last executing test programs: 4.046831405s ago: executing program 3 (id=3434): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$caif_stream(0x25, 0x1, 0x2) connect$caif(r1, &(0x7f00000003c0)=@rfm={0x25, 0x3, "974a7386d371a23ef74ea97b8a3ae5d9"}, 0x18) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @loopback, 0xd}, 0x1c) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)}, 0x62) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) close(r3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.792990921s ago: executing program 0 (id=3439): r0 = socket$inet6(0xa, 0x5, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x7f}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0xa, 0x4e24, 0x6, @empty, 0x7}, 0x1c, 0x0}, 0x20000050) 3.697869874s ago: executing program 0 (id=3440): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e", 0x2d}], 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.570879353s ago: executing program 0 (id=3443): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x800, 0x3}, @mss={0x2, 0x51}, @sack_perm, @sack_perm, @window={0x3, 0x5, 0x1}, @mss, @sack_perm, @window={0x3, 0x7, 0x80}], 0x8) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r6}, 0x8) close(r7) ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000240)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x8, 0x8000, 0x5, 0x80000000, {{0x14, 0x4, 0x0, 0x2c, 0x50, 0x66, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x1f, 0x3, 0x1, [{@local, 0x1800}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x101}, {@private=0xa010102, 0x9}, {@multicast2, 0x8}, {@broadcast, 0x6}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8}]}]}}}}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x5, 0xc, 0x2f8, 0x80, 0xffffffffffffffff, 0x80, '\x00', r9, r7, 0xb, 0x3, 0x1, 0x2}, 0x50) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xce}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4004840) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) r13 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), 0xffffffffffffffff) r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_NEWPDP(r12, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r13, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r14}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r12) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r12, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1c}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r15, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x37}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xb1d2, 0xa}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x44}}, @NL80211_ATTR_PID={0x8, 0x52, r16}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r17}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r18, &(0x7f0000001080)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000940)={0x6e4, r15, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5a0, 0x11d, 0x0, 0x1, [{0x3e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x204, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x7}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x5}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x1}, {0x3}, {0x3, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x3}, {0x7, 0x8}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x30, 0x30, 0x6, 0x6, 0x1b, 0x24, 0xeec3469ad7c12ae4, 0x18, 0x30, 0xc, 0x6, 0x12, 0x24, 0x24, 0x48, 0x16, 0x12, 0x9, 0x60, 0x6, 0x1b, 0x9, 0x3, 0x48, 0xc]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0xc, 0x30, 0x5, 0x16, 0xc, 0xb, 0x24, 0x60, 0x6, 0x5, 0x60, 0x24, 0x36, 0x48, 0x2e, 0x0, 0x6c, 0x5, 0x24, 0x16, 0xb, 0xc, 0x4, 0x6c, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0xf, 0xfffa, 0x7, 0x1190, 0x60, 0x9, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x5, 0x5, 0x800, 0x4, 0x7, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffb, 0x1, 0x5, 0x8000, 0xff, 0xf515, 0x1000, 0x2d0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x8}, {0x3}, {0x6}, {0x4, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x3, 0x3}, {0x6}, {0x3, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x3, 0x8}, {0x6, 0x4}, {0x2, 0x7}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x9}, {0x7, 0x2}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x3}, {0x2, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfff6, 0x6, 0x1, 0x101, 0x8000, 0x101, 0x1]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x4, 0x9}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0x8}, {0x5, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x6, 0x1}, {0x5, 0x5}, {0x1, 0x8}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0xa}, {0x6, 0x9}, {0x3, 0x6}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x0, 0xa}, {0x1}, {0x5, 0x2}, {0x3}, {0x5, 0x9}, {0x7, 0x1}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x6, 0xa}, {0x1, 0x6}, {}, {0x5}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x4}, {0x5, 0xa}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x6}, {0x3, 0x4}, {0x2, 0xa}, {0x4, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x5}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x36, 0x30, 0x4, 0x5, 0x36, 0x16, 0xc, 0x0, 0x4, 0x48, 0x2, 0x6c, 0x1b, 0x12, 0x36, 0x6c, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x7, 0x8, 0x5, 0x1, 0x9, 0x1]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x8}, {0x2, 0x8}, {0x5, 0x3}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x9}, {0x1, 0x4}, {0x7, 0x6}, {0x6, 0x1}, {0x0, 0x2}, {0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0x7}, {0x7, 0x7}, {0x4, 0x8}, {0x4, 0x9}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x3}, {0x3}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x4}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x69, 0x12, 0x24, 0xe5c46a8fdfcd7c17, 0x18, 0x2, 0x1, 0x12, 0x30, 0x16, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffe, 0x9, 0x3, 0x7, 0xfffe, 0x9, 0x5b04]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0xc, 0x9, 0x1b, 0x24, 0x24, 0x9, 0x30, 0x5, 0x3, 0x60, 0x3, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x4, 0x5, 0xb, 0x5, 0x9, 0x12, 0x1b, 0x1b, 0x51, 0xb, 0x12, 0x1b, 0x60, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x9800, 0xd, 0xeb21, 0x24e, 0x3, 0x0, 0x7f]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x5, 0x100, 0x2, 0x5, 0x40, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe2, 0x8001, 0xe5f, 0x7, 0x3, 0x5, 0x7ff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x2}, {0x7, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0xc, 0x6, 0x23, 0x36, 0x16, 0x60, 0x6, 0x48, 0x6, 0xc, 0x1b, 0x36, 0x16, 0x9, 0x0, 0x12, 0xb, 0x3]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x3}, {0x7, 0x4}, {0x3, 0x1}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x5, 0x4}, {0x7, 0x1}, {0x6}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x16}, {0x5, 0x2}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x4}, {0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x1, 0x2}, {0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x1}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x8, 0x1000, 0x0, 0x6a1d, 0xad9c, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x4}, {0x2, 0x2}, {0x7, 0xa}, {0x6, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x5}, {0x3, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x6, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x4, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x4, 0x9}, {0x4, 0x5}, {0x0, 0x8}, {0x4, 0xa}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x18, 0x24, 0x0, 0x2, 0x48, 0x16, 0x48, 0x2, 0x48, 0x1, 0x1, 0x4, 0x12, 0x30, 0x18, 0x18, 0x12, 0x6, 0x18, 0x24, 0xb, 0x9, 0x5, 0x4, 0x30, 0x5, 0x36, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4e, 0x7, 0x4, 0x101, 0x0, 0x3ff, 0xbe, 0x9593]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x24, 0x64, 0x1, 0x5, 0x1, 0x1, 0x5, 0x60, 0xb, 0x24, 0x18, 0x6c, 0x6, 0x30, 0x5, 0xb, 0x16, 0x2, 0x36]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x198, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0x6, 0xe6c, 0x3ff, 0x5, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x374, 0x6, 0x2, 0xf206, 0x2, 0xff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf, 0x9, 0x1fe, 0x8, 0x9, 0x7, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x7, 0x6, 0x7fff, 0x5, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0xc, 0x6, 0x12, 0x41d4cbf347078167, 0x2, 0x5, 0x2]}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9176, 0x8, 0x2, 0x7000, 0x5, 0xcf, 0x101, 0x9]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0xa}, {0x4, 0x8}, {0x5, 0xa}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x9}, {0x6}, {0x6, 0x1}, {0x4, 0x8}, {0x0, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x3, 0xa}, {0x4, 0x4}, {0x6, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x4, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x100, 0x1ff, 0xfbff, 0x6, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcbcb, 0x7f, 0x7, 0x2, 0x6, 0x1, 0x9, 0x9]}}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ff, 0x9, 0x81, 0x0, 0xfff8, 0x6, 0x81]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x5}, {0x5, 0x9}, {0x2, 0x4}, {0x1}, {0x6, 0x1}, {0x5, 0x3}, {0x3, 0x4}, {0x6, 0x1}, {0x2, 0x6}, {0x2}, {0x1}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x4}, {0x4, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x7, 0x4}, {0x1}, {0x0, 0x8}, {0x5, 0x6}, {0x4, 0x5}, {0x4, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x0, 0xa}, {0x3, 0x5}, {0x3, 0x7}, {0x7, 0xa}, {0x5}, {0x3, 0x5}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x6, 0x1}, {0x5, 0x3}, {0x1}, {0x3}, {0x6}, {0x2, 0xa}, {0x4, 0xa}, {0x2, 0x8}, {0x1}, {0x4, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x8}, {0x6, 0x2}, {0x2, 0x7}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x7, 0x4, 0x30, 0x60, 0x1b, 0x1, 0x30, 0x2, 0x36, 0xc, 0x5, 0x1b, 0x6c, 0x0, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x0, 0x4, 0x9, 0x6, 0xf, 0x6, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x108, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0x8000, 0x5, 0x1, 0x6, 0x1, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x12, 0x1b, 0x24, 0x7, 0x60, 0x12, 0x2, 0x6c, 0x30, 0x3f, 0x6d, 0x9, 0x36, 0x9, 0x30, 0xb, 0x24, 0x5, 0x6c, 0x12, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4d}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7d}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1d}]}]}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x40488c0}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r10, 0x9a713000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r18, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24040045}, 0x4) 3.328708691s ago: executing program 0 (id=3446): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000580), 0x0}, 0x20) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x8000}}, 0x44) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x4, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@newpolicy={0x258, 0x13, 0x20, 0x70bd28, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e24, 0x1, 0xa, 0x0, 0x0, 0x0, r5}, {0x200, 0x4, 0x6, 0xb8, 0x4, 0x7, 0xfffffffffffffffd, 0x7}, {0x6, 0x0, 0x7}, 0x7b4, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, [@algo_comp={0x70, 0x3, {{'lzs\x00'}, 0x140, "6b5fabddbad1c08286436baf33aa5f858e28cc6e481182660027a5a3db172e6be43d8870455bce7b"}}, @lifetime_val={0x24, 0x9, {0x4, 0x6, 0x9, 0x5}}, @proto={0x5, 0x19, 0x3c}, @tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d3, 0x6c}, 0xa, @in=@private=0xa010100, 0x3503, 0x3, 0x3, 0xb, 0x3, 0x5, 0x3}]}, @sec_ctx={0xbd, 0x8, {0xb9, 0x8, 0x1, 0x6, 0xb1, "fd35cb7451c1ad54a3080714b8b8ccfb082867518747f168592869408eae8f89651adf960af841947fcf3df4b75385e21c0a56ba5d1e3d16b3b3520cc435a578b62c5a9dc5fd30f939b6bb461891eba6706a9c05c06471aee2c272f44159256c3fb00295db8ecaa53b57d1428de8a78c5a328d88fd5f6544f5220d46920926c9a6dbfec705c1c126c4215d76102c8fdfa891560a16231f7f9192d14fe888bcd4c186e25218edb50f577f87dff61e8ca7f7"}}]}, 0x258}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x4, 0x1000, {{0xb, 0x4, 0x2, 0xb, 0x2c, 0x65, 0x0, 0xac, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x18, 0x35, 0x0, 0xe, [0x1000, 0xfffffe00, 0x3, 0x2, 0x7]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000008000000008000010", @ANYRES32=r0, @ANYBLOB="a200"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b12002e0064000200475400f6a10600000000000000dde1d5", 0x19, 0x88a8ffff, &(0x7f0000000040)={0x11, 0x19, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000580), 0x0}, 0x20) (async) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0x8000}}, 0x44) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x4, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) sendmsg$nl_xfrm(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=@newpolicy={0x258, 0x13, 0x20, 0x70bd28, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e24, 0x1, 0xa, 0x0, 0x0, 0x0, r5}, {0x200, 0x4, 0x6, 0xb8, 0x4, 0x7, 0xfffffffffffffffd, 0x7}, {0x6, 0x0, 0x7}, 0x7b4, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, [@algo_comp={0x70, 0x3, {{'lzs\x00'}, 0x140, "6b5fabddbad1c08286436baf33aa5f858e28cc6e481182660027a5a3db172e6be43d8870455bce7b"}}, @lifetime_val={0x24, 0x9, {0x4, 0x6, 0x9, 0x5}}, @proto={0x5, 0x19, 0x3c}, @tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d3, 0x6c}, 0xa, @in=@private=0xa010100, 0x3503, 0x3, 0x3, 0xb, 0x3, 0x5, 0x3}]}, @sec_ctx={0xbd, 0x8, {0xb9, 0x8, 0x1, 0x6, 0xb1, "fd35cb7451c1ad54a3080714b8b8ccfb082867518747f168592869408eae8f89651adf960af841947fcf3df4b75385e21c0a56ba5d1e3d16b3b3520cc435a578b62c5a9dc5fd30f939b6bb461891eba6706a9c05c06471aee2c272f44159256c3fb00295db8ecaa53b57d1428de8a78c5a328d88fd5f6544f5220d46920926c9a6dbfec705c1c126c4215d76102c8fdfa891560a16231f7f9192d14fe888bcd4c186e25218edb50f577f87dff61e8ca7f7"}}]}, 0x258}, 0x1, 0x0, 0x0, 0x8010}, 0x40080) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x4, 0x1000, {{0xb, 0x4, 0x2, 0xb, 0x2c, 0x65, 0x0, 0xac, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x18, 0x35, 0x0, 0xe, [0x1000, 0xfffffe00, 0x3, 0x2, 0x7]}]}}}}}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000008000000008000010", @ANYRES32=r0, @ANYBLOB="a200"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async) sendto$packet(r1, &(0x7f0000000180)="0b12002e0064000200475400f6a10600000000000000dde1d5", 0x19, 0x88a8ffff, &(0x7f0000000040)={0x11, 0x19, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) (async) 3.167370664s ago: executing program 0 (id=3449): syz_emit_ethernet(0xa6, &(0x7f0000000580)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x70, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@dstopts={0x16, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0xcb6d}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xffc0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [@hopopts={0x1d}], "fafb17c103001c193eb46558f48ce6b9"}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f0000001640)) accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @rose, @remote, @null, @default, @null, @default, @bcast]}, &(0x7f00000004c0)=0x48, 0x80800) (async) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @rose, @remote, @null, @default, @null, @default, @bcast]}, &(0x7f00000004c0)=0x48, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt(r2, 0x1, 0x3, &(0x7f0000000340)=""/66, &(0x7f0000000080)=0x42) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000500)=0x7) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c86dd6000ed0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000050aa78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa3000000009af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610a7f75b655a6653d0363a983acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7eb9276bac0490375048150903be668177704c5fd46001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d255514f6debfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000001917dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d267a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000300)) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@remote, @local}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@remote, @local}, 0xc) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e21, @remote}, 0x10) 3.104953485s ago: executing program 4 (id=3451): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.103570384s ago: executing program 1 (id=3452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 3.102081388s ago: executing program 3 (id=3453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x80000000, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x4eb22000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x4d0, 0x0, 0x280, 0xffffffff, 0x280, 0x350, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010100, @remote, 0x0, 0xff000000, 'caif0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x28}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@local, [0xffffffff, 0xff000000, 0x0, 0xff000000], @ipv6=@private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], @ipv6=@local, [0xffffff00, 0xff, 0xffffff00, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffffff, 0xff, 0xffffff00], 0x1, 0xc9e4, 0x89, 0x4e21, 0x4e22, 0x4e24, 0x4e20, 0x833}, 0x100, 0x1821}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@remote, @port=0x4e20, @gre_key=0x6}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x2, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@remote, @port=0x4e21, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x3}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @loopback, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'geneve0\x00', 'pim6reg\x00', {}, {}, 0x88, 0x3}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x0, 0x2, 0x0, 0x0, 0x2], 0x3, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9b0b09f71a3a0209, @private=0xa010100, @broadcast, @icmp_id=0x68, @gre_key=0xfffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x80000000, 0x4) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, r0, 0x4eb22000) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x4d0, 0x0, 0x280, 0xffffffff, 0x280, 0x350, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010100, @remote, 0x0, 0xff000000, 'caif0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x28}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@local, [0xffffffff, 0xff000000, 0x0, 0xff000000], @ipv6=@private2, [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], @ipv6=@local, [0xffffff00, 0xff, 0xffffff00, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffffff, 0xff, 0xffffff00], 0x1, 0xc9e4, 0x89, 0x4e21, 0x4e22, 0x4e24, 0x4e20, 0x833}, 0x100, 0x1821}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@remote, @port=0x4e20, @gre_key=0x6}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x2, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@remote, @port=0x4e21, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x3}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @loopback, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@ip={@local, @multicast1, 0x0, 0x0, 'geneve0\x00', 'pim6reg\x00', {}, {}, 0x88, 0x3}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x0, 0x2, 0x0, 0x0, 0x2], 0x3, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9b0b09f71a3a0209, @private=0xa010100, @broadcast, @icmp_id=0x68, @gre_key=0xfffa}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) (async) 2.900471456s ago: executing program 3 (id=3455): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000030000001200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000000c00430002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) (async, rerun: 64) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000010c0)={0x0, "fbee45892b34f6fefc183322b2dee287"}) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000002200)={r3, 0xfffffffffffff448, 0x5, 0xfffffffffffffffe}) (async, rerun: 64) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002280), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r10, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x58, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x25e7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf904}]}]}, 0x58}}, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000000c0)={{r0}, r8, 0x4, @unused=[0xa, 0x9, 0x80000000], @devid=r9}) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000080)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 2.729826532s ago: executing program 4 (id=3456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="02000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00007c000000000000000000000000000000000000160000000b0000"], 0x50) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900060000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r6, 0x51a9b797b46e631c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x44) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r0}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r0}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="02000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00007c000000000000000000000000000000000000160000000b0000"], 0x50) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000"], 0x3c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900060000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r6, 0x51a9b797b46e631c, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x44) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r0}, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) (async) 2.635871953s ago: executing program 3 (id=3458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket(0x11, 0x800000003, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0xd6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/383], 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x3, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x2, 0x12) (async) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000002000000008000100", @ANYRES32, @ANYBLOB="8df20750073274ad9cef8b7bcb15ec05af39ab6e0b5b67b0167bd1641901dfd406efe088fc125e00d3243b5f4f25533332e137c93b0d66cf65954977327a699f0000"], 0x1c}}, 0x0) (async) r11 = getuid() (async) r12 = getgid() (async) r13 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000c40)=@nat={'nat\x00', 0x19, 0x5, 0x756, [0x2000000004c0, 0x0, 0x0, 0x20000000075c, 0x200000000a68], 0x0, &(0x7f0000000180), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x5, 0x9, 0x16, 'gretap0\x00', 'veth1_to_hsr\x00', 'dvmrp1\x00', 'veth0_virt_wifi\x00', @random="aadc2d78f02c", [0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff], 0xae, 0x11e, 0x156, [@owner={{'owner\x00', 0x0, 0x18}, {{r10, r11, r12, r13, 0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}, {0x3, 0x3, 0xf6, 'vcan0\x00', 'dvmrp1\x00', 'veth0_vlan\x00', 'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0xff, 0xff, 0x0, 0x0, 0xc217f1d44cabc72c], @remote, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@random="b7e612d9388c", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x14, 0x6004, 'lo\x00', 'wlan0\x00', 'wg2\x00', 'netpci0\x00', @random="a28d66cd2b64", [0xa6a421a22c1aa92, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xb6, 0x13e, 0x176, [@limit={{'limit\x00', 0x0, 0x20}, {{0x8, 0x1, 0x8, 0x0, 0x6, 0x80000001}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xa, 'syz0\x00', {0x3b}}}}, @arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@link_local, 0xfffffffffffffffc}}}}, {0x9, 0x2, 0x88be, 'veth1_to_bond\x00', 'syz_tun\x00', 'ip6erspan0\x00', 'veth0_virt_wifi\x00', @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff], 0xf6, 0x12e, 0x166, [@limit={{'limit\x00', 0x0, 0x20}, {{0xd38, 0x4, 0x9, 0x3, 0x1, 0x4}}}, @statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x2, 0x6, 0x8, {0x9}}}}], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0xfffffffffffffffe}}}], @snat={'snat\x00', 0x10, {{@random="d924d74a7c58", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x3, 0x28, 0x8863, 'vlan0\x00', 'nr0\x00', 'veth1\x00', 'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, [0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff], 0xae, 0x136, 0x17e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0xfffffffe, 0x10001}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x4, {0x9}}}}, @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, 0xffffffffffffffff}}}], @common=@ERROR={'ERROR\x00', 0x20, {"46cd81162ed52b47c7993782199ac2f31fa2767a9e26862fa0ecfdeeb77c"}}}]}]}, 0x7ce) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="3f000000010040", 0x7) 2.609383296s ago: executing program 2 (id=3459): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e23, @loopback}}) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000001c0), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f00000000f80000000000000001", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000160000005600000025000000190004004800000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.537697322s ago: executing program 4 (id=3460): r0 = socket(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000400000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000009"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x5c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x24008000}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x28, r5, 0x1, 0x2070bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x400000, 0xa}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x4004084) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000880)=ANY=[@ANYBLOB="1808000000000000000000000000000085100c000500000085000000bb0000006d203f3884c1010b4a621099562cc31d000000000000009500f03acb0456308305cba5b5a9e57944b49177aefbfec1d5b96685c62eed423563bb33a13ac248ace65a4d41adc7dd257978b8b7dee69102ba06c697ec1eb96db785ad1275547e2e5d1011ae74d788a1b66c0066a8f5789e04bcf8028ddcaa09e14eb61a72d5ac6555b0b2115fe081d627662672312f509f7d97406563a011d088f6083de134027e3a20b1512b4acf83c38b00d7e6799f93b906cf76f0f0c75229168cb653584914b117bca8139267346c38a4b87ec7a7db6123fa36831454d366"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001640)={{r0}, 0x0, 0x1e, @inherit={0x68, &(0x7f0000000580)={0x1, 0x4, 0xb0da, 0x100000000, {0x2, 0x200, 0x9b93, 0xfff, 0x4}, [0x3, 0x6, 0x9e18, 0x262a]}}, @subvolid=0x1}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r12, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r14, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r13, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 2.514905449s ago: executing program 3 (id=3461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x20}, 0x8) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000009e64d660bc521fcf0000ac1414aa0000000000000000000000000a002000"], 0x38}}, 0x40408c0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x4}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$alg(r5, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvfrom$inet(r5, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000100013070000000000000000ffffffff000000000000000000000000ff02000000000000b6db416d0000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1e00010000000032000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/168], 0xf0}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) socket$nl_netfilter(0x10, 0x3, 0xc) 840.244387ms ago: executing program 1 (id=3462): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xffffff75, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x8d}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r3 = socket(0x1, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x5b}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c20605e185dd6018232500082c00fe8000000000000096000000000000b5eaef1dce5eb716a3eb4826bbfe80cd8a00aa08000209000000002bb490a1dc08c621d5a73bae091091735d77239de63a4cf024e34cde0cc16e248700d0258c0500ef9f5158ecff4b0d518fd539f94635eac333120f94e19cee7b9973c6922a508993c875c4aed900"/151], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000f40)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaabb86dd6018232500102c00fe80000000ffffffffffffffff0000bbfc020000000000000000000000000001840002017d5116bc2b00000000000000"], 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 600.718549ms ago: executing program 2 (id=3463): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x1, 0x60, 0x4}, {0x5ff, 0x6, 0x2, 0x2}, {0x9, 0xe6, 0x6, 0x10001}]}) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, &(0x7f0000000100)={@align=0x2, {0x4, 0x7, 0x7ff, 0x25d6}}, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x3}) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1f0, 0x7, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_USERDATA={0x75, 0x7, 0x1, 0x0, "a27fd4e5a820bd2e67fc7b5fe6221626951a7c26c71b0b8b0f619bf91b0edb60025e3a4772ea1802b2393133eb510eecc4098180e0459d2a4a9da835f6b1bb6469fe3a14f64428b66ae4902d3ae8f0e682c3a8c8da9cd320ab31dad39683ee2f96224f28f15a15b202fb807075f604ba05"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xc2, 0x7, 0x1, 0x0, "d567d90e18aaac4b5f033bd90bac336e7525d9349fa45f3af2f23ae705aae065934f6f51ddb1eda7808e22efcfd2f884fafe75d2232e0dfc360dd4d5dfc743034f25b2bc1d9b9bd6633825102d71a4689ffe67aa2e5840dca4e0989093077ea922a566f33fbbb06847b7c163e802c7d36d24d1841d65e4041fd8dc2c56581543a1aa7cb328cbc2d04f19189b5f3663f0ec376d077f4ce3d567c04a048b5ee676672b59b5cd28e926aeabca55fdfe7b9d320619bf42a6ff59f97463de4106"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x1f0}, 0x1, 0x0, 0x0, 0xf1cf013687846c55}, 0x84) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_128={{0x303}, "d376daa33a0a679a", "f9b55c663e60163e3a86ed1d74890bdf", "52bef9da", "b1cffdbb042ee279"}, 0x28) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000640)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x210400, 0x0) write$ppp(r3, &(0x7f00000006c0)="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", 0x1000) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000016c0)=0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000001700)=0x1, 0x4) socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000001740)={0x6, 0x0, 0x2, 0xfa, 0x401, 0x20, 0xf}) r4 = socket$unix(0x1, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000001780)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xf4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x58}, @void, @val={0xc, 0x99, {0x449cde01, 0x7d}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5dc156281969af546537f7d1c3d6eb9d6c8f1cdd26cc36ab"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e1082183066fa3e38616a0819f7b48bba1947e59ce2d189f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3078d6ce83ff36fcad338b3fe28213613c2dccf957c52d3a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2f32ed4986853a669f34314ebc418371dbcfc8de96e632b3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xf4}, 0x1, 0x0, 0x0, 0x24040000}, 0x4001) r6 = accept4$ax25(r1, &(0x7f00000019c0)={{0x3, @default}, [@remote, @remote, @rose, @remote, @bcast, @null, @null, @default]}, &(0x7f0000001a40)=0x48, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000001a80)) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001ac0)) ioctl$OCFS2_IOC_RESVSP64(r6, 0x4030582a, &(0x7f0000001b00)={0x0, 0x2, 0x3, 0x5, 0x3, 0xe1a}) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0xac, r2, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000c040}, 0x4005) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000001cc0), 0x3) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000001d00)=0x5, 0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000001e40)={r4, &(0x7f0000001d40)='.^(#]$%@\x00', 0x1b3ec0, &(0x7f0000001d80)={@_ha_fsid={[0x80000000, 0x4]}, {0x4000, 0x0, 0x8, 0x8000000000000000}}, 0xc, &(0x7f0000001dc0), &(0x7f0000001e00)=0xfffff000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002000)={0x0, 0x9, 0x0, 0x40, 0x7fffffff, 0x0, 0x6, 0x9}, &(0x7f0000002040)=0x20) 596.14075ms ago: executing program 3 (id=3464): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000100), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x11, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r4}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x20, 0x20, 0x7, 0x9, {{0x26, 0x4, 0x3, 0x28, 0x98, 0x68, 0x0, 0x4f, 0x2f, 0x0, @local, @multicast1, {[@generic={0x7, 0x6, "a51887ae"}, @cipso={0x86, 0x44, 0x1, [{0x2, 0x3, "b1"}, {0x7, 0x6, "fd398bee"}, {0x6, 0x11, "6ea413a93a423bc94eafdbcdd9db3a"}, {0x6, 0xa, "fdfd183f02cfc3ea"}, {0x1, 0xa, "45303742e207a411"}, {0x6, 0xe, "1af46402ea53e302851b39ae"}, {0x6, 0x2}]}, @lsrr={0x83, 0xb, 0x68, [@broadcast, @private=0xa010101]}, @timestamp={0x44, 0x1c, 0xfe, 0x0, 0x3, [0x7fff, 0x7, 0x401, 0x2, 0x3, 0x3]}, @generic={0x82, 0xf, "6f9bd14e11fcc02d97127c8088"}, @noop]}}}}}) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000b80)=""/164, &(0x7f0000000c40)=0xa4) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r10, r9}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r11, &(0x7f0000000300), &(0x7f00000003c0)=""/174}, 0x20) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pi6 \x00'}, 0x20) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_ext={0x1c, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xd2}, @jmp={0x5, 0x1, 0x4, 0xa, 0x9, 0xc, 0x1}, @cb_func={0x18, 0xd, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x40, 0xc5, &(0x7f0000000540)=""/197, 0x40f00, 0x0, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0xa, 0x8, 0xb}, 0x10, 0x3, r9, 0x7, &(0x7f0000000a00)=[r14, r12, r13, r14, r15], &(0x7f0000000a40)=[{0x3, 0x5, 0x8, 0x3}, {0x1, 0x4, 0x9, 0x1}, {0x5, 0x80000000, 0x7, 0x8}, {0x2, 0x5, 0x4, 0x9}, {0x3, 0x1, 0x0, 0x94d2ef4c28c02ea3}, {0x2, 0x3, 0xa, 0x5}, {0x5, 0x4, 0x4, 0x4}], 0x10, 0x5}, 0x94) 576.118688ms ago: executing program 4 (id=3465): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000), 0x4) r2 = socket(0x1e, 0x5, 0x0) getsockname$packet(r2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0xfff6}, {0x1, 0xe}}}, 0x24}}, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, @llc={0x1a, 0x33a, 0x8, 0x3, 0xff, 0x3, @local}, @xdp={0x2c, 0x0, r5, 0x8}, @nl=@kern={0x10, 0x0, 0x0, 0x100000}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='pimreg1\x00', 0x5, 0x6, 0x928}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 481.117766ms ago: executing program 2 (id=3466): pipe(&(0x7f0000000300)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e00000000000000000000000000e183ff4342c941de862030c039c9df9c77cb3a85287923849b0f3e7c760fd42e0ed1eb25ce06701d3494a90bfeff2b1f7e21c31c6bc124684948d591aa4b134589adf5043f04a0c2c6222bcd0341"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 467.414093ms ago: executing program 1 (id=3467): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (async) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) 451.690296ms ago: executing program 2 (id=3468): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000380)={0x0, 0x1, [@random="30c2add443ff"]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 309.560953ms ago: executing program 1 (id=3469): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x1, 0x0, 0x8}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) close(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r3, 0xffffffff}, 0x8) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x309, 0x3, 0x25dfdbfe, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0x1}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_OIF={0x8, 0x5, r1}]}, 0x34}}, 0x0) 287.911342ms ago: executing program 4 (id=3470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000f5", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf250a00000008003a000e00000005002d000100000005002f0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44851}, 0x4c01c) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f"], 0x1c}}, 0x0) (rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="f7ad94a38fff48f3be52163448412ba8b0a3c27a7b0800000000000000506d0f1530fa2304649c13b1423affec1af5d0aedc1633aef8835ad2c153e660cb6f9e8c0bedbf3a343aad1f2fa32dc49953ef33789df6fe80a8a4e196f5b6933e0bc96ed427586b4ac8a8eed7867d431f7a09275e75d68e42ce64a57a78b06ca608b4baeb060db1c6d810eb2be5af9c6d8874793911b1e755fe776d97678699389be10b909a4211ee9ef3c49354f52178b07f7b9242574a807d2fc241bc5d86ebfcfc2e0361c8889aa8383c201e376fe886f87e", 0xd1}, {&(0x7f0000000800)="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", 0x113}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x40840) (async, rerun: 32) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 32) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x3afd}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 249.260473ms ago: executing program 1 (id=3471): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6eadf2c37607d7c03b6aef60cc065d721c000000", @ANYRES32=0x0, @ANYBLOB="04012dbd7000fddbdf251c00000008000300", @ANYRES32=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44000) syz_emit_ethernet(0x86, &(0x7f0000002480)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0) 107.357218ms ago: executing program 1 (id=3472): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x7, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x3, 0x34}, [@coaddr={0x14, 0xe, @in6=@private0}, @lifetime_val={0x24, 0x9, {0xfffffffffffffff2, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb94}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000880)="4cc1", 0x2}], 0x1}}], 0x2, 0x20000800) (async) sendmmsg$inet6(r3, &(0x7f0000000dc0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb94}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000880)="4cc1", 0x2}], 0x1}}], 0x2, 0x20000800) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000140)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe800000000000000000007225f7e6000000001be0000001000000000000000000000000ffff00004e22000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe800000000000000000007225f7e6000000001be0000001000000000000000000000000ffff00004e22000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x49, &(0x7f00000015c0), 0x4) (async) setsockopt$inet6_int(r7, 0x29, 0x49, &(0x7f00000015c0), 0x4) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r12) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r12) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880) socket$alg(0x26, 0x5, 0x0) 106.980567ms ago: executing program 0 (id=3473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x894) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 76.206368ms ago: executing program 2 (id=3474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000004000000000b7081000000000000000f8ff00000000bfa200000000000007020000fbffffffb703000008000000b7041000000000007c0000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 906.917µs ago: executing program 2 (id=3475): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) socket(0x2, 0x800, 0x80000000) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 0s ago: executing program 4 (id=3476): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000140)=@ethtool_gfeatures}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r2, &(0x7f0000000000)='ip6tnl0\x00', 0x20000, &(0x7f00000000c0)={@align=0x100000000, {0x1, 0x3, 0x8893, 0x6}}, 0x400, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x7}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.4.1827'. [ 371.678779][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 371.681192][T12721] netlink: 'syz.3.1838': attribute type 21 has an invalid length. [ 371.700660][T12721] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1838'. [ 371.874395][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'. [ 372.130418][T12749] netlink: 'syz.2.1844': attribute type 1 has an invalid length. [ 372.165441][T12747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1843'. [ 372.204162][T12747] sctp: [Deprecated]: syz.0.1843 (pid 12747) Use of int in max_burst socket option. [ 372.204162][T12747] Use struct sctp_assoc_value instead [ 372.274362][T12749] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 372.865521][T12795] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 373.286528][T12818] syzkaller1: entered promiscuous mode [ 373.305107][T12818] syzkaller1: entered allmulticast mode [ 373.374697][T12818] bridge9: entered promiscuous mode [ 373.380003][T12818] bridge9: entered allmulticast mode [ 373.415092][T12818] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 373.960677][T12860] xfrm2: entered allmulticast mode [ 374.212999][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 374.221118][ C0] lec:lec_tx_timeout: lec0 [ 374.227087][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.279180][T12887] __nla_validate_parse: 13 callbacks suppressed [ 374.279202][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'. [ 374.501145][T12894] netlink: 'syz.1.1875': attribute type 1 has an invalid length. [ 374.627619][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 374.715963][T12906] netlink: 'syz.0.1879': attribute type 4 has an invalid length. [ 374.839130][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 374.881405][T12912] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 374.935945][T12912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.936916][T12916] Cannot find del_set index 4 as target [ 374.977144][T12918] bond5: (slave geneve4): making interface the new active one [ 374.988675][T12918] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 375.006491][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1885'. [ 375.019611][T12916] netlink: 'syz.0.1885': attribute type 7 has an invalid length. [ 375.036331][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1885'. [ 375.046234][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1883'. [ 375.146717][T12929] syzkaller0: entered promiscuous mode [ 375.162464][T12929] syzkaller0: entered allmulticast mode [ 375.245857][T12929] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.1887'. [ 375.297530][T12937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1890'. [ 375.308803][T12936] delete_channel: no stack [ 375.468366][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 375.498195][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 375.595064][T12959] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.851201][T12973] bond6 (unregistering): Released all slaves [ 376.023114][T12971] netlink: 'syz.3.1900': attribute type 9 has an invalid length. [ 376.154122][T12998] 8021q: VLANs not supported on ip_vti0 [ 376.335957][T13008] syzkaller0: entered promiscuous mode [ 376.348685][T13008] syzkaller0: entered allmulticast mode [ 376.401940][T13008] dvmrp0: entered allmulticast mode [ 376.554522][T13024] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 376.603516][T13027] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 376.748189][T13035] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 376.764191][T13031] bond6: entered promiscuous mode [ 376.782013][T13031] bond6: entered allmulticast mode [ 376.817329][T13031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.834539][T13042] netlink: 'syz.0.1918': attribute type 2 has an invalid length. [ 376.889763][T13036] bridge5: entered promiscuous mode [ 376.895942][T13036] bridge5: entered allmulticast mode [ 376.902107][T13036] bond6: (slave bridge5): Enslaving as a backup interface with an up link [ 376.984462][ T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 376.989740][T13043] bond6: (slave bridge10): Enslaving as a backup interface with an up link [ 377.056298][T13048] bond6: (slave bridge11): Enslaving as a backup interface with a down link [ 377.065298][T13058] netlink: 'syz.1.1921': attribute type 3 has an invalid length. [ 377.125407][ T3935] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 377.578198][T13089] dvmrp0: left allmulticast mode [ 377.757774][T13096] erspan0: entered allmulticast mode [ 377.812016][T13102] IPVS: Error connecting to the multicast addr [ 377.993856][T13112] netlink: 'syz.1.1939': attribute type 21 has an invalid length. [ 378.088060][T13112] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 378.111849][T13112] bond6 (unregistering): Released all slaves [ 378.796976][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.804843][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.862715][ T8945] Bluetooth: hci4: command 0x0405 tx timeout [ 379.242557][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 379.250717][ C0] lec:lec_tx_timeout: lec0 [ 379.255764][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.610146][T13203] syzkaller0: entered promiscuous mode [ 379.623336][T13203] syzkaller0: entered allmulticast mode [ 380.030832][T13219] team0: Device gtp1 is up. Set it down before adding it as a team port [ 380.130008][T13230] __nla_validate_parse: 19 callbacks suppressed [ 380.130031][T13230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1973'. [ 380.214305][T13235] xt_hashlimit: invalid interval [ 380.334808][T13230] wlan1 speed is unknown, defaulting to 1000 [ 380.966905][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 380.987932][T13277] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 381.031883][T13277] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1987'. [ 381.080107][T13279] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1988'. [ 381.332748][T13301] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1991'. [ 381.353751][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1991'. [ 381.564000][T13317] netlink: 81 bytes leftover after parsing attributes in process `syz.3.1996'. [ 381.691039][T13330] netlink: 'syz.4.1999': attribute type 10 has an invalid length. [ 381.708296][T13328] pim6reg1: entered promiscuous mode [ 381.714577][T13328] pim6reg1: entered allmulticast mode [ 381.722883][T13330] : (slave wlan1): Opening slave failed [ 381.779733][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 381.790026][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 381.799605][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 381.924961][T13336] vlan2: entered promiscuous mode [ 381.935554][T13336] geneve1: entered promiscuous mode [ 381.942437][T13336] vlan2: entered allmulticast mode [ 381.948094][T13336] geneve1: entered allmulticast mode [ 381.963507][T13343] netlink: 'syz.3.2005': attribute type 1 has an invalid length. [ 382.135466][T13351] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 382.174899][T13351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.204315][T13351] bond8: (slave ip6erspan0): making interface the new active one [ 382.214426][T13351] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 382.327379][T13361] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 382.342038][T13361] syzkaller0: entered promiscuous mode [ 382.348411][T13361] syzkaller0: entered allmulticast mode [ 382.678604][T13384] netlink: 'syz.2.2019': attribute type 29 has an invalid length. [ 383.099987][T13402] ipvlan2: entered allmulticast mode [ 383.134133][T13402] batadv_slave_1: entered allmulticast mode [ 383.183146][T13402] batman_adv: batadv0: Adding interface: ipvlan2 [ 383.203462][T13402] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.285436][T13402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.305240][T13402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.322624][T13402] batman_adv: batadv0: Interface activated: ipvlan2 [ 383.499269][T13421] netlink: 'syz.1.2030': attribute type 1 has an invalid length. [ 384.125175][T13464] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 384.168506][T13464] netlink: 'syz.4.2040': attribute type 2 has an invalid length. [ 384.258480][T13464] netlink: 'syz.4.2040': attribute type 1 has an invalid length. [ 384.262663][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 384.274578][ C0] lec:lec_tx_timeout: lec0 [ 384.279776][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 384.532847][T13475] vcan0: entered allmulticast mode [ 384.774388][T13494] netlink: 'syz.4.2047': attribute type 1 has an invalid length. [ 384.986089][T13504] bond0: entered promiscuous mode [ 385.001805][T13504] bond_slave_0: entered promiscuous mode [ 385.012175][T13504] bond_slave_1: entered promiscuous mode [ 385.014904][T13510] netlink: 'syz.3.2053': attribute type 33 has an invalid length. [ 385.018251][T13504] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 385.038971][T13504] bond0: left promiscuous mode [ 385.044236][T13504] bond_slave_0: left promiscuous mode [ 385.050440][T13504] bond_slave_1: left promiscuous mode [ 385.057365][T13504] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 385.070991][T13512] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 385.268642][T13510] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 385.310070][T13510] bond7 (unregistering): Released all slaves [ 385.461006][T13528] tipc: Enabled bearer , priority 0 [ 385.539320][T13528] syzkaller0: entered promiscuous mode [ 385.545666][T13528] syzkaller0: entered allmulticast mode [ 385.553601][T13528] tipc: Resetting bearer [ 385.583355][T13526] tipc: Resetting bearer [ 385.794795][T13562] xt_TPROXY: Can be used only with -p tcp or -p udp [ 387.109085][T13526] tipc: Disabling bearer [ 387.748769][T13619] __nla_validate_parse: 14 callbacks suppressed [ 387.748791][T13619] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.2075'. [ 387.767589][T13615] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.779833][T13615] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.809020][T13614] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2072'. [ 387.884529][T13615] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.910417][T13615] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.030885][T13615] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.046930][T13615] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.156205][T13640] x_tables: duplicate underflow at hook 2 [ 388.164189][T13641] x_tables: duplicate underflow at hook 2 [ 388.203872][T13615] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.220008][T13615] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.319495][T13647] syzkaller0: entered promiscuous mode [ 388.325363][T13647] syzkaller0: entered allmulticast mode [ 388.416853][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.425525][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.447150][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.456360][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.472289][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.481086][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.500135][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.508839][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.784024][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 388.806567][T13667] sctp: [Deprecated]: syz.0.2090 (pid 13667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.806567][T13667] Use struct sctp_sack_info instead [ 389.031387][T13677] validate_nla: 1 callbacks suppressed [ 389.031410][T13677] netlink: 'syz.3.2092': attribute type 2 has an invalid length. [ 389.062153][T13671] can: request_module (can-proto-5) failed. [ 389.062451][T13676] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2091'. [ 389.310588][T13695] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 389.325517][T13690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2099'. [ 389.363028][T13698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.482074][T13695] 8021q: adding VLAN 0 to HW filter on device bond9 [ 389.703875][T13716] netlink: 'syz.4.2105': attribute type 1 has an invalid length. [ 389.752153][T13716] 8021q: adding VLAN 0 to HW filter on device bond8 [ 389.803985][T13729] Cannot find map_set index 65533 as target [ 389.844618][T13729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2107'. [ 389.890292][T13729] netlink: 'syz.2.2107': attribute type 3 has an invalid length. [ 389.915032][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 389.939587][T13729] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 390.000313][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2107'. [ 390.062523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 390.070737][ C0] lec:lec_tx_timeout: lec0 [ 390.077402][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 390.115881][T13746] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2115'. [ 390.254086][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 390.399397][T13758] syzkaller1: entered promiscuous mode [ 390.409281][T13758] syzkaller1: entered allmulticast mode [ 390.413410][T13765] netlink: 'syz.0.2121': attribute type 11 has an invalid length. [ 390.440554][T13765] netlink: 'syz.0.2121': attribute type 11 has an invalid length. [ 390.705250][T13775] netlink: 'syz.1.2123': attribute type 1 has an invalid length. [ 390.842945][T13779] bond6: entered promiscuous mode [ 390.860797][T13779] bond6: entered allmulticast mode [ 390.928057][T13775] bridge8: entered promiscuous mode [ 390.936807][T13775] bridge8: entered allmulticast mode [ 390.944820][T13775] bond6: (slave bridge8): Enslaving as a backup interface with an up link [ 390.985859][T13790] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 391.491254][T13820] bond9: option lp_interval: invalid value (0) [ 391.500703][T13820] bond9: option lp_interval: allowed values 1 - 2147483647 [ 391.521113][T13820] bond9 (unregistering): Released all slaves [ 391.728392][T13837] netlink: 'syz.1.2142': attribute type 21 has an invalid length. [ 391.744619][T13837] netlink: 'syz.1.2142': attribute type 21 has an invalid length. [ 391.933352][T13852] nbd: must specify a device to reconfigure [ 392.275506][T13867] syzkaller0: entered promiscuous mode [ 392.281147][T13867] syzkaller0: entered allmulticast mode [ 392.308065][T13869] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 392.358801][T13867] tipc: Enabled bearer , priority 0 [ 392.382706][T13866] tipc: Resetting bearer [ 392.427176][T13866] tipc: Disabling bearer [ 392.564294][T13880] bond7 (unregistering): Released all slaves [ 393.046325][T13910] __nla_validate_parse: 13 callbacks suppressed [ 393.046345][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'. [ 393.115173][T13911] syzkaller0: entered promiscuous mode [ 393.121296][T13911] syzkaller0: entered allmulticast mode [ 394.589601][T13917] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 394.655770][T13926] x_tables: duplicate underflow at hook 2 [ 394.693176][T13926] openvswitch: netlink: Key type 346 is out of range max 32 [ 394.732145][T13928] x_tables: duplicate underflow at hook 2 [ 394.896957][T13937] gretap2: entered promiscuous mode [ 395.046373][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2175'. [ 395.071484][T13942] validate_nla: 3 callbacks suppressed [ 395.071504][T13942] netlink: 'syz.3.2175': attribute type 4 has an invalid length. [ 395.102627][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 395.110756][ C0] lec:lec_tx_timeout: lec0 [ 395.118994][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.299926][T13961] tipc: Enabled bearer , priority 0 [ 395.458785][T13961] syzkaller0: entered promiscuous mode [ 395.466570][T13961] syzkaller0: entered allmulticast mode [ 395.473092][T13961] tipc: Resetting bearer [ 395.489884][T13960] tipc: Resetting bearer [ 395.545759][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2186'. [ 396.426813][T13984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.980913][T13960] tipc: Disabling bearer [ 397.008910][T13982] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 397.052420][T13986] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 397.194615][T13999] netlink: 'syz.1.2191': attribute type 1 has an invalid length. [ 397.257061][T14003] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2193'. [ 397.260205][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 397.378071][T14012] netlink: zone id is out of range [ 397.395338][T14012] netlink: del zone limit has 4 unknown bytes [ 397.441879][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 397.595088][T14027] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 397.784806][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2203'. [ 397.856440][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.114780][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.139502][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.318311][T14022] macvlan0: left promiscuous mode [ 398.344288][T14022] macvtap0: left allmulticast mode [ 398.374922][T14022] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 398.462043][T14022] gre1: left promiscuous mode [ 398.472138][T14022] gre1: left allmulticast mode [ 398.513241][T14022] geneve2: left promiscuous mode [ 398.560035][T14022] geneve3: left promiscuous mode [ 398.569815][T14022] geneve3: left allmulticast mode [ 398.587718][T14022] ip6erspan0: left allmulticast mode [ 398.594677][T14022] vlan2: left allmulticast mode [ 398.599653][T14022] gretap0: left allmulticast mode [ 398.607099][T14022] bridge5: left promiscuous mode [ 398.616036][T14022] bridge5: left allmulticast mode [ 398.647171][T14022] vlan3: left allmulticast mode [ 398.655769][T14022] bridge7: left allmulticast mode [ 398.670834][T14022] bridge9: left promiscuous mode [ 398.687770][T14022] bridge9: left allmulticast mode [ 398.726232][T14022] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 398.735340][T14022] ipvlan2: left allmulticast mode [ 398.740421][T14022] batadv_slave_1: left allmulticast mode [ 398.813461][T14029] veth0_to_bond: entered allmulticast mode [ 398.916568][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.946736][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 398.987240][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 399.050791][T14025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.079510][T14025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 399.113623][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.121085][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 399.132340][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 399.206825][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.234698][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 399.247508][T14066] netlink: 'syz.2.2208': attribute type 1 has an invalid length. [ 399.278941][T14066] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2208'. [ 399.299047][T14066] netlink: 'syz.2.2208': attribute type 1 has an invalid length. [ 399.325039][T14066] netlink: 'syz.2.2208': attribute type 8 has an invalid length. [ 399.354178][T14066] netlink: 582 bytes leftover after parsing attributes in process `syz.2.2208'. [ 399.363752][T14066] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2208'. [ 399.374973][T14069] tipc: Enabled bearer , priority 0 [ 399.387456][T14069] syzkaller0: MTU too low for tipc bearer [ 399.394342][T14069] tipc: Disabling bearer [ 399.758621][T14093] openvswitch: netlink: Message has 8 unknown bytes. [ 399.772419][T14093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.057877][T14100] syz_tun: entered allmulticast mode [ 400.067120][T14098] syz_tun: left allmulticast mode [ 400.132531][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 400.140606][ C0] lec:lec_tx_timeout: lec0 [ 400.145602][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.207322][T14111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.284775][T14101] wlan1 speed is unknown, defaulting to 1000 [ 400.300133][T14108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2218'. [ 400.381356][T14116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2220'. [ 400.418485][T14116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2220'. [ 400.448934][T14116] openvswitch: netlink: Message has 4 unknown bytes. [ 400.504999][T14123] openvswitch: netlink: Message has 4 unknown bytes. [ 400.540036][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2220'. [ 400.560305][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2220'. [ 400.967250][T14136] netlink: 'syz.1.2226': attribute type 21 has an invalid length. [ 401.053232][T14142] netlink: 'syz.0.2229': attribute type 2 has an invalid length. [ 401.257444][T14149] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 401.936470][T14174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.149482][T14195] can: request_module (can-proto-3) failed. [ 402.174755][T14201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.273291][T14209] syzkaller0: entered promiscuous mode [ 402.279281][T14209] syzkaller0: entered allmulticast mode [ 402.708686][T14235] netlink: 'syz.0.2252': attribute type 51 has an invalid length. [ 402.717839][T14235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.725402][T14235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.740176][T14235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.752953][T14235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.755191][T14236] openvswitch: netlink: Multiple metadata blocks provided [ 402.771254][T14235] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 402.784478][T14235] batman_adv: batadv0: Removing interface: ipvlan2 [ 403.042287][T14261] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 403.043052][T14253] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 403.388537][T14280] bridge5: entered promiscuous mode [ 403.414743][T14280] bridge5: entered allmulticast mode [ 403.461732][T14276] wlan1 speed is unknown, defaulting to 1000 [ 403.490807][T14284] delete_channel: no stack [ 403.560209][T14289] delete_channel: no stack [ 404.375719][T14327] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 404.394025][T14334] __nla_validate_parse: 16 callbacks suppressed [ 404.394206][T14334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2275'. [ 404.667889][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 404.740587][T14341] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.833061][T14345] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.924452][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2283'. [ 405.152551][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 405.160647][ C0] lec:lec_tx_timeout: lec0 [ 405.165733][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.296936][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 405.359115][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2288'. [ 405.463302][T11379] udevd[11379]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 405.495567][T11379] udevd[11379]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 405.711828][T14403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.915071][T14417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.768043][T14469] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 406.788269][T14469] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 406.852335][T14473] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 406.874478][T14473] nbd: error processing sock list [ 406.879626][T14471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.889901][T14471] netlink: 'syz.2.2317': attribute type 62 has an invalid length. [ 406.902157][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 407.034287][T14483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2320'. [ 407.124189][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 407.139103][T14493] syzkaller0: entered promiscuous mode [ 407.145514][T14493] syzkaller0: entered allmulticast mode [ 407.226112][T14495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2323'. [ 407.486134][T14508] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2327'. [ 407.868661][T14536] netlink: 'syz.1.2337': attribute type 32 has an invalid length. [ 407.950933][T14539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.325080][T14592] xt_hashlimit: overflow, try lower: 3/0 [ 409.878393][T14612] __nla_validate_parse: 4 callbacks suppressed [ 409.878416][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2360'. [ 409.965212][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2361'. [ 410.172745][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 410.180817][ C0] lec:lec_tx_timeout: lec0 [ 410.186024][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 410.267591][T14628] syzkaller0: entered promiscuous mode [ 410.309602][T14628] syzkaller0: entered allmulticast mode [ 410.380097][T14629] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2364'. [ 410.670599][T14648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2372'. [ 410.692125][T14653] netlink: 'syz.2.2371': attribute type 9 has an invalid length. [ 410.713956][T14653] netlink: 'syz.2.2371': attribute type 10 has an invalid length. [ 410.746211][T14653] bridge0: entered promiscuous mode [ 410.759919][T14653] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 411.168136][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'. [ 411.305609][T14675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 412.570061][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2384'. [ 412.602126][ T194] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.634984][ T194] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.685995][T14695] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 412.698525][ T194] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.743821][ T194] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.815194][T14705] bridge0: port 3(syz_tun) entered blocking state [ 412.821883][T14705] bridge0: port 3(syz_tun) entered disabled state [ 412.829033][T14705] syz_tun: entered allmulticast mode [ 412.843448][T14705] syz_tun: entered promiscuous mode [ 412.990166][T14714] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2391'. [ 413.160258][T14729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2394'. [ 413.305213][T14736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2394'. [ 413.319435][T14736] nbd: nbd64 already in use [ 413.582144][T14746] netlink: Unknown conntrack attr (type=2304, max=9) [ 413.585314][T11349] udevd[11349]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 413.916533][T14762] syz.1.2403 (14762) used greatest stack depth: 16904 bytes left [ 413.971898][ T5995] IPVS: starting estimator thread 0... [ 414.083099][T14770] IPVS: using max 29 ests per chain, 69600 per kthread [ 415.043860][T14829] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 415.134119][T14829] bridge_slave_1: entered allmulticast mode [ 415.192762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 415.200854][ C0] lec:lec_tx_timeout: lec0 [ 415.206133][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.346744][T14847] __nla_validate_parse: 8 callbacks suppressed [ 415.346764][T14847] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2426'. [ 415.363589][T14846] syzkaller0: entered promiscuous mode [ 415.373285][T14846] syzkaller0: entered allmulticast mode [ 415.412172][T14847] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2426'. [ 416.366636][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 416.383479][T14885] vxcan2: entered promiscuous mode [ 416.449231][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2437'. [ 416.520847][T14882] bond7: entered promiscuous mode [ 416.529047][T14882] bond7: entered allmulticast mode [ 416.535502][T14882] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.706491][T14901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.734460][T14902] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2444'. [ 416.757150][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2443'. [ 416.869379][T14911] netlink: 'syz.2.2446': attribute type 21 has an invalid length. [ 416.887907][T14911] netlink: 'syz.2.2446': attribute type 1 has an invalid length. [ 416.915769][T14911] netlink: 'syz.2.2446': attribute type 21 has an invalid length. [ 416.934805][T14911] netlink: 'syz.2.2446': attribute type 1 has an invalid length. [ 417.239223][T14926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2450'. [ 417.697973][T14954] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 417.788888][T14956] sctp: [Deprecated]: syz.0.2460 (pid 14956) Use of int in max_burst socket option. [ 417.788888][T14956] Use struct sctp_assoc_value instead [ 417.930571][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2463'. [ 417.954498][T14963] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2463'. [ 418.084532][T14967] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2465'. [ 418.511861][T14984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.606608][T14988] netlink: 'syz.4.2473': attribute type 11 has an invalid length. [ 418.621420][T14988] unsupported nlmsg_type 40 [ 418.854126][T15004] F: renamed from gretap0 [ 418.869742][T15004] F: entered allmulticast mode [ 419.730102][T14840] Set syz1 is full, maxelem 65536 reached [ 420.212555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 420.220750][ C0] lec:lec_tx_timeout: lec0 [ 420.225425][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 421.701696][T14993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.861848][T15032] __nla_validate_parse: 4 callbacks suppressed [ 421.861870][T15032] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2487'. [ 421.884285][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'. [ 421.909044][T15030] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2487'. [ 422.237827][T15056] syzkaller0: entered promiscuous mode [ 422.245566][T15056] syzkaller0: entered allmulticast mode [ 422.948296][T15100] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2503'. [ 423.058522][T15104] netlink: 'syz.1.2504': attribute type 24 has an invalid length. [ 423.305064][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2505'. [ 425.223259][T15135] syzkaller0: entered promiscuous mode [ 425.229112][T15135] syzkaller0: entered allmulticast mode [ 425.234792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 425.234824][ C0] lec:lec_tx_timeout: lec0 [ 425.243680][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.427366][T15148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2513'. [ 428.150506][T15131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.304654][T15173] netlink: 'syz.2.2519': attribute type 1 has an invalid length. [ 428.326344][T15173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2519'. [ 428.336287][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 428.353803][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 428.445988][T15189] netlink: 'syz.4.2522': attribute type 10 has an invalid length. [ 428.463787][T15189] team0: Device vxcan1 is of different type [ 428.584156][T15193] syzkaller0: entered promiscuous mode [ 428.589781][T15193] syzkaller0: entered allmulticast mode [ 429.321041][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 430.196647][T15203] netdevsim netdevsim1 : renamed from netdevsim0 [ 430.212892][T15206] tipc: Enabling of bearer rejected, failed to enable media [ 430.252721][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 430.261045][ C0] lec:lec_tx_timeout: lec0 [ 430.268666][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 430.386093][T15220] netlink: 8480 bytes leftover after parsing attributes in process `syz.1.2530'. [ 430.414389][T15220] openvswitch: netlink: Flow key attr not present in new flow. [ 430.498031][T15227] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 430.562665][T15227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.569929][T15227] IPv6: NLM_F_CREATE should be set when creating new route [ 430.935016][T15256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2540'. [ 431.011989][T15259] netem: change failed [ 431.032107][T15259] netlink: 4408 bytes leftover after parsing attributes in process `syz.1.2542'. [ 431.055575][T15259] openvswitch: netlink: Flow key attr not present in new flow. [ 431.150900][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2544'. [ 431.280114][T15270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2544'. [ 431.385201][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 431.413334][T15286] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 431.992013][T15315] netlink: 'syz.2.2554': attribute type 10 has an invalid length. [ 432.002270][ T5488] veth0_macvtap: left promiscuous mode [ 432.070777][T15315] bridge_slave_1: left allmulticast mode [ 432.397835][T15339] netlink: 'syz.3.2562': attribute type 39 has an invalid length. [ 432.518455][T15339] hsr_slave_1 (unregistering): left promiscuous mode [ 432.850758][T15370] netlink: 'syz.4.2569': attribute type 11 has an invalid length. [ 433.169790][T15392] netlink: 'syz.3.2571': attribute type 16 has an invalid length. [ 433.187404][T15392] netlink: 'syz.3.2571': attribute type 17 has an invalid length. [ 433.397064][T15392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.412390][T15405] __nla_validate_parse: 5 callbacks suppressed [ 433.412411][T15405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'. [ 433.476046][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'. [ 433.496775][T15392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.507115][T15392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.519673][T15392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.536589][T15392] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 433.559975][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.567215][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.577408][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.584736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.791962][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2580'. [ 433.886189][T15428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2580'. [ 434.735211][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2597'. [ 434.766134][T15483] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 434.771315][T15484] block nbd4: not configured, cannot reconfigure [ 434.887075][T15492] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 434.943132][T15494] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 434.992839][T15498] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 435.094635][T15498] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 435.277149][T15521] set match dimension is over the limit! [ 435.314294][T15523] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.388448][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2608'. [ 435.417537][T15527] bond0: (slave bridge0): Releasing backup interface [ 435.452310][T15527] bridge0: left promiscuous mode [ 435.483335][T15532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.531064][T15527] bond0: (slave bridge_slave_1): Releasing backup interface [ 435.553031][T15527] bridge_slave_1: left promiscuous mode [ 435.565915][T15527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 435.581618][T15542] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2614'. [ 435.610427][T15532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2611'. [ 435.625216][T15532] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2611'. [ 435.654297][T15540] veth0_to_team: entered allmulticast mode [ 435.867099][T15560] netlink: 712 bytes leftover after parsing attributes in process `syz.4.2616'. [ 435.928790][T15565] ip6t_srh: unknown srh invflags 4000 [ 436.062524][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 436.070648][ C0] lec:lec_tx_timeout: lec0 [ 436.076586][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 436.440636][T15597] bridge6: port 1(veth11) entered blocking state [ 436.471999][T15597] bridge6: port 1(veth11) entered disabled state [ 436.484056][T15597] veth11: entered allmulticast mode [ 436.527336][T15597] veth11: entered promiscuous mode [ 436.589777][T15599] bridge6: port 2(veth13) entered blocking state [ 436.600049][T15599] bridge6: port 2(veth13) entered disabled state [ 436.608081][T15599] veth13: entered allmulticast mode [ 436.614740][T15615] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 436.617332][T15599] veth13: entered promiscuous mode [ 436.754616][T15621] nbd: must specify at least one socket [ 436.760405][T10657] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 436.783339][T10657] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.793053][T10657] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.803150][T10657] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.884688][T15627] vlan1: entered allmulticast mode [ 436.902611][T15627] bond0: entered allmulticast mode [ 436.938077][T15626] bond0 (unregistering): Released all slaves [ 437.069064][T15641] syzkaller0: entered promiscuous mode [ 437.112104][T15641] syzkaller0: entered allmulticast mode [ 437.402727][T15663] netlink: 'syz.4.2651': attribute type 1 has an invalid length. [ 437.480922][T15654] team0 (unregistering): Port device team_slave_0 removed [ 437.504048][T15654] team0 (unregistering): Port device team_slave_1 removed [ 437.522242][T15654] team0 (unregistering): Port device batadv1 removed [ 437.569485][T15663] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 437.574503][T15656] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 437.647604][T15652] syzkaller0: entered promiscuous mode [ 437.658899][T15652] syzkaller0: entered allmulticast mode [ 438.017525][T15716] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 438.075234][T15716] bond0: option packets_per_slave: allowed values 0 - 65535 [ 438.579916][T15716] bond0 (unregistering): Released all slaves [ 438.730500][T15735] syzkaller0: entered promiscuous mode [ 438.738912][T15735] syzkaller0: entered allmulticast mode [ 438.891278][T15753] __nla_validate_parse: 68 callbacks suppressed [ 438.891300][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 438.938801][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2663'. [ 440.227662][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.680276][T15756] netlink: 'syz.1.2663': attribute type 3 has an invalid length. [ 440.954614][T15793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.968832][T15799] netlink: 'syz.1.2667': attribute type 29 has an invalid length. [ 441.102798][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 441.110885][ C0] lec:lec_tx_timeout: lec0 [ 441.116011][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 441.141593][T15806] netlink: 640 bytes leftover after parsing attributes in process `syz.4.2675'. [ 441.177054][T15806] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 441.281633][T15816] syzkaller1: entered promiscuous mode [ 441.292930][T15816] syzkaller1: entered allmulticast mode [ 441.295287][T15815] netlink: 'syz.0.2676': attribute type 1 has an invalid length. [ 441.307248][T15815] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2676'. [ 441.317802][T15815] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2676'. [ 441.330327][T15815] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2676'. [ 441.402043][T15826] xt_addrtype: ipv6 does not support BROADCAST matching [ 441.410695][T15826] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2676'. [ 441.435019][T15826] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2676'. [ 441.499108][T15829] netlink: 'syz.4.2679': attribute type 1 has an invalid length. [ 441.553267][T15829] 8021q: adding VLAN 0 to HW filter on device bond9 [ 441.598153][T15835] netlink: 'syz.0.2681': attribute type 83 has an invalid length. [ 441.798418][T15849] xt_ecn: cannot match TCP bits for non-tcp packets [ 441.952396][T15858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2687'. [ 441.960162][T15862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2688'. [ 442.089043][T15867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.384109][T15884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.641229][T15888] tipc: Enabling of bearer rejected, failed to enable media [ 442.892918][T15907] netlink: 'syz.3.2701': attribute type 1 has an invalid length. [ 443.240526][T15897] block nbd2: server does not support multiple connections per device. [ 443.250018][T15897] block nbd2: shutting down sockets [ 443.432755][T15922] netlink: 'syz.4.2705': attribute type 11 has an invalid length. [ 443.616396][T15928] erspan0: left allmulticast mode [ 444.101528][T15960] sctp: [Deprecated]: syz.3.2717 (pid 15960) Use of int in maxseg socket option. [ 444.101528][T15960] Use struct sctp_assoc_value instead [ 444.147851][T15963] syzkaller0: entered promiscuous mode [ 444.153836][T15963] syzkaller0: entered allmulticast mode [ 444.303489][T15977] syzkaller0: entered promiscuous mode [ 444.309033][T15977] syzkaller0: entered allmulticast mode [ 444.318616][T15977] netlink: 'syz.0.2716': attribute type 16 has an invalid length. [ 444.337187][T15977] __nla_validate_parse: 4 callbacks suppressed [ 444.337206][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'. [ 444.629760][T15998] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2726'. [ 444.646996][T15998] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 445.177715][T16025] netlink: 'syz.2.2733': attribute type 16 has an invalid length. [ 445.197209][T16025] netlink: 'syz.2.2733': attribute type 17 has an invalid length. [ 445.229734][T16028] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2734'. [ 445.306062][T16025] F: left allmulticast mode [ 445.454476][T16025] 0·: left allmulticast mode [ 445.461734][T16025] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 445.615754][T16049] syzkaller0: entered promiscuous mode [ 445.630162][T16049] syzkaller0: entered allmulticast mode [ 445.646458][T16053] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2738'. [ 445.944235][T16067] netlink: 'syz.4.2742': attribute type 16 has an invalid length. [ 445.973054][T16067] netlink: 'syz.4.2742': attribute type 17 has an invalid length. [ 446.106038][T16067] 8021q: adding VLAN 0 to HW filter on device  [ 446.122551][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 446.130678][ C0] lec:lec_tx_timeout: lec0 [ 446.135604][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 446.170308][T16067] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.290077][T16067] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.304166][T16067] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.320257][T16067] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 446.349630][T16084] 8021q: VLANs not supported on lo [ 447.016044][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2756'. [ 447.099737][T16136] +: renamed from syzkaller0 [ 447.354847][T16153] syzkaller1: entered promiscuous mode [ 447.383722][T16153] syzkaller1: entered allmulticast mode [ 447.500254][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 447.545705][T16158] syzkaller0: entered promiscuous mode [ 447.551437][T16158] syzkaller0: entered allmulticast mode [ 447.934223][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 447.947924][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2772'. [ 447.952685][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2772'. [ 448.005798][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2772'. [ 448.063115][ T49] wlan1: Trigger new scan to find an IBSS to join [ 449.475483][T16182] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 449.499087][T16182] bond10 (unregistering): Released all slaves [ 450.139832][T16227] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2783'. [ 450.315406][T16238] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2787'. [ 450.678019][T16259] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2792'. [ 450.708885][T16261] netlink: 'syz.4.2793': attribute type 1 has an invalid length. [ 450.716242][T16259] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.724194][T16259] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.733653][T16264] netlink: 'syz.3.2792': attribute type 63 has an invalid length. [ 450.786828][T16267] netlink: 'syz.3.2792': attribute type 63 has an invalid length. [ 450.875120][T16266] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 450.898343][T16266] bond10: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 450.926947][T16266] bond10: (slave vxcan3): making interface the new active one [ 450.936566][T16266] bond10: (slave vxcan3): Enslaving as an active interface with an up link [ 451.024852][ T3935] wlan1: Trigger new scan to find an IBSS to join [ 451.142740][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 451.150938][ C0] lec:lec_tx_timeout: lec0 [ 451.157064][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 451.168678][T16281] veth11: entered allmulticast mode [ 451.219109][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 451.239629][T16288] syzkaller0: entered promiscuous mode [ 451.255346][T16288] syzkaller0: entered allmulticast mode [ 451.964765][T16321] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2807'. [ 451.981983][T16302] bridge2: left promiscuous mode [ 451.991259][T16302] bridge2: left allmulticast mode [ 451.996768][T16302] geneve1: left promiscuous mode [ 452.001792][T16302] geneve1: left allmulticast mode [ 452.007310][T16302] bond3: left promiscuous mode [ 452.012279][T16302] ip6gre1: left allmulticast mode [ 452.048084][T16305] geneve2: entered promiscuous mode [ 452.053849][T16305] geneve2: entered allmulticast mode [ 452.122173][ T13] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 19999 - 0 [ 452.162604][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 452.205685][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 452.222753][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 452.435692][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 452.545986][T16342] bridge8: port 1(veth15) entered blocking state [ 452.571078][T16342] bridge8: port 1(veth15) entered disabled state [ 452.597060][T16342] veth15: entered allmulticast mode [ 452.607514][T16342] veth15: entered promiscuous mode [ 452.641092][T16360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2817'. [ 452.652124][T16351] bridge8: port 2(veth17) entered blocking state [ 452.659809][T16351] bridge8: port 2(veth17) entered disabled state [ 452.669660][T16351] veth17: entered allmulticast mode [ 452.679028][T16351] veth17: entered promiscuous mode [ 452.748471][T16363] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 452.825545][T16363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.877420][T16370] bond0: (slave geneve3): making interface the new active one [ 452.887604][T16370] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 452.897429][T10657] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 452.908164][T10657] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 452.921503][T16365] netlink: 'syz.0.2819': attribute type 1 has an invalid length. [ 452.950507][T10657] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 453.140268][T16387] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2825'. [ 453.299106][T16399] tipc: Enabling of bearer rejected, failed to enable media [ 453.788953][T16435] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2842'. [ 453.832667][T16435] netlink: 'syz.2.2842': attribute type 12 has an invalid length. [ 453.971416][T16442] netlink: 'syz.3.2845': attribute type 1 has an invalid length. [ 454.064621][T10657] wlan1: Trigger new scan to find an IBSS to join [ 454.139425][T16453] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 454.164320][T16455] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 454.232423][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2853'. [ 454.287877][ T83] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.303627][ T83] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.312917][T15675] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.338946][T16458] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 454.348293][T16465] netlink: 'syz.3.2853': attribute type 1 has an invalid length. [ 454.777072][T16498] openvswitch: netlink: Missing valid actions attribute. [ 454.794504][T16498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.813610][T15675] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.965572][T16503] bridge_slave_0: left allmulticast mode [ 454.971652][T16503] bridge_slave_0: left promiscuous mode [ 454.977646][T16503] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.997598][ T1149] wlan1: Creating new IBSS network, BSSID 72:74:c7:95:0f:ff [ 455.062279][T16503] bridge_slave_1: left allmulticast mode [ 455.068255][T16503] bridge_slave_1: left promiscuous mode [ 455.080265][ T8945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 455.091299][T16503] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.099145][ T8945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 455.110526][ T8945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.120587][ T8945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.130490][ T8945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.204858][T16503] bond0: (slave bond_slave_0): Releasing backup interface [ 455.262784][T15674] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 455.281422][T16503] bond_slave_0: left allmulticast mode [ 455.322162][T16503] bond0: (slave bond_slave_1): Releasing backup interface [ 455.350328][T16503] bond_slave_1: left allmulticast mode [ 455.383160][T16503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.400161][T16503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.424211][T16503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.460176][T16503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.510482][T16503] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.739170][T16509] wlan1 speed is unknown, defaulting to 1000 [ 455.891188][T16547] bond7: Removing last arp target with arp_interval on [ 456.077296][T16554] __nla_validate_parse: 5 callbacks suppressed [ 456.077318][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2875'. [ 456.172517][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 456.180580][ C0] lec:lec_tx_timeout: lec0 [ 456.186300][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 456.210312][T16509] chnl_net:caif_netlink_parms(): no params data found [ 456.381901][T16509] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.389363][T16509] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.397459][T16509] bridge_slave_0: entered allmulticast mode [ 456.408724][T16509] bridge_slave_0: entered promiscuous mode [ 456.419078][T16509] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.427516][T16509] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.435275][T16509] bridge_slave_1: entered allmulticast mode [ 456.443811][T16509] bridge_slave_1: entered promiscuous mode [ 456.484545][T16509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.498668][T16509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.545425][T16509] team0: Port device team_slave_0 added [ 456.555278][T16509] team0: Port device team_slave_1 added [ 456.574705][T16578] syzkaller1: entered allmulticast mode [ 456.594340][T16509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.601449][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.628102][T16509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.640945][T16509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.649081][T16509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.676829][T16509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.758568][T16509] hsr_slave_0: entered promiscuous mode [ 456.766207][T16509] hsr_slave_1: entered promiscuous mode [ 456.773311][T16509] debugfs: 'hsr0' already exists in 'hsr' [ 456.779170][T16509] Cannot create hsr debugfs directory [ 456.786878][T16583] veth0: entered promiscuous mode [ 456.809607][T16583] veth0: left promiscuous mode [ 457.033394][T16509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.046803][T16509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.058351][T16509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.143288][T16509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.153838][T16509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.164364][T16509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.183385][ T8945] Bluetooth: hci5: command tx timeout [ 457.210997][T16509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.221844][T16509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.232243][T16509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.982740][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 458.777774][T16540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.811663][T16509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.894973][T16509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.915819][T16509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.948125][T16509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.073731][T16618] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2890'. [ 459.112164][T16618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2890'. [ 459.208832][T16509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.263727][ T8945] Bluetooth: hci5: command tx timeout [ 459.277686][T16509] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.329497][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.336731][T10657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.369503][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2895'. [ 459.380647][T16635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2894'. [ 459.395997][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.403302][T10657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.608269][T16643] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 459.624099][T16643] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 459.678222][T16509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.168138][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 460.567760][T16509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.630256][T16696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2909'. [ 460.706738][T16509] veth0_vlan: entered promiscuous mode [ 460.718256][T16696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2909'. [ 460.738320][T16509] veth1_vlan: entered promiscuous mode [ 460.771122][T16698] macvtap0: entered allmulticast mode [ 460.930284][T16509] veth0_macvtap: entered promiscuous mode [ 460.950877][T16509] veth1_macvtap: entered promiscuous mode [ 460.961555][T16707] syzkaller1: entered promiscuous mode [ 460.969435][T16707] syzkaller1: entered allmulticast mode [ 461.059866][T16509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.093993][T16509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.140521][ T194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.162698][ T194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.175778][T16719] netlink: 'syz.0.2918': attribute type 1 has an invalid length. [ 461.192108][ T194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.200952][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 461.200979][ C0] lec:lec_tx_timeout: lec0 [ 461.209800][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 461.220402][ T194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.248434][T16719] 8021q: adding VLAN 0 to HW filter on device bond11 [ 461.262224][T16724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2919'. [ 461.281503][T16721] : entered promiscuous mode [ 461.343861][ T8945] Bluetooth: hci5: command tx timeout [ 461.396340][T16727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2920'. [ 461.558778][ T3935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.568893][ T3935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.595894][T16734] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2923'. [ 461.650653][T10657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.669178][T10657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.725428][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'. [ 461.761961][T16740] bond0: entered promiscuous mode [ 461.798494][T16740] bond0: left promiscuous mode [ 462.009488][T16756] syzkaller0: entered promiscuous mode [ 462.020400][T16756] syzkaller0: entered allmulticast mode [ 462.110444][T16764] syzkaller0: entered promiscuous mode [ 462.116534][T16764] syzkaller0: entered allmulticast mode [ 462.185641][T16759] netlink: 'syz.1.2931': attribute type 1 has an invalid length. [ 462.195795][T16759] netlink: 'syz.1.2931': attribute type 2 has an invalid length. [ 462.474533][T16786] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 462.495625][T16787] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2941'. [ 462.670101][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 463.247167][T16836] syzkaller0: entered promiscuous mode [ 463.254614][T16836] syzkaller0: entered allmulticast mode [ 463.426740][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 463.436050][ T8945] Bluetooth: hci5: command tx timeout [ 463.676096][T16851] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2963'. [ 463.833902][T16865] ipvlan4: entered allmulticast mode [ 463.988598][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.001199][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.009824][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.018366][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.029353][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.210141][T16868] wlan1 speed is unknown, defaulting to 1000 [ 464.223682][T16878] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2966'. [ 464.322198][T16880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2967'. [ 464.416491][T16882] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.2969:16882 [ 464.620532][ T5834] syz_tun (unregistering): left allmulticast mode [ 465.228057][T16868] chnl_net:caif_netlink_parms(): no params data found [ 465.387864][T16929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.672906][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.684435][T16947] netlink: 'syz.3.2980': attribute type 21 has an invalid length. [ 465.693052][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.703046][T16868] bridge_slave_0: entered allmulticast mode [ 465.712083][T16868] bridge_slave_0: entered promiscuous mode [ 465.726525][T16868] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.737579][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.749639][T16868] bridge_slave_1: entered allmulticast mode [ 465.769488][T16868] bridge_slave_1: entered promiscuous mode [ 465.823103][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 465.849828][T10657] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.861538][T10657] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.873789][T10657] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.911145][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.952119][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.963000][T10657] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.069819][T16868] team0: Port device team_slave_0 added [ 466.081259][T16868] team0: Port device team_slave_1 added [ 466.143895][ T5835] Bluetooth: hci2: command tx timeout [ 466.153939][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.160940][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.212765][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 466.220932][ C0] lec:lec_tx_timeout: lec0 [ 466.226222][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 466.230337][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.251977][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.269233][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.297016][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.374533][T16868] hsr_slave_0: entered promiscuous mode [ 466.381493][T16868] hsr_slave_1: entered promiscuous mode [ 466.390689][T16868] debugfs: 'hsr0' already exists in 'hsr' [ 466.398909][T16868] Cannot create hsr debugfs directory [ 466.521172][T16987] netlink: 'syz.3.2993': attribute type 3 has an invalid length. [ 466.792831][T16868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.819429][T16868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.834069][T16868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 466.918983][T16868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.934191][T16868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.945396][T16868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 466.979192][T17014] __nla_validate_parse: 6 callbacks suppressed [ 466.979213][T17014] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2999'. [ 467.010293][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2999'. [ 467.020357][T17014] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2999'. [ 467.043812][T17014] netlink: 'syz.2.2999': attribute type 3 has an invalid length. [ 467.054320][T17014] netlink: 'syz.2.2999': attribute type 2 has an invalid length. [ 467.063336][T17014] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2999'. [ 467.209399][T16868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.232871][T16868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.244222][T16868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 467.311887][T16868] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.324494][T16868] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.362734][T16868] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 467.454940][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3008'. [ 467.789257][T17049] netlink: 'syz.3.3010': attribute type 1 has an invalid length. [ 467.812592][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3010'. [ 467.969223][T16868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 468.020977][T16868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 468.039853][T16868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 468.067221][T16868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 468.226960][ T5835] Bluetooth: hci2: command tx timeout [ 468.441762][T17069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3014'. [ 468.526883][T16868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.538247][T17073] netlink: 'syz.4.3016': attribute type 1 has an invalid length. [ 468.606114][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 468.619911][T16868] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.651398][T17073] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3016'. [ 468.662310][T17073] netem: incorrect gi model size [ 468.668710][T17073] netem: change failed [ 468.687167][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 468.723003][T17085] bridge7: entered promiscuous mode [ 468.732953][T17085] bridge7: entered allmulticast mode [ 468.781816][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.789238][T10660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.846703][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.853974][T10657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.598165][T16868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.736422][T16868] veth0_vlan: entered promiscuous mode [ 469.771116][T16868] veth1_vlan: entered promiscuous mode [ 469.957486][T16868] veth0_macvtap: entered promiscuous mode [ 470.021131][T16868] veth1_macvtap: entered promiscuous mode [ 470.097302][T16868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.120093][T17152] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 470.162032][T17152] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 470.165510][T16868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.203171][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.221245][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.256053][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.287293][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.304515][ T5835] Bluetooth: hci2: command tx timeout [ 470.431870][T17176] netlink: 'syz.0.3047': attribute type 3 has an invalid length. [ 470.513796][T10660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.541226][T10660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.586312][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.615110][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.791720][T17187] syzkaller0: entered promiscuous mode [ 470.799341][T17187] syzkaller0: entered allmulticast mode [ 470.952034][T17197] IPv6: addrconf: prefix option has invalid lifetime [ 471.232508][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 471.240914][ C0] lec:lec_tx_timeout: lec0 [ 471.247028][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 471.253586][ T8945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.274807][ T8945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.284558][ T8945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.299801][ T8945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.309702][ T8945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.370391][T17206] wlan1 speed is unknown, defaulting to 1000 [ 471.768526][ T5824] syz_tun (unregistering): left allmulticast mode [ 471.775601][ T5824] syz_tun (unregistering): left promiscuous mode [ 471.782226][ T5824] bridge0: port 3(syz_tun) entered disabled state [ 471.909983][T10660] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.924039][T10660] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.944080][T17233] can: request_module (can-proto-0) failed. [ 471.992042][T10660] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.013960][T10660] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.074057][T17206] chnl_net:caif_netlink_parms(): no params data found [ 472.099561][T10660] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.111362][T10660] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.156985][T17247] __nla_validate_parse: 10 callbacks suppressed [ 472.157006][T17247] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.3069'. [ 472.341747][T10660] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.371802][T10660] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.402536][ T5835] Bluetooth: hci2: command tx timeout [ 472.546393][T17270] netlink: 'syz.3.3073': attribute type 1 has an invalid length. [ 472.579761][T17272] netlink: 'syz.2.3074': attribute type 1 has an invalid length. [ 472.607107][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.623185][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.637010][T17206] bridge_slave_0: entered allmulticast mode [ 472.646433][T17206] bridge_slave_0: entered promiscuous mode [ 472.656185][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.663620][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.671269][T17206] bridge_slave_1: entered allmulticast mode [ 472.680024][T17206] bridge_slave_1: entered promiscuous mode [ 472.710790][T17270] bond7: entered promiscuous mode [ 472.717109][T17270] 8021q: adding VLAN 0 to HW filter on device bond7 [ 472.768317][T17272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.805700][T17278] bond1: (slave gretap1): making interface the new active one [ 472.815113][T17278] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 472.854005][T17283] 8021q: adding VLAN 0 to HW filter on device bond7 [ 472.861632][T17283] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 472.877736][T17283] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 472.891359][T17283] bond7: (slave vcan1): making interface the new active one [ 472.899214][T17283] vcan1: entered promiscuous mode [ 472.906812][T17283] bond7: (slave vcan1): Enslaving as an active interface with an up link [ 472.964418][T17284] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 472.985838][T17272] macvlan2: entered promiscuous mode [ 472.991521][T17272] macvlan2: entered allmulticast mode [ 472.999577][T17272] bond1: entered promiscuous mode [ 473.006489][T17272] gretap1: entered promiscuous mode [ 473.014053][T17272] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 473.021604][T17272] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 473.039171][T17272] bond1: left promiscuous mode [ 473.046097][T17272] gretap1: left promiscuous mode [ 473.202201][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.226375][T10660] bridge_slave_1: left allmulticast mode [ 473.232274][T10660] bridge_slave_1: left promiscuous mode [ 473.262981][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.288993][T10660] bridge_slave_0: left allmulticast mode [ 473.298664][T10660] bridge_slave_0: left promiscuous mode [ 473.310221][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.342603][ T5835] Bluetooth: hci4: command tx timeout [ 473.503136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.564483][T15694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.575596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.634908][T10660] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 473.795181][T10660] bond1 (unregistering): (slave gretap1): Releasing active interface [ 473.825665][T15675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.870646][T10660] bond2 (unregistering): (slave geneve3): Releasing active interface [ 473.884114][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.893159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.903752][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.987806][T10660] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 473.997265][T10660] bridge2 (unregistering): left promiscuous mode [ 474.003919][T10660] bridge2 (unregistering): left allmulticast mode [ 474.146845][T15693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.298764][T10660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.311344][T10660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.322973][T10660] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 474.332070][T10660] bond0 (unregistering): Released all slaves [ 474.343994][T10660] bond1 (unregistering): Released all slaves [ 474.358232][T10660] bond2 (unregistering): Released all slaves [ 474.371920][T10660] bond3 (unregistering): Released all slaves [ 474.390022][T10660] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 474.402077][T10660] vcan1: left promiscuous mode [ 474.408702][T10660] bond4 (unregistering): Released all slaves [ 474.426020][T10660] bond5 (unregistering): Released all slaves [ 474.443796][T10660] bond6 (unregistering): Released all slaves [ 474.464151][T10660] bond7 (unregistering): Released all slaves [ 474.481975][T10660] bond8 (unregistering): Released all slaves [ 474.499137][T10660] bond9 (unregistering): Released all slaves [ 474.517741][T10660] bond10 (unregistering): Released all slaves [ 474.531417][T10660] bond11 (unregistering): Released all slaves [ 474.546527][T10660] bond12 (unregistering): Released all slaves [ 474.570499][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.601542][ T3935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.792119][T17206] team0: Port device team_slave_0 added [ 474.822347][T10660] : left promiscuous mode [ 474.829235][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 474.889114][T17206] team0: Port device team_slave_1 added [ 474.958656][T10660] tipc: Disabling bearer [ 474.981435][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 475.042661][T10660] tipc: Left network mode [ 475.095827][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.124886][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.159468][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.178334][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.238990][T10660] IPVS: stopping backup sync thread 9465 ... [ 475.252794][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.309697][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.431776][ T5835] Bluetooth: hci4: command tx timeout [ 475.558226][T17206] hsr_slave_0: entered promiscuous mode [ 475.571152][T17206] hsr_slave_1: entered promiscuous mode [ 475.589330][T17206] debugfs: 'hsr0' already exists in 'hsr' [ 475.602711][T17206] Cannot create hsr debugfs directory [ 475.734962][T17373] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3094'. [ 475.764977][T17373] netem: invalid attributes len -24 [ 475.770331][T17373] netem: change failed [ 476.090451][T17396] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 476.108488][T17386] netlink: 183892 bytes leftover after parsing attributes in process `syz.3.3098'. [ 476.132831][ T36] net_ratelimit: 21 callbacks suppressed [ 476.132851][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.147060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.179856][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.188398][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.197340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.262510][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 476.270715][ C0] lec:lec_tx_timeout: lec0 [ 476.276158][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.343687][T10660] hsr_slave_0: left promiscuous mode [ 476.350954][T17407] sctp: [Deprecated]: syz.2.3102 (pid 17407) Use of int in max_burst socket option. [ 476.350954][T17407] Use struct sctp_assoc_value instead [ 476.458110][T10660] hsr_slave_1: left promiscuous mode [ 476.710708][T10660] veth1_macvtap: left promiscuous mode [ 476.717961][T10660] veth1_vlan: left promiscuous mode [ 476.944366][T15675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.323030][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.332666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.353691][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.503403][ T5835] Bluetooth: hci4: command tx timeout [ 477.591459][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 477.828604][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.182031][T17478] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3120'. [ 478.206648][T10660] IPVS: stop unused estimator thread 0... [ 478.297265][T17484] sctp: [Deprecated]: syz.4.3122 (pid 17484) Use of int in maxseg socket option. [ 478.297265][T17484] Use struct sctp_assoc_value instead [ 478.506862][T17206] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.566081][T17206] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.619987][T17206] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.652664][T17500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.691913][T17206] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.762911][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3127'. [ 478.808317][T17509] netlink: 'syz.4.3127': attribute type 1 has an invalid length. [ 478.822769][T17509] netlink: 'syz.4.3127': attribute type 2 has an invalid length. [ 478.866397][T17512] pim6reg: entered allmulticast mode [ 479.009526][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3130'. [ 479.068616][T17524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3130'. [ 479.088124][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3130'. [ 479.112813][T17524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3130'. [ 479.142633][T17524] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3130'. [ 479.358787][T17540] netlink: 'syz.3.3133': attribute type 5 has an invalid length. [ 479.409220][T17206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.441121][T17541] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3133'. [ 479.562851][T17552] netlink: 'syz.1.3135': attribute type 1 has an invalid length. [ 479.586419][ T5835] Bluetooth: hci4: command tx timeout [ 479.597464][T17206] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.605625][T17546] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3135'. [ 479.637809][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.645079][T10660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.761818][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.769249][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.902730][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 479.924536][T17567] netlink: 'syz.4.3140': attribute type 10 has an invalid length. [ 480.075625][T17574] netlink: 'syz.2.3143': attribute type 10 has an invalid length. [ 480.105834][T17574] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.162291][T17574] bridge_slave_1: left allmulticast mode [ 480.181860][T17574] bridge_slave_1: left promiscuous mode [ 480.196521][T17574] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.248459][T17574] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 480.727445][T17206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.928174][T17206] veth0_vlan: entered promiscuous mode [ 481.070893][T17206] veth1_vlan: entered promiscuous mode [ 481.082222][T17635] tipc: Enabled bearer , priority 0 [ 481.162770][T17635] syzkaller0: entered promiscuous mode [ 481.168639][T17635] syzkaller0: entered allmulticast mode [ 481.178435][T17635] tipc: Resetting bearer [ 481.216960][T17632] tipc: Resetting bearer [ 481.743690][T17667] x_tables: duplicate entry at hook 2 [ 481.798522][ T36] net_ratelimit: 16 callbacks suppressed [ 481.798546][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.812984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.821404][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.062745][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 482.070812][ C0] lec:lec_tx_timeout: lec0 [ 482.075717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 482.147202][T15672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.932757][T10646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.941205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.951756][T10646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.122740][T17632] tipc: Disabling bearer [ 483.147427][T17669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3159'. [ 483.184304][T15672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.306195][T17676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3160'. [ 483.322087][T17206] veth0_macvtap: entered promiscuous mode [ 483.434790][T17206] veth1_macvtap: entered promiscuous mode [ 483.514954][T17691] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 483.591620][T17206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.670215][T17206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.726195][T10660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.745812][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.776047][T10660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.799726][T10660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.008797][T17690] syzkaller0: entered promiscuous mode [ 484.022151][T17690] syzkaller0: entered allmulticast mode [ 484.050348][T10660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.059820][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.070804][T17715] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3169'. [ 486.916370][T17728] syzkaller0: entered promiscuous mode [ 486.923963][T17734] 8021q: VLANs not supported on lo [ 486.949902][T15693] net_ratelimit: 5550 callbacks suppressed [ 486.949925][T15693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.047726][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.085047][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.102633][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 487.110769][ C0] lec:lec_tx_timeout: lec0 [ 487.116203][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 487.216680][T10660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.236713][T17770] sctp: [Deprecated]: syz.2.3173 (pid 17770) Use of int in max_burst socket option deprecated. [ 487.236713][T17770] Use struct sctp_assoc_value instead [ 487.253807][T10660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.295685][T17771] sctp: [Deprecated]: syz.2.3173 (pid 17771) Use of int in max_burst socket option deprecated. [ 487.295685][T17771] Use struct sctp_assoc_value instead [ 487.313025][T17773] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3174'. [ 487.347059][T15675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.433094][T10657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.441705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.472637][T10657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.582802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.594668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.608879][T10660] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 487.661311][T17789] openvswitch: netlink: Duplicate key (type 2). [ 487.691553][T17789] pim6reg1: entered promiscuous mode [ 487.720514][T17789] pim6reg1: entered allmulticast mode [ 487.951524][ T8945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.965146][ T8945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.975111][ T8945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.984664][ T8945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.995884][ T8945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.072183][T15692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.222905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.273879][T17799] wlan1 speed is unknown, defaulting to 1000 [ 488.946310][T17836] tipc: Enabled bearer , priority 0 [ 489.050247][T17847] syzkaller0: entered promiscuous mode [ 489.059368][T17847] syzkaller0: entered allmulticast mode [ 489.082919][T17847] tipc: Resetting bearer [ 489.153467][T17851] netem: incorrect gi model size [ 489.164142][T17851] netem: change failed [ 489.236151][ T194] tipc: Resetting bearer [ 489.251499][T17834] tipc: Resetting bearer [ 490.066983][ T5835] Bluetooth: hci0: command tx timeout [ 490.871211][T17834] tipc: Disabling bearer [ 490.997548][T17799] chnl_net:caif_netlink_parms(): no params data found [ 491.073170][T17887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3197'. [ 491.250454][T17891] veth5: entered allmulticast mode [ 491.320276][T17898] sit1: entered promiscuous mode [ 491.325712][T17898] sit1: entered allmulticast mode [ 491.812134][T17921] tipc: Enabling of bearer rejected, failed to enable media [ 491.879803][T17799] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.912957][T17799] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.931016][T17799] bridge_slave_0: entered allmulticast mode [ 491.954160][T17799] bridge_slave_0: entered promiscuous mode [ 491.957795][T17939] net_ratelimit: 16 callbacks suppressed [ 491.957812][T17939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.975972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.976143][T17799] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.993062][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.001943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.008036][T17799] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.021113][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.031920][T17939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.040013][T17799] bridge_slave_1: entered allmulticast mode [ 492.042298][T17799] bridge_slave_1: entered promiscuous mode [ 492.049547][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.064164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.083467][T15694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.119610][T17944] netem: change failed [ 492.122503][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 492.131969][ C0] lec:lec_tx_timeout: lec0 [ 492.137155][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 492.143530][ T5835] Bluetooth: hci0: command tx timeout [ 492.258223][T17799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.274559][T17944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.294565][T17799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.450114][T17799] team0: Port device team_slave_0 added [ 492.470242][T17799] team0: Port device team_slave_1 added [ 492.581208][T17966] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3218'. [ 492.601158][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3218'. [ 492.615587][T17964] syzkaller1: entered promiscuous mode [ 492.621109][T17964] syzkaller1: entered allmulticast mode [ 492.639856][T17799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.648187][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.681593][T17799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.770438][T10657] veth5: left allmulticast mode [ 492.775677][T10657] veth5: left promiscuous mode [ 492.791697][T10657] bridge1: port 2(veth5) entered disabled state [ 492.830560][T10657] veth3: left allmulticast mode [ 492.845978][T10657] veth3: left promiscuous mode [ 492.851065][T10657] bridge1: port 1(veth3) entered disabled state [ 493.588411][T10657] bond5 (unregistering): (slave geneve4): Releasing active interface [ 493.815949][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3224'. [ 494.157565][T10657] bond6 (unregistering): (slave bridge10): Releasing backup interface [ 494.166003][T10657] bond6 (unregistering): (slave bridge10): the permanent HWaddr of slave - 62:0f:46:0e:96:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 494.222754][ T5835] Bluetooth: hci0: command tx timeout [ 494.231626][T10657] bond6 (unregistering): (slave bridge11): Releasing backup interface [ 494.319838][T10657] bond0 (unregistering): Released all slaves [ 494.330429][T10657] bond1 (unregistering): Released all slaves [ 494.345041][T10657] bond2 (unregistering): Released all slaves [ 494.361741][T10657] bond3 (unregistering): (slave veth9): Releasing active interface [ 494.379414][T10657] bond3 (unregistering): Released all slaves [ 494.399344][T10657] bond4 (unregistering): Released all slaves [ 494.414506][T10657] bond5 (unregistering): Released all slaves [ 494.435811][T10657] bond6 (unregistering): Released all slaves [ 494.453698][T10657] bond7 (unregistering): (slave vcan1): Releasing backup interface [ 494.461624][T10657] vcan1: left promiscuous mode [ 494.469170][T10657] bond7 (unregistering): Released all slaves [ 494.484643][T17799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.491608][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.523103][T17799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.660799][T10657] tipc: Disabling bearer [ 494.678162][T10657] tipc: Left network mode [ 494.817178][T10657] IPVS: stopping backup sync thread 15286 ... [ 494.825086][T17799] hsr_slave_0: entered promiscuous mode [ 494.843966][T17799] hsr_slave_1: entered promiscuous mode [ 494.885803][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 494.927100][T18019] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 495.675755][T10657] hsr_slave_0: left promiscuous mode [ 495.705209][T10657] batman_adv: batadv0: Removing interface: ipvlan2 [ 496.302710][ T5835] Bluetooth: hci0: command tx timeout [ 496.372988][T10657] veth0_to_team (unregistering): left allmulticast mode [ 496.496499][T18059] bond1: option mode: invalid value (133) [ 496.505610][T18059] bond1 (unregistering): Released all slaves [ 497.107337][T10657] IPVS: stop unused estimator thread 0... [ 497.152508][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 497.160789][ C0] lec:lec_tx_timeout: lec0 [ 497.166253][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 497.604910][T10657] net_ratelimit: 20 callbacks suppressed [ 497.604928][T10657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.619628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.628897][T10657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.743181][T15672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.864866][T18019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.895118][T17799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 497.967486][T17799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 498.019900][T17799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 498.051164][T17799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 498.316790][T18130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3240'. [ 498.431703][T18136] syzkaller0: entered promiscuous mode [ 498.461191][T18136] syzkaller0: entered allmulticast mode [ 498.466560][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3244'. [ 498.478403][T17799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.488657][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3243'. [ 498.522160][T17799] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.566958][T18145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3246'. [ 498.598669][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3247'. [ 498.602901][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.614836][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.625651][T18147] netlink: 'syz.1.3247': attribute type 21 has an invalid length. [ 498.711826][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.719082][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.756102][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.764744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.783313][T15669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.791496][T10660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.884675][T18157] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3251'. [ 499.005222][ T30] audit: type=1107 audit(1775436103.098:4): pid=18165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='§G3œG [ 499.005222][ T30] ‹G©*k*É!­°8¬]9QÀ\ÜŽm<«1‡(Bôã;¹"MÓ_“yþÀ¸´¿“/Ã1F¶UÙ²H^[K·±ærM(Ï<ê}˜ÃöÂs'‰N§ ¿ÿ;ì”ô*y2ÿª@j½°G£ÙÿíÙˆî;(Ó£*¨›·|‡…ƒ¦Ä¤[¸ÌkJÅoƒ@' [ 499.005883][T18166] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20004 [ 499.051773][T18161] wlan1 speed is unknown, defaulting to 1000 [ 499.116003][T15693] IPVS: starting estimator thread 0... [ 499.140203][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'. [ 499.196783][T18155] vlan3: entered allmulticast mode [ 499.211765][T18155] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 499.233919][T18172] IPVS: using max 28 ests per chain, 67200 per kthread [ 499.356323][T18182] netlink: 'syz.2.3255': attribute type 1 has an invalid length. [ 499.424654][T15693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.584573][T18194] netlink: 'syz.1.3258': attribute type 1 has an invalid length. [ 499.592615][T18194] netlink: 'syz.1.3258': attribute type 2 has an invalid length. [ 499.600371][T18194] netlink: 'syz.1.3258': attribute type 1 has an invalid length. [ 499.608432][T18194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3258'. [ 499.699422][T18198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 499.712549][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'. [ 499.823234][T15669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.945978][T17799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.098930][T17799] veth0_vlan: entered promiscuous mode [ 500.133828][T17799] veth1_vlan: entered promiscuous mode [ 500.285105][T18226] veth0_to_bond: entered allmulticast mode [ 500.332146][T17799] veth0_macvtap: entered promiscuous mode [ 500.345674][T17799] veth1_macvtap: entered promiscuous mode [ 500.367534][T17799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.382307][T17799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.459839][T10657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.478279][T10657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.509631][T10657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.554192][T10646] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.618716][T18245] netlink: 'syz.2.3275': attribute type 1 has an invalid length. [ 500.640056][T10657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.651814][T10657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.656945][T18245] nbd: error processing sock list [ 500.674976][T18248] netlink: 'syz.2.3275': attribute type 1 has an invalid length. [ 500.683867][T18248] nbd: error processing sock list [ 500.769479][T10646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.803692][T10646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.675407][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.989844][ T8945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.006876][ T8945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.022780][ T8945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.056849][ T8945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.082986][ T8945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.172507][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 502.180575][ C0] lec:lec_tx_timeout: lec0 [ 502.185954][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 502.195074][T18313] tc_dump_action: action bad kind [ 502.200210][T18306] bridge0: port 1(bridge_slave_0) entered learning state [ 502.209177][T18310] xt_hashlimit: size too large, truncated to 1048576 [ 502.457160][T18299] wlan1 speed is unknown, defaulting to 1000 [ 502.793554][T18346] netlink: 'syz.3.3297': attribute type 1 has an invalid length. [ 502.893833][T18354] net_ratelimit: 3 callbacks suppressed [ 502.893857][T18354] openvswitch: netlink: Flow key attr not present in new flow. [ 503.389738][T18299] chnl_net:caif_netlink_parms(): no params data found [ 503.584904][T18379] syzkaller0: entered promiscuous mode [ 503.610996][T18379] syzkaller0: entered allmulticast mode [ 503.759249][ T49] veth13: left allmulticast mode [ 503.786429][ T49] veth13: left promiscuous mode [ 503.791724][ T49] bridge6: port 2(veth13) entered disabled state [ 503.899456][ T49] veth11: left allmulticast mode [ 503.952691][ T49] veth11: left promiscuous mode [ 503.957864][ T49] bridge6: port 1(veth11) entered disabled state [ 504.028619][ T49] veth17: left allmulticast mode [ 504.042863][ T49] veth17: left promiscuous mode [ 504.048026][ T49] bridge8: port 2(veth17) entered disabled state [ 504.084747][ T49] veth15: left allmulticast mode [ 504.089781][ T49] veth15: left promiscuous mode [ 504.115776][ T49] bridge8: port 1(veth15) entered disabled state [ 504.130579][T18422] __nla_validate_parse: 12 callbacks suppressed [ 504.130601][T18422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3309'. [ 504.149495][ T8945] Bluetooth: hci1: command tx timeout [ 504.150271][T18419] netlink: 'syz.1.3310': attribute type 1 has an invalid length. [ 504.256727][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3310'. [ 504.267230][ T49] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 504.446279][ T49] bond4 (unregistering): (slave gretap3): Releasing active interface [ 504.578069][ T49] team0: Port device bridge2 removed [ 504.936931][ T49]  (unregistering): Released all slaves [ 504.949045][ T49] bond1 (unregistering): Released all slaves [ 504.962846][ T49] bond2 (unregistering): Released all slaves [ 504.978831][ T49] bond3 (unregistering): Released all slaves [ 504.992231][ T49] bond4 (unregistering): Released all slaves [ 505.010964][ T49] bond5 (unregistering): Released all slaves [ 505.029391][ T49] bond6 (unregistering): Released all slaves [ 505.047763][ T49] bond7 (unregistering): Released all slaves [ 505.061312][ T49] bond0 (unregistering): Released all slaves [ 505.075164][ T49] bond8 (unregistering): Released all slaves [ 505.097185][ T49] bond9 (unregistering): Released all slaves [ 505.115919][ T49] bond10 (unregistering): (slave vxcan3): Releasing backup interface [ 505.124827][ T49] bond10 (unregistering): Released all slaves [ 505.151183][T18299] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.159411][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.167275][T18299] bridge_slave_0: entered allmulticast mode [ 505.175785][T18299] bridge_slave_0: entered promiscuous mode [ 505.225799][T18419] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 505.296516][T18299] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.336054][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.352644][T18299] bridge_slave_1: entered allmulticast mode [ 505.365553][T18299] bridge_slave_1: entered promiscuous mode [ 505.382911][ T49] tipc: Disabling bearer [ 505.393181][ T49] tipc: Left network mode [ 505.450480][T18440] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3313'. [ 505.487542][T18299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.501587][T18441] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3313'. [ 505.560698][T18299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.658459][T18449] block nbd2: server does not support multiple connections per device. [ 505.698977][T18299] team0: Port device team_slave_0 added [ 505.700981][ T49] IPVS: stopping backup sync thread 10131 ... [ 505.726934][T18449] block nbd2: shutting down sockets [ 505.733847][T18456] syzkaller0: entered promiscuous mode [ 505.740900][T18456] syzkaller0: entered allmulticast mode [ 505.763535][T18445] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3315'. [ 505.786411][T18445] netlink: 'syz.3.3315': attribute type 2 has an invalid length. [ 505.811438][T18299] team0: Port device team_slave_1 added [ 505.846705][T18444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3314'. [ 506.084649][T18299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.091661][T18299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.163166][T18299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.185514][T18299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.202799][T18299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.243205][ T8945] Bluetooth: hci1: command tx timeout [ 506.276536][T18299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.292262][T18479] netlink: 'syz.1.3321': attribute type 1 has an invalid length. [ 506.341718][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 506.366780][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 506.384028][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3322'. [ 506.438687][T18479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.520178][T18490] netlink: 'syz.3.3323': attribute type 1 has an invalid length. [ 506.709137][T18299] hsr_slave_0: entered promiscuous mode [ 506.729740][T18299] hsr_slave_1: entered promiscuous mode [ 506.730202][T18499] netlink: 'syz.3.3327': attribute type 83 has an invalid length. [ 506.745809][T18299] debugfs: 'hsr0' already exists in 'hsr' [ 506.771971][T18299] Cannot create hsr debugfs directory [ 507.016564][T18512] netlink: 'syz.0.3330': attribute type 12 has an invalid length. [ 507.172968][T18516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.192496][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 507.200558][ C0] lec:lec_tx_timeout: lec0 [ 507.205600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 507.268430][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3334'. [ 507.450259][T18534] openvswitch: netlink: Multiple metadata blocks provided [ 507.950774][T18561] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 507.980782][ T49] hsr_slave_0: left promiscuous mode [ 508.008180][ T49] hsr_slave_1: left promiscuous mode [ 508.128649][T18585] sctp: [Deprecated]: syz.0.3342 (pid 18585) Use of int in max_burst socket option. [ 508.128649][T18585] Use struct sctp_assoc_value instead [ 508.302781][ T8945] Bluetooth: hci1: command tx timeout [ 508.545748][T18561] team0: Device vxcan1 is of different type [ 508.826365][T18594] netlink: 'syz.2.3346': attribute type 1 has an invalid length. [ 508.855720][T18594] nbd: error processing sock list [ 509.260318][T18299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 509.329250][ T49] IPVS: stop unused estimator thread 0... [ 509.349318][T18299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 509.371685][T18628] __nla_validate_parse: 42 callbacks suppressed [ 509.371717][T18628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3353'. [ 509.406971][T18299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 509.517888][T18299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.778887][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3362'. [ 509.836912][T18664] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 510.393900][ T8945] Bluetooth: hci1: command tx timeout [ 510.470577][T18299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.554730][T18299] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.591306][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.598570][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.633907][T18693] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3370'. [ 510.671400][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.678675][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.720183][T18707] netlink: 'syz.3.3372': attribute type 1 has an invalid length. [ 510.761960][T18693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 510.915177][T18716] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3372'. [ 511.013285][T18707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.120964][T18724] Unsupported ieee802154 address type: 0 [ 511.131124][T18726] netlink: 'syz.1.3375': attribute type 10 has an invalid length. [ 511.144025][T18698] bond1: (slave dummy0): making interface the new active one [ 511.155742][T18698] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 511.166378][T18726] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3375'. [ 511.189351][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3375'. [ 511.221343][T18716] bond1: (slave dummy0): Releasing active interface [ 511.408674][T18739] delete_channel: no stack [ 511.417315][T18738] delete_channel: no stack [ 511.513969][T18744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3378'. [ 511.549015][T18744] veth0: entered promiscuous mode [ 511.570128][T18744] veth0: left promiscuous mode [ 511.594149][T18744] vcan1: entered promiscuous mode [ 511.645070][T18744] vcan1: entered allmulticast mode [ 511.682338][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3380'. [ 511.695342][T18752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3380'. [ 511.829575][T15695] IPVS: starting estimator thread 0... [ 511.965331][T18759] IPVS: using max 27 ests per chain, 64800 per kthread [ 511.975373][T18299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.204250][T18787] atomic_op ffff888049b32198 conn xmit_atomic 0000000000000000 [ 512.212492][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 512.220524][ C0] lec:lec_tx_timeout: lec0 [ 512.225603][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 512.275819][T18795] netlink: 'syz.1.3391': attribute type 13 has an invalid length. [ 512.315482][T18795] veth0_macvtap: left promiscuous mode [ 512.344092][T18795] macvtap0: entered allmulticast mode [ 512.370910][T18795] macvtap0: refused to change device tx_queue_len [ 512.703506][T18820] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.756650][T18820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 512.763980][T18820] IPv6: NLM_F_CREATE should be set when creating new route [ 513.035669][T18299] veth0_vlan: entered promiscuous mode [ 513.059330][T18838] netlink: 'syz.2.3402': attribute type 3 has an invalid length. [ 513.283147][T18847] syzkaller0: entered promiscuous mode [ 513.288674][T18847] syzkaller0: entered allmulticast mode [ 513.300599][T18299] veth1_vlan: entered promiscuous mode [ 513.411632][T18299] veth0_macvtap: entered promiscuous mode [ 513.450379][T18299] veth1_macvtap: entered promiscuous mode [ 513.529135][T18299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.557374][T18299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.665782][T10646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.708571][T10646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.758999][T10646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.811131][T10646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.824235][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.993275][T18877] netlink: 'syz.2.3410': attribute type 2 has an invalid length. [ 514.006458][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.035258][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.140297][T10660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.157547][T10660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.486390][T18911] __nla_validate_parse: 7 callbacks suppressed [ 514.486410][T18911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3419'. [ 514.526596][T18911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3419'. [ 514.696764][T18923] 8021q: VLANs not supported on lo [ 514.751224][T18926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3422'. [ 514.803428][T18926] bond2: entered promiscuous mode [ 514.809233][T18926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.880363][T18926] netlink: 'syz.0.3422': attribute type 1 has an invalid length. [ 514.906412][T18933] bridge1: entered promiscuous mode [ 514.913003][T18933] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 514.959437][T18938] netlink: 'syz.1.3425': attribute type 21 has an invalid length. [ 514.982555][T18938] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3425'. [ 515.016480][T18926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.085079][T18943] syzkaller0: entered promiscuous mode [ 515.087087][T18941] netlink: 'syz.4.3426': attribute type 2 has an invalid length. [ 515.093616][T18943] syzkaller0: entered allmulticast mode [ 515.407500][T18962] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 515.421444][T18962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.439169][T18962] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 515.450590][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 515.461619][T18962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3432'. [ 515.590854][T18976] netlink: zone id is out of range [ 515.596650][T18976] netlink: zone id is out of range [ 515.602050][T18976] netlink: zone id is out of range [ 515.609967][T18976] netlink: zone id is out of range [ 515.616851][T18976] netlink: zone id is out of range [ 515.623435][T18976] netlink: zone id is out of range [ 515.631257][T18976] netlink: zone id is out of range [ 515.636714][T18976] netlink: zone id is out of range [ 515.869811][T18989] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3440'. [ 516.122162][T18998] netlink: 'syz.2.3445': attribute type 1 has an invalid length. [ 516.251505][T19006] pim6reg: entered allmulticast mode [ 516.489853][T19016] wlan1 speed is unknown, defaulting to 1000 [ 516.510120][T19014] wlan1 speed is unknown, defaulting to 1000 [ 516.589081][T19029] x_tables: duplicate underflow at hook 1 [ 516.624247][T19025] bond1 (unregistering): Released all slaves [ 516.742053][T19026] syzkaller0: entered promiscuous mode [ 516.748176][T19026] syzkaller0: entered allmulticast mode [ 516.822368][T19035] netlink: 'syz.3.3455': attribute type 4 has an invalid length. [ 517.012350][T19054] netlink: 'syz.2.3459': attribute type 4 has an invalid length. [ 517.150180][T19061] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3460'. [ 517.232575][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 517.241584][ C0] lec:lec_tx_timeout: lec0 [ 517.246232][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 518.705516][T19053] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.764443][T19053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.776932][T19053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.966496][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.007369][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.040788][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.053008][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.096889][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.110343][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.120620][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 519.134266][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.178417][T19077] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3468'. [ 519.224574][T19083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 519.487545][T19097] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 519.529190][T19096] syzkaller0: entered promiscuous mode [ 519.544345][T19096] syzkaller0: entered allmulticast mode [ 519.604152][T19100] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI [ 519.616123][T19100] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 519.624654][T19100] CPU: 0 UID: 0 PID: 19100 Comm: syz.1.3472 Not tainted syzkaller #0 PREEMPT(full) [ 519.634245][T19100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 519.644334][T19100] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 519.649759][T19100] Code: 80 f4 27 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 0e 77 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 49 1c 7f f6 4d 39 64 24 60 0f 85 10 0f 00 [ 519.669942][T19100] RSP: 0018:ffffc9000bf077c0 EFLAGS: 00010206 [ 519.676026][T19100] RAX: 000000000000005f RBX: 1ffff920017e0f10 RCX: ffffffff9a27f403 [ 519.684087][T19100] RDX: 0000000000000000 RSI: ffffffff8e16b69a RDI: 00000000000002f8 [ 519.692056][T19100] RBP: ffffc9000bf07980 R08: ffffc9000bf078e7 R09: 0000000000000000 [ 519.700026][T19100] R10: ffffc9000bf078c0 R11: fffff520017e0f1d R12: 0000000000000298 [ 519.708015][T19100] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 519.716081][T19100] FS: 00007fafe4aac6c0(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 519.725011][T19100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.731599][T19100] CR2: 0000000000000000 CR3: 000000009d122000 CR4: 00000000003526f0 [ 519.739590][T19100] Call Trace: [ 519.742897][T19100] [ 519.745833][T19100] ? wake_up_q+0x99/0xd0 [ 519.750116][T19100] ? preempt_schedule_thunk+0x16/0x30 [ 519.755493][T19100] ? preempt_schedule_common+0x82/0xd0 [ 519.760958][T19100] ? l2cap_unregister_user+0x36/0x170 [ 519.766427][T19100] ? preempt_schedule_thunk+0x16/0x30 [ 519.771820][T19100] ? __pfx___mutex_lock+0x10/0x10 [ 519.776971][T19100] ? __up_read+0x2fe/0x6b0 [ 519.781592][T19100] ? __pfx___up_read+0x10/0x10 [ 519.786387][T19100] ? hidp_session_find+0xce/0x100 [ 519.791448][T19100] l2cap_unregister_user+0x36/0x170 [ 519.796661][T19100] hidp_connection_del+0xb0/0x170 [ 519.801700][T19100] hidp_sock_ioctl+0x3ab/0x650 [ 519.806469][T19100] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 519.811777][T19100] ? do_vfs_ioctl+0x1166/0x1530 [ 519.816726][T19100] sock_do_ioctl+0x101/0x320 [ 519.821506][T19100] ? __pfx_sock_do_ioctl+0x10/0x10 [ 519.826628][T19100] sock_ioctl+0x5c6/0x7f0 [ 519.830982][T19100] ? __pfx_sock_ioctl+0x10/0x10 [ 519.836545][T19100] ? __fget_files+0x2a/0x420 [ 519.841218][T19100] ? __fget_files+0x3a0/0x420 [ 519.846005][T19100] ? __fget_files+0x2a/0x420 [ 519.850620][T19100] ? bpf_lsm_file_ioctl+0x9/0x20 [ 519.856017][T19100] ? __pfx_sock_ioctl+0x10/0x10 [ 519.860886][T19100] __se_sys_ioctl+0xfc/0x170 [ 519.865573][T19100] do_syscall_64+0x14d/0xf80 [ 519.870173][T19100] ? trace_irq_disable+0x3b/0x150 [ 519.875206][T19100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.881290][T19100] ? clear_bhb_loop+0x40/0x90 [ 519.885974][T19100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.892131][T19100] RIP: 0033:0x7fafe3b9c819 [ 519.896813][T19100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.916530][T19100] RSP: 002b:00007fafe4aac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.924973][T19100] RAX: ffffffffffffffda RBX: 00007fafe3e16180 RCX: 00007fafe3b9c819 [ 519.933160][T19100] RDX: 0000200000000140 RSI: 00000000400448c9 RDI: 0000000000000008 [ 519.941139][T19100] RBP: 00007fafe3c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 519.949112][T19100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.957085][T19100] R13: 00007fafe3e16218 R14: 00007fafe3e16180 R15: 00007ffdb0882a08 [ 519.965157][T19100] [ 519.968176][T19100] Modules linked in: [ 519.973079][T19100] ---[ end trace 0000000000000000 ]--- [ 519.982083][T19100] RIP: 0010:__mutex_lock+0x14b/0x1300 [ 519.998687][T19100] Code: 80 f4 27 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 0e 77 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 49 1c 7f f6 4d 39 64 24 60 0f 85 10 0f 00 [ 520.052912][T19100] RSP: 0018:ffffc9000bf077c0 EFLAGS: 00010206 [ 520.059327][T19100] RAX: 000000000000005f RBX: 1ffff920017e0f10 RCX: ffffffff9a27f403 [ 520.065222][T19110] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3476'. [ 520.069871][T19100] RDX: 0000000000000000 RSI: ffffffff8e16b69a RDI: 00000000000002f8 [ 520.092330][T19108] tipc: Started in network mode [ 520.103018][T19108] tipc: Node identity aa4d8c57ba0e, cluster identity 4711 [ 520.110301][T19108] tipc: Enabled bearer , priority 0 [ 520.127886][T19100] RBP: ffffc9000bf07980 R08: ffffc9000bf078e7 R09: 0000000000000000 [ 520.136455][T19100] R10: ffffc9000bf078c0 R11: fffff520017e0f1d R12: 0000000000000298 [ 520.146879][T19111] syzkaller0: entered promiscuous mode [ 520.153314][T19100] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 520.161616][T19100] FS: 00007fafe4aac6c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 520.171113][T19111] syzkaller0: entered allmulticast mode [ 520.177936][T19100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.185009][T19100] CR2: 0000200000002280 CR3: 000000009d122000 CR4: 00000000003526f0 [ 520.193832][T19100] Kernel panic - not syncing: Fatal exception [ 520.200436][T19100] Kernel Offset: disabled [ 520.204760][T19100] Rebooting in 86400 seconds..