last executing test programs: 3m28.753517909s ago: executing program 0 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) 3m28.642753728s ago: executing program 0 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x2, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x70}, 0x1, 0x7}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x6, 0xc, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x1, 0x9}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x6, 0x9, 0x0, 0x0, @str='$\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3m28.41809496s ago: executing program 0 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x3901}) write$cgroup_type(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111af00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@remote, @remote, @remote, @rose, @bcast, @netrom, @netrom, @rose]}, &(0x7f00000000c0)=0x48, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) bind(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x3, 0x4, 0x1, 0x1}}, 0x80) 3m28.074407315s ago: executing program 0 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100018007e141000000000000000016000000000000aa1055eeb836ebc93c57a394b9133c90fe8218715a609c066b48c84c224d6f4772b402936909de22b1b53ccf1794c6000000000800"/92, @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100018007e141000000000000000016000000000000aa1055eeb836ebc93c57a394b9133c90fe8218715a609c066b48c84c224d6f4772b402936909de22b1b53ccf1794c6000000000800"/92, @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) (async) 3m27.938771299s ago: executing program 0 (id=659): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @local}}, [0x401, 0x9, 0x10000, 0x5, 0x7, 0x2, 0xffffffff80000000, 0x4, 0x9, 0x3, 0x1fffffc, 0x4, 0x80000001, 0x401, 0x40]}, &(0x7f0000000100)=0x100) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x20000010) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) (async) listen(r4, 0xfff) (async) accept(r4, 0xfffffffffffffffd, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="b54737800000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 3m27.786806679s ago: executing program 0 (id=665): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x7fffd, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 3m12.766623651s ago: executing program 32 (id=665): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x7fffd, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) 2m44.939007106s ago: executing program 2 (id=1157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg$unix(r3, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2, 0xf5, 0x9, 0xdf, 0x0, @private0, @private1, 0x80, 0x700, 0x0, 0x423}}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000400)={0x0, 0x1, 0x2a, r4, 0xd7}, 0xc) (async) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) recvmsg$can_bcm(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20) (async, rerun: 64) sendto$phonet(r5, &(0x7f0000000100)="d0f9961143384522573533876a4f80fb2c5ea4c462d418ccd852b6f6850bd1a169d76837cfebb056e8e0cf4ccb05dbdc192244d6e7dea1eac07ef530cdcece0ef0e67207e2bced073732aac1cca8982f0a8a0bc99eacfd26e1e8b2746baed7f7758671c4f50dec9e28591941606fdde3bdf85dbf23e4692ed6c56cec66bd279a77c260983477ac9f070576e41638fb81d80468347879f687b409179bb0b2e28451bb80bf4687c4856077acdc78b0d7b5baeef4a12742cc7d57513ac782d59c71c1f6819a593c037c8b2585cd082bd65803", 0xd1, 0x1, &(0x7f0000000000)={0x23, 0x5a, 0xde, 0x9}, 0x10) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2m44.758904639s ago: executing program 2 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5) r7 = socket(0x2b, 0x2, 0x8) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/129, 0x81}, {&(0x7f00000003c0)=""/111, 0x6f}], 0x2}, 0x40010000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) bind$bt_hci(r7, &(0x7f0000000500)={0x1f, 0x4, 0x1}, 0x6) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000480)={0x44, r6, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffd, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc379ff22f3d6dd25}, 0x8010) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000001c0)={0x1, 0x7, 0x8000000000000000}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r3, 0xd574370038829967}, 0xffffffffffffffaa}}, 0x0) 2m44.616555069s ago: executing program 2 (id=1165): ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x8, 0x7a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844ba8cb89e14f08906", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'ipvlan0\x00', &(0x7f0000000400)=@ethtool_cmd={0x3, 0x3, 0x401, 0xe681, 0x1, 0x44, 0x6c, 0xd, 0x5, 0x2, 0x400, 0x1ff, 0x2, 0x4, 0x8c, 0x1107b1c4, [0x7fffffff, 0x3704]}}) 2m44.389160296s ago: executing program 2 (id=1171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB="08f84851f5318a395978a8f4000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000140)=0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000240012800b0001006970766c616e0000140002800600020002000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB="08f84851f5318a395978a8f4000a00", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) 2m43.959551654s ago: executing program 2 (id=1172): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0xa5f, @local, 0x1}}, 0x0, 0x0, 0x0, 0x8, 0x7f0dbe3ac64a03d0}, 0x9c) 2m43.87149188s ago: executing program 2 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r4 = socket(0x1e, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(r4, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 2m28.853049962s ago: executing program 33 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r4 = socket(0x1e, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) listen(r4, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 1.889923938s ago: executing program 6 (id=3418): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x14, &(0x7f0000002e00)={@random="25f0504a4e97", @local, @void, {@llc={0x4, {@llc={0x0, 0xf4, "bf", "cd7015"}}}}}, 0x0) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x2, 0x70bd23, 0x0, {}, [@IEEE802154_ATTR_BAT_EXT={0x5}]}, 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x5d73, 0x3, 0x7, 0x9, 0x6, 0x9, 0x8, 0xe, 0x10, 0x1, 0x4, 0x28, 0x101, 0x4, 0x7]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0xff2f}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.856693294s ago: executing program 5 (id=3420): r0 = socket(0x22, 0x2, 0x20) write(r0, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) 1.735009393s ago: executing program 5 (id=3422): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000010000000000000", @ANYRES32, @ANYBLOB="b446"], 0x20) 1.719620435s ago: executing program 6 (id=3423): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100020000000000000007000000140080000000000000000000000000000000000005001300ff000000"], 0x30}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x81, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000640)={r10, @in6={{0xa, 0x4e23, 0x4, @local, 0xd026}}}, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r8, 0xfffffffa}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2a, '\x00', 0x5, 0x9, 0x7, 0x3}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) 1.517405998s ago: executing program 5 (id=3427): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "a8e3c27728086003fa1fa5cf489a3a534f61e401ce78c899f6e0efe8aa02d6e5", "a245d39c838a74bb374e26c7ff82965100ecfb2397877decc51bda53b0c471d6", "8cdd5186bfe41254d02ace939b28628f29efafb2e2f1997d0aafd7eaf72d4619", "b132a70331ef035947fd543eb3abe113d50991a574d513047d5a28f2aa76b520", "b33f42e8e83bbe2e09693cd1438f8df0969c8913f0029b31924cc05b7118503e", "7847522a252e4d44d2858520", 0xe, 0x5, 0x4, 0x1, 0x9}}) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect(r0, &(0x7f0000000180)=@isdn={0x22, 0x1, 0x4, 0xc, 0x4}, 0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x24000000) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000340), 0x10) getsockopt$sock_timeval(r0, 0x1, 0x57, &(0x7f0000000380), &(0x7f00000003c0)=0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000480)='ns/net\x00') ppoll(&(0x7f00000004c0)=[{r0, 0xe}, {r3, 0x100}, {r3, 0x200}, {r0, 0x3288}, {r0, 0x60}, {r0, 0x9400}, {r0, 0x1047}, {r3, 0x8000}, {r3, 0x10a0}], 0x9, &(0x7f0000000540)={0x0, 0x989680}, &(0x7f0000000580), 0x8) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0xfffc, 0x4, 0x0, 0x7ff, 0x0}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000640)=@assoc_id=r5, &(0x7f0000000680)=0x4) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) sendto$ax25(r6, &(0x7f00000006c0)="03f589fa1dda6c7a29e89ac2f35f6ada52a4e015f098f2b873da9ea654b07f36a0910ad3e89e1b248bbc1ef7d1df9dc08b59de2c72c128acb2f3f29d78251e0fbf40d76bd1bf5bd1ac4e2445c10ca6cd4d5d33b9f63cf2cf6fe490ed3b989be21839618d15c2b0ccc3aec3e030804bf840a88bb4a4a343304410f5e7381ea165702da2702f989552174b93566a7f4b6bfdf99a56ac57fb687173c7484355db776b0d9c1dc6b6ef13a26a032b75eaa16f39ad0a290a67b064ade426df", 0xbc, 0x400, &(0x7f0000000780)={{0x3, @null, 0x3}, [@bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000900)={r0, &(0x7f0000000800)='TIPC\x00', 0x101001, &(0x7f0000000840)={@_ha_fsid={[0x6, 0x6fc]}, {0x2, 0x9, 0x3ff, 0x200}}, 0x7fffffff, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x6}) sendmsg$AUDIT_SET_FEATURE(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x4004) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000ac0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x7, 0x3, {{0x2a, 0x4, 0x1, 0xc, 0xa8, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@ssrr={0x89, 0xb, 0x9, [@local, @empty]}, @ssrr={0x89, 0x1b, 0xa3, [@local, @empty, @empty, @loopback, @broadcast, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x69, 0x3, 0x4, [{@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5bc2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x4}]}, @timestamp_prespec={0x44, 0x14, 0x59, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010100, 0x401}]}, @generic={0x83, 0x12, "221805e583550e5063afceb60fa9e605"}, @timestamp={0x44, 0x14, 0x5f, 0x0, 0x8, [0x2, 0x101, 0x2, 0x3d7]}, @generic={0x86, 0xf, "ce2c2a63f563136b456f380952"}]}}}}}) getsockname$packet(r7, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000d40)={'erspan0\x00', &(0x7f0000000cc0)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x40000000, 0x3, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0xf, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@rr={0x7, 0x13, 0x80, [@multicast1, @dev={0xac, 0x14, 0x14, 0x21}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000e80)={'gre0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x3, 0xe, {{0x2e, 0x4, 0x0, 0x1b, 0xb8, 0x66, 0x0, 0x5d, 0x4, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0xc, 0xca, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @lsrr={0x83, 0x2b, 0x60, [@multicast2, @loopback, @remote, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @loopback, @empty]}, @lsrr={0x83, 0x23, 0x93, [@rand_addr=0x64010102, @multicast2, @local, @remote, @broadcast, @rand_addr=0x64010100, @private=0xa010100, @remote]}, @timestamp={0x44, 0x20, 0x5e, 0x0, 0x2, [0x3, 0x8, 0x0, 0xf0, 0x7fff, 0x59, 0x3]}, @lsrr={0x83, 0x1b, 0x17, [@local, @multicast1, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0x7, [{@private=0xa010100, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000001040)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x140, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4b3583dde1ac4013}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r14, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)="637934d1f2c5d2f870b4c609f609d6fd92e99875eb7628f566715dda181496982d4f12b5", 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), r7) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, r15, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, 0x0, 0x724, 0x0, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x41}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}]}, 0x60}, 0x1, 0x0, 0x0, 0x885}, 0x0) 1.439418127s ago: executing program 6 (id=3429): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) unshare(0x60480) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x2, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r3, r2, 0x4, r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000ffffff7f000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xb, @empty=0x4000000}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x3}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r5, 0x1) socket$igmp6(0xa, 0x3, 0x2) 1.390564527s ago: executing program 1 (id=3431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000000)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x3, 0x78, 0xfff9, 0x100, 0xc, 0x444000fc}) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000200)=r0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.051176683s ago: executing program 5 (id=3434): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x3c0, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) pwritev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="1832", 0x2}], 0x1, 0xa, 0x10) read(r0, 0x0, 0x300) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="64619179", @ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf250400000040000780080001000c0000000c00040005000000000000000c00030002080000000000000c000400000c000000000000080001007600000008000100050000002400058014000280080002000400000008000100190000000c0002800800010019000000"], 0x78}, 0x1, 0x0, 0x0, 0x20004840}, 0xcc00) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 964.07691ms ago: executing program 4 (id=3437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000000000000010000000"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000d3fb0b"], 0x1c}}, 0x0) 895.046813ms ago: executing program 1 (id=3439): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100020000000000000007000000140080000000000000000000000000000000000005001300ff000000"], 0x30}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x81, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000640)={r10, @in6={{0xa, 0x4e23, 0x4, @local, 0xd026}}}, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r8, 0xfffffffa}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2a, '\x00', 0x5, 0x9, 0x7, 0x3}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) 842.010477ms ago: executing program 5 (id=3440): socket$kcm(0x11, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff1}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x101, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x7a02, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x6, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x1, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x10007, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x8, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x100001, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="0000884c000000000000bbbbbbbbbbbb88a84d008100560086dd6a12e2e700442ffffe8000000000000000000000000000aa00020000000000000000001000000001050000000000000001000800040086dd080088be000000031202b6ff0100000000000008080022eb0000000327a575080200000000000006ffffd1090800655800000004"], 0x86) 841.584735ms ago: executing program 3 (id=3441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000003180)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r3, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x7fffffff, 0x0, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@getstats={0x0, 0x5e, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x4}, ["", ""]}, 0x94}}, 0x4040000) 815.540108ms ago: executing program 4 (id=3442): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x29, 0x6, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket(0x0, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x80000) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "416643c46427168209669d736b27af61"}}}]}, 0x48}}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000780)=ANY=[@ANYRES32=r9], 0x12) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) getsockopt$WPAN_SECURITY(r10, 0x0, 0x1, 0x0, &(0x7f0000000040)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r11, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 675.670766ms ago: executing program 3 (id=3443): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r1, 0x0, 0x20000800) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x184, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x24}, {0x12}, {0x18}, {0x30}, {0xc}, {0x30, 0x1}, {0x1b, 0x1}, {0x30, 0x1}, {0x4, 0x1}, {0x30}, {0x4, 0x1}, {0x24}, {0x36, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x16}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x9, 0x1}, {0x1b, 0x1}, {0x24, 0x1}, {0xc}, {0x16, 0x1}, {0x7b}, {0x24, 0x1}, {0x7c, 0x1}, {0x2}, {0xc, 0x1}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x7}, {0x6, 0x5}, {0x7, 0xa}, {0x7, 0x8}, {0x6}, {0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5}, {0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x2, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x8}, {0x3, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x7}, {0x1}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x6}, {0x5, 0x2}, {0x6}, {0x3, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x6, 0x7}, {0x4, 0x3}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x2, 0x2}, {0x7, 0x9}, {0x2}, {0x0, 0x7}, {0x7}, {0x4, 0x8}, {0x5, 0x3}, {0x4, 0x1}, {0x2}, {0x4}, {0x2, 0x7}, {0x6, 0x6}, {}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x80ad, 0x8, 0x4, 0xffff, 0x5, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xa, 0x3, 0x1, 0x3, 0x4, 0xfff]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x35, 0x36, 0x1b, 0x3, 0x3, 0x24, 0x4, 0x0, 0x3, 0x12, 0x60, 0x6c, 0x6, 0x30, 0x5, 0xc, 0x12, 0x5, 0x12, 0x60, 0x6, 0x24, 0x24, 0x1b, 0x12, 0xb, 0x60, 0x37, 0x4, 0x4, 0x38, 0x1]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xb7}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xf5f2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 664.140045ms ago: executing program 1 (id=3444): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_to_bridge\x00', 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7ff, 0xa42, 0x3f}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x16c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "30b1a9342fd0407184e16804f1ba4b124638ea942acefbb5c071563d4dc3e0214769ba65eb54e31d9415c0f8366c30bb53723bb44d616cc881b7bc10a52bb7da8859a33c49499efcf490ed90ad7fc80f5038864d483f9fceb8a9e02e13399a2214f9229549b71b7bccd092fd4f26eb7122776c910ac3cee0c2fabcd41055c352e3a334a6b2588b749a7d9ed0758c88966f2fe1d18c604cc3ec2616be8e922716d5dda6a934fcb458cdb0875792b8a116c89ea833d5e9f04521cfbc6fac377dec6bb09e54713e16b33fc3626254d30a3e362fb62693752ca62ec5eefef5e779993c20360eec"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4010090}, 0x4c084) 644.178349ms ago: executing program 4 (id=3445): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4c054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x40008d0}, 0x840) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4c054) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x40008d0}, 0x840) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) 592.077598ms ago: executing program 3 (id=3446): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e66038cb8cf8610178396548cfb4fe8441afbd700000000000220000005700fde4", @ANYRES32=r2, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f0003000000"], 0x40}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x48, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socket(0x2a, 0xa, 0x5) 475.102756ms ago: executing program 1 (id=3447): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 474.65989ms ago: executing program 4 (id=3448): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 384.740544ms ago: executing program 3 (id=3449): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x2, 0x2, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffc591ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000000000000000084000500ac0714aa000000000000000000000000000000002b00000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000a0000004000"/244], 0x13c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) syz_emit_ethernet(0x46, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) socket$inet6(0xa, 0x80000, 0x8) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x40000, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(0x3) 384.548821ms ago: executing program 6 (id=3450): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 306.31399ms ago: executing program 1 (id=3451): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, 0x0, &(0x7f00000000c0)=""/102}, 0x20) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) close(r4) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x79, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x4, 0x6b, 0x65, 0x0, 0x7, 0x6, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x7, 0xdb, [@multicast2]}]}}, {{0x4e21, 0x4e24, r2, r5, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0x3, {[@nop, @eol, @sack_perm={0x4, 0x2}]}}, {"1554950f8d1b622781efec18a606c7aaf68c47f9b4951e5c6306f93fb3ad1cbdb589e11163c6fa231efa4efd3d687fd49999ffaf57192d"}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x8800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 207.613059ms ago: executing program 4 (id=3452): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r3, 0x80) listen(r3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x40000) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 206.695972ms ago: executing program 3 (id=3453): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001020210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a0002000000000000000000"], 0x50}}, 0xc080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000140)=@ll, 0x80, &(0x7f0000000340)=[{&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000001580)=""/255, 0xff}], 0x4, &(0x7f0000001680)=""/8, 0x8}, 0x120) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000000000000000000000020200041080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f5ffffffffffffff000000000000"], 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000045) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001020210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a0002000000000000000000"], 0x50}}, 0xc080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000140)=@ll, 0x80, &(0x7f0000000340)=[{&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000001580)=""/255, 0xff}], 0x4, &(0x7f0000001680)=""/8, 0x8}, 0x120) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000000000000000000000020200041080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f5ffffffffffffff000000000000"], 0x50) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000045) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c00028008000340000000160800014000"], 0x110}}, 0x40040) (async) 179.423283ms ago: executing program 1 (id=3454): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100020000000000000007000000140080000000000000000000000000000000000005001300ff000000"], 0x30}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x81, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000640)={r10, @in6={{0xa, 0x4e23, 0x4, @local, 0xd026}}}, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r8, 0xfffffffa}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2a, '\x00', 0x5, 0x9, 0x7, 0x3}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) 161.496423ms ago: executing program 6 (id=3455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1ac, 0x403a, 0x10, 0x70bd25, 0x25dfdbf8, {0xb}, [@typed={0x25, 0x13d, 0x0, 0x0, @binary="2ed7468a2c10a6bc9a44de1d9afd41b0ae755f7f0f289f8758b9e33790cdbef7c8"}, @nested={0x16c, 0xd0, 0x0, 0x1, [@nested={0x14, 0xe6, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @u32=0x80000000}, @nested={0x4, 0xdd}, @nested={0x4, 0x115}]}, @nested={0x128, 0x2d, 0x0, 0x1, [@generic="3c7a7e7891fc144508deac8b01bb9c25f6e352c8a95981b2489337f38b4a4b27a62677a1cca05ae3e88276f69b298651c064a720e84af2d3dfc5e24f885d5cb5c7b2c3ebc64367e0cd15c04248c5b5fd4ee414c59a7de4c58a18b76dbfd362bb876a459390b7dbc00ffc20be0fb547486a1650a96431cadf749738417f17f67f14f0922f02a70542176b79daf07041ef4a95c65a996865d332198946cfcd1877934f1de8236ed707f9b5ef", @generic="b9380f925606264ae4428717ba44a3abb40adb0e6a9419ade1cf0a5c84560c4ad82d2255001120fca2f897ba17b3a93fee37a6f3463a8844ddb11b20e2004fe82eb7bf7a361c1efc50006bd980eec3a4e692ac40d055c97bffcb35456e5c314af459f44318826c3a6950b1f086071f9bfdce8e443127913083", @generic]}, @nested={0x29, 0x7c, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @fd=r0}, @generic="b6b7519399a132a948b6bda8ab1abf8ead1069da0a0926eccb4616cc55"]}]}, @typed={0x4, 0x10c}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 69.536319ms ago: executing program 5 (id=3456): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r1, 0x0, 0x20000800) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x184, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, [{0x24}, {0x12}, {0x18}, {0x30}, {0xc}, {0x30, 0x1}, {0x1b, 0x1}, {0x30, 0x1}, {0x4, 0x1}, {0x30}, {0x4, 0x1}, {0x24}, {0x36, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x16}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x9, 0x1}, {0x1b, 0x1}, {0x24, 0x1}, {0xc}, {0x16, 0x1}, {0x7b}, {0x24, 0x1}, {0x7c, 0x1}, {0x2}, {0xc, 0x1}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x7}, {0x6, 0x5}, {0x7, 0xa}, {0x7, 0x8}, {0x6}, {0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {0x6}, {0x0, 0x8}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x3, 0x9}, {0x5, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5}, {0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x4}, {0x6, 0x7}, {0x6, 0x3}, {0x2, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x5}, {0x3, 0x6}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x8}, {0x3, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x4, 0x7}, {0x1}, {0x3, 0x4}, {0x1, 0x7}, {0x2, 0x5}, {0x4, 0x4}, {0x5, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x6}, {0x5, 0x2}, {0x6}, {0x3, 0xa}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x3}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x5}, {0x2, 0x9}, {0x2, 0x9}, {0x6, 0x7}, {0x4, 0x3}, {0x6, 0x2}, {0x4, 0x3}, {0x2, 0xa}, {0x2, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x6}, {0x4, 0xa}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x2, 0x2}, {0x7, 0x9}, {0x2}, {0x0, 0x7}, {0x7}, {0x4, 0x8}, {0x5, 0x3}, {0x4, 0x1}, {0x2}, {0x4}, {0x2, 0x7}, {0x6, 0x6}, {}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x80ad, 0x8, 0x4, 0xffff, 0x5, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xa, 0x3, 0x1, 0x3, 0x4, 0xfff]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x35, 0x36, 0x1b, 0x3, 0x3, 0x24, 0x4, 0x0, 0x3, 0x12, 0x60, 0x6c, 0x6, 0x30, 0x5, 0xc, 0x12, 0x5, 0x12, 0x60, 0x6, 0x24, 0x24, 0x1b, 0x12, 0xb, 0x60, 0x37, 0x4, 0x4, 0x38, 0x1]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1000}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xf5f2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x4040) 3.21669ms ago: executing program 4 (id=3457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x7d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x85f}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c9}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)) 2.541361ms ago: executing program 3 (id=3458): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001f00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001f40)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002040)=0xe8) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) r9 = gettid() r10 = getgid() ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000a40)=0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, 0x0) sendmmsg$unix(r8, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)='X', 0x1}], 0x1}}, {{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{0x0}, {&(0x7f00000001c0)="0141c2510b956c0f7fedb6a0af8f5a8d1be375590f3ae480d14c2c98ddcaa26ea12908e1c62b84ae", 0x28}, {&(0x7f0000000400)="a1ef019d201e691a9d5ae97f5718c190e85871abe100c330615c00c2f02ac7868855e23642f54f5795218520a969642cd2d8eec151758bf7cacba431feb15142a0ff0ae74a8caee4c92a969f5b0e051e2196eb12c7a720dbec2e01cf657b4938aad971569c8e5bd316d609817c24857a612a0fce2dd269ea1196918df2a4cc3678417bf2dacdd4c3829e14d688e50882a85c8dca74d7087b7b422a2b2a46ea68bba0fd73ab3f9fbd540e788dc0fad09e8c54aea55db3faa2181b832f74bec98efc", 0xc1}, {&(0x7f0000000500)="b15c6a22a7c5c7d5c5229ea28299fe3361826c806915fd2e265f3e1428be59c272a53683ae090b810d8ef1648751ea5da6cf5e082bb9cdb7c0d1e3aec7cb34cde6ed879764e6a6b6e1f7983c9c84917282ef1b8be3a4ab583f869b8541d104f335fa9ec29c5bd89ff5ce9d9652c0b17ea976019aee6131ca8dfa46f12cec6c447834f166934dc25435cf3b23304680bd3a0cf5433701f53005e90f717c50e92d641de39b4b9503f75545ab684cbf3668b44d4593ae39dd2c6e064243631049d06978ba2c3360ef8ddc44741c5dae0746b9b24ae292f99d73ec3b0361ee3679d208f13022ac", 0xe5}, {&(0x7f0000000340)}], 0x5, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="c6", 0x1}], 0x1, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [r7, r7]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}], 0x3, 0x4050) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002280)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000002380)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000023c0)={0x0, 0x0, 0x0}, &(0x7f0000002400)=0xc) r15 = socket$can_bcm(0x1d, 0x2, 0x2) r16 = socket$inet_smc(0x2b, 0x1, 0x0) r17 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r18 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000005c0)="80c1e804080e5ae35c2e2665189135410eda36174cb50eab055b1625fa3224cd03bd11ae7ddf872efd15ad4274b7416df5c92938fc718f00fb2e12549cacfaaf0916fa787878e0c1094e459a8e0d0fe19a83411ab15737098a1ca59679899233dce58056ff5743338c5ed611cecf877fdfd8f161abfbb6a0e98b17d1f9c0435ce3f6fedc75cbda0d259f2c6b8949ff2c0dcf1e4cc8824b5eb8621176593696296ec4f72d1daa1b1c83d4fa", 0xab}, {&(0x7f0000000680)="7ae3ff77a426ad0301d05f41721c71042855775dfece7359e511bdda19239a8b32b087ca5acb3786ee65dfbfe59397764a1185d1d1381e737736fd687b1615515087123961ccb3d333ba4df994ee6fe1284abcc9f339ded30f5dd173353d46f8132c5c984b5c6955ca40cc0ab3d18b7682ba0d771e021356ef243d65d7e90549f4fbb65b6df70d44fe90e799e47f377bcc8369b9ab18533052cb966a9835701f17274faa85f288e7ddaaa433b8f3e8f4eb95f83f", 0xb4}], 0x2, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r2, 0xffffffffffffffff, r0, r2]}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r0, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}], 0x90, 0x40000}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001e80)=[{&(0x7f00000009c0)="59cbeefa29ff22038a86ae64a8ebf2454d43d4c619fbcf164e6829c0c09c973352fb73d2a4f7a8ce16fc192147b9d5b12828fe0a88480dd3e5f7bf67260bed08d3eb8be336292a9a4f1dde151113085e5691a46e990c8d23435afd4e", 0x5c}, {&(0x7f0000000a40)="184307be4a8f5fb9e254d282e2a751bcd81471e237e9196d0df9df05986381cc5354578e74a3d90399c1f8e1fb32232134bb9d3a32d1393405", 0x39}, {&(0x7f0000000a80)="3dd960453b180828fc61fd1684efb2e3f62dba18b77994cae44d6f3862e400f72ad6f7eabbc3d806ad296b4736f1d5c8da0c908220addd852fd01da09cd47d0ea48ff7b2f3010d2d320a60c16b5e25f5aa1250b926575b90708721b8dc4c2b8b0fb9990d0ea5a40bb9c11296eac7928b433f8431a1a49c7446bea1d30c49714cd55cb8bcf14de5fc05f156cf8a054c7192e696495eecb12fcdc83e6bdf9f9c54c216a0d9917596fd51a1052834df18194da948b3aeca44c74a39193b3bbed0943ff220e68b1016ecd64d9f4b3d2cbc5bf55d82cdd94f9cbd58ee4e387bae2738", 0xe0}, {&(0x7f0000000b80)="fb88afb4c1d5dbc483405e0dc24da4f2781b2f69fb8db7869911fd117a7350404d999fe1d0cd10acbb87688b379850a651f21dae3944f840fa4f1c9db009c3c4384a9fd76d4bb3a59638750873e10cd610db8f6645a7e28c9cbfa35129a343b5ddd6762e848bb7716c610d0ef7261525e0b243faa7fee3d0b867165e3f8d0d1d84065e4e02b70cb4c8a905482ee66c2e51280c743bbeeeb6ff58187063a528ef4aada27972a2d38cfa4be4b3c566457f08e9c96ff688359223efc41736ec0a82680fc68d64f14f6391ee0138a4fe7dafa128c9e29a6ed94dd59f22e0d5596105a50c7ab93ef1", 0xe6}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="7355cd8ccc7d052c57b80c5dfa8671d1666175f94d668363bbfcd09483c7719d925551d31df8beb9738dfca5c106de490ed7073c45189b5f711782d423d908d3ad67f34b78cdd4067020abed9a523793a4a614e31f57952b9dae974183ea982cf4eb9eb68fbe60cf28a5558436da917132374ae586cb24cfa1832352e834d735942602b2f90e8eb18dc9e3834a04e068d15e07f12aa276a27a1757bfedc7340c18a6f640bbcb4255578e862eb9566acfaa14714ec1c64885e9ccc9876c6383604b1b0ecfcd02d5d705fee70bfd43a59545972ee6f14ca240d8a21c4ba4d0ec151b7775ab48dcae142cdb678183ed05", 0xef}, {&(0x7f0000001d80)="cbac9e0b91a9a3103a42ab9caf96796798364b81f76f0a5240826c55e09ea3d8aae2ec418c8d02fecb422cd452463e758f32b9f31a29d9a1e2c1314ecf02b34a4f7e9bc04e24a1b4288d4a794073eb9366d0113bc362c19dacc0971e4307f968a527cada77463978ba88e5825243ff482bcac08b07c7de877b9e0d5600476221068fd41bb410d30f5ebb0e5881dbf39ca90489398b94bae216c5cac96ef220cb0d6876d23f123b0579ace3775ee6727d21263e7f39d05cbf0d5fb4879ded6c12332d8a03f9472f6c0b2a2aa3f978777e018c621ebb", 0xd5}], 0x7, &(0x7f0000002080)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r10}}}], 0x30, 0x1}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000020c0)="0a9aa8206a0b10569010a30fead9d10026d15b4ecbbf4e09a2bf646a9e1300d9acde8b13aca20da67bdc4f99f74718152a36cf26e63283545c51fd53deba6ab1bd3136c920abd177b19bedf5a5280a60bd05fe6b7d7860cb4b563b7613459d7882ad153d85dee2a8c5a4921edaf15568e31b74fe4921d6dcc0414b664cf133a48c97656ae09a1ffc09c63463ea83236b260be9572c4451c672f6af2161074930fedada24f304471d6080359f2fd7", 0xae}, {&(0x7f0000002180)="f84f363df1a9d1d7fe5bb06325139570f754f1a2150de1cde063b4da919cefe52a56c04c05d84193068dcaa05b5e0b9b947722ca2770c9edff9bb39349eac8c48805b9e4f27461788ebf03926b41124fabddd5dc021019256e3a77dab2e500c2089fbc1e1820900fd8288e0e88ec0de574ab6310bf66f7ab9f8145669602685975266b23826b50bebe9de17a321d4654151c847d50ad6aad58ae71d49b63d0c8bdbff9f4400a2b06b2c4ed0fa2c3392a9ba07a8a2fbd2a30", 0xb8}], 0x2, &(0x7f0000002440)=[@cred={{0x1c, 0x1, 0x2, {r1, r13, r14}}}, @rights={{0x24, 0x1, 0x1, [r2, r15, r2, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r16, r2, r2, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r0]}}, @rights={{0x38, 0x1, 0x1, [r2, r17, r2, r0, r18, r0, r2, r0, r0, r0]}}], 0xe8, 0x4100}}], 0x3, 0x2000) listen(r2, 0xfff) r19 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r19, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r19, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)={0x1ec, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="d1abc621bf719172b499ab96048a175a65dee036dd9dc68e4dc5f286b25eaf5bae689fcb2751b9d57872932c50319d8214d975daa828f7b95aff8d57028ee04f2d19d7b9c7abb883841e8b7de3c7395ee17491ec8aea20ca36e7384e09bd488d3ebd0a2f05c87c823d30a6bc08814cd3c1b010d393b019ae0a59adc40aa211977ce65799f4da380e551749aa64ddb36b19d5a45cc6e3eb07fa7742c96588edb1103f24ca643397233a751b20f13dde15b4c7eb6b0e2c3896610e541b6972699663da3b00b7e83b37ff0c5d4a0a0629126b70a9c34ee68cf31da5", @generic="133493974f3a564fd5835b123df197178bcc1a", @nested={0xec, 0x0, 0x0, 0x1, [@nested={0xd9, 0x95, 0x0, 0x1, [@generic="2cfb1d2c6f61a3403b71bf083ca3c7773d7a979054b7d227f3a13a9f19a71b760e06ac65d19cbfb55e08111609953d6da3a2933765401e52d93e18577181b8566322a1747438a4d41efe13888ab75f852de5ef7ed35a6d0c4f0f05f51218308f2bea4b77bce2f4d15bee970d7378bb35816da5e2d444d93cdb9f6431d10d8bab4f540017886de792d4b4ab8233ddd047545d31021f43631fcde5f78df66d0cbbc1e7bf1f037967694033ff3e8e64f709d62bd11a59d8667be23f6d52b1f6cb174f", @nested={0x4, 0x9a}, @typed={0x4, 0x60}, @typed={0x8, 0x74, 0x0, 0x0, @pid=r1}, @nested={0x4, 0xcb}]}, @typed={0xc, 0x58, 0x0, 0x0, @u64=0xa16}]}]}, 0x1ec}], 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) 0s ago: executing program 6 (id=3459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400007070000000000000000037c000004009c80060001"], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): ntered allmulticast mode [ 205.504350][T11704] __nla_validate_parse: 10 callbacks suppressed [ 205.504368][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.508512][T11702] veth1_macvtap: entered promiscuous mode [ 205.511488][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.565691][T11702] veth1_macvtap: entered allmulticast mode [ 205.572937][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.587666][T11702] macsec0: left promiscuous mode [ 205.593152][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.601062][T11702] macsec0: left allmulticast mode [ 205.614605][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.620682][T11702] veth1_macvtap: left allmulticast mode [ 205.634304][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.694497][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.705270][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.742997][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.778642][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1650'. [ 205.818820][ T65] wlan1: Trigger new scan to find an IBSS to join [ 206.620686][ T1115] nci: nci_ntf_packet: unknown ntf opcode 0x39 [ 206.711923][ T49] wlan1: Creating new IBSS network, BSSID 4a:91:45:72:94:db [ 206.859678][T11778] xt_hashlimit: size too large, truncated to 1048576 [ 207.340549][T11750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.798044][T11800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.907089][T11800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.934884][T11812] block nbd4: not configured, cannot reconfigure [ 207.935177][T11800] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 207.971887][T11800] bond0 (unregistering): Released all slaves [ 208.250750][T11836] sctp: [Deprecated]: syz.5.1690 (pid 11836) Use of int in max_burst socket option deprecated. [ 208.250750][T11836] Use struct sctp_assoc_value instead [ 208.317455][T11842] netlink: 'syz.3.1694': attribute type 16 has an invalid length. [ 208.326830][T11842] netlink: 'syz.3.1694': attribute type 17 has an invalid length. [ 208.343593][T11842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.641071][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.649075][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.763051][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.783974][T11861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.899816][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.909003][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.917897][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.927531][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.181289][ T1092] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.190396][ T1092] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.199472][ T1092] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.209123][ T1092] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.951660][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.959753][ C1] lec:lec_tx_timeout: lec0 [ 209.964544][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 210.858906][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 210.926097][T11822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.053377][T11894] __nla_validate_parse: 130 callbacks suppressed [ 211.053395][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1702'. [ 211.106563][T11894] netlink: 'syz.1.1702': attribute type 7 has an invalid length. [ 211.114932][T11894] netlink: 'syz.1.1702': attribute type 8 has an invalid length. [ 211.123392][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 211.185001][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 211.316147][T11917] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20002 [ 211.475693][T11930] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1714'. [ 211.640062][T11939] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1718'. [ 211.655443][T11939] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1718'. [ 211.757094][T11943] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.1719'. [ 211.812875][T11945] pimreg3: entered allmulticast mode [ 212.127501][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1725'. [ 212.352756][T11973] sock: sock_set_timeout: `syz.6.1727' (pid 11973) tries to set negative timeout [ 212.381419][T11973] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1727'. [ 212.462051][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 212.494609][T11983] netlink: 'syz.4.1731': attribute type 22 has an invalid length. [ 212.497739][T11987] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 212.580295][T11983] netlink: 'syz.4.1731': attribute type 22 has an invalid length. [ 212.815724][T12010] netlink: 'syz.4.1742': attribute type 11 has an invalid length. [ 212.817504][T12012] netlink: 'syz.4.1742': attribute type 11 has an invalid length. [ 213.199227][T12038] netlink: 'syz.1.1752': attribute type 4 has an invalid length. [ 213.242522][T12038] tipc: Resetting bearer [ 213.503091][T12060] netlink: 'syz.4.1759': attribute type 5 has an invalid length. [ 213.703738][T12076] netlink: 'syz.6.1762': attribute type 8 has an invalid length. [ 213.719116][T12076] bond0: entered promiscuous mode [ 213.724400][T12076] bond_slave_0: entered promiscuous mode [ 213.730477][T12076] bond_slave_1: entered promiscuous mode [ 213.737365][T12076] gretap0: entered promiscuous mode [ 213.746015][T12076] bond0: left promiscuous mode [ 213.751356][T12076] bond_slave_0: left promiscuous mode [ 213.757022][T12076] bond_slave_1: left promiscuous mode [ 213.764635][T12076] gretap0: left promiscuous mode [ 214.041856][T12087] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.206978][T12095] netlink: 'syz.5.1766': attribute type 1 has an invalid length. [ 214.223032][T12095] netlink: 'syz.5.1766': attribute type 2 has an invalid length. [ 214.240304][T12095] netlink: 'syz.5.1766': attribute type 1 has an invalid length. [ 214.353291][T12104] xt_hashlimit: size too large, truncated to 1048576 [ 214.464045][T12104] syz.6.1769 uses old SIOCAX25GETINFO [ 214.978442][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.986541][ C1] lec:lec_tx_timeout: lec0 [ 214.991289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.474943][T12060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.655148][T12114] __nla_validate_parse: 11 callbacks suppressed [ 216.655167][T12114] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1771'. [ 216.666794][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1774'. [ 216.671936][T12114] netlink: 'syz.1.1771': attribute type 2 has an invalid length. [ 216.816818][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1776'. [ 216.843075][T12133] tipc: Enabling of bearer rejected, already enabled [ 216.856505][T12133] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 216.973434][T12140] netlink: 'syz.5.1781': attribute type 1 has an invalid length. [ 217.122983][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1784'. [ 217.308683][T12150] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.1785'. [ 217.344741][T12162] Bluetooth: MGMT ver 1.23 [ 217.535132][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1792'. [ 217.737682][T12184] netlink: 'syz.4.1796': attribute type 15 has an invalid length. [ 217.757949][T12184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1796'. [ 217.872191][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1800'. [ 217.978940][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 218.044659][T12206] netlink: 'syz.6.1803': attribute type 12 has an invalid length. [ 218.053489][T12206] netlink: 'syz.6.1803': attribute type 29 has an invalid length. [ 218.068231][T12206] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1803'. [ 218.450059][T12239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.504090][T12239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.542057][T12239] : (slave batadv0): Releasing backup interface [ 218.756411][T12258] syzkaller0: entered promiscuous mode [ 218.782321][T12258] syzkaller0: entered allmulticast mode [ 219.154532][T12287] IPVS: set_ctl: invalid protocol: 58 172.20.20.23:20001 [ 219.728125][T12330] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 219.882176][T12330] bond0: entered promiscuous mode [ 219.928840][T12330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.976103][T12342] bridge0: Device is already in use. [ 219.993374][T12342] bridge0: Device is already in use. [ 219.998634][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 220.006718][ C1] lec:lec_tx_timeout: lec0 [ 220.011411][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.018282][T12341] bond0: (slave bridge6): making interface the new active one [ 220.026505][T12341] bridge6: entered promiscuous mode [ 220.035177][T12341] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 220.098828][T12342] bridge0: Device is already in use. [ 220.109451][T12342] bridge0: Device is already in use. [ 220.150077][T12355] netlink: 'syz.3.1845': attribute type 1 has an invalid length. [ 220.184851][T12341] bond0: (slave bridge7): Enslaving as a backup interface with an up link [ 220.213571][T12342] bridge0: Device is already in use. [ 220.223303][T12342] bridge0: Device is already in use. [ 220.242118][T12341] bond0: (slave bridge8): Enslaving as a backup interface with an up link [ 220.261969][T12342] bridge0: Device is already in use. [ 220.269782][T12342] bridge0: Device is already in use. [ 220.403146][T12341] bond0: (slave bridge9): Enslaving as a backup interface with an up link [ 220.413429][T12342] bridge0: Device is already in use. [ 220.420074][T12342] bridge0: Device is already in use. [ 220.426240][T12342] bridge0: Device is already in use. [ 220.460983][T12342] bridge0: Device is already in use. [ 220.490776][T12341] bond0: (slave bridge10): Enslaving as a backup interface with an up link [ 220.530668][T12341] bond0: (slave bridge11): Enslaving as a backup interface with an up link [ 220.546186][T12342] bridge0: Device is already in use. [ 220.592812][T12377] netlink: 'syz.6.1849': attribute type 12 has an invalid length. [ 220.686675][T12384] openvswitch: netlink: IP tunnel TTL not specified. [ 221.795945][T12460] __nla_validate_parse: 13 callbacks suppressed [ 221.795965][T12460] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1873'. [ 221.876261][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1875'. [ 221.908058][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1875'. [ 222.316484][T12476] xt_CT: No such helper "snmp_trap" [ 222.413863][T12483] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1881'. [ 222.540192][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1882'. [ 222.579003][T12487] netlink: 7060 bytes leftover after parsing attributes in process `syz.6.1882'. [ 222.608456][T12487] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 222.624328][T12496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.690252][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1887'. [ 222.699892][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 222.715465][T12505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1885'. [ 222.723270][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1887'. [ 222.725128][ T65] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.784766][ T65] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.794631][ T65] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.804164][ T65] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.944525][T12510] bond6 (unregistering): Released all slaves [ 223.070178][T12524] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 223.142904][T12524] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.164363][T12532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.207390][T12534] bond6: (slave veth9): Enslaving as an active interface with a down link [ 223.434921][T12495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.666960][T12563] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 223.694159][T12563] nbd: error processing sock list [ 223.861762][T12576] syzkaller0: entered promiscuous mode [ 223.885971][T12576] syzkaller0: entered allmulticast mode [ 224.195739][T12601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.310764][ T36] tipc: Subscription rejected, illegal request [ 224.647516][ T5826] udevd[5826]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 224.809665][T12630] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 225.179579][ T5945] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 121 sec [ 225.289899][T12661] syzkaller0: entered promiscuous mode [ 225.295533][T12661] syzkaller0: entered allmulticast mode [ 225.337963][T12668] sctp: [Deprecated]: syz.5.1933 (pid 12668) Use of int in maxseg socket option. [ 225.337963][T12668] Use struct sctp_assoc_value instead [ 225.402451][T12671] netlink: Unknown conntrack attr (0) [ 225.439262][T12673] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.465856][T12673] gretap0: entered promiscuous mode [ 225.486693][T12673] debugfs: 'hsr1' already exists in 'hsr' [ 225.509439][T12673] Cannot create hsr debugfs directory [ 225.528090][T12673] hsr1: entered promiscuous mode [ 225.959560][T12703] vlan3: entered promiscuous mode [ 225.964649][T12703] bridge0: entered promiscuous mode [ 226.008802][T12707] openvswitch: netlink: Flow actions attr not present in new flow. [ 226.160154][T12711] netlink: 'syz.6.1947': attribute type 1 has an invalid length. [ 226.218411][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 226.226478][ C1] lec:lec_tx_timeout: lec0 [ 226.232539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 226.511310][T12728] netlink: 'syz.5.1951': attribute type 1 has an invalid length. [ 226.636990][T12721] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 226.647961][T12739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.760863][T12724] veth3: entered promiscuous mode [ 226.791109][T12724] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 226.844518][T12745] __nla_validate_parse: 11 callbacks suppressed [ 226.844546][T12745] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1955'. [ 226.884908][T12743] IPVS: set_ctl: invalid protocol: 11 12.0.0.0:19999 [ 226.933656][T12745] ip6gretap0: entered promiscuous mode [ 227.027148][T12755] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1958'. [ 227.103654][T12762] netlink: 'syz.6.1961': attribute type 5 has an invalid length. [ 227.112768][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1961'. [ 227.250412][T12773] netlink: 'syz.3.1963': attribute type 6 has an invalid length. [ 227.334709][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'. [ 227.373483][T12779] vlan4: entered promiscuous mode [ 227.624566][T12793] veth5: entered allmulticast mode [ 227.948153][T12814] xt_hashlimit: size too large, truncated to 1048576 [ 228.158246][T12827] pim6reg1: entered promiscuous mode [ 228.178009][T12827] pim6reg1: entered allmulticast mode [ 228.428602][T12845] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1981'. [ 228.563512][T12856] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 228.857178][T12879] sctp: [Deprecated]: syz.4.1993 (pid 12879) Use of int in max_burst socket option deprecated. [ 228.857178][T12879] Use struct sctp_assoc_value instead [ 228.903389][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1993'. [ 228.949993][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 228.965106][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 229.071483][T12832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.134279][T12899] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1997'. [ 229.273282][T12910] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1999'. [ 229.764854][T12940] netlink: 'syz.5.2004': attribute type 21 has an invalid length. [ 230.087889][ T5845] block nbd0: Receive control failed (result -32) [ 230.235849][T12978] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 230.250446][T12978] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.258671][T12978] gretap2: entered promiscuous mode [ 230.263932][T12978] gretap2: entered allmulticast mode [ 230.619938][ T5845] Bluetooth: hci6: command 0x0405 tx timeout [ 231.263416][T13043] netlink: 'syz.3.2040': attribute type 6 has an invalid length. [ 231.284121][T13043] netlink: 'syz.3.2040': attribute type 5 has an invalid length. [ 231.331781][T13048] netlink: 'syz.3.2040': attribute type 6 has an invalid length. [ 231.369524][T13048] netlink: 'syz.3.2040': attribute type 5 has an invalid length. [ 231.390036][T13051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.582852][T13009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.593253][T13009] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 231.671566][T13009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.688730][T13009] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 231.714252][T13009] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.744214][T13009] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 231.800852][T13009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.806923][T13009] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 231.826644][T13079] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 231.865155][T13079] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 231.876914][T13009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.905793][T13009] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 231.905793][T13079] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 231.978385][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 231.986492][ C1] lec:lec_tx_timeout: lec0 [ 231.991995][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 232.272129][T13102] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 232.313622][T13102] __nla_validate_parse: 18 callbacks suppressed [ 232.313648][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 232.423645][T13106] veth3: left promiscuous mode [ 232.441679][ T65] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.461446][ T65] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.557576][ T65] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.604084][ T65] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.665193][T13009] tipc: Resetting bearer [ 232.787654][T13124] bridge_slave_0: left allmulticast mode [ 232.795887][T13009] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 232.808042][T13009] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 232.817920][T13124] bridge_slave_0: left promiscuous mode [ 232.836063][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.849994][T13124] bridge_slave_1: left allmulticast mode [ 232.855790][T13124] bridge_slave_1: left promiscuous mode [ 232.863524][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.874930][T13124] bond0: (slave bond_slave_0): Releasing backup interface [ 232.884414][T13124] bond0: (slave bond_slave_1): Releasing backup interface [ 232.901708][T13124] team0: Port device team_slave_0 removed [ 232.912889][T13124] team0: Port device team_slave_1 removed [ 232.919638][T13124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.927706][T13124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.936199][T13124] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 233.034443][T13009] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 233.052813][T13009] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 233.190186][T13152] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2063'. [ 233.516453][T13169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.556936][T13182] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.2069'. [ 233.640262][T13183] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2068'. [ 233.822986][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 233.903035][T13204] : entered promiscuous mode [ 233.934130][T13210] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 233.970524][T13210] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 234.151528][T13227] veth0_macvtap: entered allmulticast mode [ 234.306371][T13234] netlink: 'syz.5.2079': attribute type 4 has an invalid length. [ 234.423877][T13240] netlink: 'syz.1.2080': attribute type 11 has an invalid length. [ 234.522479][T13248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 234.540552][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2083'. [ 234.546744][T13248] netlink: 'syz.1.2083': attribute type 30 has an invalid length. [ 234.585897][T13249] netlink: 'syz.1.2083': attribute type 30 has an invalid length. [ 234.617133][ T775] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.660087][ T775] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.681521][ T775] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.690971][ T775] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.744969][T13261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 234.767093][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2086'. [ 234.814513][T13261] vxcan2: entered allmulticast mode [ 234.896225][T13263] vxcan2: entered allmulticast mode [ 235.376802][ T30] audit: type=1804 audit(1773513939.573:2): pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2097" name="/newroot/440/cgroup.controllers" dev="tmpfs" ino=2267 res=1 errno=0 [ 235.437046][ T30] audit: type=1800 audit(1773513939.613:3): pid=13306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2097" name="cgroup.controllers" dev="tmpfs" ino=2267 res=0 errno=0 [ 235.505229][T13314] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.2099'. [ 235.809898][T13332] SET target dimension over the limit! [ 236.341959][T13381] netlink: 'syz.1.2115': attribute type 2 has an invalid length. [ 236.361277][T13381] netlink: 'syz.1.2115': attribute type 8 has an invalid length. [ 236.998332][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 237.006419][ C1] lec:lec_tx_timeout: lec0 [ 237.011650][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 237.167058][T13432] netlink: 'syz.3.2126': attribute type 3 has an invalid length. [ 237.196712][T13432] netlink: 'syz.3.2126': attribute type 3 has an invalid length. [ 237.365918][T13438] ipvlan2: entered allmulticast mode [ 237.371543][T13438] batadv_slave_1: entered allmulticast mode [ 237.379447][T13438] batman_adv: batadv0: Adding interface: ipvlan2 [ 237.386013][T13438] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.419376][T13438] batman_adv: batadv0: Interface activated: ipvlan2 [ 237.564625][T13456] __nla_validate_parse: 3 callbacks suppressed [ 237.564643][T13456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2132'. [ 237.745106][T13468] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2135'. [ 237.831083][T13468] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2135'. [ 238.089358][T13488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.221898][T13500] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 238.499809][T13528] netlink: 'syz.3.2151': attribute type 11 has an invalid length. [ 238.549904][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'. [ 238.633540][T13528] netlink: 'syz.3.2151': attribute type 11 has an invalid length. [ 238.658187][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'. [ 238.711960][T13548] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2154'. [ 238.875486][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 238.907334][T13560] sctp: [Deprecated]: syz.4.2159 (pid 13560) Use of int in max_burst socket option. [ 238.907334][T13560] Use struct sctp_assoc_value instead [ 238.928723][T13553] netlink: 'syz.1.2157': attribute type 5 has an invalid length. [ 238.928910][T13559] sctp: [Deprecated]: syz.4.2159 (pid 13559) Use of int in max_burst socket option. [ 238.928910][T13559] Use struct sctp_assoc_value instead [ 238.959690][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2157'. [ 239.004681][ T30] audit: type=1800 audit(1773513943.193:4): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2159" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2302 res=0 errno=0 [ 239.038154][T13553] geneve2: entered promiscuous mode [ 239.059414][T13553] geneve2: entered allmulticast mode [ 239.066332][ T132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 239.108727][ T132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 239.117681][ T132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 239.126874][ T132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 239.150406][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2162'. [ 239.201496][ T132] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.201598][T13567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2162'. [ 239.220880][ T132] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.241500][ T132] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.275361][ T132] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.275625][T13578] netlink: 'syz.4.2166': attribute type 11 has an invalid length. [ 239.435218][T13591] netlink: 'syz.5.2168': attribute type 1 has an invalid length. [ 240.206783][T13656] lo speed is unknown, defaulting to 1000 [ 240.222172][T13656] lo speed is unknown, defaulting to 1000 [ 240.230360][T13656] lo speed is unknown, defaulting to 1000 [ 240.641009][T13682] syzkaller0: entered promiscuous mode [ 240.646784][T13682] syzkaller0: entered allmulticast mode [ 240.775634][T13692] tipc: Enabled bearer , priority 10 [ 240.804733][T13696] tipc: Enabling of bearer rejected, already enabled [ 240.820840][T13656] infiniband syz0: set active [ 240.825845][T13656] infiniband syz0: added lo [ 240.851530][ T5894] lo speed is unknown, defaulting to 1000 [ 240.927005][T13656] RDS/IB: syz0: added [ 240.932812][T13656] smc: adding ib device syz0 with port count 1 [ 240.942399][T13656] smc: ib device syz0 port 1 has no pnetid [ 240.951383][T13699] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 240.951690][ T796] lo speed is unknown, defaulting to 1000 [ 240.980375][T13656] lo speed is unknown, defaulting to 1000 [ 241.309491][T13719] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.320603][T13656] lo speed is unknown, defaulting to 1000 [ 241.545993][T13734] netlink: 'syz.6.2210': attribute type 1 has an invalid length. [ 241.565429][T13734] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 241.768596][T13744] netlink: 'syz.5.2215': attribute type 1 has an invalid length. [ 241.839170][T13656] lo speed is unknown, defaulting to 1000 [ 241.896469][T13748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.923728][T13748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.087378][T13760] netlink: 'syz.5.2221': attribute type 11 has an invalid length. [ 242.264846][T13656] lo speed is unknown, defaulting to 1000 [ 242.376842][T13778] netlink: 'syz.5.2227': attribute type 1 has an invalid length. [ 242.395894][T13778] netlink: 'syz.5.2227': attribute type 1 has an invalid length. [ 242.414530][T13778] netlink: 'syz.5.2227': attribute type 1 has an invalid length. [ 242.432696][T13778] netlink: 'syz.5.2227': attribute type 2 has an invalid length. [ 242.605329][T13789] __nla_validate_parse: 25 callbacks suppressed [ 242.605347][T13789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2230'. [ 242.680940][T13794] netlink: 'syz.6.2231': attribute type 2 has an invalid length. [ 242.858416][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 242.866493][ C1] lec:lec_tx_timeout: lec0 [ 242.872012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.917419][T13797] lo speed is unknown, defaulting to 1000 [ 243.305772][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2243'. [ 243.446080][T13656] lo speed is unknown, defaulting to 1000 [ 243.673207][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2250'. [ 243.897251][T13861] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.914231][T13656] lo speed is unknown, defaulting to 1000 [ 243.926782][T13865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2254'. [ 243.982019][T13865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2254'. [ 244.079245][T13867] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 244.100957][T13867] syzkaller0: entered promiscuous mode [ 244.106470][T13867] syzkaller0: entered allmulticast mode [ 244.123473][T13872] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2257'. [ 244.241330][T13876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2258'. [ 244.260542][T13656] lo speed is unknown, defaulting to 1000 [ 244.365974][T13881] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 244.383909][T13881] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2260'. [ 244.505402][T13885] syzkaller0: entered promiscuous mode [ 244.511073][T13885] syzkaller0: entered allmulticast mode [ 244.635564][T13892] TCP: TCP_TX_DELAY enabled [ 245.059757][T13909] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 245.069382][T13909] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 245.317128][T13914] netlink: 'syz.3.2269': attribute type 20 has an invalid length. [ 245.368685][T13914] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.573154][T13924] netlink: 'syz.3.2274': attribute type 11 has an invalid length. [ 245.593787][T13924] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2274'. [ 245.681405][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2275'. [ 245.800764][T13930] lo speed is unknown, defaulting to 1000 [ 245.977135][T13940] netlink: 'syz.6.2278': attribute type 10 has an invalid length. [ 245.992740][T13940] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 246.093601][T13943] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 246.107149][T13943] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0 [ 246.432725][T13953] pim6reg1: entered promiscuous mode [ 246.438087][T13953] pim6reg1: entered allmulticast mode [ 246.710141][T13974] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 246.737485][T13970] netlink: 'syz.1.2288': attribute type 11 has an invalid length. [ 246.824089][T13970] unsupported nlmsg_type 40 [ 246.831468][T13978] netlink: 'syz.6.2290': attribute type 9 has an invalid length. [ 247.011064][T13985] netlink: 'syz.6.2292': attribute type 1 has an invalid length. [ 247.114904][T13989] dvmrp0: entered allmulticast mode [ 247.260969][T14003] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 247.536941][T14024] sit0: entered promiscuous mode [ 247.635813][T14029] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 247.800293][T14041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.874914][T14044] xt_socket: unknown flags 0x50 [ 247.878632][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 247.887878][ C1] lec:lec_tx_timeout: lec0 [ 247.892496][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.958670][T14044] __nla_validate_parse: 11 callbacks suppressed [ 247.958691][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2307'. [ 248.209791][T14062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2312'. [ 248.258536][T14066] netlink: 'syz.6.2313': attribute type 1 has an invalid length. [ 248.281821][T14066] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2313'. [ 248.311538][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2313'. [ 248.329118][ T65] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.329187][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2313'. [ 248.357027][ T65] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.369179][ T65] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.397226][ T65] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.472131][T14078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.527115][T14086] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 249.078982][T14118] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.173560][T14129] netlink: 'syz.5.2330': attribute type 4 has an invalid length. [ 249.389419][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2334'. [ 249.409388][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2334'. [ 249.609044][T14152] syzkaller0: entered promiscuous mode [ 249.614692][T14152] syzkaller0: entered allmulticast mode [ 249.657772][T14152] netlink: 'syz.6.2336': attribute type 5 has an invalid length. [ 249.773355][T14174] sctp: [Deprecated]: syz.5.2339 (pid 14174) Use of int in maxseg socket option. [ 249.773355][T14174] Use struct sctp_assoc_value instead [ 249.993016][T14183] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2343'. [ 251.330091][T14134] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 251.687531][T14208] syzkaller0: entered promiscuous mode [ 251.705885][T14208] syzkaller0: entered allmulticast mode [ 251.730554][T14221] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 251.766554][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 251.909921][T14234] tipc: Failed to remove unknown binding: 66,0,0/0:1045552592/1045552593 [ 251.931877][T14236] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2358'. [ 251.940814][T14234] tipc: Failed to remove unknown binding: 66,0,0/0:1045552592/1045552593 [ 251.941576][T14236] openvswitch: netlink: Message has 193 unknown bytes. [ 252.912314][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 252.920392][ C1] lec:lec_tx_timeout: lec0 [ 252.925152][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 253.733013][T14291] macvtap1: entered promiscuous mode [ 253.758952][T14291] macvtap1: entered allmulticast mode [ 253.775021][T14291] veth1_vlan: entered allmulticast mode [ 253.803605][T14289] macvtap2: entered promiscuous mode [ 253.809934][T14289] macvtap2: entered allmulticast mode [ 253.878182][T14291] macvtap2: entered promiscuous mode [ 253.899092][T14291] macvtap2: entered allmulticast mode [ 253.980485][T14289] macvtap2: entered promiscuous mode [ 253.988484][T14289] macvtap2: entered allmulticast mode [ 254.084383][T14291] macvtap2: entered promiscuous mode [ 254.109600][T14291] macvtap2: entered allmulticast mode [ 254.160258][T14289] macvtap2: entered promiscuous mode [ 254.174956][T14289] macvtap2: entered allmulticast mode [ 254.236085][T14291] macvtap2: entered promiscuous mode [ 254.243480][T14291] macvtap2: entered allmulticast mode [ 254.255635][T14308] __nla_validate_parse: 1 callbacks suppressed [ 254.255655][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2377'. [ 254.260852][T14317] netlink: 'syz.4.2380': attribute type 16 has an invalid length. [ 254.280200][T14317] netlink: 'syz.4.2380': attribute type 17 has an invalid length. [ 254.303844][T14289] macvtap2: entered promiscuous mode [ 254.314528][T14289] macvtap2: entered allmulticast mode [ 254.351152][T14317] sit0: left promiscuous mode [ 254.386558][T14317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.410727][T14291] macvtap2: entered promiscuous mode [ 254.416067][T14291] macvtap2: entered allmulticast mode [ 254.457952][T14289] macvtap2: entered promiscuous mode [ 254.468491][T14289] macvtap2: entered allmulticast mode [ 254.510843][T14291] macvtap2: entered promiscuous mode [ 254.523595][T14291] macvtap2: entered allmulticast mode [ 254.589335][T14289] macvtap2: entered promiscuous mode [ 254.595513][T14289] macvtap2: entered allmulticast mode [ 254.695992][T14341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 254.715767][T14346] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 254.723942][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 254.741268][T14346] team0: Port device batadv1 added [ 254.823515][T14351] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2389'. [ 254.862584][T14341] team_slave_0 (unregistering): left promiscuous mode [ 254.873296][T14341] team_slave_0 (unregistering): left allmulticast mode [ 254.891104][T14341] team0: Port device team_slave_0 removed [ 255.192395][T14377] ipvlan2: entered allmulticast mode [ 255.197895][T14377] batadv_slave_1: entered allmulticast mode [ 255.213396][T14377] batman_adv: batadv0: Adding interface: ipvlan2 [ 255.220189][T14377] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.292000][T14377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.328120][T14377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.345341][T14377] batman_adv: batadv0: Interface activated: ipvlan2 [ 255.557297][T14401] xt_policy: output policy not valid in PREROUTING and INPUT [ 255.629077][T14405] netlink: 'syz.3.2403': attribute type 1 has an invalid length. [ 255.657462][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2403'. [ 255.657872][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2405'. [ 255.678175][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.690294][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2403'. [ 256.029433][T14419] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 256.036502][T14419] batman_adv: batadv0: Removing interface: ipvlan2 [ 256.410778][T14424] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2408'. [ 256.429470][T14429] sch_fq: defrate 53322 ignored. [ 256.665647][T14440] netlink: 'syz.6.2415': attribute type 22 has an invalid length. [ 256.673578][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2415'. [ 256.683385][T14440] netlink: 'syz.6.2415': attribute type 22 has an invalid length. [ 256.693650][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2415'. [ 256.809596][T14440] netlink: set zone limit has 4 unknown bytes [ 257.022626][T14460] netlink: 'syz.3.2418': attribute type 7 has an invalid length. [ 257.118711][T14470] vcan1: entered promiscuous mode [ 257.124058][T14470] vcan1: entered allmulticast mode [ 257.406222][T14486] macvtap0: entered promiscuous mode [ 257.417897][T14486] veth0_macvtap: entered promiscuous mode [ 257.456352][T14486] veth0_macvtap: left promiscuous mode [ 257.554108][T14486] macvtap0 (unregistering): left promiscuous mode [ 257.608909][T14499] geneve3: entered promiscuous mode [ 257.616791][ T1115] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 54593 - 0 [ 257.640975][ T1115] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 54593 - 0 [ 257.735112][T14500] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.799028][T14500] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.848807][ T1115] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 54593 - 0 [ 257.938422][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.946494][ C1] lec:lec_tx_timeout: lec0 [ 257.951833][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.106535][T14527] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 258.119486][T14524] block nbd1: Unsupported socket: should be TCP or UNIX. [ 258.121627][T14530] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 258.193360][T14527] bond1: entered promiscuous mode [ 258.204943][T14527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.214436][T14532] bridge0: Device is already in use. [ 258.240879][T14528] bond1: (slave bridge14): making interface the new active one [ 258.249561][T14528] bridge14: entered promiscuous mode [ 258.256191][T14528] bond1: (slave bridge14): Enslaving as an active interface with an up link [ 258.281039][T14528] bond1: (slave bridge15): Enslaving as a backup interface with an up link [ 258.290247][T14532] bridge0: Device is already in use. [ 258.317491][T14528] bond1: (slave bridge16): Enslaving as a backup interface with an up link [ 258.330095][T14532] bridge0: Device is already in use. [ 258.354874][T14528] bond1: (slave bridge17): Enslaving as a backup interface with an up link [ 258.364752][T14532] bridge0: Device is already in use. [ 258.388786][T14528] bond1: (slave bridge18): Enslaving as a backup interface with an up link [ 258.397862][T14532] bridge0: Device is already in use. [ 258.419935][T14528] bond1: (slave bridge19): Enslaving as a backup interface with an up link [ 258.430204][T14532] bridge0: Device is already in use. [ 258.439526][T14532] bridge0: Device is already in use. [ 258.460195][T14528] bond1: (slave bridge20): Enslaving as a backup interface with an up link [ 258.485422][T14528] bond1: (slave bridge21): Enslaving as a backup interface with an up link [ 258.494935][T14532] bridge0: Device is already in use. [ 258.516549][T14528] bond1: (slave bridge22): Enslaving as a backup interface with an up link [ 258.526707][T14532] bridge0: Device is already in use. [ 258.547752][T14528] bond1: (slave bridge23): Enslaving as a backup interface with an up link [ 258.568060][T14528] bond1: (slave bridge24): Enslaving as a backup interface with an up link [ 258.577606][T14532] bridge0: Device is already in use. [ 258.627481][T14528] bond1: (slave bridge25): Enslaving as a backup interface with an up link [ 258.645273][T14528] bond1: (slave bridge26): Enslaving as a backup interface with an up link [ 258.655361][T14532] bridge0: Device is already in use. [ 258.661651][T14532] bridge0: Device is already in use. [ 258.687431][T14528] bond1: (slave bridge27): Enslaving as a backup interface with an up link [ 258.712330][T14528] bond1: (slave bridge28): Enslaving as a backup interface with an up link [ 258.723960][T14532] bridge0: Device is already in use. [ 258.740060][T14528] bond1: (slave bridge29): Enslaving as a backup interface with an up link [ 258.749299][T14532] bridge0: Device is already in use. [ 258.764254][T14528] bond1: (slave bridge30): Enslaving as a backup interface with an up link [ 258.773606][T14532] bridge0: Device is already in use. [ 258.792560][T14528] bond1: (slave bridge31): Enslaving as a backup interface with an up link [ 258.801722][T14532] bridge0: Device is already in use. [ 258.819770][T14528] bond1: (slave bridge32): Enslaving as a backup interface with an up link [ 258.829661][T14532] bridge0: Device is already in use. [ 258.844354][T14528] bond1: (slave bridge33): Enslaving as a backup interface with an up link [ 258.853745][T14532] bridge0: Device is already in use. [ 258.866859][T14532] bridge0: Device is already in use. [ 258.887332][T14528] bond1: (slave bridge34): Enslaving as a backup interface with an up link [ 258.897400][T14532] bridge0: Device is already in use. [ 258.918253][T14528] bond1: (slave bridge35): Enslaving as a backup interface with an up link [ 258.927932][T14532] bridge0: Device is already in use. [ 258.950035][T14528] bond1: (slave bridge36): Enslaving as a backup interface with an up link [ 258.958966][T14532] bridge0: Device is already in use. [ 258.967311][T14554] syzkaller0: entered promiscuous mode [ 258.974874][T14554] syzkaller0: entered allmulticast mode [ 259.425386][T14570] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 260.908758][T14500] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.948184][T14500] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.954319][T14576] rdma_rxe: rxe_newlink: failed to add lo [ 260.964890][T14500] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 54593 - 0 [ 261.063480][T14500] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.075066][T14500] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.089626][T14500] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 54593 - 0 [ 261.141071][T14592] __nla_validate_parse: 6 callbacks suppressed [ 261.141089][T14592] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2455'. [ 261.189060][T14599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2455'. [ 261.189249][T14586] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2451'. [ 261.306159][T14500] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.326198][T14500] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.343267][T14500] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 54593 - 0 [ 261.381413][T14578] syzkaller0: entered promiscuous mode [ 261.387169][T14578] syzkaller0: entered allmulticast mode [ 261.405905][T14607] tap0: tun_chr_ioctl cmd 1074025678 [ 261.418779][T14607] tap0: group set to 0 [ 261.604246][ T1115] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.612697][ T1115] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 54593 - 0 [ 261.636746][T14622] rdma_rxe: rxe_newlink: failed to add lo [ 261.651564][ T1115] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.700188][ T1115] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.713150][ T1115] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 54593 - 0 [ 261.720618][T14629] netlink: 'syz.6.2465': attribute type 1 has an invalid length. [ 261.722194][ T1115] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.732768][T14629] netlink: 280 bytes leftover after parsing attributes in process `syz.6.2465'. [ 261.737926][ T1115] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.757742][ T1115] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 54593 - 0 [ 261.758152][T14628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2466'. [ 261.766618][ T1115] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.790619][T14628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2466'. [ 261.810603][T14628] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2466'. [ 261.821630][ T1115] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.832055][ T1115] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 54593 - 0 [ 261.858390][ T1115] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.861610][T14633] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2467'. [ 262.024094][T14640] syzkaller0: entered promiscuous mode [ 262.030556][T14640] syzkaller0: entered allmulticast mode [ 262.098028][T14646] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2472'. [ 262.145860][T14646] vlan2: entered allmulticast mode [ 262.168458][T14646] gretap0: entered allmulticast mode [ 262.281173][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 262.309739][T14664] netlink: 'syz.3.2476': attribute type 32 has an invalid length. [ 262.421273][T14664] bond8: Setting coupled_control to off (0) [ 262.566418][T14689] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 262.594251][T14689] NCSI netlink: No device for ifindex 0 [ 262.958876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.966926][ C1] lec:lec_tx_timeout: lec0 [ 262.972904][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.521072][T14754] openvswitch: netlink: IP tunnel dst address not specified [ 263.550327][T14740] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 263.604131][T14740] bond6 (unregistering): Released all slaves [ 263.652186][T14759] IPVS: Error connecting to the multicast addr [ 263.685390][T14761] x_tables: unsorted underflow at hook 3 [ 263.738693][T14764] syz0: rxe_newlink: already configured on lo [ 264.079099][ T132] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.087489][ T132] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.116719][ T132] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 44834 - 0 [ 264.141663][ T132] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.177139][ T132] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.196339][ T132] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 44834 - 0 [ 264.224720][ T132] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.249330][ T132] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.257818][ T132] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 44834 - 0 [ 264.267298][T14786] netlink: 'syz.4.2510': attribute type 1 has an invalid length. [ 264.267376][T14786] netlink: 'syz.4.2510': attribute type 3 has an invalid length. [ 264.267392][T14786] NCSI netlink: No device for ifindex 813332851 [ 264.320109][ T132] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.336641][ T132] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.371595][ T132] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 44834 - 0 [ 264.384698][T14789] netlink: 'syz.5.2511': attribute type 1 has an invalid length. [ 264.434287][T14789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.490007][T14801] netlink: 'syz.3.2515': attribute type 2 has an invalid length. [ 264.498025][T14801] netlink: 'syz.3.2515': attribute type 1 has an invalid length. [ 264.503372][T14789] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 264.565380][T14789] bond6: (slave batadv1): making interface the new active one [ 264.624242][T14789] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 264.888264][T14825] syzkaller0: entered promiscuous mode [ 264.941798][T14825] syzkaller0: entered allmulticast mode [ 265.421665][T14867] delete_channel: no stack [ 265.529529][T14876] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 265.710242][T14890] netlink: 'syz.4.2542': attribute type 11 has an invalid length. [ 265.817547][T14898] netlink: 'syz.6.2544': attribute type 29 has an invalid length. [ 265.845787][T14901] batadv_slave_0: entered promiscuous mode [ 265.868015][T14903] batadv_slave_0: left promiscuous mode [ 265.956348][T14911] gre1: entered promiscuous mode [ 265.961719][T14911] gre1: entered allmulticast mode [ 266.040551][T14914] bond6: entered promiscuous mode [ 266.046334][T14914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.099929][T14914] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.124089][T14914] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 266.161645][T14914] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 266.181279][T14914] bond6: (slave vti0): making interface the new active one [ 266.192513][T14914] vti0: entered promiscuous mode [ 266.201211][T14914] bond6: (slave vti0): Enslaving as an active interface with an up link [ 266.359169][T14926] rdma_rxe: rxe_newlink: failed to add lo [ 266.694318][T14944] __nla_validate_parse: 20 callbacks suppressed [ 266.694337][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2557'. [ 266.728864][T14944] chnl_net:caif_netlink_parms(): no params data found [ 266.742027][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 266.761653][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2554'. [ 266.830787][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2554'. [ 266.890279][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2554'. [ 267.201764][T14965] rdma_rxe: rxe_newlink: failed to add lo [ 267.412004][T14975] openvswitch: netlink: IP tunnel dst address not specified [ 267.448722][T14975] xt_policy: too many policy elements [ 267.532662][ T24] IPVS: starting estimator thread 0... [ 267.629097][T14985] IPVS: using max 34 ests per chain, 81600 per kthread [ 267.841856][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 267.860104][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 267.871492][T15005] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2579'. [ 267.988375][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 267.996416][ C1] lec:lec_tx_timeout: lec0 [ 268.001751][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 268.522432][T15037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 268.528590][T15037] syzkaller1: Refused to change device type [ 268.587502][T15042] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2587'. [ 268.636286][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2586'. [ 268.716125][T15037] lo speed is unknown, defaulting to 1000 [ 269.008447][T15065] syzkaller0: entered promiscuous mode [ 269.013971][T15065] syzkaller0: entered allmulticast mode [ 271.088073][T15085] tipc: Enabling of bearer rejected, already enabled [ 271.099659][T15099] tipc: Resetting bearer [ 271.270504][T15108] rdma_rxe: rxe_newlink: failed to add lo [ 271.517361][T15124] validate_nla: 1 callbacks suppressed [ 271.517381][T15124] netlink: 'syz.5.2605': attribute type 9 has an invalid length. [ 271.532825][T15124] netlink: 'syz.5.2605': attribute type 11 has an invalid length. [ 271.541225][T15124] netlink: 'syz.5.2605': attribute type 12 has an invalid length. [ 271.971070][T15145] netlink: 'syz.6.2614': attribute type 22 has an invalid length. [ 271.980561][T15145] __nla_validate_parse: 7 callbacks suppressed [ 271.980580][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2614'. [ 271.998991][T15145] netlink: 'syz.6.2614': attribute type 22 has an invalid length. [ 272.007422][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2614'. [ 272.095900][T15151] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2616'. [ 272.326995][T15175] netlink: 'syz.6.2623': attribute type 1 has an invalid length. [ 272.600004][T15189] netlink: 'syz.4.2629': attribute type 10 has an invalid length. [ 272.601454][T15193] tipc: Enabled bearer , priority 10 [ 272.624732][T15189] team0: Port device vxcan1 added [ 272.749617][T15200] xt_bpf: check failed: parse error [ 272.785794][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2631'. [ 272.810566][T15175] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2623'. [ 272.872207][T15205] netlink: 'syz.1.2633': attribute type 39 has an invalid length. [ 272.938844][T15210] sit0: entered promiscuous mode [ 272.950101][T15210] netlink: 'syz.3.2634': attribute type 1 has an invalid length. [ 272.958015][T15210] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2634'. [ 273.131516][T15217] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 273.302688][T15229] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2643'. [ 273.317245][T15229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.654506][T15263] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2650'. [ 273.762538][T15267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2653'. [ 273.789309][T15267] netlink: 'syz.3.2653': attribute type 4 has an invalid length. [ 273.805522][T15269] openvswitch: netlink: Message has 4 unknown bytes. [ 273.818329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 273.826409][ C1] lec:lec_tx_timeout: lec0 [ 273.832933][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 273.847379][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'. [ 273.872643][ T6051] lo speed is unknown, defaulting to 1000 [ 273.881875][ T6051] syz0: Port: 1 Link DOWN [ 273.925781][ T6051] lo speed is unknown, defaulting to 1000 [ 273.949410][ T6051] lo speed is unknown, defaulting to 1000 [ 273.955187][ T6051] syz0: Port: 1 Link ACTIVE [ 274.174197][T15296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.314692][T15309] rdma_rxe: rxe_newlink: failed to add lo [ 274.801286][T15340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.009853][T15353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.040670][T15353] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 275.087562][T15353] batman_adv: batadv0: Removing interface: ipvlan2 [ 275.119763][T15353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.287160][T15371] syzkaller1: entered promiscuous mode [ 275.295130][T15371] syzkaller1: entered allmulticast mode [ 275.574776][T15388] unsupported nla_type 58 [ 275.624923][T15392] gtp1: entered promiscuous mode [ 275.633106][T15392] gtp1: entered allmulticast mode [ 276.075253][T15428] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.114700][T15427] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.561673][T15454] sit0: entered promiscuous mode [ 276.566865][T15454] validate_nla: 15 callbacks suppressed [ 276.566883][T15454] netlink: 'syz.6.2709': attribute type 1 has an invalid length. [ 277.128131][T15493] __nla_validate_parse: 18 callbacks suppressed [ 277.128151][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2720'. [ 277.163666][T15497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.176195][T15497] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 277.207285][T15499] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 277.219588][T15499] bond0: (slave wlan1): Opening slave failed [ 277.241077][T15497] bond0: (slave wlan1): Opening slave failed [ 277.287504][T15497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.594050][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2728'. [ 278.051036][T15541] netlink: 'syz.6.2734': attribute type 26 has an invalid length. [ 278.297757][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2738'. [ 278.612533][T15563] bond7: (slave vcan0): refused to change device type [ 278.656944][T15566] syzkaller0: entered promiscuous mode [ 278.671506][T15566] syzkaller0: entered allmulticast mode [ 278.770246][T15566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2741'. [ 278.848409][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 278.856502][ C1] lec:lec_tx_timeout: lec0 [ 278.861237][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 279.218990][T15595] netlink: 'syz.5.2751': attribute type 39 has an invalid length. [ 279.270690][T15600] netlink: 'syz.5.2751': attribute type 1 has an invalid length. [ 279.491816][T15600] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.583192][T15616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.616124][T15605] bond8: (slave gretap3): making interface the new active one [ 279.653280][T15605] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 279.884066][T15628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2756'. [ 279.925491][T15628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2756'. [ 279.939359][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2756'. [ 279.949021][T15631] tipc: Invalid UDP bearer configuration [ 279.949074][T15631] tipc: Enabling of bearer rejected, failed to enable media [ 280.261404][T15653] erspan0: mtu less than device minimum [ 280.294215][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 280.641874][T15672] netlink: 'syz.5.2769': attribute type 1 has an invalid length. [ 280.692020][T15678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2772'. [ 280.722060][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2769'. [ 280.734259][T15672] 8021q: adding VLAN 0 to HW filter on device bond9 [ 281.200106][T15712] netlink: 'syz.6.2780': attribute type 2 has an invalid length. [ 281.227493][T15712] netlink: 'syz.6.2780': attribute type 11 has an invalid length. [ 281.268191][T15716] vlan2: entered allmulticast mode [ 281.286968][T15716] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 281.302989][T15719] openvswitch: netlink: Missing key (keys=40, expected=80) [ 281.638073][T15744] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 282.086302][T15763] netlink: 'syz.3.2799': attribute type 1 has an invalid length. [ 282.133769][T15776] netlink: 'syz.5.2804': attribute type 1 has an invalid length. [ 282.153354][T15779] __nla_validate_parse: 7 callbacks suppressed [ 282.153374][T15779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2803'. [ 282.170948][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2799'. [ 282.201057][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 282.211530][T15783] team0: Port device dummy0 removed [ 282.212176][T15779] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.2803'. [ 282.224147][T15783] bond10: (slave dummy0): making interface the new active one [ 282.237158][T15783] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 282.238696][T15776] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2804'. [ 282.263734][T15776] bond10: (slave dummy0): Releasing active interface [ 282.549975][T15804] bond2: entered promiscuous mode [ 282.555277][T15804] bond2: entered allmulticast mode [ 282.563411][T15804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.717650][T15799] clip:clip_setentry: non-CLIP VCC [ 282.725059][T15801] netlink: 'syz.5.2808': attribute type 1 has an invalid length. [ 282.733421][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'. [ 282.742444][T15819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2813'. [ 282.803079][T15799] netlink: 'syz.5.2808': attribute type 1 has an invalid length. [ 282.949039][T15840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2818'. [ 283.005250][T15840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.015782][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2819'. [ 283.192198][T15858] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2823'. [ 283.198221][T15857] netlink: 'syz.5.2822': attribute type 33 has an invalid length. [ 283.375937][T15876] xt_hashlimit: size too large, truncated to 1048576 [ 283.402814][T15875] syzkaller0: entered promiscuous mode [ 283.408494][T15875] syzkaller0: entered allmulticast mode [ 283.658925][T15879] bond11: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 283.702535][T15890] rdma_rxe: rxe_newlink: failed to add lo [ 283.750055][T15879] bond11 (unregistering): Released all slaves [ 283.868330][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 283.876411][ C1] lec:lec_tx_timeout: lec0 [ 283.881788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 284.171638][T15909] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 284.200248][T15906] syzkaller0: entered promiscuous mode [ 284.205890][T15906] syzkaller0: entered allmulticast mode [ 284.404423][T15926] rdma_rxe: rxe_newlink: failed to add lo [ 284.523226][T15936] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 284.842853][T15947] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 285.212223][T15964] ipvlan3: entered allmulticast mode [ 285.223324][T15969] netlink: 'syz.5.2857': attribute type 1 has an invalid length. [ 285.231597][T15964] batadv_slave_1: entered allmulticast mode [ 285.241415][ T5145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.242839][T15964] batman_adv: batadv0: Adding interface: ipvlan3 [ 285.262322][T15964] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.287955][ T5145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.289163][T15964] batman_adv: batadv0: Interface activated: ipvlan3 [ 285.302510][ T5145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.313257][ T5145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.329487][ T5145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.358460][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 285.385560][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 285.396862][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 285.413366][T15970] bond11: (slave gretap4): making interface the new active one [ 285.425588][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 285.449765][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 285.467268][T15970] bond11: (slave gretap4): Enslaving as an active interface with an up link [ 285.499575][ T24] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 181 sec [ 285.618829][T15982] netlink: 'syz.3.2860': attribute type 1 has an invalid length. [ 285.690924][T15968] lo speed is unknown, defaulting to 1000 [ 285.858847][T15989] netlink: 'syz.3.2863': attribute type 5 has an invalid length. [ 286.036553][T16006] team_slave_0: entered allmulticast mode [ 286.196734][T16017] nft_compat: unsupported protocol 5 [ 286.352099][T16027] xt_hashlimit: size too large, truncated to 1048576 [ 286.382824][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.591646][T16039] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 286.621229][T16039] bond3 (unregistering): Released all slaves [ 286.745222][T15968] chnl_net:caif_netlink_parms(): no params data found [ 287.037690][T16065] bond0: Error: Cannot enslave bond to itself. [ 287.091135][T15968] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.109558][T15968] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.116994][T15968] bridge_slave_0: entered allmulticast mode [ 287.127502][T15968] bridge_slave_0: entered promiscuous mode [ 287.172512][T15968] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.180515][T15968] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.187937][T15968] bridge_slave_1: entered allmulticast mode [ 287.196708][T15968] bridge_slave_1: entered promiscuous mode [ 287.264993][T15968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.279648][T15968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.322864][T15968] team0: Port device team_slave_0 added [ 287.332315][T15968] team0: Port device team_slave_1 added [ 287.384657][T15968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.399078][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.430733][T15968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.444377][T15968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.452420][T15968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.479268][T15968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.498518][ T5145] Bluetooth: hci7: command tx timeout [ 287.557263][T15968] hsr_slave_0: entered promiscuous mode [ 287.579679][T15968] hsr_slave_1: entered promiscuous mode [ 287.594830][T15968] debugfs: 'hsr0' already exists in 'hsr' [ 287.601698][T15968] Cannot create hsr debugfs directory [ 287.628877][T16086] __nla_validate_parse: 19 callbacks suppressed [ 287.628895][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2887'. [ 287.819500][T16092] netlink: 'syz.3.2890': attribute type 1 has an invalid length. [ 287.827314][T16092] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2890'. [ 287.840236][T16095] netlink: 'syz.1.2891': attribute type 1 has an invalid length. [ 287.860313][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2891'. [ 287.869956][T16092] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2890'. [ 287.881103][T16092] netlink: 'syz.3.2890': attribute type 1 has an invalid length. [ 287.908393][T16092] netlink: 'syz.3.2890': attribute type 8 has an invalid length. [ 287.928429][T16092] netlink: 582 bytes leftover after parsing attributes in process `syz.3.2890'. [ 287.940489][T16094] bond3: (slave bridge38): Enslaving as a backup interface with an up link [ 287.951074][T16096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.951528][ T36] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.105671][T16113] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2896'. [ 288.150524][T16098] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 288.161096][ T132] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 288.207337][T16117] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2898'. [ 288.247765][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2898'. [ 288.356150][T16123] netlink: 'syz.6.2901': attribute type 7 has an invalid length. [ 288.367551][T16125] bridge2: port 1(erspan0) entered disabled state [ 288.443269][T16129] netlink: 'syz.1.2900': attribute type 16 has an invalid length. [ 288.457262][T16129] netlink: 'syz.1.2900': attribute type 17 has an invalid length. [ 288.466663][T16123] netlink: 'syz.6.2901': attribute type 7 has an invalid length. [ 288.486675][T16129] bridge2: port 1(erspan0) entered blocking state [ 288.493319][T16129] bridge2: port 1(erspan0) entered forwarding state [ 288.518545][T16125] netlink: 'syz.1.2900': attribute type 24 has an invalid length. [ 288.542382][ T1152] bond3: (slave bridge38): link status up again after 0 ms [ 288.555876][T16129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.571728][ T1152] bond3: (slave bridge38): link status up again after 0 ms [ 288.588728][ T49] bond3: (slave bridge38): link status up again after 0 ms [ 288.605732][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 288.824070][T15968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.888365][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.896421][ C1] lec:lec_tx_timeout: lec0 [ 288.902846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.947762][T15968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.001477][T16153] netlink: 'syz.5.2907': attribute type 4 has an invalid length. [ 289.020333][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 289.037433][T15968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.111380][T16147] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 289.126423][T16147] bond13 (unregistering): Released all slaves [ 289.151547][T15968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.178042][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'. [ 289.358412][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 289.367753][T16165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.443192][T15968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.484398][T15968] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.531466][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.538713][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.579353][ T5145] Bluetooth: hci7: command tx timeout [ 289.602032][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.609227][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.037551][T15968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.178734][T16227] sctp: [Deprecated]: syz.5.2925 (pid 16227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.178734][T16227] Use struct sctp_sack_info instead [ 290.570949][T15968] veth0_vlan: entered promiscuous mode [ 290.647741][T15968] veth1_vlan: entered promiscuous mode [ 290.764536][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2935'. [ 290.784839][T16258] xt_socket: unknown flags 0x50 [ 291.180717][T16268] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.220542][T16272] C: renamed from lo (while UP) [ 291.237429][T15968] veth0_macvtap: entered promiscuous mode [ 291.286787][T15968] veth1_macvtap: entered promiscuous mode [ 291.323657][T16268] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.416207][T16268] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.453645][T15968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.489958][T16268] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.543887][T15968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.576923][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.590812][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.628227][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.660013][ T5145] Bluetooth: hci7: command tx timeout [ 291.686298][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.697111][ T36] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.713140][T16296] xt_ecn: cannot match TCP bits for non-tcp packets [ 291.736954][ T36] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.783563][ T65] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.840405][T16300] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.847539][ T1115] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.884892][T16300] bond4: (slave veth7): Enslaving as an active interface with a down link [ 291.896614][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.922576][T16301] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 291.924796][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.934800][T16301] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 292.024580][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.035607][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.273723][T16320] tap0: tun_chr_ioctl cmd 1074025672 [ 292.283323][T16320] tap0: ignored: set checksum disabled [ 292.547729][T16336] IPVS: length: 194 != 24 [ 292.767562][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.786242][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.795978][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.805949][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.809745][T16354] __nla_validate_parse: 3 callbacks suppressed [ 292.809764][T16354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2967'. [ 292.833537][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.957584][T16348] C speed is unknown, defaulting to 1000 [ 292.963415][ T1115] net_ratelimit: 18 callbacks suppressed [ 292.963434][ T1115] bond3: (slave bridge38): failed to get link speed/duplex [ 293.069025][ T1115] bond3: (slave bridge38): failed to get link speed/duplex [ 293.190355][ T1152] bond3: (slave bridge38): failed to get link speed/duplex [ 293.321359][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 293.399216][T16379] validate_nla: 3 callbacks suppressed [ 293.399233][T16379] netlink: 'syz.6.2975': attribute type 3 has an invalid length. [ 293.409021][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 293.538425][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 293.580695][T16382] netlink: 'syz.5.2976': attribute type 9 has an invalid length. [ 293.644789][T16390] syzkaller0: entered promiscuous mode [ 293.653904][T16390] syzkaller0: entered allmulticast mode [ 293.740273][ T5845] Bluetooth: hci7: command tx timeout [ 293.922493][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.930580][ C1] lec:lec_tx_timeout: lec0 [ 293.935176][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 294.941358][ T5845] Bluetooth: hci4: command tx timeout [ 295.790349][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 295.807351][T16419] rdma_rxe: rxe_newlink: failed to add lo [ 295.823919][ T5845] Bluetooth: hci7: command tx timeout [ 295.836494][T16348] chnl_net:caif_netlink_parms(): no params data found [ 295.967267][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2985'. [ 295.995193][T16434] netlink: 'syz.6.2986': attribute type 1 has an invalid length. [ 296.019697][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2986'. [ 296.058857][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2986'. [ 296.083585][T16442] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2988'. [ 296.106708][T16348] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.137669][T16348] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.156492][T16348] bridge_slave_0: entered allmulticast mode [ 296.181253][T16348] bridge_slave_0: entered promiscuous mode [ 296.190540][T16348] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.197833][T16348] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.207246][T16348] bridge_slave_1: entered allmulticast mode [ 296.215042][T16348] bridge_slave_1: entered promiscuous mode [ 296.248747][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 296.258633][T16451] IPVS: Error joining to the multicast group [ 296.292290][T16348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.323260][T16348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.348024][T16457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.408852][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 296.421174][T16348] team0: Port device team_slave_0 added [ 296.448095][T16348] team0: Port device team_slave_1 added [ 296.484052][T16464] netlink: 'syz.5.2993': attribute type 1 has an invalid length. [ 296.501231][T16348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.508531][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.512718][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2993'. [ 296.536880][T16466] xt_TCPMSS: Only works on TCP SYN packets [ 296.546485][T16464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2993'. [ 296.554628][T16348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.572842][T16348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.580272][T16348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.606726][T16348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.684641][T16348] hsr_slave_0: entered promiscuous mode [ 296.693208][T16348] hsr_slave_1: entered promiscuous mode [ 296.701960][T16348] debugfs: 'hsr0' already exists in 'hsr' [ 296.709752][T16348] Cannot create hsr debugfs directory [ 296.787999][T16471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 296.795723][T16471] syzkaller1: linktype set to 823 [ 296.916084][T16481] rdma_rxe: rxe_newlink: failed to add lo [ 297.021593][ T5845] Bluetooth: hci4: command tx timeout [ 297.216893][T16348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.253835][T16348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 297.309667][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 297.409773][T16348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.430619][T16348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 297.563312][T16348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.575883][T16348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 297.629614][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3002'. [ 297.640283][T16510] netlink: 'syz.4.3004': attribute type 10 has an invalid length. [ 297.660040][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3002'. [ 297.673267][T16510] team0: Port device dummy0 added [ 297.734666][T16348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.795981][T16348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 297.824079][T16522] __nla_validate_parse: 1 callbacks suppressed [ 297.824099][T16522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3007'. [ 297.896446][T16522] bridge0: port 4(syz_tun) entered disabled state [ 297.904220][T16522] bridge0: port 3(team0) entered disabled state [ 297.910875][T16522] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.918074][T16522] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.075893][ T132] net_ratelimit: 3 callbacks suppressed [ 298.075914][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 298.177493][T16541] ipt_REJECT: TCP_RESET invalid for non-tcp [ 298.186021][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3012'. [ 298.289469][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 298.309135][T16348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 298.353837][T16348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 298.393762][T16348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 298.439022][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 298.446893][T16348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 298.493782][T16572] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3018'. [ 298.564638][T16572] dvmrp6: entered allmulticast mode [ 298.758663][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 298.772976][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 298.854363][T16348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.889448][T16348] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.928434][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 298.947490][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.948373][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.954706][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.962571][ C1] lec:lec_tx_timeout: lec0 [ 298.975234][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 299.027724][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.034922][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.098557][ T5845] Bluetooth: hci4: command tx timeout [ 299.130145][ T36] bond3: (slave bridge38): failed to get link speed/duplex [ 299.260410][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 299.401258][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 299.506298][T16348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.563615][T16348] veth0_vlan: entered promiscuous mode [ 299.577023][T16348] veth1_vlan: entered promiscuous mode [ 299.600505][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 299.619921][T16348] veth0_macvtap: entered promiscuous mode [ 299.640228][T16348] veth1_macvtap: entered promiscuous mode [ 299.693145][T16348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.738125][T16348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.763878][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.773599][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.784794][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.795130][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.804871][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 300.405092][T16672] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3043'. [ 300.569487][T16678] syzkaller0: entered promiscuous mode [ 300.574977][T16678] syzkaller0: entered allmulticast mode [ 301.178464][ T5845] Bluetooth: hci4: command tx timeout [ 301.651288][T16686] C speed is unknown, defaulting to 1000 [ 301.766937][T16687] C speed is unknown, defaulting to 1000 [ 302.015186][T16607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.204590][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.217515][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.436936][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.455316][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.604080][T16708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3055'. [ 302.646739][T16705] netlink: 'syz.4.3053': attribute type 33 has an invalid length. [ 303.142021][ T13] net_ratelimit: 28 callbacks suppressed [ 303.142043][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 303.166433][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.177123][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.190588][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.202215][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.210905][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.283563][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 303.351288][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 303.365134][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3067'. [ 303.379344][T16761] IPv6: NLM_F_CREATE should be specified when creating new route [ 303.403161][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'. [ 303.418885][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 303.470095][T16746] C speed is unknown, defaulting to 1000 [ 303.476097][ T36] bond3: (slave bridge38): failed to get link speed/duplex [ 303.552314][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 303.570562][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 303.661582][T16771] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3070'. [ 303.668196][T16775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3071'. [ 303.695328][ T5825] syz_tun (unregistering): left allmulticast mode [ 303.720800][ T5825] syz_tun (unregistering): left promiscuous mode [ 303.734533][ T5825] bridge0: port 4(syz_tun) entered disabled state [ 303.808367][ T1115] bond3: (slave bridge38): failed to get link speed/duplex [ 303.902700][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 303.930056][T16757] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3066'. [ 303.988382][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.996453][ C1] lec:lec_tx_timeout: lec0 [ 304.001109][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.087083][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.111601][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54593 - 0 [ 304.127475][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.210186][T16806] netlink: 'syz.4.3078': attribute type 2 has an invalid length. [ 304.222777][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 304.235585][T16800] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 304.280542][T16800] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.288229][T16800] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.322622][T16800] bridge0: entered allmulticast mode [ 304.410577][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.425554][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54593 - 0 [ 304.456508][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.509130][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 304.584229][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.616105][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54593 - 0 [ 304.656878][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.763646][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.775122][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54593 - 0 [ 304.787217][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.830644][ T1115] bond3: (slave bridge38): failed to get link speed/duplex [ 304.859858][T16845] netlink: 'syz.5.3088': attribute type 1 has an invalid length. [ 304.877193][T16847] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.883644][T16845] netlink: 'syz.5.3088': attribute type 1 has an invalid length. [ 305.018852][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 305.224524][ T36] bond3: (slave bridge38): failed to get link speed/duplex [ 305.261732][ T5145] Bluetooth: hci1: command tx timeout [ 305.346084][T16746] chnl_net:caif_netlink_parms(): no params data found [ 305.437525][ T13] team0: left allmulticast mode [ 305.479931][ T13] team_slave_1: left allmulticast mode [ 305.485555][ T13] team0: left promiscuous mode [ 305.553972][ T13] team_slave_1: left promiscuous mode [ 305.561953][ T13] bridge0: port 3(team0) entered disabled state [ 305.593497][ T13] bridge_slave_1: left allmulticast mode [ 305.606740][ T13] bridge_slave_1: left promiscuous mode [ 305.622829][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.654174][ T13] bridge_slave_0: left allmulticast mode [ 305.670936][ T13] bridge_slave_0: left promiscuous mode [ 305.684756][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.795074][T16899] xt_hashlimit: size too large, truncated to 1048576 [ 305.901440][ T13] tipc: Resetting bearer [ 306.433710][ T13] tipc: Disabling bearer [ 306.490270][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 306.499405][ T13] bridge0 (unregistering): left allmulticast mode [ 306.861701][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.338621][ T5145] Bluetooth: hci1: command tx timeout [ 307.693636][ T13] team0: Port device bridge29 removed [ 307.960526][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.971848][ T13] bond_slave_0: left allmulticast mode [ 307.984503][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.994867][ T13] bond_slave_1: left allmulticast mode [ 308.002076][ T13] bond0 (unregistering): Released all slaves [ 308.011968][ T13] bond1 (unregistering): Released all slaves [ 308.025401][ T13] bond2 (unregistering): Released all slaves [ 308.037642][ T13] bond3 (unregistering): Released all slaves [ 308.049952][ T13] bond4 (unregistering): Released all slaves [ 308.065640][ T13] bond5 (unregistering): Released all slaves [ 308.086801][ T13] bond6 (unregistering): (slave veth9): Releasing active interface [ 308.096943][ T13] bond6 (unregistering): Released all slaves [ 308.109343][ T13] bond7 (unregistering): Released all slaves [ 308.122567][ T13] bond8 (unregistering): Released all slaves [ 308.178756][ T49] net_ratelimit: 3 callbacks suppressed [ 308.178775][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 308.194471][T16928] veth0: entered promiscuous mode [ 308.238876][T16928] veth0: left promiscuous mode [ 308.349179][ T13] tipc: Disabling bearer [ 308.355746][ T13] tipc: Left network mode [ 308.422444][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.429838][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.439662][T16746] bridge_slave_0: entered allmulticast mode [ 308.463425][T16746] bridge_slave_0: entered promiscuous mode [ 308.481189][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.498116][T16746] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.525419][T16746] bridge_slave_1: entered allmulticast mode [ 308.532273][T16957] rdma_rxe: rxe_newlink: failed to add lo [ 308.595751][T16746] bridge_slave_1: entered promiscuous mode [ 308.695985][T16966] __nla_validate_parse: 8 callbacks suppressed [ 308.696005][T16966] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3109'. [ 308.894293][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.910680][T16976] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3113'. [ 308.926811][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.038950][ T1152] bond3: (slave bridge38): failed to get link speed/duplex [ 309.166889][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 309.222265][T16746] team0: Port device team_slave_0 added [ 309.269437][T16746] team0: Port device team_slave_1 added [ 309.291482][T16997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.300355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.423129][ T5145] Bluetooth: hci1: command tx timeout [ 309.456590][T17006] rdma_rxe: rxe_newlink: failed to add lo [ 309.462595][ T1115] bond3: (slave bridge38): failed to get link speed/duplex [ 309.475699][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.492722][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.520019][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.551438][T17004] vlan2: entered promiscuous mode [ 309.556709][T17004] geneve1: entered promiscuous mode [ 309.567996][T17004] vlan2: entered allmulticast mode [ 309.581624][T17004] geneve1: entered allmulticast mode [ 309.605323][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.613191][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.641368][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.741638][T16746] hsr_slave_0: entered promiscuous mode [ 309.751010][T16746] hsr_slave_1: entered promiscuous mode [ 309.757308][T16746] debugfs: 'hsr0' already exists in 'hsr' [ 309.765787][T16746] Cannot create hsr debugfs directory [ 309.799376][T17014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'. [ 309.818308][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 309.826404][ C1] lec:lec_tx_timeout: lec0 [ 309.832618][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.198688][ T13] hsr_slave_0: left promiscuous mode [ 310.214693][ T13] hsr_slave_1: left promiscuous mode [ 310.240703][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.268254][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.317113][ T13] veth1_vlan: left allmulticast mode [ 310.323208][ T13] veth1_macvtap: left promiscuous mode [ 310.330046][ T13] veth1_vlan: left promiscuous mode [ 310.335644][T17036] netlink: 'syz.6.3128': attribute type 9 has an invalid length. [ 310.343895][ T13] veth0_vlan: left promiscuous mode [ 310.826786][ T13] team0 (unregistering): Port device team_slave_1 removed [ 310.936942][ T49] smc: removing ib device syz0 [ 310.995880][ T5894] C speed is unknown, defaulting to 1000 [ 311.008651][ T5894] syz0: Port: 1 Link DOWN [ 311.030591][ T1152] bond3: (slave bridge38): failed to get link speed/duplex [ 311.499332][ T5145] Bluetooth: hci1: command tx timeout [ 311.677087][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3135'. [ 311.683232][T17072] syzkaller0: entered promiscuous mode [ 311.727840][T17072] syzkaller0: entered allmulticast mode [ 311.758596][ T1152] bond3: (slave bridge38): failed to get link speed/duplex [ 311.919253][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 312.059443][ T36] bond3: (slave bridge38): failed to get link speed/duplex [ 312.484605][T17093] syzkaller0: entered promiscuous mode [ 312.499446][T17093] syzkaller0: entered allmulticast mode [ 313.032626][T17109] syzkaller1: entered promiscuous mode [ 313.048497][T17109] syzkaller1: entered allmulticast mode [ 313.293899][ T1115] net_ratelimit: 4 callbacks suppressed [ 313.293919][ T1115] bond3: (slave bridge38): failed to get link speed/duplex [ 313.946908][T12931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.955731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.462465][ T1152] bond3: (slave bridge38): failed to get link speed/duplex [ 314.553695][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.562511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.612495][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 314.823108][T16746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.848806][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 314.856994][ C1] lec:lec_tx_timeout: lec0 [ 314.862114][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.966027][T17171] macvtap0: entered promiscuous mode [ 314.979525][T17171] macvtap0: entered allmulticast mode [ 314.985132][T17171] veth1_vlan: entered allmulticast mode [ 315.010145][T16746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.051322][T16746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.142943][T16746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.223009][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 315.311517][T17194] netlink: 'syz.6.3153': attribute type 28 has an invalid length. [ 315.360256][T17194] netlink: 'syz.6.3153': attribute type 3 has an invalid length. [ 315.368038][T17194] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3153'. [ 315.512161][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 315.656109][T16746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.735112][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 315.763964][T16746] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.820378][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.827547][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.892591][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.899824][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.055061][T17230] tipc: Failed to obtain node identity [ 316.060865][T17230] tipc: Enabling of bearer rejected, failed to enable media [ 316.156753][T17238] tipc: Failed to obtain node identity [ 316.162487][T17238] tipc: Enabling of bearer rejected, failed to enable media [ 316.360719][ T13] IPVS: stop unused estimator thread 0... [ 316.582528][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3167'. [ 316.810725][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3170'. [ 317.038135][T17274] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.045931][T17274] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.109952][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.533638][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.574861][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.096139][T17280] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 318.214520][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.274519][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.288395][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.329497][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.352013][T16746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.382151][T12931] net_ratelimit: 10 callbacks suppressed [ 318.382172][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 318.527365][T16746] veth0_vlan: entered promiscuous mode [ 318.548873][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 318.567370][T17337] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.581591][T16746] veth1_vlan: entered promiscuous mode [ 318.656652][T16746] veth0_macvtap: entered promiscuous mode [ 318.667353][T17339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3181'. [ 318.681158][T16746] veth1_macvtap: entered promiscuous mode [ 318.699454][ T1152] bond3: (slave bridge38): failed to get link speed/duplex [ 318.741973][T17339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3181'. [ 318.767783][T16746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.809535][T16746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.835554][T12931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.870630][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 318.885330][T12931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.928500][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 319.006222][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.028452][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.093347][T17364] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.099212][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 319.102812][T17364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.259786][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 319.267774][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.318595][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.393539][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.408876][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 319.424687][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.529543][ T1152] bond3: (slave bridge38): failed to get link speed/duplex [ 319.657664][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3190'. [ 319.659859][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 319.868823][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 319.876887][ C1] lec:lec_tx_timeout: lec0 [ 319.881591][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 320.094357][ T1217] IPVS: starting estimator thread 0... [ 320.102203][T17407] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3198'. [ 320.189366][T17408] IPVS: using max 27 ests per chain, 64800 per kthread [ 320.271754][T17413] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3200'. [ 320.292029][T17416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.355386][T17418] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3202'. [ 320.385800][T17418] syzkaller1: entered promiscuous mode [ 320.393031][T17418] syzkaller1: entered allmulticast mode [ 320.602449][T17425] netlink: 'syz.3.3203': attribute type 11 has an invalid length. [ 320.610617][T17425] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3203'. [ 320.773496][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3208'. [ 320.979076][T17444] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3210'. [ 321.071045][T17454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3213'. [ 321.180107][T17461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3215'. [ 321.230804][T17464] erspan0: entered promiscuous mode [ 321.243245][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'. [ 321.395161][T17475] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3221'. [ 321.420784][T17475] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3221'. [ 321.667746][T17492] netlink: 'syz.5.3226': attribute type 4 has an invalid length. [ 321.779015][T17501] netlink: 'syz.1.3229': attribute type 12 has an invalid length. [ 322.068041][T17518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'. [ 322.094674][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'. [ 322.168581][T17523] netlink: 'syz.6.3237': attribute type 5 has an invalid length. [ 322.624617][T17529] vlan2: entered allmulticast mode [ 322.651459][T17529] bridge3: entered allmulticast mode [ 322.773524][T17541] netlink: 'syz.6.3242': attribute type 1 has an invalid length. [ 322.797027][T17538] bond13: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 322.871987][T17538] bond13 (unregistering): Released all slaves [ 322.985698][T17545] bond4: (slave gretap2): making interface the new active one [ 323.010974][T17551] can: request_module (can-proto-0) failed. [ 323.014088][T17545] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 323.457954][T17566] veth5: entered promiscuous mode [ 323.463188][T17566] veth5: entered allmulticast mode [ 323.506171][T17569] veth7: entered promiscuous mode [ 323.546453][T17569] veth7: entered allmulticast mode [ 323.578994][T12931] net_ratelimit: 28 callbacks suppressed [ 323.579014][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 323.718452][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 323.798416][T17589] netlink: 'syz.6.3256': attribute type 15 has an invalid length. [ 323.829069][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 323.938541][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 324.051516][ T49] bond3: (slave bridge38): failed to get link speed/duplex [ 324.178415][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 324.299015][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 324.377279][T17616] netlink: 'syz.3.3263': attribute type 2 has an invalid length. [ 324.405569][T17615] pim6reg1: entered promiscuous mode [ 324.413660][T17615] pim6reg1: entered allmulticast mode [ 324.508379][ T13] bond3: (slave bridge38): failed to get link speed/duplex [ 324.618847][T12931] bond3: (slave bridge38): failed to get link speed/duplex [ 324.809596][T17629] bond13: option resend_igmp: invalid value (32767) [ 324.849133][T17629] bond13: option resend_igmp: allowed values 0 - 255 [ 324.888395][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.896466][ C1] lec:lec_tx_timeout: lec0 [ 324.901278][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.944043][T17629] bond13 (unregistering): Released all slaves [ 325.098659][T17652] bond3: (slave bridge38): failed to get link speed/duplex [ 325.306527][T17670] netlink: 'syz.3.3277': attribute type 21 has an invalid length. [ 325.594746][T17682] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 325.896049][T17700] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 326.007599][T17711] bridge0: port 3(gretap0) entered blocking state [ 326.020889][T17707] __nla_validate_parse: 13 callbacks suppressed [ 326.020910][T17707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'. [ 326.047668][T17707] tipc: Failed to remove unknown binding: 66,0,0/0:2551008544/2551008545 [ 326.054568][T17711] bridge0: port 3(gretap0) entered disabled state [ 326.061220][T17707] tipc: Failed to remove unknown binding: 66,0,0/0:2551008544/2551008545 [ 326.077308][T17707] netlink: 'syz.3.3289': attribute type 16 has an invalid length. [ 326.085863][T17707] netlink: 'syz.3.3289': attribute type 17 has an invalid length. [ 326.099377][T17711] gretap0: entered allmulticast mode [ 326.111457][T17711] gretap0: entered promiscuous mode [ 326.187612][T17716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3291'. [ 326.208644][T17716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3291'. [ 326.832359][T17747] syzkaller0: entered promiscuous mode [ 326.837970][T17747] syzkaller0: entered allmulticast mode [ 326.863246][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3304'. [ 327.084820][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3304'. [ 327.171002][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'. [ 327.271195][T17786] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3305'. [ 327.287560][T17785] netlink: 'syz.1.3311': attribute type 7 has an invalid length. [ 327.300955][T17786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3305'. [ 327.308242][T17789] netlink: 'syz.3.3312': attribute type 4 has an invalid length. [ 327.321317][T17785] netlink: 752 bytes leftover after parsing attributes in process `syz.1.3311'. [ 327.330575][T17785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3311'. [ 329.238423][ T775] net_ratelimit: 14 callbacks suppressed [ 329.238443][ T775] bond3: (slave bridge38): failed to get link speed/duplex [ 329.368076][T17801] netlink: get zone limit has 4 unknown bytes [ 329.422225][ T775] bond3: (slave bridge38): failed to get link speed/duplex [ 329.538613][ T12] bond3: (slave bridge38): failed to get link speed/duplex [ 329.562941][T17818] IPVS: Error connecting to the multicast addr [ 329.660058][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 329.788719][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 329.908328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.916416][ C1] lec:lec_tx_timeout: lec0 [ 329.921875][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.929821][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 329.958615][T17848] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 330.015309][T17848] ipvlan2: entered allmulticast mode [ 330.020989][T17848] batadv_slave_1: entered allmulticast mode [ 330.031413][T17848] batman_adv: batadv0: Adding interface: ipvlan2 [ 330.037954][T17848] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.064883][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.098431][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.124178][T17848] batman_adv: batadv0: Interface activated: ipvlan2 [ 330.138637][ T12] bond3: (slave bridge38): failed to get link speed/duplex [ 330.229777][T17860] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 330.244803][T17860] macsec2: entered promiscuous mode [ 330.278520][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 330.334830][T17866] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 330.398994][ T65] bond3: (slave bridge38): failed to get link speed/duplex [ 330.484821][T17872] netlink: 'syz.6.3336': attribute type 1 has an invalid length. [ 330.496981][T17877] netlink: 'syz.5.3338': attribute type 1 has an invalid length. [ 330.543852][T17880] IPv6: Can't replace route, no match found [ 330.575635][T17880] IPv6: Can't replace route, no match found [ 330.644713][T17886] netlink: 'syz.5.3342': attribute type 33 has an invalid length. [ 330.654266][T17886] Bluetooth: MGMT ver 1.23 [ 330.714244][T17891] netlink: 'syz.1.3343': attribute type 39 has an invalid length. [ 330.945900][T17898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.061718][T17898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.146408][T17915] syzkaller0: entered promiscuous mode [ 331.153438][T17915] syzkaller0: entered allmulticast mode [ 331.197257][T17898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.395491][T17898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.466069][T17929] syzkaller0: entered promiscuous mode [ 331.481024][T17929] syzkaller0: entered allmulticast mode [ 331.680563][ T775] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.786823][ T775] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.805671][ T775] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.806043][T17952] xt_TCPMSS: Only works on TCP SYN packets [ 331.842105][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.856146][T17943] syzkaller1: entered promiscuous mode [ 331.862486][T17943] syzkaller1: entered allmulticast mode [ 332.054559][T17966] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 332.320759][T17981] __nla_validate_parse: 17 callbacks suppressed [ 332.320778][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3372'. [ 332.370556][T17981] tipc: Started in network mode [ 332.375486][T17981] tipc: Node identity 4, cluster identity 4711 [ 332.388485][T17981] tipc: Node number set to 4 [ 332.395790][T17981] netlink: 'syz.1.3372': attribute type 3 has an invalid length. [ 332.414526][T17981] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3372'. [ 332.542566][T18001] netlink: 'syz.5.3378': attribute type 5 has an invalid length. [ 332.670128][T18011] x_tables: duplicate underflow at hook 1 [ 332.678111][T18011] xt_hashlimit: size too large, truncated to 1048576 [ 332.953213][T18022] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3384'. [ 332.985138][T18022] netlink: 'syz.5.3384': attribute type 142 has an invalid length. [ 333.252845][T18035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3389'. [ 333.710305][T18067] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3397'. [ 333.723432][T18064] netlink: 'syz.1.3398': attribute type 3 has an invalid length. [ 333.865132][T18071] syzkaller0: entered allmulticast mode [ 333.901210][T18071] syzkaller0 (unregistering): left allmulticast mode [ 334.060255][T18094] bridge0: port 4(batadv1) entered blocking state [ 334.087609][T18094] bridge0: port 4(batadv1) entered disabled state [ 334.097896][T18094] batadv1: entered allmulticast mode [ 334.105445][T18094] batadv1: entered promiscuous mode [ 334.349622][ T775] net_ratelimit: 21 callbacks suppressed [ 334.349642][ T775] bond3: (slave bridge38): failed to get link speed/duplex [ 334.357340][T18115] openvswitch: netlink: IP tunnel dst address not specified [ 334.478351][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 334.548669][ T775] batman_adv: batadv1: IGMP Querier appeared [ 334.555107][ T775] batman_adv: batadv1: MLD Querier appeared [ 334.598471][ T775] bond3: (slave bridge38): failed to get link speed/duplex [ 334.708838][ T775] bond3: (slave bridge38): failed to get link speed/duplex [ 334.818476][ T36] bond3: (slave bridge38): failed to get link speed/duplex [ 334.928400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.928412][ T36] bond3: (slave bridge38): failed to get link speed/duplex [ 334.928435][ C1] lec:lec_tx_timeout: lec0 [ 334.948925][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.038402][T12930] bond3: (slave bridge38): failed to get link speed/duplex [ 335.148415][ T132] bond3: (slave bridge38): failed to get link speed/duplex [ 335.258778][ T775] bond3: (slave bridge38): failed to get link speed/duplex [ 336.874894][T18090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.894802][T18130] netlink: 'syz.6.3415': attribute type 2 has an invalid length. [ 336.924094][T18130] netlink: 'syz.6.3415': attribute type 2 has an invalid length. [ 337.038412][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3416'. [ 337.181112][T18151] netlink: 'syz.3.3421': attribute type 10 has an invalid length. [ 337.190679][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 337.222650][T18153] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3422'. [ 337.281057][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3422'. [ 337.344199][T18164] sctp: [Deprecated]: syz.3.3425 (pid 18164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.344199][T18164] Use struct sctp_sack_info instead [ 337.391364][T18164] 8021q: VLANs not supported on lo [ 337.492959][T18174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3428'. [ 337.547395][T18174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3428'. [ 337.607679][T18183] netlink: 'syz.6.3429': attribute type 39 has an invalid length. [ 337.798794][T18189] syzkaller1: entered promiscuous mode [ 337.804440][T18189] syzkaller1: entered allmulticast mode [ 337.818157][T18197] syzkaller0: entered promiscuous mode [ 337.828043][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3433'. [ 337.840029][T18197] syzkaller0: entered allmulticast mode [ 337.945210][T18199] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3434'. [ 338.014665][T18209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3438'. [ 338.065822][T18211] smc: net device wlan0 applied user defined pnetid SYZ0 [ 338.151972][T18215] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 338.190801][T18218] syzkaller0: entered promiscuous mode [ 338.201586][T18218] syzkaller0: entered allmulticast mode [ 338.302955][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3440'. [ 338.484846][T18238] bridge2: entered promiscuous mode [ 338.512322][T18238] bridge2: entered allmulticast mode [ 338.523428][T18238] team0: Port device bridge2 added [ 338.557598][T18242] bridge0: port 5(team0) entered blocking state [ 338.568615][T18242] bridge0: port 5(team0) entered disabled state [ 338.575305][T18242] team0: entered allmulticast mode [ 338.598412][T18242] team_slave_0: entered allmulticast mode [ 338.604363][T18242] team_slave_1: entered allmulticast mode [ 338.612131][T18242] dummy0: entered allmulticast mode [ 338.622952][T18242] team0: entered promiscuous mode [ 338.628102][T18242] team_slave_0: entered promiscuous mode [ 338.635497][T18242] team_slave_1: entered promiscuous mode [ 338.641568][T18242] dummy0: entered promiscuous mode [ 338.706390][T18249] dvmrp0: entered allmulticast mode [ 338.770056][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3453'. [ 338.800155][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 338.860708][ T31] INFO: task syz.2.1174:10084 blocked for more than 143 seconds. [ 338.868642][ T31] Not tainted syzkaller #0 [ 338.874061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.883171][ T31] task:syz.2.1174 state:D stack:27112 pid:10084 tgid:10083 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 338.943258][ T31] Call Trace: [ 338.951116][ T31] [ 338.957523][ T31] __schedule+0x15dd/0x52d0 [ 338.963900][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 338.970888][ T31] ? __pfx___schedule+0x10/0x10 [ 338.976433][ T31] ? schedule+0x90/0x360 [ 338.981776][ T31] schedule+0x164/0x360 [ 339.000196][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.019085][ T31] __mutex_lock+0x7fe/0x1300 [ 339.023731][ T31] ? __mutex_lock+0x5ac/0x1300 [ 339.028760][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 339.034512][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.039879][ T31] ? __nlmsg_put+0xef/0x1b0 [ 339.044662][ T31] ? genlmsg_put+0x137/0x2e0 [ 339.049566][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 339.055417][ T31] ? kmem_cache_free+0x187/0x630 [ 339.060437][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 339.066525][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 339.072125][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 339.078702][ T31] ? __asan_memcpy+0x40/0x70 [ 339.083413][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 339.089565][ T31] genl_rcv_msg+0x61c/0x7a0 [ 339.094118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.099271][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 339.105371][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 339.110411][ T31] netlink_rcv_skb+0x232/0x4b0 [ 339.115201][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.120609][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.125936][ T31] ? down_read+0x272/0x2e0 [ 339.130692][ T31] ? genl_rcv+0xd/0x40 [ 339.134772][ T31] genl_rcv+0x28/0x40 [ 339.138970][ T31] netlink_unicast+0x80f/0x9b0 [ 339.143787][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 339.149248][ T31] ? netlink_sendmsg+0x650/0xb40 [ 339.154217][ T31] ? skb_put+0x11b/0x210 [ 339.158618][ T31] netlink_sendmsg+0x813/0xb40 [ 339.163414][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.168885][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 339.173850][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.179568][ T31] ____sys_sendmsg+0x972/0x9f0 [ 339.184443][ T31] ? futex_unqueue+0x211/0x240 [ 339.189927][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.195364][ T31] ? import_iovec+0x73/0xa0 [ 339.200985][ T31] ___sys_sendmsg+0x2a5/0x360 [ 339.205835][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.212816][ T31] ? futex_wait+0x29a/0x380 [ 339.217522][ T31] ? __fget_files+0x2a/0x420 [ 339.222245][ T31] ? __fget_files+0x3a0/0x420 [ 339.227033][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 339.232160][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.237677][ T31] ? rcu_is_watching+0x15/0xb0 [ 339.243113][ T31] do_syscall_64+0x14d/0xf80 [ 339.247723][ T31] ? trace_irq_disable+0x3b/0x150 [ 339.253404][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.259665][ T31] ? clear_bhb_loop+0x40/0x90 [ 339.264443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.270462][ T31] RIP: 0033:0x7f2f51d9c799 [ 339.274910][ T31] RSP: 002b:00007f2f52b6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.283693][ T31] RAX: ffffffffffffffda RBX: 00007f2f52015fa0 RCX: 00007f2f51d9c799 [ 339.292079][ T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 339.300447][ T31] RBP: 00007f2f51e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 339.308681][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.316864][ T31] R13: 00007f2f52016038 R14: 00007f2f52015fa0 R15: 00007ffca98a5ba8 [ 339.324974][ T31] [ 339.329349][ T31] [ 339.329349][ T31] Showing all locks held in the system: [ 339.338042][ T31] 1 lock held by khungtaskd/31: [ 339.345776][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 339.355996][ T31] 3 locks held by kworker/u8:5/132: [ 339.361378][ T31] #0: ffff888031c02948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 339.373078][ T31] #1: ffffc90002f17c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 339.385938][ T31] #2: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 339.395587][ T31] 2 locks held by getty/5584: [ 339.400317][ T31] #0: ffff888031da80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.410166][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 339.420659][ T31] 2 locks held by syz.0.665/8290: [ 339.425699][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.433978][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 339.444262][ T31] 2 locks held by syz.2.1174/10084: [ 339.449879][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.458127][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 339.468201][ T31] 2 locks held by syz.1.3454/18260: [ 339.473663][ T31] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 339.482667][ T31] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 339.493747][ T31] 2 locks held by syz.5.3456/18267: [ 339.499395][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 339.507605][ T31] #1: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 339.516935][ T31] 2 locks held by syz.4.3457/18269: [ 339.522370][ T31] #0: ffffffff90136d18 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 339.531959][ T31] #1: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 339.541110][ T31] [ 339.545373][ T31] ============================================= [ 339.545373][ T31] [ 339.555919][ T31] NMI backtrace for cpu 0 [ 339.555934][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 339.555952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.555962][ T31] Call Trace: [ 339.555968][ T31] [ 339.555975][ T31] dump_stack_lvl+0xe8/0x150 [ 339.556001][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 339.556024][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 339.556047][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 339.556069][ T31] sys_info+0x135/0x170 [ 339.556086][ T31] watchdog+0xfd9/0x1030 [ 339.556114][ T31] ? watchdog+0x21a/0x1030 [ 339.556141][ T31] kthread+0x388/0x470 [ 339.556158][ T31] ? __pfx_watchdog+0x10/0x10 [ 339.556176][ T31] ? __pfx_kthread+0x10/0x10 [ 339.556189][ T31] ret_from_fork+0x51e/0xb90 [ 339.556210][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 339.556230][ T31] ? __switch_to+0xc7d/0x1450 [ 339.556257][ T31] ? __pfx_kthread+0x10/0x10 [ 339.556275][ T31] ret_from_fork_asm+0x1a/0x30 [ 339.556310][ T31] [ 339.556317][ T31] Sending NMI from CPU 0 to CPUs 1: [ 339.667785][ C1] NMI backtrace for cpu 1 [ 339.667803][ C1] CPU: 1 UID: 0 PID: 15968 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 339.667820][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.667829][ C1] RIP: 0010:unwind_next_frame+0x513/0x23c0 [ 339.667855][ C1] Code: c1 e8 3f 48 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 [ 339.667868][ C1] RSP: 0018:ffffc9000beff458 EFLAGS: 00000a07 [ 339.667881][ C1] RAX: 0000000000000000 RBX: ffffffff908c029c RCX: dffffc0000000000 [ 339.667891][ C1] RDX: ffffffff908c029c RSI: ffffffff913925b4 RDI: ffffffff8c27b520 [ 339.667901][ C1] RBP: ffffffff908c029c R08: 0000000000000001 R09: ffffffff8e75e420 [ 339.667911][ C1] R10: ffffc9000beff578 R11: ffffffff81b0bfa0 R12: ffffffff8a6a9800 [ 339.667921][ C1] R13: ffffffff908c029c R14: ffffc9000beff528 R15: ffffffff908c029c [ 339.667932][ C1] FS: 000055558183c500(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 339.667944][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.667953][ C1] CR2: 00007f0cfb5e92f8 CR3: 0000000051132000 CR4: 00000000003526f0 [ 339.667966][ C1] Call Trace: [ 339.667971][ C1] [ 339.667980][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 339.668000][ C1] ? translate_table+0x191/0x20b0 [ 339.668019][ C1] ? translate_table+0x191/0x20b0 [ 339.668038][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 339.668054][ C1] arch_stack_walk+0x11b/0x150 [ 339.668076][ C1] ? translate_table+0x191/0x20b0 [ 339.668096][ C1] stack_trace_save+0xa9/0x100 [ 339.668109][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 339.668129][ C1] kasan_save_track+0x3e/0x80 [ 339.668144][ C1] ? kasan_save_track+0x3e/0x80 [ 339.668157][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 339.668171][ C1] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 339.668187][ C1] ? translate_table+0x191/0x20b0 [ 339.668228][ C1] __kasan_kmalloc+0x93/0xb0 [ 339.668246][ C1] __kvmalloc_node_noprof+0x528/0x8a0 [ 339.668261][ C1] ? translate_table+0x191/0x20b0 [ 339.668279][ C1] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 339.668296][ C1] translate_table+0x191/0x20b0 [ 339.668314][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 339.668343][ C1] ? __pfx_translate_table+0x10/0x10 [ 339.668376][ C1] ? _copy_from_user+0x94/0xb0 [ 339.668402][ C1] do_ip6t_set_ctl+0x9fe/0xe10 [ 339.668424][ C1] ? rcu_is_watching+0x15/0xb0 [ 339.668444][ C1] ? trace_contention_end+0x3d/0x150 [ 339.668465][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 339.668492][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 339.668506][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.668524][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.668544][ C1] nf_setsockopt+0x26f/0x290 [ 339.668559][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 339.668578][ C1] do_sock_setsockopt+0x17c/0x1b0 [ 339.668600][ C1] __x64_sys_setsockopt+0x13d/0x1b0 [ 339.668623][ C1] do_syscall_64+0x14d/0xf80 [ 339.668636][ C1] ? trace_irq_disable+0x3b/0x150 [ 339.668655][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.668670][ C1] ? clear_bhb_loop+0x40/0x90 [ 339.668686][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.668699][ C1] RIP: 0033:0x7f0cfb39dfda [ 339.668711][ C1] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 339.668723][ C1] RSP: 002b:00007ffe2233b308 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 339.668744][ C1] RAX: ffffffffffffffda RBX: 00007ffe2233b390 RCX: 00007f0cfb39dfda [ 339.668754][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 339.668763][ C1] RBP: 0000000000000003 R08: 00000000000002e8 R09: 0000000000000000 [ 339.668771][ C1] R10: 00007f0cfb5e92a0 R11: 0000000000000206 R12: 00007f0cfb5e9240 [ 339.668780][ C1] R13: 00007ffe2233b32c R14: 0000000000000000 R15: 00007f0cfb5e9fc0 [ 339.668798][ C1] [ 339.686465][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 339.686499][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 339.686519][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.686531][ T31] Call Trace: [ 339.686538][ T31] [ 339.686546][ T31] vpanic+0x56c/0xa60 [ 339.686575][ T31] ? __pfx___schedule+0x10/0x10 [ 339.686599][ T31] ? __pfx_vpanic+0x10/0x10 [ 339.686630][ T31] panic+0xc5/0xd0 [ 339.686651][ T31] ? __pfx_panic+0x10/0x10 [ 339.686675][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 339.686699][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 339.686724][ T31] watchdog+0x1023/0x1030 [ 339.686754][ T31] ? watchdog+0x21a/0x1030 [ 339.686785][ T31] kthread+0x388/0x470 [ 339.686803][ T31] ? __pfx_watchdog+0x10/0x10 [ 339.686825][ T31] ? __pfx_kthread+0x10/0x10 [ 339.686843][ T31] ret_from_fork+0x51e/0xb90 [ 339.686868][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 339.686888][ T31] ? __switch_to+0xc7d/0x1450 [ 339.686911][ T31] ? __pfx_kthread+0x10/0x10 [ 339.686929][ T31] ret_from_fork_asm+0x1a/0x30 [ 339.686967][ T31] [ 340.171282][ T31] Kernel Offset: disabled [ 340.175589][ T31] Rebooting in 86400 seconds..