last executing test programs: 8m53.332122365s ago: executing program 3 (id=2306): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000010) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0xfffffffffffffffc, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x1, 0xf0, 0x3}, {0x1, 0xff, 0x8}, 0xfd, 0xfe}], 0x20) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x27, &(0x7f0000000400)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x0, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0xb, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 8m49.460701071s ago: executing program 1 (id=2321): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe80000b0000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000000) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (rerun: 32) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x4, 0x4) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020500000400"/32], 0x20}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x4d, "33d562fed6c6f05ed9fcec31670ba23a9f789539ed3a016e95374fca9ddbca5187decfb03e946488cf1e7f48fd0724541e9a7e97f0a355af56f7705bc120d7ba3f31649e441cc66701eaa4ab75"}, &(0x7f0000000140)=0x71) 8m49.327832669s ago: executing program 3 (id=2322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00000000000000eed71722aefda0f04dd4955dd0d200000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) close(r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) close(0x3) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newchain={0x3c, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xa, 0x5}, {0x4, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x37}, @TCA_CHAIN={0x8, 0xb, 0xfffffc42}]}, 0x3c}}, 0x0) 8m49.045198506s ago: executing program 0 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x250, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_macvtap\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x4, 0x0, [0x0, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x2, 0x1}, {0x4, 0x4, 0x4}, 0x3, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25050000000800090002000000060001000500000008000c00aa0a620008000b00040000000500140001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4004000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x100800) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x2, {0x2, 0x4e21, @remote}, 'ip6gretap0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = socket(0x2b, 0x1, 0x0) listen(r10, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r10, 0x894b, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000003c0)=0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)={0x1778, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x103c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1008, 0xd, 0x0, 0x1, [{0x1004, 0x0, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x2e0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xd4, 0xe, 0x0, 0x1, [{0xcf, 0x0, "3a4083721d48f7195f162e5cdee85875a13705dde8a57ac487322f29d1a5cfa26ab8b39b38294a260cf1777c6c5a34eebcde7c6243e16d8b61e19fa2816d9625220abcbc8a5900769e3a7944536b1a611ff0b2facfdf38f973cf0379a911fb5d7725b4a645efed4a5e268132cc48e4cbd742bfdfb5fd96e62df853a3cc4da5f1518d6dd3bd9914a00a6189180ecd60bbd9f0e18b32d4f2bb11d37c2b47f0bb8087c3a7c9b2ee6d408f7029d5b961fe30404768da01d4f96398a80af9686dcae1fb2a7d57cc9f7ed757a05e"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x9a}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1ec, 0xd, 0x0, 0x1, [{0x5e, 0x0, "18e1db6a9ccd82a7ec3d0f722ce515c025398f9a1a4156169b4c8c49129220504e24e7bde95a6078f2d81e2889c6793cd4d0e9d13842a06c8f33ecbc6459a7f70f25d4e70563d97dd985ab1c90d6b554d8652eb73297140b0808"}, {0xb5, 0x0, "3aa6450b048dbbdbe0017d6a1428f4b4674c6af1885b87751de36272f7fc1aab87b6cd6bac543f08a963689b1101b85d25eea8901d685f67467adeed75252f41c6e5f126665777a5be4064635ca221b7e2f1c74ce8004f7daf4ad1427b779817c9596b186959654560fb43531da8ce0dea404d9a930c837adbfbff8b4c47d8a945b02ace3075000ff5426f7eb9b890dd1c4ea8b5320ca652c69c088ef8aace32ed12a18602e4e3f000dd97922f299425ad"}, {0x7a, 0x0, "4545502ccf362ecca716fecfaf7b34aaedd17f636b6db64112e27a4c6adf2cd9c30b83bbdf99ca2b13fed1f7f44e0f506ee7a3746c98cb57d6da98dc885153fa699526031e0db5b3231ea02a362b89c24b61bef3e6b9105a20060a388877ee9ebdc572ca51a496bb12bfeea8cfdd0ed053a0d43412be"}, {0x51, 0x0, "bfbcaa5351cf0390db92916db6d15ac8dea243c846b2867338f25a59cf5a1efea462546947c403079fe007e5c93847daecad84d64201c61beac31596e692fa37ba0b66e749915eb930febdfd2f"}]}]}, @NL80211_ATTR_NAN_FUNC={0x284, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "952ca380876f"}, @NL80211_NAN_FUNC_SRF={0x274, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}]}]}, @NL80211_ATTR_NAN_FUNC={0x16c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x10, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x154, 0xd, 0x0, 0x1, [{0x20, 0x0, "12029bdf01378acc6c696abde82327c4c055a6bb0b45295c6d24cd9e"}, {0x7a, 0x0, "e63647f45188e3b2a620b9a71109001d81bcdf983e7a6cc546ede4ef8b927fda080a7b0ee3ca4287dd52e99b480142d648a5fb5aa9450775394d1624a2d5b811e03f216bff27f99964696831c14c337a3cb651473824de82adc1d021e93590e05918740a67a8bca20f7df1ff07527c58c20421602027"}, {0x8d, 0x0, "4becae752471387a44a94c14a1d71be669ea729dc5a3e4626d1a973faa165d84c368902d3f2e6bf9ee8768f8725b057cb5041be559791de0725e53d6264c690e732e601152a7f7211c19ed0747fad84c460a859696e671cde7ead63e470a9971ac3fd2be507fcb7ae868e7e18f47ea6fe9af57720a35a5ecba029da7807b659421351da49cfef0cfc3"}, {0x23, 0x0, "5d386f4657f84d6f6e16331ee5b12e8a7bd0a340353a72378a2929a06175a4"}]}]}, @NL80211_ATTR_NAN_FUNC={0x50, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2c}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_SRF={0x24, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}]}]}, 0x1778}, 0x1, 0x0, 0x0, 0x10}, 0x20040811) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 8m48.697976323s ago: executing program 4 (id=2326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)='\x00', 0x1}}, 0x40805) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x20004801) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB="670f72a0150e3591e0fd734f848b219ee6878461b5c17a5e8491f78c690622ef6c9d8782c6d70890becc00b125217de4d1d55feb5f5095830249daa3b485709124c82d1b4e52e1d366d096b10576bf8721307b88baba9c576a79fa76030f494e3f9816fee9a39910d5e5c67d2d84380dadd5fc"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 8m48.398875155s ago: executing program 3 (id=2327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) mmap(&(0x7f00003ee000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919a80000000000950000b200000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="806ee09d09408e1778832f473074000200", @ANYRES16=r5, @ANYBLOB="000127bd7000fddbdf25050000002200070073797374656d5f753a6f626a6563745f723a6465767474795f743a7330000000140006007465616d30000000000000000000000014000600766c616e30000000000000000000000014000300fe8000000000000000000000000000aa"], 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x14000014) 8m48.350098581s ago: executing program 0 (id=2328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) 8m48.249909767s ago: executing program 1 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="1400238008000b"], 0x30}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000300)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000300), 0x0}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r3, 0x0, 0x10001) 8m48.041096606s ago: executing program 0 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001328ae8d634973ba4258e2573f1ab61a1ec13bcaa93955d7418060d60a088af4a3edbbdf1d909d5f41a23a9abe3863322cfde9a998469312c335e419760eb56681567b6f4f474002b79f39849e5587aded416b9f5ebe2b8c4bc1063b69c644c8bc158afa6e8cf050de6599a7a0065c7f7604c2918861ea11b498c43eb56e3f63f40ac2f556a00b9f4ddabb8199a702355b6d330e71b9f4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) mmap(&(0x7f0000a33000/0x2000)=nil, 0x2000, 0x2000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c110000", @ANYRES16=r7, @ANYBLOB="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"], 0x112c}, 0x1, 0x0, 0x0, 0x44050}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677265004000028006001800fe0f000063dec4ef247135ff52d0566bee3b3cd3251405a869ff5877488ace321793b26bdd0048f9ec522bf5f0c083de145f"], 0x38}}, 0x0) socket$kcm(0x29, 0x6, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r8, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r10) sendmsg$NFC_CMD_SE_IO(r11, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000fddbdf251b00000008001500020000000400190008000100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) 8m48.022036893s ago: executing program 4 (id=2331): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4044800) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, 0x25, r7, 0x8, 0x0, 0x5b, 0x10, &(0x7f00000004c0)={0xffffffff, 0x1, 0x0, 0x500}, 0x10, 0x0, 0x0, 0x16}, 0x94) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES8=r4], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x3, 0x8b, 0x9, 0x1, 0x9, 0x7f, 0x1, 0x10, 0x4f, 0x2, 0x9, 0x5, 0x5}, 0xe) (async) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x52}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000340)={r11, @in6={{0xa, 0x4e22, 0xf, @mcast1, 0x1}}, [0xfffffffffffffb27, 0x2, 0x7, 0x80000001, 0x3ff, 0x64, 0x8000, 0x7, 0x5, 0x0, 0x6, 0x101, 0x5, 0x8, 0xc2]}, &(0x7f0000000480)=0x100) (async) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x6) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r12, 0x0, 0x0) 8m47.862176216s ago: executing program 2 (id=2332): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd7000004000000201"], 0x1c}}, 0x4040080) 8m47.861678691s ago: executing program 1 (id=2333): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0xfffeffff}, 0xc) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x1f, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) (async, rerun: 64) recvmmsg(r7, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f00000019c0)=""/4084, 0xff4}, {&(0x7f0000000a40)=""/193, 0xc1}], 0x2}}], 0x1, 0x10000, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (rerun: 64) 8m47.543835502s ago: executing program 4 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010000003a080000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000003c0012800e0001006970366772657461700000002800028014001000fc02000000000000000000000000000106000f"], 0x5c}}, 0x0) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) 8m47.447645822s ago: executing program 2 (id=2335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r6, @ANYBLOB="4c00088048000080200004000a004e2100000000200100000000000000000000000000000000000024000100975c9d81c983c8209ee781214b899f8ed925aed90000000000000057cdbf691c"], 0x68}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r10, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 8m46.977902021s ago: executing program 4 (id=2336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=@gettaction={0x118, 0x32, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8811}, 0x4000000) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @empty, @local, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @mcast1}}}}}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000000)="a14350d88c1a1a3df134a59a845409f745efeec8ef4d16b7dd510e1d0393710084fb38106c5007e6751cfbf240e0102b95c63dee58fc6f43eb8fdd979535c3c5bef8eafb0c500a3e9988c8cbb719c4e69b7ae2e02bd9b30406145d3e377988d58a3aedcda7ba3affda9d69971b9db054cdb6ac52169939879e9cca690dbe6f16863396785b5d19b50e78429f0d0fbca06219df71f4d9831c9c7fb23ddee04a52f118d5fb9f4bac96db4e60224a76b3552d01893bda5c560f79fa25ce0ab9cc65b9", 0xc1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m46.977451882s ago: executing program 3 (id=2337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060005000500000000000900020073797a3000000000100003006269746d61703a706f7274001c0007800600054000000000060004400000000008000800000000000500010007000000050004000000000000000000"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000400000000000000000000000000400"/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x8, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000780)=0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x1) sendto$inet(r5, &(0x7f0000000200)='\x00', 0x1, 0xc000, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0xfea8, 0xe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x7, 0xb, 0xf}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0x70) 8m46.976480189s ago: executing program 0 (id=2338): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r3) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003600)=@deltfilter={0xfd4, 0x2d, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1ff6724672fd20ee}, {0x3, 0x5}, {0xc, 0xb}}, [@f_rsvp6={{0xa}, {0xfa4, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffff, 0x3}}, @TCA_RSVP_SRC={0x14, 0x3, @empty}, @TCA_RSVP_ACT={0x5d8, 0x6, [@m_ctinfo={0xd0, 0x1a, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7f}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x28, 0x9, 0x1, 0x2, 0xf99}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x7ff, 0x10000000, 0x4, 0x4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1800}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0xb9, 0x1, 0xff, 0x3}}]}, {0x3a, 0x6, "f6c3081a0b05b62a868e5312e93cbad643832ed08501494414d7df0ab04e11c90d80151eaf44e336bf8dbc89ec3d5cc9068140e85bfb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x170, 0x8, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4db, 0x5, 0x6, 0x6, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0xfd, 0x6, "4fad021916557f830edb3017fac34d6d1f3897b2634f28521216c99c2c96adf3844f6506a3ba9025191a168d3636732c1132711bd26236a108fd2a493627de4b469fb0698d5ad3fbc48715140c4cc2cec26789efd048ae65c23e463c0f10ff1a4ee4face8cb6826ac05744252e0282d5583cbe22b590f4e9c5d38b7b6672ac35d58042449cc79bc3265b79bc3fb8fd663046dc8cb98774131df9c7b6637c0a32d408b695eb5705d12dd14ad558b7849971e469e705a5a8208644fe93ef3e9e42dd46f2735ed5a07c07a44221ff98e95993324bf6add924203484be0c9ab5ebd559eaaab9e1e91e58f5c6babdbe1a3787708c7d9099ea74f5f3"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1e8, 0x9, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x9, 0xffffffffcffffffd, 0xd503, 0x4}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x80, 0x20000000, 0x6, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x3, 0x2, 0x8000}, @loopback, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf3a, 0x5, 0x6, 0xfffffff3, 0x4}, @multicast2, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x24c8, 0x8, 0x8, 0x2caa5007}, @multicast1, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xae2, 0x800, 0x7, 0x8, 0x800}, @private=0xa010101, @private=0xa010100}}]}, {0xcd, 0x6, "e4f96a3f24aafdece08b596b1f2f62881119ed7cb74ca2a8cc9e6896bb3bdc634c01e93e04dc01dd24e8b97b07ed3b105880ad662f07c7ceafe711a78b8db32e9c5d4a48415d0cc5680e68a74086156245142320ec01a47b0b9a68d9edba098bcf3a12336d5dcb90fe58844ef218db62995025627dbf8e953e654683a842ef0a232cfe22f9db06a513f5c42ce5dd4ee464cf092a4fb3a7d42845041d4ecadce8eac63e37eb0a332ed4da4141eedaa321b776d61cd71be9cda5550e86bcce291f1acdec68884596c150"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xe0, 0x18, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "35b61219d7c394641c63f24f52b78f17"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00'}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_ACTION={0x6}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x3, 0x7fffffffcffffffa, 0x2b, 0x98f}}]}, {0x31, 0x6, "08c1f76888dabe3392bfd755488f8382332b02177041dfcc8a449acadcab37e25cb0a0f701e193513eb5250ad0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_vlan={0xcc, 0x13, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0xfffffffd, 0x5, 0x275, 0xa}, 0x1}}]}, {0x69, 0x6, "249a1f19e90644fbdde8a4c9f43e7ecba02084c5d0f529191ae5ea36cf1d3d8fad9b239068e80729b4f1e0a733baf7e5ee1531aa4f73ffb4b68b1d5b424e4d68a2bc1eb21c121966cc813a4e93a2ae0a5a300e2af3efd52692ae301b4a55111d44e1b3f6b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0xadb6c1db6b01e93b}}}}]}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_DST={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_ACT={0x970, 0x6, [@m_sample={0x104, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}]}, {0xce, 0x6, "9c860e63e1d88490acaed2b9bd5a918194d317a866320497b939d554a80e0798654fec14551d9b71cb517d001194169c3b712c76341b622549600aae4368f09f9be9f6bef94f8ab210037add27921595cf23332d3891c7694eb8b85e1c77068211be7ca509d98b4d9cf32207aa24ba44553ad8eacdedae7f014d281e70f51ec52769f7ca42ae89a9a192ff5968f2d63d8cf511462edc9baf67bcbcf48966dc8e8faeb601252b90e63e8ff467a78198f825639677bee2110e938474e0986d1d2b4baf1c51ca1fd8a16fdb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5b85a1419e02629b, 0x2}}}}, @m_nat={0x30, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x8, 0x6, "4c8a1409"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x838, 0x5, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x80000001, 0x6, 0x7ff, 0x2, 0xfffffff8, 0x7, 0x9, 0x1, 0xffffffff, 0x23, 0x6, 0x401, 0x6, 0x5, 0x3, 0x6, 0x7, 0xe771, 0x1, 0x2b7, 0x9, 0x9a1, 0x4, 0x101, 0x5, 0x689e8a99, 0xfffffffa, 0x5, 0x2, 0xc3d2, 0x4, 0x7f, 0x10001, 0x1, 0x8, 0x7, 0x5c, 0x0, 0xe, 0x4, 0x0, 0x100, 0xfffffff8, 0xac3, 0xf, 0x1b, 0xfffff001, 0x9, 0xfdf20, 0x5, 0x4, 0x3, 0x5, 0xac35, 0x5f, 0x401, 0xd, 0x5, 0x7, 0x1, 0x3, 0x1, 0x200, 0x58, 0x6, 0x7, 0x9, 0x5, 0x3b84000, 0xfffffff8, 0x5, 0x1, 0xd, 0x6, 0xed91, 0x10, 0x9, 0x0, 0x9, 0x8, 0x1000, 0x0, 0x6, 0x101, 0x4, 0x6, 0x4, 0x7f, 0x6c6, 0x7, 0x1, 0xfffffffa, 0x6, 0x5, 0x5, 0x40, 0x0, 0x2674, 0x5, 0xebe, 0x2, 0x7f4, 0x8e3, 0xb7c9, 0x5, 0x1, 0x1, 0xfd, 0x5, 0x1a, 0x3, 0xfffffff8, 0xffffffff, 0x7f5, 0x10000, 0x7, 0x9, 0x6, 0x9, 0x8, 0x3, 0x4, 0xffffffff, 0x8, 0x64, 0x690b, 0x7, 0x1, 0x2, 0x200, 0x6, 0x8de, 0x6, 0x0, 0x4, 0x1, 0x6, 0x1, 0xc0, 0x6, 0xb77e, 0x9, 0x800, 0x9, 0x4, 0x9d6, 0x7, 0x1, 0x5, 0x8, 0x3, 0x2, 0x5, 0xe1, 0xd052, 0xfff, 0xfff, 0x6, 0xb, 0x7, 0x13, 0xfffffff9, 0x10001, 0xfffffff7, 0x3, 0x4b20, 0x8001, 0x2, 0x16f, 0x101, 0x0, 0x7, 0x10001, 0x4, 0x3, 0x1, 0x0, 0x8, 0x0, 0x3, 0x8, 0x39, 0x8, 0x7, 0x9, 0x5, 0x7, 0x793e, 0x0, 0xdd, 0x1, 0x7, 0xd, 0x9, 0xfff, 0x0, 0x401, 0x5a, 0x101, 0x7ff0000, 0x291, 0x44bcf357, 0x220, 0x32, 0x8, 0x1, 0x3, 0x8, 0x8, 0x3, 0x340, 0x7500000, 0xa, 0x5, 0x100, 0xff, 0x3, 0x7fc0000, 0xd3, 0x7, 0x4, 0x800, 0x8, 0x1, 0x3, 0x1ff, 0xffffffff, 0x2, 0x5, 0x3, 0x1, 0x6d1, 0x5, 0x1ef649e5, 0x9, 0x2, 0x8, 0x3, 0xb, 0xc8a8, 0x0, 0x1ff, 0x8000, 0x8, 0x2c5, 0xba6, 0xfffffffa, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x6, 0x7, 0x1, 0xfffffffa, 0xb, 0x3627, 0x7, 0x9, 0x7, 0xfffffff7, 0x7, 0x5, 0x6, 0xa1ea, 0x5, 0x3, 0x198, 0xffff, 0x895, 0x2, 0x1, 0x4, 0x1, 0x8e47, 0x46c4, 0xa, 0x100, 0x5, 0x5, 0x0, 0x2, 0x2, 0x1, 0x10, 0x4, 0x101, 0x5, 0xcf7b, 0x7a, 0x1ff, 0x8, 0xfffffbff, 0x5, 0x5, 0x4, 0x12, 0x9cb, 0x1, 0x3, 0x101, 0xb777, 0x6, 0x8, 0x2, 0xb, 0x7, 0x7, 0xdc, 0x3ff, 0xfffffffa, 0xa, 0x0, 0xffffffc0, 0x8, 0x1, 0x10001, 0x1, 0x80, 0x7, 0xf, 0xee0f, 0xc, 0x4, 0xd01, 0x1, 0x5, 0x7e69, 0xffff7fff, 0x37, 0x4416, 0x5, 0x4, 0xffffff7f, 0x0, 0x1, 0x0, 0x3, 0x7, 0xd, 0x7, 0x7, 0x2, 0xd9, 0x6, 0xdc5, 0x6, 0x0, 0xa, 0xffffffff, 0x0, 0x614, 0x0, 0xe, 0x3ff, 0x200, 0x8, 0x3, 0xd4, 0x5, 0x3, 0xfffffbff, 0x3ff, 0x7fffffff, 0x3, 0x0, 0xffffffff, 0x7, 0x8, 0x1, 0xff, 0x1, 0x90000000, 0x89f6, 0x50, 0x3ff, 0xa, 0x8, 0x3ff, 0x3, 0x8, 0x5, 0x1, 0x4, 0x2, 0xffff4eb1, 0x4, 0x2, 0x50c9, 0x6, 0x0, 0x8, 0x200, 0x7f, 0x8, 0xee, 0xfffffffe, 0x0, 0x4, 0x6, 0x1, 0x1, 0x4, 0x2, 0x26e, 0xa, 0x1, 0x4, 0x4, 0xfffffff8, 0xfffffffd, 0x4, 0x8, 0x8, 0xd, 0x774675e, 0xfff, 0x1ff, 0x6, 0x7c86cc9f, 0x1, 0x7, 0x9, 0x2, 0x896, 0x7, 0x7, 0x0, 0xae, 0x20, 0x80, 0x2, 0xfff, 0x10000000, 0x5, 0x0, 0x1000, 0x2, 0x0, 0x4, 0x4, 0x1000, 0x9, 0x5, 0x8000, 0x1, 0xc, 0x7eb, 0x401, 0x3, 0x7, 0x401, 0xaf, 0x0, 0x0, 0x2, 0x8, 0x9, 0x7f, 0x4, 0x3, 0x4, 0xffffffff, 0x80000000, 0x0, 0x9, 0x4, 0x8, 0x2, 0x6, 0x3, 0x0, 0x1, 0xb380, 0x4bbc, 0x4770, 0x7c1, 0x7fffffff, 0x3, 0x9ee, 0x4, 0x9, 0x1f, 0x0, 0x5, 0x7ff, 0xbf, 0x8c3a73ca, 0x80000000, 0x9, 0x8, 0x10000, 0xffff, 0x7, 0xffffffff, 0x9, 0x8, 0x0, 0x3, 0x3ff, 0x10001, 0x5, 0x8, 0x4, 0x2]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x744a8d9922070e29, 0x3}}}}]}]}}]}, 0xfd4}, 0x1, 0x0, 0x0, 0x8050}, 0x24008084) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0xcc, 0xc0, 0x1a52, 0x75, @remote, @private2, 0x7800, 0x7800, 0x2, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0x42, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6tnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0xf9, 0x79b7, 0x39, @private2, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x700, 0x4, 0x5}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50000001}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x154, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) 8m46.682105383s ago: executing program 1 (id=2339): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x40, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_FAST_LEAVE={0x5}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) socketpair(0x22, 0x1, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/130, 0x82}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/206, 0xce}, {&(0x7f0000000740)=""/30, 0x1e}, {&(0x7f0000000780)=""/207, 0xcf}], 0x7, &(0x7f0000000900)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/112, 0x70}, {&(0x7f0000001a40)=""/15, 0xf}, {&(0x7f0000001a80)=""/14, 0xe}, {&(0x7f0000001ac0)=""/151, 0x97}, {&(0x7f0000001b80)=""/215, 0xd7}], 0x6, &(0x7f0000001d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001e00)=""/149, 0x95}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/182, 0xb6}, {&(0x7f0000002f80)=""/2, 0x2}], 0x4, &(0x7f0000003000)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000003100)=@abs, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003180)=""/144, 0x90}, {&(0x7f0000003240)=""/52, 0x34}], 0x2, &(0x7f00000032c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003300)=""/6, 0x6}, {&(0x7f0000003340)=""/204, 0xcc}, {&(0x7f0000003440)=""/55, 0x37}, {&(0x7f0000003480)=""/237, 0xed}, {&(0x7f0000003580)=""/218, 0xda}, {&(0x7f0000003680)=""/129, 0x81}, {&(0x7f0000003740)=""/73, 0x49}], 0x7, &(0x7f0000003840)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000038c0), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003940)=""/140, 0x8c}, {&(0x7f0000003a00)=""/91, 0x5b}, {&(0x7f0000003a80)=""/83, 0x53}, {&(0x7f0000003b00)=""/229, 0xe5}, {&(0x7f0000003c00)=""/165, 0xa5}, {&(0x7f0000003cc0)=""/208, 0xd0}, {&(0x7f0000003dc0)=""/146, 0x92}, {&(0x7f0000003e80)=""/234, 0xea}, {&(0x7f0000003f80)=""/131, 0x83}, {&(0x7f0000004040)=""/116, 0x74}], 0xa, &(0x7f0000004180)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x10000, &(0x7f00000043c0)={0x0, 0x3938700}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xde}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xed0}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xd43d}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x200000d0) 8m46.650607746s ago: executing program 2 (id=2340): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004700)=ANY=[@ANYBLOB="a04400005200010000000000000000001c0000008b4409"], 0x44a0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) 8m46.460090511s ago: executing program 3 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x34008085}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 8m46.294146915s ago: executing program 2 (id=2342): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x29}, 0x48) 8m46.212465315s ago: executing program 0 (id=2343): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xce, "ecfbdd39eb44974efaffe804f868de6fe2e654a7f6e67335903c17f21d48b0749dbf5078a3d3d5dfc2eb58d332f18865775c6fbca9805c682662f79baf412bd1faebaef45f83928b8ea679938107838a3f51a2295b3e916668e8a0661513b5e58b66ba046f33b0be64def3019d6077abc8ee45460557d243ea98c21a28023766addaf9803e281177f4531c1383974bc758e4f5f2be3f451846714d62cf093c86e34019721b403380d2f7539e4fae40ad64b5171f9580fb6243e5961d29b6b2ebf371017d7287a2ab023361e4c5ee"}, &(0x7f0000000100)=0xd6) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x7}, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000001c0), 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200)=0x6, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x15, &(0x7f0000000240)=@raw=[@printk, @generic={0x0, 0x5, 0x9, 0x8000, 0x40}, @tail_call, @ringbuf_query, @alu={0x7, 0x0, 0x0, 0x3, 0x3, 0x100, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], &(0x7f0000000300)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[r3, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x3, 0xa, 0xc}], 0x10, 0x6}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x3, 0x3, 0x2, 0xb, 0x1, 0x6, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0xc, 0xa1, &(0x7f00000005c0)=""/161, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x9, 0x8, 0xffff}, 0x10, 0x780d, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x0, 0x4, 0x6, 0x6}, {0x3, 0x2, 0xe, 0x1}, {0x3, 0x4, 0x2}, {0x1, 0x2, 0xf, 0x2}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r0, 0x33, 0x1, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xb, 0x17, &(0x7f00000009c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x2, 0x2, 0x4, 0x1, 0xb, 0x40, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffff8}, @ldst={0x2, 0x0, 0x3, 0x6, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @generic={0x3, 0xc, 0x1, 0x4, 0x69}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, @exit, @map_fd={0x18, 0xa}], &(0x7f0000000a80)='syzkaller\x00', 0x5, 0x1f, &(0x7f0000000ac0)=""/31, 0x20800, 0x20, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x1, 0xa, 0xafd0}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000b80)=[{0x0, 0x4, 0x4}, {0x3, 0x4, 0x6, 0x5}, {0x3, 0x5, 0x1, 0xc}, {0x4, 0x1, 0x9, 0xc}, {0x3, 0x1, 0x1, 0x8}, {0x3, 0x2, 0x10}, {0x0, 0x3, 0xe, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup=r2, r4, 0xf, 0x7, r5, @void, @value=r8, @void, @void, r7}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000cc0)=[@in6={0xa, 0x4e22, 0x1, @mcast2, 0xbb7}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x7c0}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0xcdd, @local, 0x48a}, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in6={0xa, 0x4e24, 0x7, @private1, 0x3}], 0x9c) r9 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000e00), &(0x7f0000000e40)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000f40)={'ip6gre0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', 0x0, 0x4, 0xdc, 0x9, 0x1, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x8000, 0xaf24}}) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x188, 0x12, 0x400, 0x70bd29, 0x25dfdbfb, {0x6, 0x0, 0x1c, 0xbd, {0x4e22, 0x4e22, [0xff, 0x40, 0x8, 0x5], [0x6, 0x4, 0x2, 0x4], r10, [0xa, 0x2]}, 0x8000, 0x4634}, [@INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "09cb869779b6aa9cf917a225109721809b70aa587b733bf38e7427061885fb03073df30e61af1c281eb1fe4c903b016cfbb64664c6b26720546299f1a4e7ea33b148186f3c6fd975ec8f46f30ed8a808876e64122db68609a50f324ae8f4a33f68e6444f2ad5390578d154ab3394c693fd19511525f45ce736c8884daa43f692554afaee4b71206e08b7efe021cabecea8544450fdc8cec5dce5cf97738d9cd7a912f7eefcc82ca7858986046a39dc7e0fe1b9e085877bea73a80b538da709320a6d8935e57bdbe5e5b6c8c6e6be5457e0d0a060713facaf4f832b8b3105"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "4e46fd1a6558246a86109ca8f8b2e2d6d949fd70d6ab2ed17b6070c2a37d42341d8e6d8b1b9bb123e97f92014c416d3d256bee8c9b9bebc145f0f00f0960c5dfe55bd9aae7565b3283028f7d6731"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000011c0)={{0x81, 0x4}, 0x100, './file0\x00'}) r11 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r11, &(0x7f0000001300)="aa13ebda191004a37c1cc62d4df4cd3f87f8cc3ed6d05b70b59d761e422f1fc51e06ed158c1000946edc34588afc339c548a0d8c7b869847043ec0de780b5a036eb04cbf416e3b51ec5fb9928cfbafac7d638b25c15346330a2affc0081f23cfd882ced65279ee43cd61b3aef21fb6c86a44df1815", 0x75, 0x881, &(0x7f0000001380)={0x2, 0x4e23, @private=0xa010101}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000001400)={0x0, &(0x7f00000013c0)}) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000014c0)=@o_path={&(0x7f0000001480)='./file0\x00', 0x0, 0x8, r8}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001440)={@cgroup=r6, r5, 0x38, 0x4, 0x0, @void, @value=r12, @void, @void, r7}, 0x20) pwritev(r2, &(0x7f0000001540)=[{&(0x7f0000001500)="cbd1bb652ade009db12c70d51c1741968b7e764a75137e3dd4", 0x19}], 0x1, 0x80000000, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r13, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x40, r14, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x9ebfeda570ccfcc}, 0x1) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r15, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x1000, 0x7d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x810) 8m46.134339173s ago: executing program 1 (id=2344): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000081"], 0x0, 0x2a}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x0, 0x0, 0x2, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', r5, r0, 0x4, 0x0, 0x4}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6}, 0x18) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x1, 0x4e20, 0x4, 0x2, 0x20, 0x40, 0x32, r8, r9}, {0x3ff, 0x9, 0x8000, 0x3, 0x3, 0x2, 0x1, 0xf617000000000000}, {0x3, 0x7, 0x8, 0x6}, 0x6, 0x6e6bb7, 0x0, 0x1, 0x2}, {{@in6=@mcast2, 0x4d5, 0x33}, 0xa, @in=@private=0xffff8000, 0x3503, 0x0, 0x3, 0x6, 0x3, 0x6, 0x100}}, 0xe8) 8m46.066611329s ago: executing program 4 (id=2345): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0xffffffffffffff7c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x11, 0x25, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) splice(r1, &(0x7f0000000340)=0x5, r3, &(0x7f0000000400)=0x200, 0x3, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f00000000c0)={'veth0_to_bond\x00', {0x2, 0x4e24, @multicast1}}) socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000100)="520003000100b8", 0x7) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @local}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0xfffffec2) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1008000, 0x7fffffff, 0x8000, 0x6, 0x0, 0x1}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000095c1a699d862fd68d61830000000000000000000c00"], 0x28}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r5], 0x270}, 0x1, 0x0, 0x0, 0x8815}, 0x4) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r12, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x2, @local}]}, &(0x7f0000000440)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) 8m46.06415359s ago: executing program 2 (id=2346): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000040)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "1937ec064f57f6d1f6e28f56f1c3f59fa47b217afea5bcd9bc031759aabeb647", 0x2, 0x3c, 0x1, 0x100}, 0x3c) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'nr0\x00', 0x1}) 8m45.779048348s ago: executing program 2 (id=2347): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r1, 0x0, 0x0, 0x2101, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m45.631076748s ago: executing program 3 (id=2348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e040, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$alg(0x26, 0x5, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x40000000}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 8m45.386471318s ago: executing program 0 (id=2349): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtclass={0x38, 0x28, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc}, {0xffe4, 0xa}, {0x6, 0x7}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x88}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r4, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='U', 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000240)=0x204c, 0x4) r6 = socket$netlink(0x10, 0x3, 0x9) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r6, 0xd52f5000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x5, 0x54, 0x84f, 0xfffffffe}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m45.278859657s ago: executing program 1 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004b0000400000000000069078ac1e0001ac1e00014410d2030000010040000000fffffffe860600"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r5, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) close(r7) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000001a80)={0x131c, r3, 0x209, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x12e8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8a, 0x0, "38c0cf7d810fb8adcfc504d49e591887279ea5db9f3c8bf84ebd96dfbfc9fb2250cb9bd3d2c94c66168af8542c534f3cd5790a5a69684b0abb7db95d13630a8faedce480232a0b90fe6ad611f4f627636dcabad2fa1a1d13c4f1e39298af13533aa28b29244c49a0df6ae4460a14c0f51c14f095500ae08ceea87ff4baf5741754b9c279657f"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0x62, 0x1, "5e3167b94a45d198c6f87aa7096b2aa3af3c0ab4704460334870e0b0af823edbc105e8e5319063fa417463e3ae4537a62334481adb8d88917f93b49a0a3376281df61c7c1cafc574606ba71d89d7b1372c22d05009e67737194a93d895d7"}, @NL80211_BAND_5GHZ={0x100, 0x1, "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"}, @NL80211_BAND_60GHZ={0x77, 0x2, "456a3eabd699cca2f5df4a2cd19465d439958041f402f95e8eb2c8cfb5b0b34f74a2f1facd2bbab9fd08a5eb652568d625d274a16ad02ff04e28e97aa7dbd4c02e08917499b887cb514b78d53f1225f50cc763e137e5a33737fa0228d98e9760c3e037b281dc3f090659da4079cc062ab214ab"}, @NL80211_BAND_5GHZ={0x78, 0x1, "0b8da84a8bc3e245ea3d85aa8ebcf111ab9f29129b69eccf988b827c41dd9f32d480c3731a511cf2526fba5e4023c5666e42cfa4688b506587330ca69ac684bf80cd34cb10ca7bac17fa87e717d8f183f6b7ba4e70f6f8c4d504b9d87eac0d2cb2f56650f8d112fd5654dc486cb9d12b26d16469"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa, 0x2, "69ba3d27b7b5"}]}]}, 0x131c}, 0x1, 0x0, 0x0, 0x4a800}, 0x4000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x78}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xec8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x21b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa37}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080008000703030002001400000046160034006800000001907800000000e000000144048400040090780000000045b000030065080036330009e0000002e0000001"], 0x42) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 8m36.059145623s ago: executing program 4 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async, rerun: 32) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') (async) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@RTM_NEWNSID={0x34, 0x58, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}) 8m28.643802714s ago: executing program 32 (id=2349): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtclass={0x38, 0x28, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc}, {0xffe4, 0xa}, {0x6, 0x7}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x88}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r4, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='U', 0x1}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x9, 0x1, 'DNAT\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000240)=0x204c, 0x4) r6 = socket$netlink(0x10, 0x3, 0x9) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, r6, 0xd52f5000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x5, 0x54, 0x84f, 0xfffffffe}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m58.408391454s ago: executing program 33 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004b0000400000000000069078ac1e0001ac1e00014410d2030000010040000000fffffffe860600"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r5, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x2, 0x0, 0x2, 0xc, 0x8, 0x1}, 0x17) close(r7) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000001a80)={0x131c, r3, 0x209, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x12e8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8a, 0x0, "38c0cf7d810fb8adcfc504d49e591887279ea5db9f3c8bf84ebd96dfbfc9fb2250cb9bd3d2c94c66168af8542c534f3cd5790a5a69684b0abb7db95d13630a8faedce480232a0b90fe6ad611f4f627636dcabad2fa1a1d13c4f1e39298af13533aa28b29244c49a0df6ae4460a14c0f51c14f095500ae08ceea87ff4baf5741754b9c279657f"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0x62, 0x1, "5e3167b94a45d198c6f87aa7096b2aa3af3c0ab4704460334870e0b0af823edbc105e8e5319063fa417463e3ae4537a62334481adb8d88917f93b49a0a3376281df61c7c1cafc574606ba71d89d7b1372c22d05009e67737194a93d895d7"}, @NL80211_BAND_5GHZ={0x100, 0x1, "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"}, @NL80211_BAND_60GHZ={0x77, 0x2, "456a3eabd699cca2f5df4a2cd19465d439958041f402f95e8eb2c8cfb5b0b34f74a2f1facd2bbab9fd08a5eb652568d625d274a16ad02ff04e28e97aa7dbd4c02e08917499b887cb514b78d53f1225f50cc763e137e5a33737fa0228d98e9760c3e037b281dc3f090659da4079cc062ab214ab"}, @NL80211_BAND_5GHZ={0x78, 0x1, "0b8da84a8bc3e245ea3d85aa8ebcf111ab9f29129b69eccf988b827c41dd9f32d480c3731a511cf2526fba5e4023c5666e42cfa4688b506587330ca69ac684bf80cd34cb10ca7bac17fa87e717d8f183f6b7ba4e70f6f8c4d504b9d87eac0d2cb2f56650f8d112fd5654dc486cb9d12b26d16469"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd1}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa, 0x2, "69ba3d27b7b5"}]}]}, 0x131c}, 0x1, 0x0, 0x0, 0x4a800}, 0x4000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x78}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xec8}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x21b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa37}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080008000703030002001400000046160034006800000001907800000000e000000144048400040090780000000045b000030065080036330009e0000002e0000001"], 0x42) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 7m54.015182852s ago: executing program 34 (id=2347): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r1, 0x0, 0x0, 0x2101, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m44.285036383s ago: executing program 35 (id=2348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1e040, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$alg(0x26, 0x5, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x40000000}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 7m31.674897018s ago: executing program 36 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async, rerun: 32) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') (async) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@RTM_NEWNSID={0x34, 0x58, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}) 5m12.620313359s ago: executing program 7 (id=2354): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) close(r2) unshare(0x28000600) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r5, 0x0, r3, &(0x7f0000000080), 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="000229bd700002dcdf04ad131000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x4, 0x4, 0xffff0001}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000440)={r10}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf2521ddffff07000300eceb413aaec653a91f40530a1a97241d9a13d4c21767bca21a621d432d583b592ab0e63b73fabf176309c7155d72ca316f96940e48f2d00dd8bdc3ffc20f6e737992082f71745357b533920a78ecabe2b4d886947ee8c68ed2c06429", @ANYRES32=r12, @ANYBLOB="0c002c80080000000f000000"], 0x28}, 0x1, 0x0, 0x0, 0x24004904}, 0xc0) r13 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) getsockopt$ax25_int(r13, 0x101, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$ax25(r13, &(0x7f0000000200)={{0x3, @default, 0x5}, [@null, @default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x48) 3m34.987567289s ago: executing program 9 (id=2356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x20040080) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000280)={0x470}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12a}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv4_newrule={0x1c, 0x20, 0x400, 0x70bd29, 0x25dfdbfd, {0x2, 0x14, 0x0, 0x4, 0x12, 0x0, 0x0, 0x6, 0x10000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000540)={0x2, 0x7, {0xb, @struct={0x80000001, 0x50e}, 0x0, 0x81, 0xd, 0x3c, 0xc0, 0xc, 0xc, @usage=0x1, 0x10001, 0x5, [0x10001, 0xf0f, 0x8, 0x8, 0x8, 0x9]}, {0x80, @struct={0x400, 0x9}, 0x0, 0x6, 0x2, 0xd, 0x9, 0x4, 0x2, @usage=0x13ae, 0x9, 0x2, [0x7fffffff, 0x7, 0x1, 0x200, 0x1490000000000, 0x8000000000000001]}, {0xf, @struct={0xe0c3, 0x1}, 0x0, 0xfb12, 0x4, 0x40, 0x3, 0x606, 0xc4, @struct={0x3, 0x1}, 0xc, 0x889, [0x0, 0x300000000000000, 0x4, 0xffff, 0x4]}, {0x4, 0x3, 0x24}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000940)={r4, "3fdb8042d09d3d3ba1749a350e751dd8"}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001980)) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x2c, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}}, 0x880) getsockname$ax25(0xffffffffffffffff, &(0x7f0000001b00)={{0x3, @null}, [@netrom, @null, @default, @netrom, @rose, @default, @default, @bcast]}, &(0x7f0000001b80)=0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c00)={0x14c, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0xffff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa49}, {0x6}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x80000000}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x9}, {0x5}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8085}, 0x20000005) clock_gettime(0x0, &(0x7f0000003640)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000001e00)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001e80)=""/159, 0x9f}, {&(0x7f0000001f40)=""/138, 0x8a}, {&(0x7f0000002000)=""/89, 0x59}, {&(0x7f0000002080)=""/45, 0x2d}, {&(0x7f00000020c0)=""/167, 0xa7}, {&(0x7f0000002180)=""/246, 0xf6}, {&(0x7f0000002280)=""/103, 0x67}], 0x7, &(0x7f0000002380)=""/35, 0x23}, 0x5}, {{&(0x7f00000023c0)=@ax25={{0x3, @netrom}, [@netrom, @netrom, @netrom, @remote, @bcast, @default, @rose, @bcast]}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002440)=""/54, 0x36}, {&(0x7f0000002480)=""/219, 0xdb}], 0x2, &(0x7f00000025c0)=""/4096, 0x1000}, 0x5feaff78}], 0x2, 0x40000002, &(0x7f0000003680)={r8, r9+60000000}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000003700), r0) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000003840)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003800)={&(0x7f0000003740)={0xb4, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xb}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x80) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x7c, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x100}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003a00), r7) sendmsg$IPVS_CMD_ZERO(r12, &(0x7f0000003b00)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x54, r13, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0xc}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, &(0x7f0000003b40)=0x6, 0x4) r14 = accept4(r0, &(0x7f0000003b80)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000003c00)=0x80, 0x800) sendmsg$NL80211_CMD_SET_NOACK_MAP(r14, &(0x7f0000003d00)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x30, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x8011) 0s ago: executing program 6 (id=2353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/123) r3 = socket$inet(0x2, 0x80001, 0x84) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) readv(r4, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000001c0)=""/50, 0x32}], 0x2) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f0000000000)) kernel console output (not intermixed with test programs): : 212368 bytes leftover after parsing attributes in process `syz.3.504'. [ 116.607309][ T7655] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 116.612159][ T7628] infiniband syz2: set active [ 116.621504][ T5907] lo speed is unknown, defaulting to 1000 [ 116.623973][ T7655] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 116.641749][ T7655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.691680][ T7628] infiniband syz2: added lo [ 116.834796][ T7628] RDS/IB: syz2: added [ 116.849027][ T7628] smc: adding ib device syz2 with port count 1 [ 116.859537][ T7628] smc: ib device syz2 port 1 has no pnetid [ 116.898378][ T5893] lo speed is unknown, defaulting to 1000 [ 116.922387][ T7628] lo speed is unknown, defaulting to 1000 [ 117.105219][ T7674] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 117.123313][ T7674] netlink: 228 bytes leftover after parsing attributes in process `syz.2.513'. [ 117.132485][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 117.274245][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.325530][ T7628] lo speed is unknown, defaulting to 1000 [ 117.460467][ T7683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'. [ 117.513621][ T971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.522027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.564366][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.572929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.896985][ T7701] netlink: 'syz.3.521': attribute type 2 has an invalid length. [ 118.050104][ T7628] lo speed is unknown, defaulting to 1000 [ 118.155130][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.163520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.323761][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.483904][ T7715] syzkaller1: entered promiscuous mode [ 118.503380][ T7715] syzkaller1: entered allmulticast mode [ 118.537818][ T7729] netlink: 'syz.2.530': attribute type 2 has an invalid length. [ 118.720278][ T7628] lo speed is unknown, defaulting to 1000 [ 118.853151][ T7744] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 118.891002][ T7744] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 118.895886][ T7748] netlink: 'syz.2.537': attribute type 11 has an invalid length. [ 119.044420][ T7760] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 119.210726][ T7766] macvtap1: entered allmulticast mode [ 119.228873][ T7766] veth0_macvtap: entered allmulticast mode [ 119.342091][ T7628] lo speed is unknown, defaulting to 1000 [ 119.352674][ T7776] __nla_validate_parse: 5 callbacks suppressed [ 119.352689][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 119.510510][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'. [ 119.519641][ T7787] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 119.527907][ T7787] netlink: 224 bytes leftover after parsing attributes in process `syz.0.548'. [ 119.766419][ T7800] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.552'. [ 119.775946][ T5907] IPVS: starting estimator thread 0... [ 119.873315][ T7799] IPVS: using max 35 ests per chain, 84000 per kthread [ 119.991867][ T7807] pim6reg527: entered allmulticast mode [ 120.252250][ T7820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.560'. [ 120.367998][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 120.392844][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 120.426516][ T7832] syzkaller1: entered promiscuous mode [ 120.432034][ T7832] syzkaller1: entered allmulticast mode [ 120.440234][ T7831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'. [ 120.450547][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 120.506468][ T7834] gtp0: entered promiscuous mode [ 120.538217][ T7836] xt_HMARK: spi-set and port-set can't be combined [ 120.551494][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 120.635367][ T7839] netlink: 'syz.3.566': attribute type 6 has an invalid length. [ 120.915629][ T7845] nbd0: detected capacity change from 0 to 127 [ 120.934425][ T5842] block nbd0: Receive control failed (result -32) [ 120.940537][ T5829] block nbd0: Send control failed (result -32) [ 120.965408][ T5829] block nbd0: Request send failed, requeueing [ 120.989216][ T11] block nbd0: Dead connection, failed to find a fallback [ 120.998054][ T11] block nbd0: shutting down sockets [ 121.005555][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.017758][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.025999][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.041836][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.050007][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.060091][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read [ 121.068322][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.079997][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read [ 121.088205][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.097913][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.105824][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.115534][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.123479][ T5829] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.133681][ T5829] Buffer I/O error on dev nbd0, logical block 2, async page read [ 121.141611][ T5829] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.156077][ T5829] Buffer I/O error on dev nbd0, logical block 3, async page read [ 121.167824][ T5829] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.192516][ T5829] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.211101][ T5829] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 121.241401][ T5829] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.256536][ T7853] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 121.293124][ T5829] ldm_validate_partition_table(): Disk read failed. [ 121.312584][ T5829] Dev nbd0: unable to read RDB block 0 [ 121.329950][ T5829] nbd0: unable to read partition table [ 121.368640][ T5829] ldm_validate_partition_table(): Disk read failed. [ 121.385052][ T5829] Dev nbd0: unable to read RDB block 0 [ 121.414720][ T5829] nbd0: unable to read partition table [ 121.433778][ T6070] net_ratelimit: 4 callbacks suppressed [ 121.433792][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.662422][ T7882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.139191][ T7912] netlink: 'syz.2.587': attribute type 3 has an invalid length. [ 122.401457][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.409280][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.488418][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.611179][ T7915] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.646465][ C1] Illegal XDP return value 16128 on prog (id 220) dev team0, expect packet loss! [ 122.653758][ T7918] tipc: Enabling of bearer rejected, failed to enable media [ 122.960005][ T7953] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 122.998214][ T7953] Cannot find add_set index 0 as target [ 123.278832][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.287389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.518539][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.593547][ T5842] Bluetooth: hci4: command tx timeout [ 123.880449][ T8013] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20001 [ 124.279279][ T8032] Bluetooth: MGMT ver 1.23 [ 124.290095][ T8044] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 124.555648][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.563818][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.604178][ T8073] __nla_validate_parse: 101 callbacks suppressed [ 124.604195][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 124.643700][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 124.853664][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 125.045441][ T8094] netlink: 116 bytes leftover after parsing attributes in process `syz.4.639'. [ 125.073632][ T8098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.149411][ T8105] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 125.184904][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'. [ 125.426558][ T8129] xt_hashlimit: size too large, truncated to 1048576 [ 125.611986][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.651'. [ 125.682331][ T8134] netlink: 'syz.4.651': attribute type 10 has an invalid length. [ 125.754285][ T8134] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.009538][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'. [ 126.032948][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 126.042547][ T8154] bridge0: entered allmulticast mode [ 126.313337][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.314102][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.366051][ T8174] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 126.375633][ T8174] netlink: 'syz.4.663': attribute type 2 has an invalid length. [ 126.385969][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 126.409446][ T8176] netlink: 'syz.1.662': attribute type 15 has an invalid length. [ 126.418633][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 126.466715][ T8174] team0: entered promiscuous mode [ 126.498096][ T8174] team0: entered allmulticast mode [ 126.653732][ T6070] net_ratelimit: 4 callbacks suppressed [ 126.653749][ T6070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.681462][ T8186] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 126.701682][ T8188] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 127.017384][ T8209] ip6gre1: entered allmulticast mode [ 127.116157][ T8223] IPVS: ip_vs_edit_dest(): server weight less than zero [ 127.215983][ T8228] xt_ecn: cannot match TCP bits for non-tcp packets [ 127.673549][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.188316][ T8276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.247416][ T8279] netlink: 'syz.2.693': attribute type 5 has an invalid length. [ 128.722620][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.855157][ T8310] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 128.935774][ T8314] macsec1: entered promiscuous mode [ 129.039428][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.048679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.223041][ T8334] netlink: 'syz.3.710': attribute type 3 has an invalid length. [ 129.245048][ T8334] Cannot find set identified by id 0 to match [ 129.375742][ T8343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.695606][ T8364] x_tables: unsorted underflow at hook 4 [ 129.702247][ T8364] netlink: 'syz.0.719': attribute type 1 has an invalid length. [ 129.753295][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.914128][ T8378] lo: entered allmulticast mode [ 129.924608][ T8378] tunl0: entered allmulticast mode [ 129.938153][ T8378] gre0: entered allmulticast mode [ 129.987172][ T8378] gretap0: entered allmulticast mode [ 130.002265][ T8378] erspan0: entered allmulticast mode [ 130.016643][ T8378] ip_vti0: entered allmulticast mode [ 130.025490][ T8378] ip6_vti0: entered allmulticast mode [ 130.034617][ T8378] sit0: entered allmulticast mode [ 130.045268][ T8378] ip6tnl0: entered allmulticast mode [ 130.054722][ T8378] ip6gre0: entered allmulticast mode [ 130.081235][ T8378] syz_tun: entered allmulticast mode [ 130.093490][ T8378] ip6gretap0: entered allmulticast mode [ 130.105979][ T8378] vcan0: entered allmulticast mode [ 130.127545][ T8378] bond0: entered allmulticast mode [ 130.132867][ T8378] bond_slave_0: entered allmulticast mode [ 130.138832][ T8378] bond_slave_1: entered allmulticast mode [ 130.144923][ T8378] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 130.158825][ T8392] __nla_validate_parse: 10 callbacks suppressed [ 130.158842][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 130.178112][ T8378] dummy0: entered allmulticast mode [ 130.188348][ T8378] nlmon0: entered allmulticast mode [ 130.196429][ T8378] caif0: entered allmulticast mode [ 130.201940][ T8378] batadv0: entered allmulticast mode [ 130.211103][ T8378] vxcan0: entered allmulticast mode [ 130.218030][ T8378] vxcan1: entered allmulticast mode [ 130.224647][ T8378] veth0: entered allmulticast mode [ 130.232264][ T8378] veth1: entered allmulticast mode [ 130.242348][ T8378] wg0: entered allmulticast mode [ 130.251595][ T8378] wg1: entered allmulticast mode [ 130.259377][ T8378] wg2: entered allmulticast mode [ 130.266278][ T8378] veth0_to_bridge: entered allmulticast mode [ 130.274770][ T8378] bridge_slave_0: entered allmulticast mode [ 130.282362][ T8378] veth1_to_bridge: entered allmulticast mode [ 130.292934][ T8378] bridge_slave_1: entered allmulticast mode [ 130.301440][ T8378] veth0_to_bond: entered allmulticast mode [ 130.311069][ T8378] veth1_to_bond: entered allmulticast mode [ 130.321145][ T8378] veth0_to_team: entered allmulticast mode [ 130.329352][ T8378] team_slave_0: entered allmulticast mode [ 130.335968][ T8378] veth1_to_team: entered allmulticast mode [ 130.344170][ T8378] team_slave_1: entered allmulticast mode [ 130.350601][ T8378] veth0_to_batadv: entered allmulticast mode [ 130.359345][ T8378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.367342][ T8378] batadv_slave_0: entered allmulticast mode [ 130.376449][ T8378] veth1_to_batadv: entered allmulticast mode [ 130.384825][ T8378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.397651][ T8378] batadv_slave_1: entered allmulticast mode [ 130.406323][ T8378] xfrm0: entered allmulticast mode [ 130.414548][ T8378] veth0_to_hsr: entered allmulticast mode [ 130.422847][ T8378] hsr_slave_0: entered allmulticast mode [ 130.430503][ T8378] veth1_to_hsr: entered allmulticast mode [ 130.439643][ T8378] hsr_slave_1: entered allmulticast mode [ 130.447832][ T8378] hsr0: entered allmulticast mode [ 130.456529][ T8378] veth1_virt_wifi: entered allmulticast mode [ 130.466330][ T8378] veth0_virt_wifi: entered allmulticast mode [ 130.476716][ T8378] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 130.485213][ T8378] veth1_vlan: entered allmulticast mode [ 130.495240][ T8378] veth0_vlan: entered allmulticast mode [ 130.514121][ T8378] vlan0: entered allmulticast mode [ 130.519454][ T8378] vlan1: entered allmulticast mode [ 130.526995][ T8378] macvlan0: entered allmulticast mode [ 130.537465][ T8378] macvlan1: entered allmulticast mode [ 130.547764][ T8378] ipvlan0: entered allmulticast mode [ 130.553468][ T8378] ipvlan1: entered allmulticast mode [ 130.559213][ T8378] veth1_macvtap: entered allmulticast mode [ 130.569822][ T8378] veth0_macvtap: entered allmulticast mode [ 130.576577][ T8378] macvtap0: entered allmulticast mode [ 130.587226][ T8378] macsec0: entered allmulticast mode [ 130.599884][ T8378] geneve0: entered allmulticast mode [ 130.609103][ T8378] geneve1: entered allmulticast mode [ 130.617271][ T8378] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 130.628421][ T8378] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 130.638983][ T8378] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 130.651151][ T8378] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 130.673882][ T8378] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 130.691284][ T8378] gretap1: left promiscuous mode [ 130.700374][ T8378] erspan1: entered allmulticast mode [ 130.706030][ T8378] syztnl0: entered allmulticast mode [ 130.711638][ T8378] ip6gre1: entered allmulticast mode [ 130.720315][ T8378] veth2: entered allmulticast mode [ 130.725790][ T8378] veth3: entered allmulticast mode [ 130.731647][ T8378] bond1: entered allmulticast mode [ 130.737953][ T8378] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 130.745369][ T8378] mac80211_hwsim hwsim14 wlan3: entered allmulticast mode [ 130.752763][ T8378] team0: left promiscuous mode [ 130.765165][ T48] lo speed is unknown, defaulting to 1000 [ 130.792845][ T48] syz2: Port: 1 Link DOWN [ 130.838484][ T3036] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.889632][ T3036] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.899253][ T6070] lo speed is unknown, defaulting to 1000 [ 130.907761][ T5967] IPVS: starting estimator thread 0... [ 130.912770][ T3036] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.926565][ T3036] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.958392][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 130.991006][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.018574][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.036485][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.042848][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.101112][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.119504][ T8409] IPVS: using max 32 ests per chain, 76800 per kthread [ 131.139672][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.159923][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.170041][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.196074][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.211222][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.224383][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.228110][ T8425] batman_adv: batadv0: Adding interface: veth5 [ 131.240294][ T8425] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.243303][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.280277][ T8425] batman_adv: batadv0: Interface activated: veth5 [ 131.301394][ T8431] bridge0: port 3(batadv1) entered blocking state [ 131.312887][ T8431] bridge0: port 3(batadv1) entered disabled state [ 131.313497][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.323576][ T8431] batadv1: entered allmulticast mode [ 131.340436][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.341496][ T8431] batadv1: entered promiscuous mode [ 131.356432][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.369604][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.376196][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.401849][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.430235][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.447252][ T8436] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 131.463430][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.475284][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.482777][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 131.491400][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.544456][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 131.556991][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.573229][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.601363][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.630813][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.643421][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.649738][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.659478][ T8450] netlink: 112 bytes leftover after parsing attributes in process `syz.0.741'. [ 131.674858][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.681147][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.733217][ T8406] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 131.813255][ T2205] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 131.823322][ T2205] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 131.853026][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 131.945754][ T8466] netlink: 256 bytes leftover after parsing attributes in process `syz.3.749'. [ 131.958037][ T8466] netlink: 256 bytes leftover after parsing attributes in process `syz.3.749'. [ 132.022962][ T8467] dvmrp0: entered allmulticast mode [ 132.568375][ T8514] netlink: 104 bytes leftover after parsing attributes in process `syz.4.761'. [ 132.731155][ T8526] netlink: 56 bytes leftover after parsing attributes in process `syz.3.766'. [ 132.805668][ T8534] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 132.888792][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.903025][ T8538] bond0: (slave caif0): Error: Device type is different from other slaves [ 132.955487][ T8546] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 132.968518][ T8543] netlink: 'syz.0.772': attribute type 9 has an invalid length. [ 132.993570][ T8543] netlink: 'syz.0.772': attribute type 11 has an invalid length. [ 133.007824][ T8543] netlink: 'syz.0.772': attribute type 12 has an invalid length. [ 133.029822][ T8543] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.772'. [ 133.526882][ T8582] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 133.601783][ T8582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 133.616970][ T8590] netlink: 'syz.2.785': attribute type 5 has an invalid length. [ 133.655842][ T8587] bond3: (slave veth3): Enslaving as an active interface with a down link [ 133.918548][ T8599] bridge_slave_1 (unregistering): left allmulticast mode [ 133.933317][ T8599] bridge_slave_1 (unregistering): left promiscuous mode [ 133.941047][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.138792][ T8615] IPVS: Unknown mcast interface: veth1_to_hsr [ 134.227587][ T8618] bond0: (slave bond_slave_0): Releasing backup interface [ 134.277615][ T8618] bond0: (slave bond_slave_1): Releasing backup interface [ 134.288821][ T8618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.299614][ T8618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.310073][ T8618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.376882][ T8623] bridge0: port 2(veth0_to_bridge) entered blocking state [ 134.394392][ T8623] bridge0: port 2(veth0_to_bridge) entered disabled state [ 134.411992][ T8624] netlink: 'syz.0.797': attribute type 16 has an invalid length. [ 134.432184][ T8629] netlink: 'syz.0.797': attribute type 16 has an invalid length. [ 134.450539][ T8623] veth0_to_bridge: entered allmulticast mode [ 134.469247][ T8624] netlink: 'syz.0.797': attribute type 3 has an invalid length. [ 134.493850][ T8629] netlink: 'syz.0.797': attribute type 3 has an invalid length. [ 134.501761][ T8623] veth0_to_bridge: entered promiscuous mode [ 134.512838][ T8636] nbd: must specify at least one socket [ 134.866504][ T8649] ip6gre2: entered promiscuous mode [ 135.269410][ T8668] tipc: Started in network mode [ 135.274530][ T8668] tipc: Node identity c2ac146bcaff, cluster identity 4711 [ 135.281790][ T8668] tipc: Enabled bearer , priority 11 [ 135.364872][ T8680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.411146][ T8678] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 135.446671][ T8686] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 135.545298][ T8693] __nla_validate_parse: 9 callbacks suppressed [ 135.545316][ T8693] netlink: 45 bytes leftover after parsing attributes in process `syz.3.820'. [ 135.728527][ T8706] vlan0: entered promiscuous mode [ 135.741796][ T8706] vlan0: entered allmulticast mode [ 135.760378][ T8706] veth0_vlan: entered allmulticast mode [ 135.976135][ T8719] geneve3: entered promiscuous mode [ 135.986102][ T8719] geneve3: entered allmulticast mode [ 136.007180][ T971] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 136.028104][ T971] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 136.053265][ T971] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 136.066579][ T971] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 136.130208][ T8729] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.158777][ T8731] netlink: 27 bytes leftover after parsing attributes in process `syz.0.835'. [ 136.162496][ T8732] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 136.192650][ T8735] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.836'. [ 136.310112][ T8732] bond2 (unregistering): Released all slaves [ 136.403212][ T48] tipc: Node number set to 139662443 [ 136.543957][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 136.578993][ T8762] netlink: 80 bytes leftover after parsing attributes in process `syz.4.843'. [ 136.626966][ T8770] gtp0: entered promiscuous mode [ 136.641128][ T8770] gtp0: entered allmulticast mode [ 136.672066][ T8767] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 136.788251][ T8777] bond4: (slave lo): Device is not bonding slave [ 136.794786][ T8777] bond4: option active_slave: invalid value (lo) [ 136.804778][ T8783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.848'. [ 136.822717][ T8777] bond4 (unregistering): Released all slaves [ 136.980133][ T8780] bond2: option min_links: invalid value (18446744073709551614) [ 136.988141][ T8780] bond2: option min_links: allowed values 0 - 2147483647 [ 137.002238][ T8780] bond2 (unregistering): Released all slaves [ 137.116207][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 137.191920][ T8794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.622962][ T8812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.704458][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 137.733385][ T8820] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 137.799692][ T8820] bond2: (slave gretap1): making interface the new active one [ 137.809710][ T8820] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 137.864200][ T8824] x_tables: unsorted underflow at hook 2 [ 137.901725][ T8828] netlink: 2 bytes leftover after parsing attributes in process `syz.2.865'. [ 137.978719][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.866'. [ 137.988405][ T8832] netlink: 'syz.1.866': attribute type 5 has an invalid length. [ 138.251600][ T8847] raw_sendmsg: syz.2.870 forgot to set AF_INET. Fix it! [ 138.577994][ T8858] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 138.873284][ T8877] netlink: 'syz.3.881': attribute type 83 has an invalid length. [ 139.014645][ T8882] bridge0: port 3(syz_tun) entered disabled state [ 139.067747][ T8882] syz_tun (unregistering): left allmulticast mode [ 139.086501][ T8882] syz_tun (unregistering): left promiscuous mode [ 139.109272][ T8882] bridge0: port 3(syz_tun) entered disabled state [ 139.979446][ T8950] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 140.031575][ T8952] netlink: 'syz.2.902': attribute type 29 has an invalid length. [ 140.054881][ T8952] netlink: 'syz.2.902': attribute type 29 has an invalid length. [ 140.081523][ T8955] netlink: 'syz.3.906': attribute type 30 has an invalid length. [ 140.141696][ T8955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.570683][ T8993] __nla_validate_parse: 11 callbacks suppressed [ 140.570703][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'. [ 140.603304][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'. [ 140.732510][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 140.950900][ T9019] netlink: 'syz.2.921': attribute type 8 has an invalid length. [ 141.116185][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 141.149830][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'. [ 141.149930][ T3036] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.199816][ T3036] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.234261][ T3036] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.263756][ T3036] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.569828][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'. [ 142.817380][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 143.347833][ T9133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.418481][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 143.427984][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 143.596210][ T9169] netlink: 'syz.1.953': attribute type 8 has an invalid length. [ 144.034531][ T9199] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 144.064783][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'. [ 144.485416][ T9217] netlink: 'syz.4.964': attribute type 1 has an invalid length. [ 144.860964][ T9235] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 144.871793][ T9234] syzkaller0: entered promiscuous mode [ 144.879299][ T9234] syzkaller0: entered allmulticast mode [ 144.903312][ T9235] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 144.970592][ T9242] netlink: 'syz.1.972': attribute type 5 has an invalid length. [ 145.202296][ T9255] syzkaller0: entered promiscuous mode [ 145.224053][ T9255] syzkaller0: entered allmulticast mode [ 145.588368][ T9278] __nla_validate_parse: 6 callbacks suppressed [ 145.588386][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 145.654452][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 145.657977][ T9283] netlink: 'syz.0.990': attribute type 9 has an invalid length. [ 145.671162][ T9283] netlink: 'syz.0.990': attribute type 11 has an invalid length. [ 145.680089][ T9283] netlink: 'syz.0.990': attribute type 12 has an invalid length. [ 145.688190][ T9283] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.990'. [ 145.698833][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'. [ 145.970248][ T9307] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.995'. [ 146.634093][ T9332] netlink: 'syz.2.999': attribute type 2 has an invalid length. [ 146.677880][ T9334] sit0: entered promiscuous mode [ 146.701589][ T9334] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 146.712411][ T9334] netlink: 1 bytes leftover after parsing attributes in process `syz.2.999'. [ 146.916877][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1005'. [ 147.055826][ T9356] bond3: entered promiscuous mode [ 147.061426][ T9356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.189211][ T9356] bond3: (slave bridge4): making interface the new active one [ 147.203268][ T9356] bridge4: entered promiscuous mode [ 147.209884][ T9356] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 147.228088][ T9367] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 147.421177][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1015'. [ 147.429673][ T9384] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1016'. [ 147.459931][ T9384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 147.588682][ T9387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.622071][ T9394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.629288][ T9394] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.640884][ T9394] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 147.737965][ T9387] veth3: entered promiscuous mode [ 147.760968][ T9387] bond2: (slave veth3): Enslaving as an active interface with a down link [ 147.789841][ T9395] syzkaller1: entered promiscuous mode [ 147.796611][ T9395] syzkaller1: entered allmulticast mode [ 147.811441][ T9394] vlan2: entered allmulticast mode [ 147.818982][ T9394] bond2: entered allmulticast mode [ 148.582589][ T9452] IPVS: Error connecting to the multicast addr [ 148.654445][ T9452] IPVS: Error connecting to the multicast addr [ 148.673480][ T9452] IPVS: Error connecting to the multicast addr [ 148.701793][ T9452] IPVS: Error connecting to the multicast addr [ 148.716420][ T9452] IPVS: Error connecting to the multicast addr [ 148.738814][ T9461] syzkaller0: entered promiscuous mode [ 148.744596][ T9461] syzkaller0: entered allmulticast mode [ 148.759066][ T9452] IPVS: Error connecting to the multicast addr [ 148.788851][ T9452] IPVS: Error connecting to the multicast addr [ 148.809878][ T9452] IPVS: Error connecting to the multicast addr [ 148.838027][ T9452] IPVS: Error connecting to the multicast addr [ 148.861395][ T9452] IPVS: Error connecting to the multicast addr [ 148.869797][ T9452] IPVS: Error connecting to the multicast addr [ 148.917987][ T9452] IPVS: Error connecting to the multicast addr [ 148.948367][ T9452] IPVS: Error connecting to the multicast addr [ 148.967150][ T9452] IPVS: Error connecting to the multicast addr [ 148.980787][ T9452] IPVS: Error connecting to the multicast addr [ 148.999921][ T9452] IPVS: Error connecting to the multicast addr [ 149.035849][ T9452] IPVS: Error connecting to the multicast addr [ 149.055411][ T9452] IPVS: Error connecting to the multicast addr [ 149.061940][ T9452] IPVS: Error connecting to the multicast addr [ 149.076213][ T9486] veth0_to_bond: entered allmulticast mode [ 149.084095][ T9452] IPVS: Error connecting to the multicast addr [ 149.129481][ T9452] IPVS: Error connecting to the multicast addr [ 149.165218][ T9452] IPVS: Error connecting to the multicast addr [ 149.182523][ T9452] IPVS: Error connecting to the multicast addr [ 149.213703][ T9452] IPVS: Error connecting to the multicast addr [ 149.242350][ T9452] IPVS: Error connecting to the multicast addr [ 149.266731][ T9452] IPVS: Error connecting to the multicast addr [ 149.303146][ T9452] IPVS: Error connecting to the multicast addr [ 149.314613][ T9452] IPVS: Error connecting to the multicast addr [ 149.335893][ T9452] IPVS: Error connecting to the multicast addr [ 149.339573][ T9501] netlink: 'syz.3.1049': attribute type 11 has an invalid length. [ 149.344894][ T9452] IPVS: Error connecting to the multicast addr [ 149.350805][ T9502] openvswitch: netlink: IP tunnel TTL not specified. [ 149.359166][ T9452] IPVS: Error connecting to the multicast addr [ 149.370247][ T9452] IPVS: Error connecting to the multicast addr [ 149.378922][ T9452] IPVS: Error connecting to the multicast addr [ 149.402837][ T9502] validate_nla: 4 callbacks suppressed [ 149.402854][ T9502] netlink: 'syz.2.1051': attribute type 2 has an invalid length. [ 150.918550][ T9626] __nla_validate_parse: 18 callbacks suppressed [ 150.918567][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 150.996998][ T9626] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 151.084262][ T9633] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 151.113827][ T9636] netlink: 'syz.0.1090': attribute type 12 has an invalid length. [ 151.359957][ T9648] netlink: 'syz.1.1091': attribute type 33 has an invalid length. [ 151.398244][ T9648] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1091'. [ 151.419090][ T9657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.435774][ T9660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1095'. [ 151.472602][ T9663] block nbd1: Unsupported socket: should be TCP or UNIX. [ 151.855051][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 151.890444][ T9691] 8021q: VLANs not supported on ip6tnl0 [ 151.900729][ T9684] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 151.924252][ T9684] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 151.952096][ T9684] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1100'. [ 151.991369][ T9689] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 152.009547][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.022635][ T9689] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.170386][ T9695] netlink: 'syz.2.1103': attribute type 13 has an invalid length. [ 152.361165][ T9695] sit0: left promiscuous mode [ 152.386655][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1105'. [ 152.544351][ T9695] veth0_to_bond: left allmulticast mode [ 152.600500][ T9695] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 152.661354][ T9695] team1: left promiscuous mode [ 152.669660][ T9695] team1: left allmulticast mode [ 152.678600][ T9695] geneve2: left promiscuous mode [ 152.685125][ T9695] geneve2: left allmulticast mode [ 152.692382][ T9695] macvtap1: left allmulticast mode [ 152.698163][ T9695] veth0_macvtap: left allmulticast mode [ 152.709812][ T9695] ip6gre1: left allmulticast mode [ 152.725893][ T9695] bond3: left promiscuous mode [ 152.730682][ T9695] bridge4: left promiscuous mode [ 152.960152][ T9730] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1110'. [ 152.997693][ T9730] xfrm0: left allmulticast mode [ 153.024458][ T9734] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 153.234770][ T9757] openvswitch: netlink: Duplicate key (type 1). [ 153.983396][ T9798] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1125'. [ 154.248433][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 154.317111][ T9824] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 154.336868][ T9824] netlink: 'syz.3.1132': attribute type 7 has an invalid length. [ 154.361335][ T9824] netlink: 'syz.3.1132': attribute type 8 has an invalid length. [ 154.386103][ T9827] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1132'. [ 154.676316][ T9841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.809002][ T9841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.924689][ T9848] vlan2: entered promiscuous mode [ 154.929875][ T9848] bridge0: entered promiscuous mode [ 154.940734][ T9849] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 154.985026][ T9854] syzkaller0: entered promiscuous mode [ 154.990539][ T9854] syzkaller0: entered allmulticast mode [ 155.143546][ T9865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.447431][ T9890] unsupported nlmsg_type 40 [ 155.719295][ T9906] netlink: 'syz.2.1152': attribute type 7 has an invalid length. [ 156.040571][ T9924] netlink: 'syz.1.1156': attribute type 4 has an invalid length. [ 156.167939][ T9933] __nla_validate_parse: 6 callbacks suppressed [ 156.167957][ T9933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1157'. [ 156.693474][ T9954] syz.1.1164 (9954) used greatest stack depth: 16952 bytes left [ 156.733247][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 156.976113][ T9995] netlink: 'syz.3.1172': attribute type 3 has an invalid length. [ 157.013392][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 157.162036][ T9995] : entered promiscuous mode [ 157.308589][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 157.317593][T10013] macvlan0: left allmulticast mode [ 157.325080][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1177'. [ 157.569821][T10030] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 157.597522][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1183'. [ 157.616039][T10032] netlink: 'syz.2.1185': attribute type 20 has an invalid length. [ 157.632964][T10032] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.644967][T10032] netlink: 'syz.2.1185': attribute type 20 has an invalid length. [ 157.919922][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 158.094472][T10060] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 158.316309][T10071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1192'. [ 158.316433][T10072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1192'. [ 158.335233][T10072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1192'. [ 158.437471][T10074] netlink: 'syz.4.1193': attribute type 1 has an invalid length. [ 158.472165][T10074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.608018][T10082] syzkaller0: entered promiscuous mode [ 158.646071][T10082] syzkaller0: entered allmulticast mode [ 158.724518][T10082] tipc: Started in network mode [ 158.729935][T10082] tipc: Node identity 36b4dbf1efee, cluster identity 4711 [ 158.753618][T10082] tipc: Enabled bearer , priority 0 [ 158.788614][T10081] tipc: Resetting bearer [ 158.884467][T10081] tipc: Disabling bearer [ 159.190309][T10125] netlink: 'syz.4.1210': attribute type 2 has an invalid length. [ 159.198449][T10125] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 159.266059][T10131] FAULT_INJECTION: forcing a failure. [ 159.266059][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.280072][T10130] x_tables: duplicate underflow at hook 2 [ 159.294503][T10131] CPU: 1 UID: 0 PID: 10131 Comm: syz.2.1213 Not tainted syzkaller #0 PREEMPT(full) [ 159.294527][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.294544][T10131] Call Trace: [ 159.294551][T10131] [ 159.294559][T10131] dump_stack_lvl+0x189/0x250 [ 159.294583][T10131] ? __pfx____ratelimit+0x10/0x10 [ 159.294601][T10131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.294621][T10131] ? __pfx__printk+0x10/0x10 [ 159.294654][T10131] should_fail_ex+0x414/0x560 [ 159.294684][T10131] _copy_to_user+0x31/0xb0 [ 159.294706][T10131] simple_read_from_buffer+0xe1/0x170 [ 159.294730][T10131] proc_fail_nth_read+0x1b3/0x220 [ 159.294749][T10131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.294770][T10131] ? rw_verify_area+0x2a6/0x4d0 [ 159.294786][T10131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.294804][T10131] vfs_read+0x200/0xa30 [ 159.294819][T10131] ? fdget_pos+0x247/0x320 [ 159.294844][T10131] ? __pfx___mutex_lock+0x10/0x10 [ 159.294862][T10131] ? __pfx_vfs_read+0x10/0x10 [ 159.294880][T10131] ? __fget_files+0x2a/0x420 [ 159.294903][T10131] ? __fget_files+0x3a0/0x420 [ 159.294921][T10131] ? __fget_files+0x2a/0x420 [ 159.294949][T10131] ksys_read+0x145/0x250 [ 159.294968][T10131] ? __pfx_ksys_read+0x10/0x10 [ 159.294987][T10131] ? do_syscall_64+0xbe/0xf80 [ 159.295008][T10131] do_syscall_64+0xfa/0xf80 [ 159.295026][T10131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.295043][T10131] ? clear_bhb_loop+0x60/0xb0 [ 159.295064][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.295080][T10131] RIP: 0033:0x7f2a3af8e15c [ 159.295096][T10131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.295109][T10131] RSP: 002b:00007f2a391f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.295133][T10131] RAX: ffffffffffffffda RBX: 00007f2a3b1e5fa0 RCX: 00007f2a3af8e15c [ 159.295145][T10131] RDX: 000000000000000f RSI: 00007f2a391f60a0 RDI: 0000000000000004 [ 159.295156][T10131] RBP: 00007f2a391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.295165][T10131] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 159.295175][T10131] R13: 00007f2a3b1e6038 R14: 00007f2a3b1e5fa0 R15: 00007fff5a9f2f88 [ 159.295206][T10131] [ 160.145671][T10175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.161188][T10178] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.409250][T10196] netlink: 'syz.0.1229': attribute type 23 has an invalid length. [ 160.904087][T10226] netlink: 'syz.0.1234': attribute type 16 has an invalid length. [ 160.921589][T10226] netlink: 'syz.0.1234': attribute type 17 has an invalid length. [ 160.950837][T10226] netlink: 'syz.0.1234': attribute type 27 has an invalid length. [ 161.153230][T10244] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 161.159709][T10244] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 161.181408][T10247] __nla_validate_parse: 74 callbacks suppressed [ 161.181434][T10247] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1240'. [ 161.212102][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 161.235021][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'. [ 161.276618][T10252] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1243'. [ 161.801712][T10292] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1250'. [ 161.911202][T10297] netlink: 'syz.1.1251': attribute type 1 has an invalid length. [ 162.120215][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 162.135705][T10304] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 162.290280][T10304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.414856][T10310] bond3: (slave geneve2): making interface the new active one [ 162.452133][T10310] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 162.519307][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1258'. [ 162.539183][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'. [ 162.568274][T10311] lo speed is unknown, defaulting to 1000 [ 162.763594][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.763594][T10337] Use struct sctp_sack_info instead [ 162.871526][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.871526][T10337] Use struct sctp_sack_info instead [ 162.934308][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.934308][T10337] Use struct sctp_sack_info instead [ 162.995650][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.995650][T10337] Use struct sctp_sack_info instead [ 163.069078][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.069078][T10337] Use struct sctp_sack_info instead [ 163.094174][T10356] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 163.121038][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.121038][T10337] Use struct sctp_sack_info instead [ 163.139277][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.139277][T10337] Use struct sctp_sack_info instead [ 163.157187][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.157187][T10337] Use struct sctp_sack_info instead [ 163.203207][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.203207][T10337] Use struct sctp_sack_info instead [ 163.263238][T10337] sctp: [Deprecated]: syz.1.1259 (pid 10337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.263238][T10337] Use struct sctp_sack_info instead [ 163.611172][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1270'. [ 163.733444][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1270'. [ 163.822836][T10368] "syz.1.1270" (10368) uses obsolete ecb(arc4) skcipher [ 164.357715][T10410] tipc: Started in network mode [ 164.375707][T10410] tipc: Node identity ac14140f, cluster identity 4711 [ 164.390365][T10410] tipc: New replicast peer: 255.255.255.255 [ 164.428269][T10410] tipc: Enabled bearer , priority 10 [ 164.604511][T10431] netlink: 'syz.1.1288': attribute type 13 has an invalid length. [ 164.636657][T10430] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 164.645256][T10430] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 164.850436][T10431] vlan0: left promiscuous mode [ 164.858018][T10431] vlan0: left allmulticast mode [ 164.863004][T10431] veth0_vlan: left allmulticast mode [ 164.935568][T10431] gretap1: left promiscuous mode [ 164.940676][T10431] gretap1: left allmulticast mode [ 164.966469][T10431] vlan2: left promiscuous mode [ 164.971389][T10431] bridge0: left promiscuous mode [ 165.543725][ T5967] tipc: Node number set to 2886997007 [ 165.753281][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.890206][T10464] netlink: 'syz.2.1299': attribute type 16 has an invalid length. [ 165.957313][T10464] netlink: 'syz.2.1299': attribute type 17 has an invalid length. [ 165.979687][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.031759][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.054389][T10473] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 166.105981][T10477] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 166.145599][T10464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.321726][T10493] tipc: Enabling of bearer rejected, media not registered [ 166.523963][T10509] netlink: 'syz.1.1310': attribute type 19 has an invalid length. [ 166.531957][T10509] __nla_validate_parse: 4 callbacks suppressed [ 166.531974][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 166.562753][T10509] netlink: 'syz.1.1310': attribute type 19 has an invalid length. [ 166.581170][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 166.597131][T10513] netlink: 'syz.2.1314': attribute type 2 has an invalid length. [ 166.622386][T10513] netlink: 'syz.2.1314': attribute type 12 has an invalid length. [ 166.639531][T10513] netlink: 'syz.2.1314': attribute type 29 has an invalid length. [ 166.648039][T10513] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1314'. [ 166.659866][T10513] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1314'. [ 166.677596][T10521] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1313'. [ 166.691390][T10521] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1313'. [ 166.733279][T10521] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1313'. [ 166.895531][T10544] netlink: 'syz.0.1319': attribute type 6 has an invalid length. [ 167.069588][T10547] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.079391][T10547] bond4: (slave bond5): making interface the new active one [ 167.087872][T10547] bond4: (slave bond5): Enslaving as an active interface with an up link [ 167.179144][T10559] bridge0: Device is already in use. [ 167.198051][T10561] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.1324'. [ 167.341320][T10568] team0: Device gtp1 is up. Set it down before adding it as a team port [ 167.435870][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 167.524349][T10585] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1331'. [ 167.532550][T10580] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 167.579640][T10580] bond5 (unregistering): Released all slaves [ 168.065158][T10603] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 168.429446][T10632] ipt_REJECT: TCP_RESET invalid for non-tcp [ 168.566037][T10632] pim6reg1: entered promiscuous mode [ 168.571388][T10632] pim6reg1: entered allmulticast mode [ 168.844747][T10637] netem: incorrect ge model size [ 168.847873][T10646] netlink: 'syz.4.1348': attribute type 11 has an invalid length. [ 168.850239][T10637] netem: change failed [ 169.006518][T10648] bond0: Device is already in use. [ 169.841485][T10705] syzkaller0: entered promiscuous mode [ 169.870038][T10706] 0: reclassify loop, rule prio 0, protocol 800 [ 169.885257][T10705] syzkaller0: entered allmulticast mode [ 169.996591][T10713] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.366198][T10729] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 170.460206][T10740] syzkaller1: entered promiscuous mode [ 170.479447][T10740] syzkaller1: entered allmulticast mode [ 170.526760][T10741] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 170.845187][ T5842] Bluetooth: hci4: link tx timeout [ 170.851709][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.025665][ T5967] IPVS: starting estimator thread 0... [ 171.133143][T10766] IPVS: using max 29 ests per chain, 69600 per kthread [ 171.701106][T10797] __nla_validate_parse: 13 callbacks suppressed [ 171.701125][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'. [ 171.727942][T10802] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 171.936951][T10816] gre1: entered promiscuous mode [ 171.941942][T10816] gre1: entered allmulticast mode [ 172.244681][T10842] bond4: entered allmulticast mode [ 172.255803][T10842] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.268134][T10846] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1404'. [ 172.380110][T10852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1407'. [ 172.381941][T10850] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 172.715880][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 172.729745][T10857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.875795][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 172.962109][T10885] bond0: entered promiscuous mode [ 172.967474][T10885] bond_slave_0: entered promiscuous mode [ 172.973650][T10885] bond_slave_1: entered promiscuous mode [ 172.979682][T10885] bridge0: entered promiscuous mode [ 172.985844][T10885] bond0: left promiscuous mode [ 172.991159][T10885] bond_slave_0: left promiscuous mode [ 172.997225][T10885] bond_slave_1: left promiscuous mode [ 173.002962][T10885] bridge0: left promiscuous mode [ 173.196630][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1420'. [ 173.281546][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 173.591282][T10908] bond5: option resend_igmp: invalid value (32767) [ 173.608797][T10908] bond5: option resend_igmp: allowed values 0 - 255 [ 173.635991][T10908] bond5 (unregistering): Released all slaves [ 173.694175][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 173.703378][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 173.788981][T10909] bond5: option resend_igmp: invalid value (32767) [ 173.796652][T10909] bond5: option resend_igmp: allowed values 0 - 255 [ 173.819030][T10909] bond5 (unregistering): Released all slaves [ 173.860086][T10926] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1426'. [ 174.318487][T10975] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1439'. [ 174.389249][T10977] validate_nla: 6 callbacks suppressed [ 174.389265][T10977] netlink: 'syz.1.1440': attribute type 6 has an invalid length. [ 174.429157][T10977] xt_l2tp: invalid flags combination: 8 [ 174.953531][T11016] sctp: [Deprecated]: syz.0.1452 (pid 11016) Use of int in max_burst socket option deprecated. [ 174.953531][T11016] Use struct sctp_assoc_value instead [ 175.224598][T11036] netlink: 'syz.4.1460': attribute type 4 has an invalid length. [ 175.296309][T11035] lo speed is unknown, defaulting to 1000 [ 175.522052][T11049] IPv4: Oversized IP packet from 127.202.26.0 [ 175.707347][T11059] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 175.898756][T11072] netlink: 'syz.2.1470': attribute type 8 has an invalid length. [ 176.220902][T11083] netem: change failed [ 176.904567][T11132] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.926423][T11126] bond4: option resend_igmp: invalid value (32767) [ 176.934891][T11126] bond4: option resend_igmp: allowed values 0 - 255 [ 176.955585][T11126] bond4 (unregistering): Released all slaves [ 177.027255][T11134] __nla_validate_parse: 11 callbacks suppressed [ 177.027273][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 177.122421][T11150] tipc: Enabled bearer , priority 13 [ 177.265543][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1492'. [ 177.290373][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 177.302385][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1494'. [ 177.302582][T11156] bridge7: entered promiscuous mode [ 177.325397][T11156] bridge7: entered allmulticast mode [ 177.350455][T11156] team0: Port device bridge7 added [ 177.379930][T11155] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 177.392865][T11155] netlink: 'syz.0.1492': attribute type 2 has an invalid length. [ 177.560361][T11171] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 177.587450][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 177.933910][T11196] syzkaller0: entered promiscuous mode [ 177.951787][T11196] syzkaller0: entered allmulticast mode [ 177.961113][T11207] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 177.969462][ T6070] IPVS: starting estimator thread 0... [ 177.987800][T11206] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 177.998590][T11207] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 178.018465][T11206] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 178.024953][T11207] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 178.025321][T11207] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 178.025761][T11207] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 178.048080][T11206] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 178.076356][T11208] IPVS: using max 25 ests per chain, 60000 per kthread [ 178.209977][T11221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1512'. [ 178.397053][T11232] sock: sock_set_timeout: `syz.1.1515' (pid 11232) tries to set negative timeout [ 178.408991][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1515'. [ 178.586752][T11244] netlink: 'syz.4.1519': attribute type 11 has an invalid length. [ 178.594770][T11244] netlink: 'syz.4.1519': attribute type 11 has an invalid length. [ 178.602585][T11244] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1519'. [ 178.778679][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1524'. [ 178.826438][T11264] IPVS: Error connecting to the multicast addr [ 178.870178][T11248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1522'. [ 179.265318][T11298] veth0: entered promiscuous mode [ 179.321131][T11296] veth0: left promiscuous mode [ 179.516064][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.594331][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.602368][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.633897][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.654845][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.684311][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.703993][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.735097][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.764491][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.795937][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.827261][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.863407][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.879854][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.903409][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.916137][T11316] tipc: Enabling of bearer rejected, media not registered [ 179.970924][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.033389][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.042212][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.052693][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.091986][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.103960][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.114362][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.146064][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.152479][T11354] xt_CT: No such helper "snmp_trap" [ 180.155998][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.215947][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.284994][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.334582][T11316] tipc: Enabling of bearer rejected, media not registered [ 180.378694][T11369] bridge0: entered allmulticast mode [ 180.520452][T11380] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 180.761649][T11409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.005475][T11420] erspan0: entered promiscuous mode [ 181.023409][T11422] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 181.215788][T11437] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.226533][T11439] netlink: 'syz.0.1571': attribute type 5 has an invalid length. [ 181.572106][T11450] syzkaller0: entered promiscuous mode [ 181.578276][T11450] syzkaller0: entered allmulticast mode [ 181.732845][T11466] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 181.888008][T11477] netlink: 'syz.1.1581': attribute type 9 has an invalid length. [ 181.946075][T11477] openvswitch: netlink: IP tunnel dst address not specified [ 182.211580][T11493] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 182.267496][T11496] __nla_validate_parse: 18 callbacks suppressed [ 182.267513][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1585'. [ 182.327015][T11493] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.418600][T11497] bond6: (slave veth5): Enslaving as an active interface with a down link [ 182.442672][T11500] bond6: (slave veth0_to_bond): making interface the new active one [ 182.453554][T11500] veth0_to_bond: entered promiscuous mode [ 182.459815][T11500] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 182.557547][T11493] bond6: (slave veth7): Enslaving as an active interface with a down link [ 182.650333][T11510] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1587'. [ 182.686784][T11510] x_tables: duplicate underflow at hook 1 [ 182.800883][T11513] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 183.122114][T11528] syzkaller1: entered promiscuous mode [ 183.153274][T11528] syzkaller1: entered allmulticast mode [ 183.885536][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1602'. [ 183.905161][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'. [ 184.007683][T11564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1604'. [ 184.073817][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 184.120860][T11563] bond5 (unregistering): Released all slaves [ 184.165270][T11572] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 184.210104][T11568] bond5: option xmit_hash_policy: invalid value (64) [ 184.231779][T11568] bond5 (unregistering): Released all slaves [ 184.570587][T11590] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 184.580209][T11590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.865831][T11608] netlink: 'syz.2.1617': attribute type 1 has an invalid length. [ 185.088075][T11626] netlink: 'syz.3.1621': attribute type 4 has an invalid length. [ 185.172369][T11626] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1621'. [ 185.419747][T11642] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 185.443284][T11647] netlink: 'syz.0.1627': attribute type 1 has an invalid length. [ 185.470896][T11643] xt_socket: unknown flags 0x50 [ 185.473000][T11642] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.480127][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 185.520986][T11647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.530826][T11643] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1626'. [ 185.542542][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 186.019195][T11678] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 186.106586][T11688] tipc: Enabled bearer , priority 0 [ 186.150233][T11688] syzkaller0: entered allmulticast mode [ 186.257044][T11688] tipc: Resetting bearer [ 186.269302][T11688] validate_nla: 1 callbacks suppressed [ 186.269321][T11688] netlink: 'syz.1.1641': attribute type 4 has an invalid length. [ 186.339844][T11686] tipc: Resetting bearer [ 186.400212][T11686] tipc: Disabling bearer [ 186.789349][T11718] syzkaller0: entered promiscuous mode [ 186.797702][T11718] syzkaller0: entered allmulticast mode [ 187.358281][T11759] netlink: 'syz.1.1664': attribute type 13 has an invalid length. [ 187.487747][T11766] __nla_validate_parse: 9 callbacks suppressed [ 187.487765][T11766] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1661'. [ 188.592828][T11774] netlink: 'syz.2.1666': attribute type 3 has an invalid length. [ 188.708216][T10523] nci: nci_ntf_packet: unsupported ntf opcode 0xf03 [ 188.740280][T11794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1674'. [ 189.447453][T11810] nbd: illegal input index 2958377 [ 189.546509][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 189.605824][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1681'. [ 189.751928][T11832] IPv6: Can't replace route, no match found [ 189.905647][T11847] macvlan0: entered promiscuous mode [ 189.914422][T11846] netlink: 'syz.1.1689': attribute type 5 has an invalid length. [ 189.928970][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'. [ 189.964730][T11851] bond1: option mode: unable to set because the bond device has slaves [ 190.175829][T11863] tipc: Enabling of bearer rejected, failed to enable media [ 190.216421][T11863] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 190.253315][T11868] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1694'. [ 190.262652][T11868] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 190.470332][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.492013][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.500502][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.511635][T11882] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.528918][T11879] netlink: 'syz.4.1699': attribute type 10 has an invalid length. [ 190.531274][T11882] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 190.578923][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.597677][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.611592][T11886] ip6t_srh: unknown srh invflags 4000 [ 190.612494][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.637896][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.644153][T11886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 190.655237][T11882] wlan0 speed is unknown, defaulting to 1000 [ 190.927974][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'. [ 190.994814][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 191.019017][T11907] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1708'. [ 191.496795][ T6776] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.506128][ T6776] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.559161][ T6776] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.568300][ T6776] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.707738][T11952] erspan0: left promiscuous mode [ 191.778800][T11952] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.786432][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.798478][T11952] bridge0: left allmulticast mode [ 191.914810][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.022470][T11952] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 192.068388][T11952] geneve3: left promiscuous mode [ 192.073917][T11952] geneve3: left allmulticast mode [ 192.080884][T11952] veth3: left promiscuous mode [ 192.110799][T11960] syzkaller1: entered promiscuous mode [ 192.116474][T11960] syzkaller1: entered allmulticast mode [ 192.128719][ T5831] wlan0 speed is unknown, defaulting to 1000 [ 192.128741][ T6776] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.128768][ T6776] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.135894][ T5831] syz0: Port: 1 Link DOWN [ 192.159307][ T6776] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 192.173780][ T6776] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.182923][ T6776] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.195451][ T6776] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 193.094548][T11990] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 193.605648][ T6776] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.614735][ T6776] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.625627][ T6776] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 193.635468][ T6776] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.653566][ T6776] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.671199][ T6776] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 193.682002][T11976] __nla_validate_parse: 9 callbacks suppressed [ 193.682016][T11976] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1729'. [ 193.846808][T12007] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1735'. [ 193.882198][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 193.892254][T12007] netlink: 'syz.3.1735': attribute type 1 has an invalid length. [ 194.148599][T12031] syzkaller1: entered promiscuous mode [ 194.167939][T12031] syzkaller1: entered allmulticast mode [ 194.321517][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.354172][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 194.405201][T12044] netlink: 'syz.4.1748': attribute type 16 has an invalid length. [ 194.426034][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 194.469060][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'. [ 194.572376][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 194.588893][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1753'. [ 194.616934][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1753'. [ 194.817856][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'. [ 194.859095][T12089] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 194.865117][T12089] syzkaller1: Linktype set failed because interface is up [ 194.885004][ T5893] syzkaller1: tun_net_xmit 90 [ 194.936258][T12092] siw: device registration error -23 [ 195.059687][T12102] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 195.070569][T12102] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 195.224354][ T6782] syzkaller1: tun_net_xmit 86 [ 195.251761][T12111] pim6reg1: entered promiscuous mode [ 195.258128][T12111] pim6reg1: entered allmulticast mode [ 195.837111][T12149] lo speed is unknown, defaulting to 1000 [ 196.040759][T12163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.151803][T12165] bond6: invalid ARP target 0.0.0.0 specified for addition [ 196.160103][T12165] bond6: option arp_ip_target: invalid value (0) [ 196.171600][T12165] bond6 (unregistering): Released all slaves [ 196.237749][T12149] wlan0 speed is unknown, defaulting to 1000 [ 196.397561][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 196.407889][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 196.420135][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.429053][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 196.904325][T12207] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 196.904931][T12205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.000468][T12228] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 197.559380][T12257] netlink: 'syz.3.1810': attribute type 64 has an invalid length. [ 197.616033][T12257] netlink: 'syz.3.1810': attribute type 7 has an invalid length. [ 197.628228][T12257] netlink: 'syz.3.1810': attribute type 8 has an invalid length. [ 197.733271][T12264] geneve2: entered promiscuous mode [ 198.107874][T12289] syzkaller0: entered promiscuous mode [ 198.114326][T12289] syzkaller0: entered allmulticast mode [ 198.235551][T12295] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 198.244895][T12295] team0: Device macvtap1 is already an upper device of the team interface [ 198.423801][T12316] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.435500][T12316] netlink: 'syz.4.1829': attribute type 10 has an invalid length. [ 198.698269][T12326] netlink: 'syz.1.1831': attribute type 2 has an invalid length. [ 198.724347][T12326] netlink: 'syz.1.1831': attribute type 8 has an invalid length. [ 198.732148][T12326] __nla_validate_parse: 20 callbacks suppressed [ 198.732165][T12326] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1831'. [ 198.833257][T12326] nbd1: detected capacity change from 0 to 127 [ 198.841198][ T5152] block nbd1: Receive control failed (result -32) [ 198.851258][T11887] block nbd1: Dead connection, failed to find a fallback [ 198.860035][T11887] block nbd1: shutting down sockets [ 198.867262][T11887] blk_print_req_error: 138 callbacks suppressed [ 198.867278][T11887] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.885062][T11887] buffer_io_error: 138 callbacks suppressed [ 198.885079][T11887] Buffer I/O error on dev nbd1, logical block 0, async page read [ 198.900138][T11887] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.910517][T11887] Buffer I/O error on dev nbd1, logical block 1, async page read [ 198.919587][T11887] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.939482][T11887] Buffer I/O error on dev nbd1, logical block 2, async page read [ 198.949137][T11887] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.959739][T11887] Buffer I/O error on dev nbd1, logical block 3, async page read [ 198.968248][T11887] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 198.978346][T12335] netlink: 'syz.4.1834': attribute type 8 has an invalid length. [ 198.988410][T11887] Buffer I/O error on dev nbd1, logical block 0, async page read [ 198.997870][T11887] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.008045][T11887] Buffer I/O error on dev nbd1, logical block 1, async page read [ 199.023867][T11887] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.036648][T11887] Buffer I/O error on dev nbd1, logical block 2, async page read [ 199.061564][T11887] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.075579][T12337] openvswitch: netlink: IP tunnel dst address not specified [ 199.075579][T11887] Buffer I/O error on dev nbd1, logical block 3, async page read [ 199.091681][T11887] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.105859][T11887] Buffer I/O error on dev nbd1, logical block 0, async page read [ 199.124811][T11887] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 199.151337][T11887] Buffer I/O error on dev nbd1, logical block 1, async page read [ 199.161093][T11887] ldm_validate_partition_table(): Disk read failed. [ 199.187313][T11887] Dev nbd1: unable to read RDB block 0 [ 199.194426][T11887] nbd1: unable to read partition table [ 199.215089][T12348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.222389][T12348] IPv6: NLM_F_CREATE should be set when creating new route [ 199.229686][T12348] IPv6: NLM_F_CREATE should be set when creating new route [ 199.236938][T12348] IPv6: NLM_F_CREATE should be set when creating new route [ 199.250854][T11887] ldm_validate_partition_table(): Disk read failed. [ 199.274660][T12349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.275279][T11887] Dev nbd1: unable to read RDB block 0 [ 199.308532][T12349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.309039][T11887] nbd1: unable to read partition table [ 199.331048][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1839'. [ 199.432892][T12355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.463198][T12355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.651553][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1844'. [ 199.664688][T12355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.679813][T12355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.850524][T12355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.882129][T12355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.002320][T12398] nftables ruleset with unbound set [ 200.116022][T12355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.130237][T12355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.185410][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'. [ 200.206509][T12414] netlink: 'syz.2.1858': attribute type 7 has an invalid length. [ 200.222239][T12416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1856'. [ 200.245714][T12415] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1858'. [ 200.248280][T12414] netlink: 'syz.2.1858': attribute type 8 has an invalid length. [ 200.292006][ T6776] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.295206][T12419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.300985][ T6776] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.323657][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 200.345225][T12414] erspan0: entered promiscuous mode [ 200.352007][T12414] batadv_slave_1: entered promiscuous mode [ 200.359353][T12414] batadv_slave_1: left promiscuous mode [ 200.366680][T12414] erspan0: left promiscuous mode [ 200.391101][ T6776] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.405182][ T6776] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.422259][ T6776] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.431105][ T6776] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.477791][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.493109][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.724854][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'. [ 200.764103][T12449] tipc: Enabling of bearer rejected, failed to enable media [ 200.955065][T12458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1870'. [ 201.157232][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 201.319610][T12484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.339949][T12484] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.370069][T12484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.469086][T12494] netlink: 'syz.2.1880': attribute type 1 has an invalid length. [ 201.522553][T12499] netlink: 'syz.0.1882': attribute type 1 has an invalid length. [ 201.692087][T12513] geneve3: entered promiscuous mode [ 201.858055][T12524] bond6: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 201.871362][T12524] bond6 (unregistering): Released all slaves [ 202.626275][T12567] ipt_REJECT: TCP_RESET invalid for non-tcp [ 202.824853][T12577] netlink: 'syz.3.1902': attribute type 8 has an invalid length. [ 203.326307][T12607] lo speed is unknown, defaulting to 1000 [ 203.348199][ T30] audit: type=1107 audit(1766718819.272:5): pid=12611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' +u֐6 l5` rejected, failed to enable media [ 206.335768][T12801] netlink: 'syz.1.1966': attribute type 2 has an invalid length. [ 206.356978][T12801] 9: entered promiscuous mode [ 206.511794][T12813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1971'. [ 206.539229][T12817] bond1: option mode: unable to set because the bond device has slaves [ 206.560562][T12821] bond1: option mode: unable to set because the bond device has slaves [ 206.608691][T12817] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 206.868326][T12844] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 206.998121][T12853] Bluetooth: MGMT ver 1.23 [ 207.031512][T12854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.047259][T12849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.061655][T12849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.110013][ T48] lo speed is unknown, defaulting to 1000 [ 207.123648][ T48] syz2: Port: 1 Link ACTIVE [ 207.129634][ T48] lo speed is unknown, defaulting to 1000 [ 207.173867][T12857] netlink: 'syz.2.1980': attribute type 6 has an invalid length. [ 207.227163][T12860] openvswitch: netlink: Message has 4 unknown bytes. [ 207.513635][T12881] syz.2.1988 uses old SIOCAX25GETINFO [ 207.946368][T12912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.146208][T12921] syzkaller0: entered promiscuous mode [ 208.151808][T12921] syzkaller0: entered allmulticast mode [ 208.184683][T12921] netlink: 'syz.0.2003': attribute type 23 has an invalid length. [ 208.206025][T12932] delete_channel: no stack [ 208.229167][T12934] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 209.605964][T12934] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 209.616571][T12941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.004853][T12987] __nla_validate_parse: 7 callbacks suppressed [ 210.004872][T12987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2021'. [ 210.094106][T12991] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2022'. [ 210.297833][T13011] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.2027'. [ 210.428886][T13024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2028'. [ 210.528030][T13024] bond6 (unregistering): Released all slaves [ 210.546944][T13030] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2030'. [ 210.558310][T13030] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2030'. [ 210.688666][T13038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2031'. [ 210.753989][T13044] netlink: 'syz.4.2032': attribute type 10 has an invalid length. [ 210.888587][T13048] netlink: 'syz.0.2034': attribute type 1 has an invalid length. [ 210.901786][T13048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2034'. [ 211.111499][T13068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.137027][T13064] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2037'. [ 211.156738][T13064] syzkaller1: entered promiscuous mode [ 211.165787][T13064] syzkaller1: entered allmulticast mode [ 211.461642][T13095] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 211.721948][T13095] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 211.898137][T13131] netlink: 'syz.2.2053': attribute type 23 has an invalid length. [ 211.980962][T13132] bond5: ARP target 1.0.0.0 is already present [ 211.987684][T13132] bond5: option arp_ip_target: invalid value (1) [ 211.996579][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2054'. [ 211.997047][T13132] bond5 (unregistering): Released all slaves [ 212.023646][T13136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.085212][T13136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.359932][T13160] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 212.419929][T13160] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 212.433754][T13160] bond8: (slave vcan0): Error -95 calling set_mac_address [ 212.445385][T13167] netlink: 'syz.0.2063': attribute type 21 has an invalid length. [ 212.922657][T13167] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 212.934292][T13167] bond6 (unregistering): Released all slaves [ 213.217559][T13167] netlink: 'syz.0.2063': attribute type 21 has an invalid length. [ 213.309777][T13203] netlink: 'syz.2.2069': attribute type 1 has an invalid length. [ 213.505089][T13211] netlink: 'syz.4.2072': attribute type 18 has an invalid length. [ 213.537391][T13167] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 213.548911][T13167] bond6 (unregistering): Released all slaves [ 213.841653][T13205] bond5: (slave ip6gretap1): making interface the new active one [ 213.850806][T13205] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.860730][T13205] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 213.869231][T13205] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 213.900368][T13222] netlink: 'syz.0.2073': attribute type 30 has an invalid length. [ 214.078204][T13233] ip6gretap0: mtu less than device minimum [ 214.855973][T13278] bond0: entered allmulticast mode [ 214.861192][T13278] bond_slave_0: entered allmulticast mode [ 214.876048][T13278] bond_slave_1: entered allmulticast mode [ 214.893176][T13278] bridge0: entered allmulticast mode [ 214.939806][T13288] netlink: 'syz.3.2096': attribute type 1 has an invalid length. [ 214.948777][ T971] bond1: (slave bond0): link status definitely down, disabling slave [ 214.962704][T13288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.990424][ T971] bond1: now running without any active interface! [ 215.044020][T13295] __nla_validate_parse: 14 callbacks suppressed [ 215.044037][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 215.118676][T13295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2097'. [ 215.182657][T13291] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 215.401282][T13318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2103'. [ 215.438178][T13320] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.2102'. [ 215.451436][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 215.492323][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'. [ 215.552179][T13330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2107'. [ 215.575315][T13334] xt_hashlimit: size too large, truncated to 1048576 [ 215.971672][T13369] x_tables: duplicate underflow at hook 2 [ 216.005281][T13349] udevd[13349]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 216.046417][T13339] udevd[13339]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 216.324682][T13382] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 216.338627][T13382] bond6 (unregistering): Released all slaves [ 216.549072][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 216.861914][T13427] validate_nla: 12 callbacks suppressed [ 216.861935][T13427] netlink: 'syz.2.2132': attribute type 3 has an invalid length. [ 216.879395][T13423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.899269][T13423] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.908489][T13427] netlink: 'syz.2.2132': attribute type 1 has an invalid length. [ 216.924100][T13423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.964818][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'. [ 217.085488][T13441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2137'. [ 217.376254][T13469] netlink: 'syz.3.2145': attribute type 2 has an invalid length. [ 217.398958][T13472] netlink: 'syz.3.2145': attribute type 2 has an invalid length. [ 217.485475][T13481] smc: net device gre0 applied user defined pnetid SYZ1 [ 217.602391][T13485] bridge_slave_0: left allmulticast mode [ 217.608397][T13485] bridge_slave_0: left promiscuous mode [ 217.620321][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.630360][T13485] bridge_slave_1: left allmulticast mode [ 217.636227][T13485] bridge_slave_1: left promiscuous mode [ 217.651291][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.670465][T13485] bond0: (slave bond_slave_0): Releasing backup interface [ 217.687145][T13485] bond0: (slave bond_slave_1): Releasing backup interface [ 217.705536][T13485] team0: Port device team_slave_0 removed [ 217.726627][T13485] team0: Port device team_slave_1 removed [ 217.732977][T13485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.741280][T13485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.757818][T13485] batadv1: left allmulticast mode [ 217.762861][T13485] batadv1: left promiscuous mode [ 217.768281][T13485] bridge0: port 3(batadv1) entered disabled state [ 217.780179][T13485] bond2: (slave gretap1): Releasing active interface [ 217.793242][T13485] bond3: (slave bridge4): Releasing backup interface [ 217.811688][T13485] team0: Port device bridge7 removed [ 217.818307][T13485] bond5: (slave ip6gretap1): Releasing active interface [ 217.925809][T13502] ieee802154 phy1 wpan1: encryption failed: -126 [ 218.011773][T13508] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20004 [ 218.067319][T13513] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 218.209630][T13524] syzkaller0: entered promiscuous mode [ 218.216209][T13524] syzkaller0: entered allmulticast mode [ 218.664271][T13555] netlink: 'syz.2.2170': attribute type 1 has an invalid length. [ 218.821183][T13570] netlink: 'syz.3.2168': attribute type 4 has an invalid length. [ 218.826267][T13561] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.838328][T13561] bond6: (slave bond7): making interface the new active one [ 218.846789][T13561] bond6: (slave bond7): Enslaving as an active interface with an up link [ 218.859271][T13556] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 218.965574][T13555] bond6: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.987192][T13555] bond6: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 219.127742][T13586] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 219.546007][T13617] sctp: [Deprecated]: syz.1.2184 (pid 13617) Use of int in max_burst socket option deprecated. [ 219.546007][T13617] Use struct sctp_assoc_value instead [ 219.647029][T13614] vlan3: entered allmulticast mode [ 219.672970][T13614] veth1: entered allmulticast mode [ 220.049644][T13652] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 220.095596][T13652] netlink: 'syz.3.2190': attribute type 2 has an invalid length. [ 220.160498][T13660] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 220.233716][T13660] netlink: 'syz.3.2190': attribute type 2 has an invalid length. [ 220.485598][T13680] __nla_validate_parse: 13 callbacks suppressed [ 220.485616][T13680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2196'. [ 220.620682][T13691] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2200'. [ 220.650769][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 220.672571][T13692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2201'. [ 220.860648][T13708] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 220.860668][T13708] sctp: [Deprecated]: syz.3.2206 (pid 13708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.860668][T13708] Use struct sctp_sack_info instead [ 221.071363][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2213'. [ 221.268977][T13741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 221.280215][T13743] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 221.538166][T13760] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2224'. [ 221.885777][T13776] bond9: invalid ARP target 0.0.0.0 specified for addition [ 221.894290][T13776] bond9: option arp_ip_target: invalid value (0) [ 221.895294][T13784] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2229'. [ 221.913917][T13776] bond9 (unregistering): Released all slaves [ 221.950486][T13779] tipc: Invalid UDP bearer configuration [ 221.950540][T13779] tipc: Enabling of bearer rejected, failed to enable media [ 222.009446][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2234'. [ 222.025663][T13788] x_tables: duplicate underflow at hook 3 [ 222.122078][T13796] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2237'. [ 222.143002][T13796] syzkaller1: entered promiscuous mode [ 222.148887][T13796] syzkaller1: entered allmulticast mode [ 222.203123][T13802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.287149][T13804] C: renamed from team_slave_0 (while UP) [ 222.298680][T13804] validate_nla: 2 callbacks suppressed [ 222.298696][T13804] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 222.313135][T13804] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 222.523356][T13820] syzkaller0: entered promiscuous mode [ 222.528936][T13820] syzkaller0: entered allmulticast mode [ 222.556663][T13823] netlink: 'syz.2.2248': attribute type 24 has an invalid length. [ 223.350384][T13867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.357529][T13867] delete_channel: no stack [ 223.441383][T13868] netlink: 'syz.1.2260': attribute type 1 has an invalid length. [ 223.533747][T13868] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.678066][T13872] bond9: (slave geneve3): making interface the new active one [ 223.689014][T13872] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 223.752955][T13886] netlink: 'syz.4.2264': attribute type 12 has an invalid length. [ 223.787293][ T176] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.844824][ T176] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.862061][T13886] x_tables: duplicate underflow at hook 1 [ 223.881926][ T176] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.961699][ T176] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.475057][T13852] udevd[13852]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 224.635608][T13907] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 224.684395][ T176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 224.706454][ T176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 224.722759][T13911] netlink: 'syz.4.2270': attribute type 1 has an invalid length. [ 224.730974][ T176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 224.750448][ T176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 225.153615][T13925] netlink: 'syz.0.2275': attribute type 12 has an invalid length. [ 225.185872][T13925] netlink: 'syz.0.2275': attribute type 29 has an invalid length. [ 225.221317][T13925] netlink: 'syz.0.2275': attribute type 2 has an invalid length. [ 225.234123][T13937] netlink: 'syz.3.2277': attribute type 27 has an invalid length. [ 225.316961][T13927] lo speed is unknown, defaulting to 1000 [ 225.372024][T13941] netlink: 'syz.4.2278': attribute type 10 has an invalid length. [ 225.412519][T13941] dummy0: entered promiscuous mode [ 225.427156][T13941] dummy0: left allmulticast mode [ 225.449946][T13941] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 226.087633][T13956] bridge0: port 1(batadv2) entered blocking state [ 226.118223][T13962] netlink: 'syz.3.2283': attribute type 11 has an invalid length. [ 226.129194][T13956] bridge0: port 1(batadv2) entered disabled state [ 226.154839][T13956] batadv2: entered allmulticast mode [ 226.175356][T13956] batadv2: entered promiscuous mode [ 226.237169][T13957] __nla_validate_parse: 14 callbacks suppressed [ 226.237191][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 226.249084][T13927] wlan0 speed is unknown, defaulting to 1000 [ 226.567091][ T1335] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 226.576484][ T1335] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 227.201298][T13989] bond0: entered promiscuous mode [ 227.629816][T13995] Can't find ip_set type bitmap:ip,mac [ 228.008603][T14005] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 228.149366][T14005] bond9 (unregistering): Released all slaves [ 228.645030][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2297'. [ 228.758463][T14030] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2299'. [ 229.407074][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'. [ 229.457124][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2302'. [ 230.092379][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2306'. [ 230.147327][T14076] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 230.341902][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f4800: rx timeout, send abort [ 230.743780][T14092] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 230.781566][T14092] netlink: 'syz.0.2311': attribute type 4 has an invalid length. [ 230.820918][T14092] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2311'. [ 230.842523][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f7000: rx timeout, send abort [ 230.851969][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f4800: abort rx timeout. Force session deactivation [ 231.350905][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880589f7000: abort rx timeout. Force session deactivation [ 231.699220][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2314'. [ 231.880474][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'. [ 232.705818][T14117] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 232.734846][T14118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2316'. [ 232.780065][ T971] tipc: Subscription rejected, illegal request [ 234.006138][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2320'. [ 234.056180][T14133] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 234.187308][T14139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.225318][T14174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 235.492356][T14180] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2331'. [ 235.528928][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'. [ 235.573722][T14182] bond0: Error: Cannot enslave bond to itself. [ 235.732598][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'. [ 235.881415][T14196] netlink: 'syz.4.2334': attribute type 16 has an invalid length. [ 235.929453][T14196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 235.994929][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'. [ 236.419865][T14211] "syz.0.2338" (14211) uses obsolete ecb(arc4) skcipher [ 236.443592][T14211] "syz.0.2338" (14211) uses obsolete ecb(arc4) skcipher [ 236.492101][T14211] "syz.0.2338" (14211) uses obsolete ecb(arc4) skcipher [ 236.532881][T14211] "syz.0.2338" (14211) uses obsolete ecb(arc4) skcipher [ 236.817716][T14212] veth7: entered promiscuous mode [ 236.934689][T14217] __nla_validate_parse: 1 callbacks suppressed [ 236.934708][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 237.028299][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 237.716795][T14254] veth1_to_bond: entered allmulticast mode [ 237.752788][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 243.173164][ C0] sched: DL replenish lagged too much [ 326.252674][T12183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 327.784430][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.643216][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.041226][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.210678][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.605747][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 330.259330][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 330.461389][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.312791][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.049206][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.124366][ T5152] Bluetooth: hci1: command tx timeout [ 335.207237][ T5837] Bluetooth: hci5: Opcode 0x0c38 failed: -110 [ 336.103242][T12183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.120346][T12183] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 337.205693][T12183] Bluetooth: hci1: command tx timeout [ 337.752614][T12183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.462259][T14288] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 339.284787][ T5152] Bluetooth: hci1: command tx timeout [ 339.475622][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.527035][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.639211][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.881926][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.414360][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.547713][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.678404][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 341.500071][ T5152] Bluetooth: hci1: command tx timeout [ 341.750546][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.521016][T12183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.426752][T12183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.991778][ T5842] Bluetooth: hci6: command tx timeout [ 349.049709][ T5842] Bluetooth: hci0: command tx timeout [ 349.054115][ T5837] Bluetooth: hci6: command tx timeout [ 351.378853][T12183] Bluetooth: hci6: command tx timeout [ 351.665714][ T5837] Bluetooth: hci0: command tx timeout [ 353.443778][ T5837] Bluetooth: hci6: command tx timeout [ 353.684318][ T5837] Bluetooth: hci0: command tx timeout [ 355.763132][ T5837] Bluetooth: hci0: command tx timeout [ 435.284622][ T5837] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 444.249031][ T5837] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 445.866002][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.570845][T14315] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 448.090681][ T5837] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 448.327897][ T5842] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 450.429015][ T5152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 450.447299][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 450.512434][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.562662][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 450.599228][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.619011][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 450.663375][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.989097][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 451.205905][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.166940][T14318] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 452.260410][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.288539][ T5152] Bluetooth: hci4: command 0x0c38 tx timeout [ 453.304780][T14313] Bluetooth: hci4: Opcode 0x0c38 failed: -110 [ 453.958701][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.886959][ T5152] Bluetooth: hci5: command tx timeout [ 457.931266][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 459.802121][ T5152] Bluetooth: hci5: command tx timeout [ 461.842231][ T5842] Bluetooth: hci5: command tx timeout [ 464.946295][ T5842] Bluetooth: hci5: command tx timeout [ 476.678064][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.740104][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.880259][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 524.789413][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.433094][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.182714][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.322578][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.336316][T12183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.408119][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.651829][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.869096][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 536.067460][T12183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.119114][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 536.517225][T12183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 536.588669][T12183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.706242][T12183] Bluetooth: hci0: command tx timeout [ 540.272451][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 540.325628][ T5842] Bluetooth: hci2: command tx timeout [ 540.380900][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 540.896300][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.206494][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.270109][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.763216][ T5152] Bluetooth: hci0: command tx timeout [ 542.407644][ T5842] Bluetooth: hci2: command tx timeout [ 543.017155][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 543.081502][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 543.117676][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 543.198208][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 543.529463][ T5842] Bluetooth: hci3: command tx timeout [ 543.787067][T12183] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 543.839992][T12183] Bluetooth: hci0: command tx timeout [ 544.138081][T12183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 544.476901][T12183] Bluetooth: hci2: command tx timeout [ 545.674447][T12183] Bluetooth: hci3: command tx timeout [ 545.917180][T12183] Bluetooth: hci0: command tx timeout [ 546.565541][T12183] Bluetooth: hci2: command tx timeout [ 546.716558][T12183] Bluetooth: hci6: command tx timeout [ 547.760358][T12183] Bluetooth: hci3: command tx timeout [ 548.797613][T12183] Bluetooth: hci6: command tx timeout [ 550.281078][T12183] Bluetooth: hci3: command tx timeout [ 550.892625][T12183] Bluetooth: hci6: command tx timeout [ 552.970791][T12183] Bluetooth: hci6: command tx timeout [ 562.872061][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.286820][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.736309][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.237818][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.600733][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 607.841740][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 607.987221][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.038541][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 608.181316][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 608.265349][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 608.394425][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 608.846901][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 609.310519][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 609.689545][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 612.087781][T12183] Bluetooth: hci4: command tx timeout [ 614.093627][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.157237][T12183] Bluetooth: hci4: command tx timeout [ 614.310656][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.414565][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.478967][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.541354][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.876361][ T5842] Bluetooth: hci2: command tx timeout [ 616.209510][ T5152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 616.248815][ T5152] Bluetooth: hci4: command tx timeout [ 616.317287][T12183] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 616.650843][ T5152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 617.256392][ T5152] Bluetooth: hci2: command tx timeout [ 618.395790][ T5152] Bluetooth: hci4: command tx timeout [ 618.629667][T12183] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 619.139027][T12183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 619.459517][ T5152] Bluetooth: hci2: command tx timeout [ 620.406772][ T5152] Bluetooth: hci5: command tx timeout [ 621.610052][ T5842] Bluetooth: hci2: command tx timeout [ 622.643888][ T5152] Bluetooth: hci5: command tx timeout [ 623.542587][ T5152] Bluetooth: hci7: command tx timeout [ 623.558958][T12183] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 624.230581][T12183] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 625.542373][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 625.991736][ T5152] Bluetooth: hci5: command tx timeout [ 626.006715][ T5152] Bluetooth: hci7: command tx timeout [ 628.083526][ T5837] Bluetooth: hci7: command tx timeout [ 628.084601][T12183] Bluetooth: hci5: command tx timeout [ 628.612608][T12183] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 629.329903][T12183] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 630.162664][ T5837] Bluetooth: hci7: command tx timeout [ 630.441709][T14372] lo speed is unknown, defaulting to 1000 [ 634.153046][T12183] Bluetooth: hci8: command tx timeout [ 636.248716][T12183] Bluetooth: hci8: command tx timeout [ 637.672326][ T5842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 637.730689][ T5842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 637.794479][ T5842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 638.641350][ T5842] Bluetooth: hci8: command tx timeout [ 638.753865][ T5842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 640.769524][ T5842] Bluetooth: hci8: command tx timeout [ 641.211320][ T5842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 645.204199][T12183] Bluetooth: hci9: command tx timeout [ 647.282346][T12183] Bluetooth: hci9: command tx timeout [ 649.126079][ T13] batadv2: left allmulticast mode [ 649.363598][T12183] Bluetooth: hci9: command tx timeout [ 649.485654][ T13] batadv2: left promiscuous mode [ 649.907647][ T13] bridge0: port 1(batadv2) entered disabled state [ 651.446296][T12183] Bluetooth: hci9: command tx timeout [ 653.287211][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 653.578327][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.297011][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.769509][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.814923][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.845457][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.901041][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 655.975735][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.089017][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 656.383987][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 658.888894][T12183] Bluetooth: hci0: command tx timeout [ 659.207769][T12183] Bluetooth: hci1: command tx timeout [ 660.967863][T12183] Bluetooth: hci0: command tx timeout [ 661.332617][T12183] Bluetooth: hci1: command tx timeout [ 662.426384][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 662.540876][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 662.650106][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 663.042363][ T5837] Bluetooth: hci0: command tx timeout [ 663.449857][ T5837] Bluetooth: hci1: command tx timeout [ 663.971383][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 664.099557][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.260997][T12183] Bluetooth: hci0: command tx timeout [ 665.526327][ T5837] Bluetooth: hci1: command tx timeout [ 667.532709][T12183] Bluetooth: hci3: command tx timeout [ 669.625955][T12183] Bluetooth: hci3: command tx timeout [ 671.702194][T12183] Bluetooth: hci3: command tx timeout [ 673.785275][T12183] Bluetooth: hci3: command tx timeout [ 702.226428][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 704.724382][T12183] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 704.924085][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 705.370462][T12183] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 705.892213][T12183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 706.807587][T12183] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 708.474506][T12183] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 708.958126][T12183] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 711.683209][T12183] Bluetooth: hci6: command tx timeout [ 713.764549][T12183] Bluetooth: hci6: command tx timeout [ 715.850408][T12183] Bluetooth: hci6: command tx timeout [ 717.934769][T12183] Bluetooth: hci6: command tx timeout [ 724.020406][ T5837] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 724.162373][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 724.495360][ T5152] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 725.084566][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 726.698554][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 731.388911][ T5837] Bluetooth: hci10: command tx timeout [ 731.670682][ T5837] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 731.800952][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 732.216912][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 732.374741][ T5837] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 732.494000][ T5837] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 733.446567][T12183] Bluetooth: hci10: command tx timeout [ 734.162623][T12183] Bluetooth: hci4: command 0x0406 tx timeout [ 735.523790][ T5837] Bluetooth: hci10: command tx timeout [ 737.515114][ T5152] Bluetooth: hci11: command tx timeout [ 737.597930][ T5837] Bluetooth: hci10: command tx timeout [ 739.603333][ T5152] Bluetooth: hci11: command tx timeout [ 739.718567][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 742.011424][ T5837] Bluetooth: hci11: command tx timeout [ 744.084598][T12183] Bluetooth: hci11: command tx timeout [ 744.357411][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 744.495439][ T5837] Bluetooth: hci7: command 0x0406 tx timeout [ 750.230201][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 750.962313][T12183] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 751.731846][T12183] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 752.270581][T12183] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 752.572476][T12183] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 754.749024][ T5837] Bluetooth: hci12: Opcode 0x1005 failed: -110 [ 754.905886][ T5842] Bluetooth: hci13: Opcode 0x1001 failed: -110 [ 755.259198][T14419] Bluetooth: hci12: Opcode 0x0c03 failed: -4 [ 755.775588][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 756.144518][T12183] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 756.758928][T12183] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 756.843585][T12183] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 757.370240][T12183] Bluetooth: hci8: command tx timeout [ 760.382062][T14423] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 761.620037][T14423] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 761.628627][T14424] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 762.421135][T14424] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 762.549995][T14423] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 762.649323][T14423] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 762.704723][T14423] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 765.287692][T14424] Bluetooth: hci13: command tx timeout [ 765.690886][T14424] Bluetooth: hci14: command tx timeout [ 767.450615][T14424] Bluetooth: hci13: command tx timeout [ 768.156651][T14424] Bluetooth: hci14: command tx timeout [ 770.482089][ T5152] Bluetooth: hci13: command tx timeout [ 770.556771][ T5152] Bluetooth: hci14: command tx timeout [ 770.672559][ T5152] Bluetooth: hci9: command 0x0406 tx timeout [ 772.668420][ T5152] Bluetooth: hci14: command tx timeout [ 772.684447][T14423] Bluetooth: hci13: command tx timeout [ 780.890153][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 785.447227][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 786.206160][ T5152] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 786.286668][T14423] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 786.391289][T14423] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 786.477744][T14423] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 786.614691][T14423] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 787.235836][T12183] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 787.261593][T14423] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 787.325559][T12183] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 787.496354][T12183] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 787.639956][T12183] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 788.995168][ T31] INFO: task syz-executor:14378 blocked for more than 144 seconds. [ 790.161917][ T5152] Bluetooth: hci12: command tx timeout [ 790.242297][ T5152] Bluetooth: hci15: command tx timeout [ 790.452379][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 791.411940][ T31] Not tainted syzkaller #0 [ 791.425679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.243334][ T5152] Bluetooth: hci12: command tx timeout [ 792.507666][ T5152] Bluetooth: hci15: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 792.903163][ T31] task:syz-executor state:D stack:25560 pid:14378 tgid:14378 ppid:1 task_flags:0x400140 flags:0x00080002 [ 794.010673][ T31] Call Trace: [ 794.023319][ T31] [ 794.026291][ T31] __schedule+0x14bc/0x5000 [ 794.030840][ T31] ? __pfx___schedule+0x10/0x10 [ 794.320380][ T5152] Bluetooth: hci12: command tx timeout [ 794.338029][ T31] ? schedule+0x91/0x360 [ 794.342333][ T31] schedule+0x165/0x360 [ 794.566321][ T5152] Bluetooth: hci15: command tx timeout [ 795.611800][ T31] schedule_preempt_disabled+0x13/0x30 [ 795.640633][ T31] __mutex_lock+0x7e6/0x1350 [ 796.404558][ T5152] Bluetooth: hci12: command tx timeout [ 796.663233][ T5152] Bluetooth: hci15: command tx timeout [ 797.062128][ T31] ? __mutex_lock+0x5bb/0x1350 [ 797.075967][ T31] ? add_one_compat_dev+0xf0/0x650 [ 797.081134][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 797.499926][ T31] ? rdma_dev_init_net+0x22d/0x2f0 [ 797.514446][ T31] add_one_compat_dev+0xf0/0x650 [ 797.519444][ T31] ? down_read+0x274/0x2e0