] ip6gretap0: entered promiscuous mode [ 531.773833][T19411] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3264'. [ 531.806273][T19405] dummy0: entered promiscuous mode [ 531.846479][T19405] dummy0: entered allmulticast mode [ 531.902327][T19410] tipc: Started in network mode [ 531.919270][T19410] tipc: Node identity c65a1cea213a, cluster identity 4711 [ 531.934446][T19410] tipc: Enabled bearer , priority 0 [ 531.952032][T19407] syzkaller0: entered promiscuous mode [ 531.957849][T19407] syzkaller0: entered allmulticast mode [ 532.271915][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 532.297771][T19397] tipc: Resetting bearer [ 532.439938][T19397] tipc: Disabling bearer [ 532.468197][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 532.877999][T19447] netlink: 'syz.1.3276': attribute type 1 has an invalid length. [ 533.153700][T19461] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3280'. [ 533.167595][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3280'. [ 533.178333][T19463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3280'. [ 533.469310][T19484] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^&J?=\l[[i5` [ 533.650163][T19495] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3288'. [ 534.055961][T19517] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3294'. [ 534.148279][T19522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3295'. [ 534.621724][T19545] netlink: 'syz.1.3303': attribute type 1 has an invalid length. [ 534.645886][T19545] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.653865][T19545] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.668552][T19545] bridge0: entered promiscuous mode [ 534.826550][T19551] netlink: zone id is out of range [ 534.840670][T19551] netlink: zone id is out of range [ 534.855772][T19551] netlink: zone id is out of range [ 534.855772][T19548] netlink: 'syz.2.3304': attribute type 1 has an invalid length. [ 534.855793][T19548] netlink: 'syz.2.3304': attribute type 2 has an invalid length. [ 534.869213][T19551] netlink: zone id is out of range [ 534.869256][T19551] netlink: zone id is out of range [ 534.869266][T19551] netlink: zone id is out of range [ 534.869290][T19551] netlink: zone id is out of range [ 534.869300][T19551] netlink: zone id is out of range [ 534.869310][T19551] netlink: zone id is out of range [ 534.869319][T19551] netlink: zone id is out of range [ 536.281361][T19613] ip6gre1: entered promiscuous mode [ 536.296900][T19613] ip6gre1: entered allmulticast mode [ 536.850659][T19626] __nla_validate_parse: 10 callbacks suppressed [ 536.850678][T19626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3327'. [ 536.971437][T19637] netlink: 'syz.3.3327': attribute type 9 has an invalid length. [ 536.988033][T19636] netlink: 'syz.0.3329': attribute type 3 has an invalid length. [ 537.018783][T19636] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 537.051119][T19637] netlink: 'syz.3.3327': attribute type 6 has an invalid length. [ 537.059399][T19636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3329'. [ 537.070786][T19633] wg1 speed is unknown, defaulting to 1000 [ 537.530318][T19650] veth0: entered promiscuous mode [ 537.909432][T19647] veth0: left promiscuous mode [ 537.916480][T19658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3332'. [ 538.096777][T19662] xt_TCPMSS: Only works on TCP SYN packets [ 538.307517][T19674] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 538.543008][T19680] netlink: 'syz.4.3339': attribute type 10 has an invalid length. [ 538.688803][T19676] xt_hashlimit: size too large, truncated to 1048576 [ 538.744699][T19680] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 538.945282][T19678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.259790][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 539.273052][T19702] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3341'. [ 539.340119][T19702] geneve2: entered promiscuous mode [ 540.216165][T19729] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 540.924762][T19752] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3354'. [ 541.057096][T19758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3355'. [ 541.098498][T19754] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.106332][T19754] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.483159][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3356'. [ 541.532822][T19754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.593954][T19754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.934460][T19785] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.3360'. [ 542.168139][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.193792][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.236154][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.317442][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.565296][T19805] netlink: 'syz.3.3365': attribute type 1 has an invalid length. [ 542.690637][T19805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.766391][T19800] netlink: 'syz.1.3363': attribute type 1 has an invalid length. [ 542.780402][T19816] netlink: 'syz.4.3367': attribute type 4 has an invalid length. [ 542.787650][T19800] netlink: 'syz.1.3363': attribute type 2 has an invalid length. [ 542.801117][T19816] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3367'. [ 542.814604][T19819] xt_CONNSECMARK: invalid mode: 0 [ 542.830167][T19816] net_ratelimit: 390 callbacks suppressed [ 542.830186][T19816] wlan1: mtu less than device minimum [ 542.831534][T19818] xt_CONNSECMARK: invalid mode: 0 [ 543.290151][T19838] netlink: 'syz.2.3375': attribute type 12 has an invalid length. [ 543.347560][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'. [ 543.381253][T19845] xt_l2tp: invalid flags combination: 8 [ 543.396732][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3375'. [ 543.765611][T19857] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 543.796279][T19857] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 543.819490][T19857] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 544.108261][T19871] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 544.214837][T19879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3382'. [ 544.699999][T19883] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.853935][T19903] wg1 speed is unknown, defaulting to 1000 [ 545.106935][T19883] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.141990][T19910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3391'. [ 545.154350][T19910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3391'. [ 545.166163][T19910] netlink: 'syz.3.3391': attribute type 1 has an invalid length. [ 545.332076][T19883] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.545697][T19883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.816174][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3396'. [ 545.849421][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.868106][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.038106][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.112147][ T7646] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.263093][T19946] wg1 speed is unknown, defaulting to 1000 [ 546.528137][T19958] syzkaller1: entered promiscuous mode [ 546.536629][T19958] syzkaller1: entered allmulticast mode [ 546.765833][T19969] No such timeout policy "syz0" [ 547.213515][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 547.390093][ T807] IPVS: starting estimator thread 0... [ 547.393106][T19999] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 547.491128][T20002] IPVS: using max 26 ests per chain, 62400 per kthread [ 547.791565][T19979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.956757][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3415'. [ 548.512826][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 548.633219][T20021] netlink: 'syz.2.3419': attribute type 12 has an invalid length. [ 548.667970][T20021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3419'. [ 548.706242][T20031] x_tables: duplicate underflow at hook 1 [ 548.715771][T20030] netlink: 'syz.2.3419': attribute type 39 has an invalid length. [ 548.893240][T20037] sctp: [Deprecated]: syz.0.3422 (pid 20037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.893240][T20037] Use struct sctp_sack_info instead [ 548.948437][T20038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3423'. [ 548.973787][T20040] sctp: [Deprecated]: syz.0.3422 (pid 20040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.973787][T20040] Use struct sctp_sack_info instead [ 549.179082][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3425'. [ 549.264868][T20053] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3426'. [ 549.562817][T20061] wg1 speed is unknown, defaulting to 1000 [ 549.726536][T20078] xt_l2tp: v2 doesn't support IP mode [ 549.746392][T20078] xt_l2tp: v2 doesn't support IP mode [ 549.799904][T20074] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 550.479415][T20119] netlink: 'syz.2.3439': attribute type 3 has an invalid length. [ 550.500229][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3439'. [ 550.624959][T20100] syzkaller0: entered promiscuous mode [ 550.643686][T20100] syzkaller0: entered allmulticast mode [ 551.807855][T20162] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 553.885289][T20162] tipc: Started in network mode [ 553.890540][T20162] tipc: Node identity ac14140f, cluster identity 4711 [ 553.916029][T20162] tipc: New replicast peer: 255.255.255.255 [ 553.932011][T20162] tipc: Enabled bearer , priority 10 [ 554.138796][T20182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3456'. [ 554.253469][T20186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.463312][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3458'. [ 554.614905][T20211] netlink: 'syz.0.3461': attribute type 13 has an invalid length. [ 554.686679][ T7646] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.697475][T20211] netlink: 'syz.0.3461': attribute type 13 has an invalid length. [ 554.722316][ T7646] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.762640][ T7646] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.777469][ T7646] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.051381][T17758] tipc: Node number set to 2886997007 [ 555.132002][T20231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3467'. [ 555.242693][T20233] : entered promiscuous mode [ 555.305812][T20241] bond_slave_1: entered allmulticast mode [ 555.408792][T20247] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3471'. [ 555.548671][T20251] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 556.026164][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'. [ 556.048908][T20272] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3479'. [ 556.407762][T20287] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3483'. [ 556.440461][T20287] 0X: renamed from caif0 [ 556.479969][T20287] 0X: entered allmulticast mode [ 556.498920][T20287] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 556.759148][T20299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 556.898457][T20305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3488'. [ 556.919873][T20307] tipc: Enabled bearer , priority 10 [ 556.941254][T20305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3488'. [ 557.209312][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3490'. [ 557.264830][T20318] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 557.326920][T20323] wg1 speed is unknown, defaulting to 1000 [ 557.451739][T20326] netlink: 'syz.4.3492': attribute type 1 has an invalid length. [ 557.556319][T20326] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 557.584746][T20326] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 557.707667][T20331] bond1: (slave gretap2): making interface the new active one [ 557.718430][T20331] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 557.999727][ T7646] batadv1: left allmulticast mode [ 558.027768][ T7646] batadv1: left promiscuous mode [ 558.049820][ T7646] bridge0: port 1(batadv1) entered disabled state [ 558.106677][ T7646] pimreg: left allmulticast mode [ 558.345164][ T7646] gretap0 (unregistering): left promiscuous mode [ 558.373858][ T7646] bond4 (unregistering): (slave gretap1): Releasing active interface [ 558.414774][ T7646] bond5 (unregistering): (slave gretap2): Releasing active interface [ 558.808589][ T7646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.819349][ T7646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.829400][ T7646] bond0 (unregistering): Released all slaves [ 558.843429][ T7646] bond1 (unregistering): Released all slaves [ 558.862804][ T7646] bond2 (unregistering): Released all slaves [ 558.884613][ T7646] bond3 (unregistering): Released all slaves [ 558.906008][ T7646] bond4 (unregistering): Released all slaves [ 558.924134][ T7646] bond5 (unregistering): Released all slaves [ 558.944682][ T7646] team0: Port device bond6 removed [ 558.950883][ T7646] bond6 (unregistering): Released all slaves [ 558.974299][ T7646] bond7 (unregistering): Released all slaves [ 558.989985][ T7646] bond8 (unregistering): Released all slaves [ 559.011780][T17404] tipc: Node number set to 3881835754 [ 559.251798][T20360] wg1 speed is unknown, defaulting to 1000 [ 559.385687][ T7646] tipc: Left network mode [ 559.447564][ T30] audit: type=1800 audit(1777237626.625:18): pid=20376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3501" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=477 res=0 errno=0 [ 559.786028][T20385] syzkaller0: entered promiscuous mode [ 559.799589][T20385] syzkaller0: entered allmulticast mode [ 560.394939][T20413] __nla_validate_parse: 4 callbacks suppressed [ 560.394967][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3510'. [ 560.487066][T20413] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3510'. [ 560.783422][T20426] netlink: 'syz.2.3514': attribute type 13 has an invalid length. [ 561.005966][T20434] bridge0: left promiscuous mode [ 561.142908][T20434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.158425][T20434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.290090][T20434] geneve2: left promiscuous mode [ 561.392175][ T77] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.429079][ T77] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.698600][ T7646] veth1_to_team: left promiscuous mode [ 561.733006][ T7646] veth0: left promiscuous mode [ 561.786399][ T7646] hsr_slave_0: left promiscuous mode [ 561.810233][ T7646] hsr_slave_1: left promiscuous mode [ 561.821973][ T7646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.036419][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3527'. [ 562.095940][ T7646] team0 (unregistering): Port device team_slave_1 removed [ 562.273357][ T77] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.282555][ T77] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.338116][T20460] veth1_to_team: Caught tx_queue_len zero misconfig [ 562.556805][T20476] mac80211_hwsim hwsim44 ;: renamed from wlan0 (while UP) [ 562.664212][T20483] netlink: 'syz.0.3530': attribute type 1 has an invalid length. [ 562.691479][T20483] netlink: 'syz.0.3530': attribute type 2 has an invalid length. [ 562.730728][T20485] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3533'. [ 562.902675][ T7646] IPVS: stop unused estimator thread 0... [ 562.933438][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3537'. [ 563.035575][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.053755][ T1317] lec:lec_start_xmit: lec0:No lecd attached [ 563.410826][T20521] netlink: 'syz.0.3540': attribute type 8 has an invalid length. [ 563.438022][T20520] macsec0: entered promiscuous mode [ 563.450871][T20520] macsec0: left promiscuous mode [ 563.665051][T20536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3546'. [ 563.698498][T20536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3546'. [ 563.889312][ T30] audit: type=1804 audit(1777237631.065:19): pid=20551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3551" name="/newroot/101/cgroup.controllers" dev="tmpfs" ino=530 res=1 errno=0 [ 563.943654][ T30] audit: type=1800 audit(1777237631.065:20): pid=20551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3551" name="cgroup.controllers" dev="tmpfs" ino=530 res=0 errno=0 [ 564.190766][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 564.337618][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 564.565413][T20575] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3557'. [ 564.737902][T20577] vlan3: entered allmulticast mode [ 564.751102][T20577] macvtap0: entered allmulticast mode [ 564.766349][T20577] veth0_macvtap: entered allmulticast mode [ 564.939026][T20590] tipc: Cannot configure node identity twice [ 564.976193][T20594] netlink: 'syz.3.3563': attribute type 10 has an invalid length. [ 565.020770][T20594] hsr0: entered promiscuous mode [ 565.061972][T20594] bridge0: port 3(hsr0) entered blocking state [ 565.102601][T20594] bridge0: port 3(hsr0) entered disabled state [ 565.139961][T20594] hsr0: entered allmulticast mode [ 565.151277][T20594] hsr_slave_0: entered allmulticast mode [ 565.184745][T20594] hsr_slave_1: entered allmulticast mode [ 565.269984][T20594] bridge0: port 3(hsr0) entered blocking state [ 565.276387][T20594] bridge0: port 3(hsr0) entered forwarding state [ 565.314915][T20612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.352940][T20612] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 565.649420][T20634] __nla_validate_parse: 4 callbacks suppressed [ 565.649440][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3572'. [ 565.682038][T20633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3572'. [ 565.738208][T20634] bond0: entered promiscuous mode [ 565.801857][T20634] bond_slave_0: entered promiscuous mode [ 565.819328][T20634] bond_slave_1: entered promiscuous mode [ 565.843853][T20634] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 565.889135][T20634] bond0: left promiscuous mode [ 565.908035][T20634] bond_slave_0: left promiscuous mode [ 565.918426][T20634] bond_slave_1: left promiscuous mode [ 565.929773][T20634] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 566.026847][T20633] bond0: entered promiscuous mode [ 566.040737][T20633] bond_slave_0: entered promiscuous mode [ 566.047181][T20633] bond_slave_1: entered promiscuous mode [ 566.055161][T20633] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 566.073186][T20633] bond0: left promiscuous mode [ 566.088221][T20633] bond_slave_0: left promiscuous mode [ 566.095797][T20633] bond_slave_1: left promiscuous mode [ 566.110577][T20633] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 566.174598][T20666] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3579'. [ 566.225667][T20646] wg1 speed is unknown, defaulting to 1000 [ 566.272708][T20637] wg1 speed is unknown, defaulting to 1000 [ 566.488988][T20679] netlink: 'syz.3.3585': attribute type 1 has an invalid length. [ 566.680815][T20687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3583'. [ 566.810299][T20673] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3583'. [ 566.829350][T20673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3583'. [ 566.838803][T20673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3583'. [ 566.855756][T20680] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 566.868458][T20680] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 566.940434][T20681] bond3: (slave gretap2): making interface the new active one [ 566.950253][T20681] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 566.988176][T20673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.304124][T20704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3590'. [ 567.347038][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3590'. [ 567.374947][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3590'. [ 567.776974][T20736] wg1 speed is unknown, defaulting to 1000 [ 567.914153][T20748] No such timeout policy "syz0" [ 567.936416][T20752] No such timeout policy "syz0" [ 568.061038][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.069171][ C1] lec:lec_tx_timeout: lec0 [ 568.460356][T20778] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 568.705027][T20786] IPVS: set_ctl: invalid protocol: 137 172.20.20.55:20003 [ 568.755276][T20794] netlink: 'syz.2.3614': attribute type 21 has an invalid length. [ 569.212058][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.390357][T20820] bond5: entered promiscuous mode [ 569.396367][T20820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 569.407886][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.420707][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.441199][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.479663][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.553057][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.570028][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.582471][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 569.590548][T20820] netlink: 'syz.2.3624': attribute type 1 has an invalid length. [ 570.008201][T20861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.517052][T20892] x_tables: unsorted entry at hook 3 [ 570.656881][T20903] __nla_validate_parse: 14 callbacks suppressed [ 570.656909][T20903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3643'. [ 570.693773][T20903] delete_channel: no stack [ 570.747743][T20909] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3647'. [ 570.842476][T20903] bond1: entered promiscuous mode [ 570.857567][T20903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.975039][T20912] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.987965][T20912] bond1: (slave bond2): making interface the new active one [ 570.995613][T20912] bond2: entered promiscuous mode [ 571.004311][T20912] bond1: (slave bond2): Enslaving as an active interface with an up link [ 571.423246][T20935] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3649'. [ 571.455080][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3649'. [ 571.633631][T20939] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3650'. [ 571.647013][T20938] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3651'. [ 571.703082][T20939] syzkaller1: entered promiscuous mode [ 571.733612][T20939] syzkaller1: entered allmulticast mode [ 571.839132][T20944] sit1: entered promiscuous mode [ 571.960315][T20954] syzkaller1: entered promiscuous mode [ 571.979353][T20954] syzkaller1: entered allmulticast mode [ 572.055076][T20962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3655'. [ 572.447666][T20971] macsec2: entered promiscuous mode [ 572.478025][T20971] erspan0: entered promiscuous mode [ 572.505285][T20971] erspan0: left promiscuous mode [ 572.574943][T20978] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3657'. [ 572.614356][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3659'. [ 572.664832][T20979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3659'. [ 572.665001][ T7646] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.711230][ T7646] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.730856][ T7646] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.878670][ T77] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.246265][T21015] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 574.322710][T21061] validate_nla: 32 callbacks suppressed [ 574.322732][T21061] netlink: 'syz.4.3676': attribute type 1 has an invalid length. [ 574.504266][T21061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 574.630720][T21088] netlink: 'syz.1.3682': attribute type 21 has an invalid length. [ 574.681705][T21073] bond2: (slave gretap3): making interface the new active one [ 574.764340][T21073] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 574.907352][T21079] bond2 (unregistering): (slave gretap3): Releasing active interface [ 574.975024][T21079] bond2 (unregistering): Released all slaves [ 575.060151][T21088] netlink: 'syz.1.3682': attribute type 6 has an invalid length. [ 575.328124][T21122] kthread_run failed with err -4 [ 575.706010][T11824] lec:lec_start_xmit: lec0:No lecd attached [ 576.489684][T21173] xt_bpf: check failed: parse error [ 576.674613][T21184] netlink: 'syz.1.3704': attribute type 4 has an invalid length. [ 576.694109][T21184] __nla_validate_parse: 8 callbacks suppressed [ 576.694129][T21184] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3704'. [ 576.807033][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 576.816402][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 577.047173][T21191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3706'. [ 577.074720][T21191] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3706'. [ 577.639516][T21200] tipc: Enabled bearer , priority 14 [ 577.723675][T21212] netlink: 'syz.0.3711': attribute type 21 has an invalid length. [ 577.731974][T21212] netlink: 'syz.0.3711': attribute type 29 has an invalid length. [ 577.740223][T21212] netlink: 'syz.0.3711': attribute type 23 has an invalid length. [ 577.748519][T21212] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.900163][T21224] netlink: 'syz.0.3714': attribute type 1 has an invalid length. [ 577.908486][T21224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.951516][T21225] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3712'. [ 578.040155][T21231] openvswitch: netlink: Actions may not be safe on all matching packets [ 578.606730][T21256] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 578.634543][T21219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.667777][T21256] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 578.679591][T21256] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 578.705791][T21261] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3722'. [ 578.762220][T21262] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 578.806696][T21263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3722'. [ 578.956068][ T10] tipc: Node number set to 1656553374 [ 578.966302][T21269] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 578.985581][T21263] 8021q: adding VLAN 0 to HW filter on device bond6 [ 579.060848][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 579.085487][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 579.321995][T21277] netlink: 'syz.1.3728': attribute type 7 has an invalid length. [ 579.380382][T21277] netlink: 'syz.1.3728': attribute type 49 has an invalid length. [ 579.483109][T21284] netlink: 'syz.1.3728': attribute type 2 has an invalid length. [ 579.832137][T21287] syzkaller0: entered promiscuous mode [ 579.838977][T21287] syzkaller0: entered allmulticast mode [ 579.945330][T21306] netlink: zone id is out of range [ 579.950742][T21282] netlink: zone id is out of range [ 579.959507][T21306] netlink: zone id is out of range [ 579.966924][T21282] netlink: zone id is out of range [ 579.972647][T21282] netlink: zone id is out of range [ 579.977854][T21306] netlink: zone id is out of range [ 579.983447][T21282] netlink: zone id is out of range [ 579.988680][T21306] netlink: zone id is out of range [ 579.997653][T21282] netlink: zone id is out of range [ 580.004455][T21307] Cannot find del_set index 4 as target [ 580.955260][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 580.963376][ C1] lec:lec_tx_timeout: lec0 [ 583.026428][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3737'. [ 583.036518][T21334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3737'. [ 583.093135][T21342] bridge1: entered allmulticast mode [ 583.181506][T21347] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3739'. [ 583.700757][T21327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.722211][T21379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3747'. [ 584.088102][T21387] netlink: 'syz.2.3750': attribute type 1 has an invalid length. [ 584.187768][T21390] x_tables: duplicate underflow at hook 1 [ 584.222037][T21392] geneve2: entered promiscuous mode [ 584.256366][T21394] tipc: Enabling of bearer rejected, failed to enable media [ 584.456056][T21400] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 584.469584][T21400] bond4 (unregistering): Released all slaves [ 584.527101][T21408] wg1 speed is unknown, defaulting to 1000 [ 584.594711][T21413] block nbd3: server does not support multiple connections per device. [ 584.611794][T21413] block nbd3: shutting down sockets [ 584.725209][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3755'. [ 584.838836][T21430] netlink: 'syz.3.3758': attribute type 22 has an invalid length. [ 584.878827][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3758'. [ 584.962173][T21435] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3760'. [ 585.008994][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3759'. [ 585.008993][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3759'. [ 585.422482][T21446] bpq0: entered promiscuous mode [ 585.431516][T21446] bpq0: entered allmulticast mode [ 585.485771][T21450] net_ratelimit: 25 callbacks suppressed [ 585.485796][T21450] openvswitch: netlink: Key type 310 is out of range max 32 [ 585.542272][T21446] netlink: 'syz.3.3763': attribute type 1 has an invalid length. [ 585.549278][T21458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.637015][T21446] bridge0: entered promiscuous mode [ 585.654816][T21460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3769'. [ 585.682348][T21446] hsr1: entered allmulticast mode [ 585.698894][T21446] bridge0: entered allmulticast mode [ 585.741810][ T5938] [ 585.744221][ T5938] ============================================ [ 585.750422][ T5938] WARNING: possible recursive locking detected [ 585.756612][ T5938] syzkaller #0 Not tainted [ 585.761067][ T5938] -------------------------------------------- [ 585.762165][T21460] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.767241][ T5938] kworker/0:7/5938 is trying to acquire lock: [ 585.767257][ T5938] ffff88803b448ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 585.788993][ T5938] [ 585.788993][ T5938] but task is already holding lock: [ 585.796426][ T5938] ffff88807fbe8ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 585.805529][ T5938] [ 585.805529][ T5938] other info that might help us debug this: [ 585.813615][ T5938] Possible unsafe locking scenario: [ 585.813615][ T5938] [ 585.821162][ T5938] CPU0 [ 585.824483][ T5938] ---- [ 585.827837][ T5938] lock(&hsr->seqnr_lock); [ 585.832397][ T5938] lock(&hsr->seqnr_lock); [ 585.836935][ T5938] [ 585.836935][ T5938] *** DEADLOCK *** [ 585.836935][ T5938] [ 585.845099][ T5938] May be due to missing lock nesting notation [ 585.845099][ T5938] [ 585.853454][ T5938] 13 locks held by kworker/0:7/5938: [ 585.858757][ T5938] #0: ffff8880329a0940 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 585.869590][ T5938] #1: ffffc90004f67c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 585.882774][ T5938] #2: ffff88802a537530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 585.892044][ T5938] #3: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 585.901310][ T5938] #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 585.910389][ T5938] #5: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 585.920317][ T5938] #6: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 585.929474][ T5938] #7: ffff88807fbe8ff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 585.938981][ T5938] #8: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 585.948520][ T5938] #9: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 585.958534][ T5938] #10: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 585.967869][ T5938] #11: ffffffff8e95cd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 585.977885][ T5938] #12: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 585.987155][ T5938] [ 585.987155][ T5938] stack backtrace: [ 585.993061][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 585.993081][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.993093][ T5938] Workqueue: mld mld_ifc_work [ 585.993126][ T5938] Call Trace: [ 585.993135][ T5938] [ 585.993142][ T5938] dump_stack_lvl+0xe8/0x150 [ 585.993171][ T5938] print_deadlock_bug+0x279/0x290 [ 585.993191][ T5938] __lock_acquire+0x253f/0x2cf0 [ 585.993220][ T5938] ? __lock_acquire+0x6b5/0x2cf0 [ 585.993245][ T5938] ? skb_network_protocol+0x23d/0x400 [ 585.993272][ T5938] ? hsr_dev_xmit+0x237/0x360 [ 585.993288][ T5938] lock_acquire+0x106/0x350 [ 585.993312][ T5938] ? hsr_dev_xmit+0x237/0x360 [ 585.993330][ T5938] ? __pfx_netif_skb_features+0x10/0x10 [ 585.993347][ T5938] ? lock_acquire+0x106/0x350 [ 585.993372][ T5938] ? hsr_dev_xmit+0x237/0x360 [ 585.993387][ T5938] _raw_spin_lock_bh+0x36/0x50 [ 585.993407][ T5938] ? hsr_dev_xmit+0x237/0x360 [ 585.993422][ T5938] hsr_dev_xmit+0x237/0x360 [ 585.993437][ T5938] ? hsr_dev_xmit+0x2d/0x360 [ 585.993454][ T5938] dev_hard_start_xmit+0x2cd/0x830 [ 585.993478][ T5938] __dev_queue_xmit+0x14d9/0x3950 [ 585.993501][ T5938] ? __dev_queue_xmit+0x2b6/0x3950 [ 585.993522][ T5938] ? ebt_do_table+0x2665/0x2830 [ 585.993543][ T5938] ? ebt_do_table+0x2665/0x2830 [ 585.993565][ T5938] ? __pfx___dev_queue_xmit+0x10/0x10 [ 585.993593][ T5938] ? br_nf_post_routing+0x219/0xfe0 [ 585.993610][ T5938] ? lock_acquire+0x106/0x350 [ 585.993638][ T5938] br_dev_queue_push_xmit+0x370/0x4b0 [ 585.993655][ T5938] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 585.993671][ T5938] NF_HOOK+0x360/0x3f0 [ 585.993688][ T5938] ? NF_HOOK+0xa2/0x3f0 [ 585.993702][ T5938] ? __pfx_NF_HOOK+0x10/0x10 [ 585.993718][ T5938] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 585.993734][ T5938] ? lock_acquire+0x106/0x350 [ 585.993762][ T5938] br_forward_finish+0xd3/0x130 [ 585.993776][ T5938] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 585.993793][ T5938] ? __pfx_br_forward_finish+0x10/0x10 [ 585.993809][ T5938] NF_HOOK+0x360/0x3f0 [ 585.993825][ T5938] ? NF_HOOK+0xa2/0x3f0 [ 585.993839][ T5938] ? __pfx_NF_HOOK+0x10/0x10 [ 585.993855][ T5938] ? __pfx_br_forward_finish+0x10/0x10 [ 585.993872][ T5938] ? __skb_clone+0x483/0x7a0 [ 585.993888][ T5938] ? br_handle_vlan+0x61/0x530 [ 585.993912][ T5938] __br_forward+0x397/0x540 [ 585.993927][ T5938] ? __pfx_br_forward_finish+0x10/0x10 [ 585.993945][ T5938] br_flood+0x6ee/0xb80 [ 585.993965][ T5938] ? br_dev_xmit+0x193/0x1990 [ 585.993986][ T5938] br_dev_xmit+0x12bd/0x1990 [ 585.994007][ T5938] ? br_dev_xmit+0x193/0x1990 [ 585.994029][ T5938] ? __pfx_br_dev_xmit+0x10/0x10 [ 585.994053][ T5938] ? __netif_set_xps_queue+0x1c0/0x1e00 [ 585.994074][ T5938] dev_hard_start_xmit+0x2cd/0x830 [ 585.994098][ T5938] __dev_queue_xmit+0x14d9/0x3950 [ 585.994120][ T5938] ? __dev_queue_xmit+0x2b6/0x3950 [ 585.994139][ T5938] ? trace_kmem_cache_alloc+0x29/0xe0 [ 585.994160][ T5938] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 585.994180][ T5938] ? __pfx___dev_queue_xmit+0x10/0x10 [ 585.994199][ T5938] ? __asan_memcpy+0x40/0x70 [ 585.994216][ T5938] ? __pskb_copy_fclone+0xb1a/0x1120 [ 585.994236][ T5938] ? __asan_memcpy+0x40/0x70 [ 585.994260][ T5938] ? __pskb_copy_fclone+0xb1a/0x1120 [ 585.994284][ T5938] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 585.994303][ T5938] ? hsr_addr_subst_dest+0x30d/0xa90 [ 585.994322][ T5938] hsr_forward_skb+0x167e/0x2a80 [ 585.994345][ T5938] ? ret_from_fork_asm+0x1a/0x30 [ 585.994381][ T5938] ? hsr_forward_skb+0xbb/0x2a80 [ 585.994399][ T5938] ? __pfx_hsr_forward_skb+0x10/0x10 [ 585.994416][ T5938] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.994436][ T5938] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 585.994454][ T5938] ? __pfx_netif_skb_features+0x10/0x10 [ 585.994470][ T5938] ? hsr_dev_xmit+0x237/0x360 [ 585.994485][ T5938] hsr_dev_xmit+0x242/0x360 [ 585.994498][ T5938] ? hsr_dev_xmit+0x2d/0x360 [ 585.994513][ T5938] dev_hard_start_xmit+0x2cd/0x830 [ 585.994553][ T5938] __dev_queue_xmit+0x14d9/0x3950 [ 585.994573][ T5938] ? __dev_queue_xmit+0x2b6/0x3950 [ 585.994594][ T5938] ? __pfx___dev_queue_xmit+0x10/0x10 [ 585.994612][ T5938] ? neigh_connected_output+0x1ea/0x460 [ 585.994635][ T5938] ? eth_header+0x11b/0x200 [ 585.994652][ T5938] ? __asan_memcpy+0x40/0x70 [ 585.994674][ T5938] ? ip6_output+0x126/0x550 [ 585.994694][ T5938] ip6_output+0x340/0x550 [ 585.994715][ T5938] ? __pfx_ip6_output+0x10/0x10 [ 585.994736][ T5938] NF_HOOK+0x177/0x4f0 [ 585.994758][ T5938] ? __pfx_NF_HOOK+0x10/0x10 [ 585.994779][ T5938] ? __pfx_dst_output+0x10/0x10 [ 585.994799][ T5938] ? lockdep_hardirqs_on+0x7a/0x110 [ 585.994818][ T5938] ? __local_bh_enable_ip+0xd0/0x130 [ 585.994841][ T5938] ? icmp6_dst_alloc+0x3a6/0x440 [ 585.994865][ T5938] mld_sendpack+0x8b4/0xe40 [ 585.994891][ T5938] ? mld_sendpack+0x213/0xe40 [ 585.994912][ T5938] ? __pfx_mld_sendpack+0x10/0x10 [ 585.994940][ T5938] mld_ifc_work+0x835/0xe70 [ 585.994962][ T5938] ? process_scheduled_works+0xa70/0x1860 [ 585.994984][ T5938] process_scheduled_works+0xb5d/0x1860 [ 585.995016][ T5938] ? __pfx_process_scheduled_works+0x10/0x10 [ 585.995039][ T5938] ? assign_work+0x3d5/0x5e0 [ 585.995061][ T5938] worker_thread+0xa53/0xfc0 [ 585.995092][ T5938] kthread+0x388/0x470 [ 585.995108][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 585.995128][ T5938] ? __pfx_kthread+0x10/0x10 [ 585.995144][ T5938] ret_from_fork+0x514/0xb70 [ 585.995169][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 585.995190][ T5938] ? __switch_to+0xc79/0x1410 [ 585.995209][ T5938] ? __pfx_kthread+0x10/0x10 [ 585.995225][ T5938] ret_from_fork_asm+0x1a/0x30 [ 585.995245][ T5938] [ 586.608577][T21463] syzkaller0: entered promiscuous mode [ 586.616139][T21463] syzkaller0: entered allmulticast mode [ 590.721700][ T5853] Bluetooth: hci5: command 0x0406 tx timeout