last executing test programs: 2m18.144744924s ago: executing program 3 (id=2490): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x80, 0x10}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000004800"/20, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000580)="16f907a1487c03195236cb96ffee7c65a558cb8cf7c9b5d0312afd8f89cab1548b9e2031dfaa2901d0fc95754c0ec6bd9a7b72eea8219b470a27283fd31d599e9e7ade419105e6f205dcfac1fd2296fd648c75834cfac06d9f6f46f0568f4c9a3747b814e4f977c8c2c16fcc8af6568db12ca925c3141fb84e0df905afd9c0ae71eee85bbaec7ca6c52432814fc17c01f22ea2fbc762ff81e94b7c1b2586a57cd400cee1671185297b2a7cac93e7c5b93bd6ade875005ee78e9d1ee011395aec0dd30c320686c20dc5f17205bc6faeb50c12fc4f00e6b5e42ec79489cdee34e842486835fc40b32b49469ceaee85aafca6c9f7", 0xf3}, {&(0x7f0000000680)="aa2460c229a2acc9c68789cd0fba6fa5630d734a2b1fc8daa0cfec89e836caf864380d1ceca340a0530e9e614f8715764db0006946ee782bd472f066de2edaaca47ba6eaad598ddbe3bca036afad6e44e43119542af066d80957234a9cd0d0cdc046445c6e50e06e215aad17a61987491992e150e3bc3a58440f5c9c", 0x7c}, {&(0x7f0000000700)="b7a93d239d99dd60e787d92b6351620e15922daa34e5a3472217b108e19425d08f83307697de540bcac4b946f1c397ba625d817b5e86c128d8b50a7847fb28c1c2e30001c5b0b7760c4c06903fa07af01c928f229023e51dc9097516a01e2603a19a03512857485bc22add84f46825e23677ebb867ac20454b865f567308fb2be05ab91cc22dcca2893e522aa532a896a1f6a30ec0871d3e209c936b25bb19186c65d2d4b2f0e24a03fb1a8af1767ad4", 0xb0}, {&(0x7f00000007c0)="3ae222479045c4ceea2c53ba9ac2a195b573c1121bd676191839ddb22b5779a25e06aba37ac2a8aa3464cc0bde81e9137806cf2a2ed1cb20512bebe54cd3e6137d10f26d3e5cd4c6b278a39de33c1a4abddfdf6d86ecaccfae7cced135d9b87939b912e5ec27a422549e52f984a95c9c54d374b9c0a1c0b62be623262bb681880d7059db76a1c72846bb7510917bd0fcf1c24edd517572ed51315cdf22398ba5c270923aadcc99fd333a65648e0fd5e19c1c95d3bedd787b63fffbd9127f47602884aaa60ad7c41c0c27f03088e2b760373482d2a7eac85b602555700cb109d5e3986e", 0xe3}], 0x5, &(0x7f0000000940)="7a29d88da8a9f48884402da09957990caa677858c19fda7a2ac347b7ac52f9b8072c864177608ac940aace6cf035c42e071753624ffa4dedeadb525db097c5d31de2", 0x42, 0x20008000}, 0x4000043) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50001000", @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf2507000000080004000bdf000014000680080003006401010208000700", @ANYRES32=0x0, @ANYBLOB="040006801c000680060001000a000000060005004e21000008000300e0000001"], 0x50}, 0x1, 0x0, 0x0, 0x888}, 0x40080) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000500)={'vcan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x10770}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd21, 0x100000001}}]}]}]}, 0x3c}}, 0x804) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r8, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 2m17.87203954s ago: executing program 3 (id=2494): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000080000000000000600000014000200fc02000000000000000000000000dd6eb5306355e2418988c80d8a24b46c0f074a38e7cc0997654dae8eefaa8fa3a645b30370c60f3452ca5b017a35554d0e5e9f08e5c79f7d20d23096271314c0418e58cab8f51c166129143b5017f95bcbd3185d4b384fd8544fec3159f0a641f719cda200"/181], 0x5c}}, 0x0) 2m17.773690691s ago: executing program 4 (id=2498): r0 = socket$unix(0x1, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 2m17.653596954s ago: executing program 4 (id=2500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x1000]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f67}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040f4}, 0x20000000) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 2m17.449327169s ago: executing program 3 (id=2505): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000e00000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01040000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673616d30deff0000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) r2 = socket(0x22, 0x2, 0x4) bind$bt_hci(r2, &(0x7f00000001c0)={0x22, 0x4, 0x4}, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x4, 0x5, 0x1, 0x61, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x47, 0x2, 0x2}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000006060500000000000000000000000007050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "a418677b458acc7314b528ed5308778a8994cb84383611c0ee6b030b63a8dedd", "d1bb4da57c30cd497a0e00b6dbc41a2db117a710c7de150f1ce79a63780614fa", "b409faa2df8a73767748c3f3fa48240569f98e06451be5d6b06171321d22d40f", "f8ce98c8de29835ba3eb8e51c18946d8ce0d7e5c2bbb15eed2091c4b8606ea0c", "e77196ba0032b7265147ccafa506fdc700", "67ad31fff1906765610a2a06", 0xffffffff, 0x4, 0x4, 0x1fe, 0x4}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000040)={r10, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000240)={r10, 0x6}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r7}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x9}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x6, '\x00', r3, r4, 0x3, 0x1, 0x5}, 0x50) 2m17.340395875s ago: executing program 4 (id=2506): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0xa445, 0x0, 0x0, 0x3dc, 0x3], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2m17.294514025s ago: executing program 3 (id=2507): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) 2m17.176601405s ago: executing program 4 (id=2509): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000013180)={0x0, 0x1, 0x6, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000010c0)={0x0, 0x2, 0x4, "5b5157dc"}, 0xc) 2m17.035236052s ago: executing program 3 (id=2511): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000073116c00000000008510000002000000b7000000000000009500c2006a2000009500bc4dca72c25060cf59a47ba0c5b5f70dd6f3e4"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000140)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0xd}, 0x20) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={0x18, r1, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) 2m16.966915093s ago: executing program 4 (id=2513): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x108, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast}], 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) 2m16.61877532s ago: executing program 3 (id=2518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000240)=[{0xff17, 0x9, 0x6, 0xe14}, {0x5, 0x53, 0x9, 0x2}, {0xcccb, 0x4, 0x1, 0x4}, {0xf, 0x5d, 0x9, 0x7}, {0xbb, 0x7f, 0x3, 0x7fffffff}, {0x8000, 0x2, 0x0, 0x5}]}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20044004) r10 = accept4(r9, 0x0, &(0x7f0000000000), 0x100000) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r11, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x40001) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a006002bbbbbbbbbbbbbbbbbbbbbbbb8100290086dd6aee854a001011ff"], 0x4e) 2m16.53644109s ago: executing program 4 (id=2520): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) (async) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 2m16.154678923s ago: executing program 32 (id=2518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x6, &(0x7f0000000240)=[{0xff17, 0x9, 0x6, 0xe14}, {0x5, 0x53, 0x9, 0x2}, {0xcccb, 0x4, 0x1, 0x4}, {0xf, 0x5d, 0x9, 0x7}, {0xbb, 0x7f, 0x3, 0x7fffffff}, {0x8000, 0x2, 0x0, 0x5}]}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20044004) r10 = accept4(r9, 0x0, &(0x7f0000000000), 0x100000) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r11, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x40001) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a006002bbbbbbbbbbbbbbbbbbbbbbbb8100290086dd6aee854a001011ff"], 0x4e) 2m16.093671186s ago: executing program 33 (id=2520): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) (async) recvfrom(r1, 0x0, 0x0, 0x40000020, &(0x7f00000002c0)=@l2={0x1f, 0x7bd, @none, 0xeb6}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 2.655850285s ago: executing program 0 (id=4129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c0004801801018007000100637400000c0002800800024000000000090dfe5600010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a075765107c7a94778a83fa3ed2b820f2824871bca705b42fbcd8e045ac277cc7ebac8c1dae0974798c71c071b89a5eaa9d129ce18279584fb4f35bc56860af2b4e3a04cae573abe9e24edc72f823d92a3edc0b7e40a0f9a1a7d4f0baf790eae42b9c7fcc69a02035c21b1a87e68736fc30f587bc53002897fe4ea1546bc8282c5b3e5df4755e28c146091b670f00"/268], 0x70}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000008000000000001d000000000000000541"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$FIONCLEX(r3, 0x5450) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240), 0x0}, 0x20) 2.428289901s ago: executing program 0 (id=4133): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='P'], 0x10}}], 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r0, 0x1, 0xfffffffd, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 2.19882612s ago: executing program 0 (id=4137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "4bc7fb", 0x10, 0x21, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{0x4e20, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x1, "c8fd14", 0x7, "0ebb69"}}}}}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x9, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe, 0x7, 0x6361, 0x1, 0x9, 0x6}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x80, 0x3, 0x1}}, {0x6, 0x2, [0x6df]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) 2.120376258s ago: executing program 5 (id=4138): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r1 = socket$netlink(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'batadv_slave_1\x00', 0x1}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) read(r7, &(0x7f0000001140)=""/184, 0xb8) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) (rerun: 32) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) (async) close(r4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2000000011000500000000000000000007000000", @ANYRES32=r8, @ANYBLOB="002003000000000fef9914f481a41257dbb7ef9e4156c9e6c13bd43173b9c93413312dbbcde95861f95e5c7ae8c2bd5737be31fc953f592a03000000b00061d2a140a60c8bedc61f8ab19690edc6fe472786edb9732d009be6a6c6d313aa9795b3ce6f65fbfd6b"], 0x20}}, 0x4) 1.724364351s ago: executing program 6 (id=4145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[], 0x0, 0x34}, 0x28) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="002ccd6642e2bc802be916399b81eb710000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e00050002800800070000000000"], 0x3c}}, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) 1.580360401s ago: executing program 2 (id=4147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) (async) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) (async, rerun: 64) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) (async) shutdown(r0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x64}}, 0x4800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x95) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x42, 0x0) 1.537343507s ago: executing program 6 (id=4148): bind(0xffffffffffffffff, &(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x7fffffff, @empty, 0x5}}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/184, 0xb8, 0x1, &(0x7f0000000000)=""/27, 0x1b}, &(0x7f00000001c0)=0x40) 1.446674973s ago: executing program 0 (id=4149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)={0x0, 0x9, [@random="30daadd40925", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @remote, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x130, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x9c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x6d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7daa00000000000071101500000097e80b0468c51348ddbe00"/34], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 1.313028523s ago: executing program 5 (id=4150): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = accept(r0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x2e, "0557ab331e376cadef03e0fb512c9e8bf13dbaf6e41e62c0d796a7b91d44e95f8a967fc67be11f313853bee129ee"}, &(0x7f00000002c0)=0x36) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x20000000}, &(0x7f0000000340)=0x8) (async) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/9, &(0x7f0000000140)=0x9) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) 1.309940758s ago: executing program 1 (id=4151): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', r1, r2, 0x0, 0x4}, 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 1.263786006s ago: executing program 6 (id=4152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x883e}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0xd, 0x24, 0x64, 0x0, 0x7, 0x21, 0x0, @remote, @remote}, {{0x4e23, 0x4e24, 0x4, 0x1, 0xd, 0x0, 0x0, 0x8, 0x3, '~YV', 0x0, "b8bb19"}}}}}}}, 0x36) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 1.162226342s ago: executing program 5 (id=4153): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth1\x00', 0x8000}) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048044}, 0x24000080) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) (rerun: 32) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x60) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000440)={0x0, 0x0, 0x16}) (async, rerun: 32) r4 = accept4(r3, &(0x7f0000000480)=@phonet, &(0x7f0000000500)=0x80, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@ipv6_delrule={0x70, 0x21, 0x4, 0x70bd2c, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x2, 0x6, 0x0, 0x0, 0x7, 0x4}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x7}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x21}, @FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x4040010) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, r5, 0x311, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8051}, 0x40) (async, rerun: 64) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0) (rerun: 64) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r7, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 32) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r3) (rerun: 32) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r8, 0x1, 0x4, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x1) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000c00), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x0) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r10, 0x200, 0x5, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf27, 0xb}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40884) (async, rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000e80), r12) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000ec0)={0xff, 0x8, 0x76, 0x2}, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000f00), r12) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000f40)={0xda6, 0x5, 0x8, 0x40}, 0x10) (async) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x80000000) 1.028429237s ago: executing program 0 (id=4154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) 888.26383ms ago: executing program 1 (id=4155): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) 882.221212ms ago: executing program 5 (id=4156): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x99}]}]}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x7, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @map_idx={0x18, 0x9}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x6262b09a}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) 791.058184ms ago: executing program 2 (id=4157): syz_emit_ethernet(0x20, &(0x7f0000000240)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "0f", "b30800", 0x8828, "ed2810b6294bab4e2bbd"}}}}}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000007910300000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001800010016bd7000000000000a0000000000fd020000000008000400", @ANYRES32=r4, @ANYBLOB="0600150008000000180016"], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) 735.623746ms ago: executing program 1 (id=4158): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r7], 0x3c}}, 0x0) 688.739878ms ago: executing program 0 (id=4159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) sendfile(r4, r6, 0x0, 0x8000002) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xd8, "631dfa20ba157c69a8be610c9d1be36527157aa72cba89e4799bf7207eba8c1253b6dba7d13cb5e2ea83fcfc9a624afb4e7cfbc21dd68a6ee83142b45ae6261cb0146f24edb29dffcaee9c56b28104d2ea6c8c69d22015fd2017741fb9979bd903da3c4627cfdf689cc1c66bc82cea56074d595a33a0e99da19fc21cb4cc79b241f978f020815ce70cdcc24a6d6559f286a6a73e91fef33f10a720605b90fbb29c6c632f9384857a17320ffc3ce5c3e776e8cd48be4c607b86df6cff64b2d8aff22ca6f4c74bbf3c374a08026ca6706cd3a2b606e6e569a8"}, &(0x7f00000001c0)=0xe0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000200)={r8, 0x1, 0x6, 0x0, 0xb4, 0x100}, &(0x7f0000000440)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f0000000000), 0x10) (async) bind$l2tp(r10, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r11) sendmsg$L2TP_CMD_TUNNEL_DELETE(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00c3c65f569cb328a3a4b003de", @ANYRES16=r12, @ANYBLOB="010029bd7000fbdbdf25020000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) 640.287679ms ago: executing program 2 (id=4160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010142, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x33}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x40, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x20, 0x1, "8445e0ff386223f169f223b81acf8c59b74f5224505bc50872216859"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xb}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x8c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0x70, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x69, 0x2, "3954d90467812298c11ecc35bc1df5a19543b2c5bc1c9f9522df9691440580cd29076b9206a27ca78559f5b028b2429c3dea6b2a7ce0b9824bed0aa0b7da26bdfd1c7b7c03ab37c4095f134d080345e631a9a82551fb44e1b51ea40288b50636645b8decf8"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 617.222245ms ago: executing program 6 (id=4161): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x7a) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$can_bcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x40048d0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24048091}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x20004000) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}], 0x1}, 0x40002102) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0100001a0013"], 0x16c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r14) sendmsg$NLBL_MGMT_C_PROTOCOLS(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) sendmsg$NLBL_MGMT_C_ADD(r13, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000", @ANYRES16=r15, @ANYBLOB="20002abd7000fddbdf250100000014000600fe80000000000000000000000000000d080002000700000014000500fe8000000000000000000000000000bb08000c00020000000800040001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r16, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}]}, 0x64}}, 0x0) 399.015393ms ago: executing program 5 (id=4162): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000040)={0xfffffffffffffffe, 0x20, 0x4, 0x20, 0x3}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600010400038064b75f9ee00fe880000000000000000000000000001fe8000000000000000000000000000aab363be88e50d537279250df88dc9b528b1c1632a6ccc010a58e4976134c3c76ba20e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000907800001312345f8cf949a01b515682f44cecac91ba1d12d243471da14ff23d079da4ca814b7d7b"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0) 316.458261ms ago: executing program 1 (id=4163): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 315.905866ms ago: executing program 6 (id=4164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 249.757602ms ago: executing program 2 (id=4165): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x842}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x88, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @mcast1, @dev, [@srh={0x33, 0xa, 0x4, 0x5, 0x7, 0x30, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}]}}}}}}}, 0x0) 164.863957ms ago: executing program 5 (id=4166): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) socket$inet(0x2, 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 92.406099ms ago: executing program 1 (id=4167): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000bc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xb, "5858ff34b2ecd8"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001bc0)={r4, r5, "8f4d6b682942625778f38fe49da1fcc51409cf43a246fba926b031a55cf58c95edfe0151050abe34baea1af7914cc65891eca09d9d9425e31589b0edd1d1f232fe43bb2cac6b9808a7d561c8dc6bf71ad13218ff2e2713414a32664c0adab38ac60b1e7b251493685f581092d51e0cd18b32897d4bffd98e130d2972db7f918d4762416faa09218af078f11765eba1c463bbc3494dd9c6a23ba0cec040b013bce81e8e2b78e08c13303b9eed1fb38f00af449de96cc68883c5276ad413249a85acc480923e01eb126811507a80a3c410968e5dffe73ad95a79abe79303030e88a98f377a36889a4bc771fa8c006641175f7288d4d590bc5388cc4d1b355bf4b8", "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"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) 91.459554ms ago: executing program 2 (id=4168): r0 = socket(0x2, 0x3, 0xff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000000}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0x178, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @mcast2, 0xfcfa}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @empty, 0x80000001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe131}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x178}}, 0x4000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r9) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r10, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r9) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d140012801000013084959000727400000400028008000340000001"], 0xa0}}, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x9}, 0xed, 0x7, 0xe, 0x7, 0xe, 'syz0\x00', "bb8085e87fb699831f995e802f7f1e5c781343f88883480d64e52aa46426da1c", "cf11546499933c8c76ba9d0a7aa74390e739dcb9fdcebccd3055636d0b8a2f8a", [{0xbc9, 0x273a, {0x1, 0x85}}, {0x8, 0x6, {0x3, 0x8}}, {0x9, 0xff, {0x3, 0xf2b}}, {0x3, 0x0, {0x3, 0x6}}, {0x4, 0x141, {0x2, 0x4}}, {0x6, 0xfffb, {0x2, 0x3ff}}, {0x0, 0x9, {0x2, 0x1}}, {0x1, 0x6, {0x2}}, {0x7c, 0x0, {0x3, 0x1}}, {0x81, 0xfffa, {0x2, 0x3}}, {0x40, 0xe2, {0x0, 0x5}}, {0x1, 0x101, {0x3, 0xfffffff8}}, {0xb97d, 0x5, {0x4, 0xfff}}, {0x0, 0xfff8, {0x0, 0x1}}, {0x380, 0xfff8, {0x1, 0x7}}, {0x1000, 0x3, {0x3, 0x9}}, {0x100, 0x820, {0x2, 0xfffffffa}}, {0x8, 0x0, {0x3, 0xfffffffc}}, {0x4, 0x1, {0x3, 0xbd5}}, {0x7f, 0x1, {0x0, 0x6}}, {0x400, 0x3, {0x2, 0x8}}, {0x5fa, 0x2b4, {0x3, 0x2}}, {0x5, 0xfffa, {0x0, 0x5}}, {0x40b, 0x5, {0x3, 0x400}}, {0x6, 0x8, {0x0, 0x100}}, {0x164, 0x1, {0x2, 0x9}}, {0x5cfe, 0x100, {0x1, 0x4}}, {0xc0, 0x0, {0x0, 0x2}}, {0x9, 0x3, {0x3, 0x2a5}}, {0xfffa, 0x0, {0x0, 0x2}}, {0x5, 0x8, {0xe6c88c1a6f931cd2, 0x6}}, {0x3, 0x1, {0x0, 0x8}}, {0x7, 0x8, {0x0, 0x3}}, {0x8, 0x2}, {0x40, 0xb3, {0x3, 0xc}}, {0x1a02, 0x4, {0x1, 0x9}}, {0xefd3, 0x6, {0x0, 0x800}}, {0x1, 0xc, {0x1}}, {0x7f, 0x1, {0x0, 0x9}}, {0x1, 0x8, {0x1, 0xb}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4008044}, 0x20000814) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x5, 0x0, 0xfffffffe}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic='^(']}, 0x18}}, 0x40000) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f000000b4c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="8fab14410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99ea3cd5ff04b301590fb45a74a588fdabe427ade9b1ed53f450ce6c2", 0x3c}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f00000028c0)="c7baba8637919d2a7bf8f86453e0ec420e051dc8", 0x14}], 0x1}}], 0x2, 0x200088c4) 13.657317ms ago: executing program 6 (id=4169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000080)={0x48, r1, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x146}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) 12.070588ms ago: executing program 2 (id=4170): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x880) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) (async) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000003c0)={0x3, @bcast}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) (async) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc, 0x0, 0x0, 0xfe}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3ff, 0x6, 0xf8, 0x4485, 0xffffffffffffffff, 0x600000, '\x00', r9, r6, 0x1, 0x3, 0x5, 0xa}, 0x50) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001340)={r2, &(0x7f00000012c0), 0x0}, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 0s ago: executing program 1 (id=4171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r2, 0x4, 0x400000, 0x2, {0x10}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): etlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 329.846212][T14300] netlink: 'syz.0.2424': attribute type 21 has an invalid length. [ 329.864662][T14299] netlink: 'syz.0.2424': attribute type 21 has an invalid length. [ 329.868277][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 329.882820][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 329.944489][T14300] netlink: 'syz.0.2424': attribute type 21 has an invalid length. [ 329.958931][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 329.998433][T14311] syzkaller1: entered promiscuous mode [ 330.003953][T14311] syzkaller1: entered allmulticast mode [ 330.035698][T14314] netlink: 'syz.3.2425': attribute type 19 has an invalid length. [ 330.413479][T14334] netlink: 'syz.3.2435': attribute type 16 has an invalid length. [ 330.425939][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2434'. [ 330.447452][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2435'. [ 330.603635][T14349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.342017][T14394] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 331.461672][T14414] xt_bpf: check failed: parse error [ 331.527927][T14421] Cannot find del_set index 0 as target [ 331.655905][T14429] netlink: 'syz.0.2463': attribute type 11 has an invalid length. [ 332.111135][T14461] netlink: 'syz.2.2474': attribute type 15 has an invalid length. [ 332.429692][T14476] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 332.498138][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.508035][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.529556][ T1143] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.554300][ T1143] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 332.998257][T14507] validate_nla: 2 callbacks suppressed [ 332.998273][T14507] netlink: 'syz.3.2490': attribute type 23 has an invalid length. [ 333.289647][T14533] netlink: 'syz.2.2497': attribute type 7 has an invalid length. [ 333.300871][T14534] netlink: 'syz.0.2499': attribute type 1 has an invalid length. [ 333.423050][T14541] netlink: 'syz.4.2500': attribute type 1 has an invalid length. [ 333.999942][T14565] vlan2: entered allmulticast mode [ 334.017783][T14565] erspan0: entered allmulticast mode [ 334.326931][T14578] __nla_validate_parse: 24 callbacks suppressed [ 334.326950][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2512'. [ 334.420812][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.451106][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.471279][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.507078][T14578] macsec3: entered promiscuous mode [ 334.619366][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.644416][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.664763][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.872282][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.894705][T14598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2522'. [ 334.901411][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.948049][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 334.972345][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2522'. [ 335.096397][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.124536][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.154581][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 335.420106][ T5843] block nbd5: Receive control failed (result -32) [ 335.509303][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.520322][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.529279][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.538185][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.550405][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.564514][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.574909][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.583889][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.601858][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.611540][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.647792][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2529'. [ 335.767451][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.777610][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.786218][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.796364][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.809727][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.478481][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.491545][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.502649][ T1143] bond0 (unregistering): (slave bond2): Releasing backup interface [ 336.513728][ T1143] bond0 (unregistering): (slave bond3): Releasing backup interface [ 336.522596][ T1143] bond0 (unregistering): (slave bond4): Releasing backup interface [ 336.532341][ T1143] bond0 (unregistering): (slave bond6): Releasing backup interface [ 336.541313][ T1143] bond0 (unregistering): (slave bond8): Releasing backup interface [ 336.550477][ T1143] bond0 (unregistering): (slave bond9): Releasing backup interface [ 336.559526][ T1143] bond0 (unregistering): (slave bond10): Releasing backup interface [ 336.568806][ T1143] bond0 (unregistering): (slave bond12): Releasing backup interface [ 336.577804][ T1143] bond0 (unregistering): (slave bond13): Releasing backup interface [ 336.586839][ T1143] bond0 (unregistering): Released all slaves [ 336.676484][ T1143] bond1 (unregistering): Released all slaves [ 336.758600][ T1143] bond2 (unregistering): Released all slaves [ 336.843272][ T1143] bond3 (unregistering): Released all slaves [ 336.928560][ T1143] bond4 (unregistering): Released all slaves [ 337.011080][ T1143] bond5 (unregistering): Released all slaves [ 337.091473][ T1143] bond6 (unregistering): Released all slaves [ 337.167879][ T1143] bond7 (unregistering): Released all slaves [ 337.249169][ T1143] bond8 (unregistering): Released all slaves [ 337.330327][ T1143] bond9 (unregistering): Released all slaves [ 337.416642][ T1143] bond10 (unregistering): Released all slaves [ 337.429290][ T1143] bond11 (unregistering): Released all slaves [ 337.511206][ T1143] bond12 (unregistering): Released all slaves [ 337.592232][ T1143] bond13 (unregistering): Released all slaves [ 337.657922][ T5841] Bluetooth: hci1: command tx timeout [ 337.688601][ T1143] bond14 (unregistering): Released all slaves [ 337.746639][T14620] wg1 speed is unknown, defaulting to 1000 [ 337.904533][ T5841] Bluetooth: hci2: command tx timeout [ 337.945672][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 337.977785][ T1143] tipc: Left network mode [ 338.030323][T14648] geneve2: entered promiscuous mode [ 338.039800][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 338.058825][ T1143] IPVS: stopping backup sync thread 6423 ... [ 338.284653][T14657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.293174][T14656] netlink: 'syz.2.2534': attribute type 4 has an invalid length. [ 338.411657][T14659] "syz.1.2535" (14659) uses obsolete ecb(arc4) skcipher [ 338.551445][T14633] wg1 speed is unknown, defaulting to 1000 [ 338.561824][T14620] wg1 speed is unknown, defaulting to 1000 [ 338.886391][T14680] netlink: 'syz.2.2539': attribute type 1 has an invalid length. [ 339.081830][T14680] bond13: entered promiscuous mode [ 339.088824][T14680] 8021q: adding VLAN 0 to HW filter on device bond13 [ 339.145642][T14691] 8021q: adding VLAN 0 to HW filter on device bond13 [ 339.169893][T14691] bond13: (slave gre1): The slave device specified does not support setting the MAC address [ 339.190292][T14691] bond13: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 339.209633][T14691] bond13: (slave gre1): making interface the new active one [ 339.217586][T14691] gre1: entered promiscuous mode [ 339.223934][T14691] bond13: (slave gre1): Enslaving as an active interface with an up link [ 339.248291][T14633] wg1 speed is unknown, defaulting to 1000 [ 339.363529][T14698] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 339.587457][ T1143] hsr_slave_0: left promiscuous mode [ 339.594727][ T1143] hsr_slave_1: left promiscuous mode [ 339.601627][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.613868][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.724011][ T1143] : left promiscuous mode [ 339.735756][ T5843] Bluetooth: hci1: command tx timeout [ 339.975853][ T5843] Bluetooth: hci2: command tx timeout [ 340.289847][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 340.333862][ T1143] team0 (unregistering): Port device C removed [ 340.656276][T14713] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 340.744426][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 340.832055][T14620] chnl_net:caif_netlink_parms(): no params data found [ 340.897535][T14735] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2550'. [ 341.147273][T14739] wg1 speed is unknown, defaulting to 1000 [ 341.298807][ T1143] IPVS: stop unused estimator thread 0... [ 341.311819][T14620] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.341951][T14620] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.362826][T14620] bridge_slave_0: entered allmulticast mode [ 341.396814][T14620] bridge_slave_0: entered promiscuous mode [ 341.423198][T14633] chnl_net:caif_netlink_parms(): no params data found [ 341.461256][T14620] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.476903][T14620] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.489930][T14620] bridge_slave_1: entered allmulticast mode [ 341.519441][T14620] bridge_slave_1: entered promiscuous mode [ 341.532082][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2556'. [ 341.819109][ T5843] Bluetooth: hci1: command tx timeout [ 341.824347][T14620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.873005][T14739] wg1 speed is unknown, defaulting to 1000 [ 341.910270][T14620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.974574][ T5833] wg1 speed is unknown, defaulting to 1000 [ 341.982546][ T5833] syz2: Port: 1 Link DOWN [ 342.047005][ T1143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.057717][ T5843] Bluetooth: hci2: command 0x040f tx timeout [ 342.065389][ T1143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 342.107892][T14620] team0: Port device team_slave_0 added [ 342.152506][T14620] team0: Port device team_slave_1 added [ 342.172422][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.180690][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.188966][T14633] bridge_slave_0: entered allmulticast mode [ 342.196777][T14633] bridge_slave_0: entered promiscuous mode [ 342.215286][ T1143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.225926][ T1143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 342.273274][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.280885][T14633] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.288532][T14633] bridge_slave_1: entered allmulticast mode [ 342.298956][T14633] bridge_slave_1: entered promiscuous mode [ 342.332958][ T1143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.344025][ T1143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 342.410266][T14633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.424114][T14620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.432312][T14620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.460704][T14620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.496909][ T1143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.514935][ T1143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 342.543733][T14633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.559641][T14806] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.601089][T14620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.612910][T14620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.643465][T14620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.751812][T14633] team0: Port device team_slave_0 added [ 342.808879][T14633] team0: Port device team_slave_1 added [ 342.923411][T14620] hsr_slave_0: entered promiscuous mode [ 342.942581][T14620] hsr_slave_1: entered promiscuous mode [ 342.966339][T14620] debugfs: 'hsr0' already exists in 'hsr' [ 342.972220][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2565'. [ 342.983689][T14620] Cannot create hsr debugfs directory [ 343.111604][T14633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.129462][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.174516][T14633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.280657][T14633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.288933][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.318267][T14633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.638708][T14848] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2570'. [ 343.663442][T14848] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2570'. [ 343.674464][T14848] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2570'. [ 343.745819][T14857] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2571'. [ 343.762598][T14858] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2572'. [ 343.791581][T14633] hsr_slave_0: entered promiscuous mode [ 343.799763][T14633] hsr_slave_1: entered promiscuous mode [ 343.814934][T14633] debugfs: 'hsr0' already exists in 'hsr' [ 343.820703][T14633] Cannot create hsr debugfs directory [ 343.894411][ T5841] Bluetooth: hci1: command tx timeout [ 344.143430][ T1143] bond9 (unregistering): (slave geneve2): Releasing backup interface [ 344.155693][ T5841] Bluetooth: hci2: command 0x040f tx timeout [ 344.275485][ T1143] bond2 (unregistering): (slave bridge1): Releasing active interface [ 344.849435][ T1143] bond0 (unregistering): (slave bond1): Releasing backup interface [ 344.858246][ T1143] bond1 (unregistering): left promiscuous mode [ 344.865734][ T1143] bond0 (unregistering): (slave bond3): Releasing backup interface [ 344.873952][ T1143] bond3 (unregistering): left promiscuous mode [ 344.881370][ T1143] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 344.890651][ T1143] bridge_slave_1: left promiscuous mode [ 344.898719][ T1143] bond0 (unregistering): Released all slaves [ 344.986469][ T1143] bond1 (unregistering): Released all slaves [ 344.999302][ T1143] bond2 (unregistering): Released all slaves [ 345.085940][ T1143] bond3 (unregistering): Released all slaves [ 345.099427][ T1143] bond4 (unregistering): Released all slaves [ 345.111783][ T1143] bond5 (unregistering): Released all slaves [ 345.126107][ T1143] bond6 (unregistering): Released all slaves [ 345.141243][ T1143] bond7 (unregistering): Released all slaves [ 345.160020][ T1143] bond8 (unregistering): Released all slaves [ 345.177529][ T1143] bond9 (unregistering): Released all slaves [ 345.215614][T14875] tipc: Enabling of bearer rejected, failed to enable media [ 345.402638][T14872] wg1 speed is unknown, defaulting to 1000 [ 345.485305][ T1143] tipc: Left network mode [ 345.567993][T14900] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.710143][T14904] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2581'. [ 345.737613][T14620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.868520][T14620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.994864][T14620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 346.040158][T14620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 346.142571][T14872] wg1 speed is unknown, defaulting to 1000 [ 346.202924][T14921] netlink: 'syz.0.2583': attribute type 7 has an invalid length. [ 346.219406][ T5841] Bluetooth: hci2: command 0x040f tx timeout [ 346.349610][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.385033][T14935] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.406461][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.620547][T14935] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.642992][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.741319][T14935] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.771791][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.835430][T14935] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.886417][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 346.928800][T14633] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.978784][T14633] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 347.036846][T14935] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2586'. [ 347.177445][T14633] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 347.285105][T14633] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.408416][ T1143] hsr_slave_0: left promiscuous mode [ 347.424819][ T1143] hsr_slave_1: left promiscuous mode [ 347.463576][ T1143] vlan0: left allmulticast mode [ 347.475460][ T1143] veth0_vlan: left allmulticast mode [ 347.475826][T14984] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 347.480836][ T1143] vlan0: left promiscuous mode [ 347.506736][ T1143] veth1_vlan: left promiscuous mode [ 347.512963][ T1143] veth0_vlan: left promiscuous mode [ 348.541966][T14620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.649167][T14620] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.678528][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.685841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.699771][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.706978][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.918239][T14633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.051930][T15032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.261498][ T1143] IPVS: stop unused estimator thread 0... [ 349.302138][T14633] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.386733][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.393923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.406195][T15025] wg1 speed is unknown, defaulting to 1000 [ 349.432374][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.439602][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.739808][T14620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.947325][T15061] syzkaller0: entered promiscuous mode [ 349.952843][T15061] syzkaller0: entered allmulticast mode [ 350.108542][T14633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.447192][T14620] veth0_vlan: entered promiscuous mode [ 350.513587][T14620] veth1_vlan: entered promiscuous mode [ 350.627348][T14620] veth0_macvtap: entered promiscuous mode [ 350.678848][T14620] veth1_macvtap: entered promiscuous mode [ 350.843065][T14620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.892238][T14620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.947676][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.964489][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.985698][T14633] veth0_vlan: entered promiscuous mode [ 350.997822][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.008371][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.076190][T14633] veth1_vlan: entered promiscuous mode [ 351.164746][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.190202][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.231552][T14633] veth0_macvtap: entered promiscuous mode [ 351.268385][T14633] veth1_macvtap: entered promiscuous mode [ 351.290993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.306230][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.322109][T14633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.405436][T14633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.433269][T15122] __nla_validate_parse: 5 callbacks suppressed [ 351.433288][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 351.455634][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.496134][T15122] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2614'. [ 351.543208][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.565094][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.591325][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.860686][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.892300][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.947085][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.947901][T15147] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2617'. [ 351.963432][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.983912][T15147] openvswitch: netlink: Message has 6 unknown bytes. [ 351.984778][T15146] netlink: 'syz.0.2619': attribute type 11 has an invalid length. [ 352.146859][T15150] geneve4: entered promiscuous mode [ 352.152187][T15150] geneve4: entered allmulticast mode [ 352.159662][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 352.182354][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 352.201606][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 352.285735][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 352.287586][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 352.542485][T15168] netlink: 'syz.6.2523': attribute type 2 has an invalid length. [ 352.553147][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2523'. [ 352.565461][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2523'. [ 352.585117][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2523'. [ 352.652955][T15176] netlink: 'syz.0.2626': attribute type 2 has an invalid length. [ 352.690297][T15176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.827020][T15185] netlink: 'syz.2.2629': attribute type 1 has an invalid length. [ 352.864121][T15185] netlink: 'syz.2.2629': attribute type 3 has an invalid length. [ 352.901171][T15185] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2629'. [ 352.944364][T15185] NCSI netlink: No device for ifindex 813332851 [ 353.001222][T15185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2629'. [ 353.222362][T15211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2635'. [ 353.305166][T15221] tipc: Enabled bearer , priority 0 [ 353.400942][T15221] tipc: Resetting bearer [ 353.661786][T15213] tipc: Disabling bearer [ 353.933144][T15248] netlink: 'syz.2.2643': attribute type 21 has an invalid length. [ 353.951052][T15254] netlink: 'syz.0.2645': attribute type 24 has an invalid length. [ 354.574046][T15287] macvtap1: entered promiscuous mode [ 354.579815][T15287] vlan0: entered promiscuous mode [ 354.585492][T15287] macvtap1: entered allmulticast mode [ 354.591031][T15287] vlan0: entered allmulticast mode [ 354.601857][T15287] veth0_vlan: entered allmulticast mode [ 354.673365][T15294] syzkaller0: entered promiscuous mode [ 354.703786][T15294] syzkaller0: entered allmulticast mode [ 355.126304][T15318] netlink: 'syz.1.2663': attribute type 83 has an invalid length. [ 355.404723][T15338] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 355.617776][T15353] openvswitch: netlink: IP tunnel dst address not specified [ 355.629776][T15353] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 355.808893][T15353] 8021q: adding VLAN 0 to HW filter on device bond11 [ 356.022839][T15375] tipc: Started in network mode [ 356.029257][T15375] tipc: Node identity 1a8c4a31c902, cluster identity 4711 [ 356.039508][T15375] tipc: Enabled bearer , priority 0 [ 356.053026][T15375] syzkaller0: entered promiscuous mode [ 356.064386][T15375] syzkaller0: entered allmulticast mode [ 356.071922][T15381] tipc: Enabling of bearer rejected, failed to enable media [ 356.127936][T15375] tipc: Resetting bearer [ 356.165598][T15372] tipc: Resetting bearer [ 356.207718][T15372] tipc: Disabling bearer [ 356.429494][T15398] netlink: 'syz.6.2681': attribute type 4 has an invalid length. [ 356.452428][T15398] __nla_validate_parse: 14 callbacks suppressed [ 356.452446][T15398] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2681'. [ 356.560381][T15400] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2680'. [ 356.951942][T15418] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 356.991556][T15418] bond12 (unregistering): Released all slaves [ 357.268925][T15443] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2689'. [ 357.306087][T15443] netlink: 512 bytes leftover after parsing attributes in process `syz.6.2689'. [ 357.518053][T15463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2692'. [ 357.528822][T15463] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2692'. [ 357.563983][T15463] gretap1: entered promiscuous mode [ 357.577261][T15463] gretap1: entered allmulticast mode [ 358.173060][T15489] vlan0: entered allmulticast mode [ 358.183733][T15489] hsr0: entered allmulticast mode [ 358.210276][T15489] hsr_slave_0: entered allmulticast mode [ 358.221957][T15489] hsr_slave_1: entered allmulticast mode [ 358.232364][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2702'. [ 358.245997][T15491] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 358.251670][T15493] validate_nla: 1 callbacks suppressed [ 358.251689][T15493] netlink: 'syz.2.2703': attribute type 23 has an invalid length. [ 358.253588][T15491] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 358.432651][T15500] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 358.486792][T15506] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2708'. [ 358.490236][T15503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2707'. [ 358.496147][T15506] netlink: 'syz.6.2708': attribute type 7 has an invalid length. [ 358.510132][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 358.518087][T15506] netlink: 'syz.6.2708': attribute type 8 has an invalid length. [ 358.555260][T15501] openvswitch: netlink: Flow actions attr not present in new flow. [ 358.721089][ T1143] tipc: Subscription rejected, illegal request [ 358.833045][T15520] wg2: entered promiscuous mode [ 358.941010][T15522] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 358.972189][T15529] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 358.984015][T15529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.995764][T15522] geneve4: left promiscuous mode [ 359.000857][T15522] geneve4: left allmulticast mode [ 359.018895][T15522] vlan0: left allmulticast mode [ 359.034532][T15522] hsr0: left allmulticast mode [ 359.042756][T15522] hsr_slave_0: left allmulticast mode [ 359.056576][T15522] hsr_slave_1: left allmulticast mode [ 359.066593][T13454] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.085425][T13454] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.099507][T13454] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.117157][T13454] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 359.242310][T15546] dvmrp0: entered allmulticast mode [ 359.276539][T15548] syzkaller0: entered promiscuous mode [ 359.309395][T15548] syzkaller0: entered allmulticast mode [ 359.441068][T15558] netlink: 'syz.2.2722': attribute type 6 has an invalid length. [ 359.456324][T15558] netlink: 'syz.2.2722': attribute type 2 has an invalid length. [ 359.588777][T15562] openvswitch: netlink: Unknown nsh attribute 0 [ 359.604611][T15562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.919166][T15585] batadv_slave_1: entered promiscuous mode [ 359.933378][T15584] batadv_slave_1: left promiscuous mode [ 359.957044][ T5841] block nbd6: Receive control failed (result -32) [ 360.516314][T15622] bond1: entered promiscuous mode [ 360.521561][T15622] bond1: entered allmulticast mode [ 360.529446][T15622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.659368][T15634] netlink: 'syz.5.2743': attribute type 1 has an invalid length. [ 360.738355][T15634] bond1: entered promiscuous mode [ 360.745477][T15634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.809748][T15634] bond1: (slave bridge1): making interface the new active one [ 360.830739][T15634] bridge1: entered promiscuous mode [ 360.847159][T15634] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 360.872429][T15648] netlink: 'syz.0.2746': attribute type 3 has an invalid length. [ 360.896328][ T5841] block nbd7: Receive control failed (result -32) [ 360.970464][T15653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.997220][T15647] 8021q: adding VLAN 0 to HW filter on device bond14 [ 361.006498][T15647] bond0: (slave bond14): Enslaving as an active interface with an up link [ 361.413339][T15676] netlink: 'syz.5.2754': attribute type 17 has an invalid length. [ 361.432566][T15669] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 361.486947][T15669] bond15 (unregistering): Released all slaves [ 361.784093][T15698] __nla_validate_parse: 14 callbacks suppressed [ 361.784112][T15698] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2759'. [ 361.793326][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2757'. [ 361.851752][ T5912] IPVS: starting estimator thread 0... [ 361.947855][T15704] IPVS: using max 34 ests per chain, 81600 per kthread [ 362.068636][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'. [ 362.082751][T15712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2763'. [ 362.125994][T15716] Cannot find add_set index 0 as target [ 362.242977][T15724] netlink: 'syz.2.2766': attribute type 13 has an invalid length. [ 362.262686][T15724] netlink: 'syz.2.2766': attribute type 58 has an invalid length. [ 362.282593][T15724] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2766'. [ 362.296753][T15731] veth1_macvtap: left promiscuous mode [ 362.415672][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 362.610195][T15751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2773'. [ 362.718064][T15757] tipc: New replicast peer: 255.255.255.255 [ 362.724965][T15757] tipc: Enabled bearer , priority 10 [ 362.770809][T15760] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 362.825882][T15765] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2778'. [ 362.907411][T15765] team0: Port device vet0_virt_wifi removed [ 363.130623][T15785] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2786'. [ 363.140875][T15783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2785'. [ 363.484714][T15803] 8021q: adding VLAN 0 to HW filter on device bond15 [ 363.493904][T15803] bond0: (slave bond15): Enslaving as an active interface with an up link [ 363.552005][ T5912] hid-generic 0005:0007:5507.0001: item fetching failed at offset 0/2 [ 363.568524][ T5912] hid-generic 0005:0007:5507.0001: probe with driver hid-generic failed with error -22 [ 363.813826][T15826] validate_nla: 2 callbacks suppressed [ 363.813845][T15826] netlink: 'syz.0.2796': attribute type 21 has an invalid length. [ 363.844387][ T5912] tipc: Node number set to 639808778 [ 364.180323][T15849] !: renamed from bond_slave_0 (while UP) [ 364.215905][T15852] block nbd8: Unsupported socket: should be TCP or UNIX. [ 364.332772][T15863] dvmrp0: entered allmulticast mode [ 364.360731][T15863] dvmrp0: left allmulticast mode [ 364.788046][T15896] syzkaller0: entered promiscuous mode [ 364.806996][T15896] syzkaller0: entered allmulticast mode [ 364.829767][T15894] syzkaller0: entered promiscuous mode [ 364.835779][T15894] syzkaller0: entered allmulticast mode [ 365.259112][T15921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.501599][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d768c00: rx timeout, send abort [ 365.999809][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ef18000: rx timeout, send abort [ 366.011611][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d768c00: abort rx timeout. Force session deactivation [ 366.129240][T15962] ip6gre2: entered allmulticast mode [ 366.404000][T15977] nbd: socks must be embedded in a SOCK_ITEM attr [ 366.459473][T15984] netlink: 'syz.1.2834': attribute type 1 has an invalid length. [ 366.508061][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ef18000: abort rx timeout. Force session deactivation [ 366.804822][T16017] __nla_validate_parse: 7 callbacks suppressed [ 366.804840][T16017] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2842'. [ 366.825229][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 366.872499][T16017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 366.950752][T16024] syzkaller0: entered promiscuous mode [ 366.961546][T16024] syzkaller0: entered allmulticast mode [ 366.980044][T16024] veth0: entered promiscuous mode [ 367.000728][T16022] veth0: left promiscuous mode [ 367.143659][T16035] netlink: 'syz.1.2846': attribute type 33 has an invalid length. [ 367.169639][T16042] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2848'. [ 367.174006][T16035] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2846'. [ 367.182934][T16042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2848'. [ 367.583163][T16065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.731879][T16073] delete_channel: no stack [ 367.891475][T16087] tipc: Enabled bearer , priority 0 [ 367.921436][T16089] syzkaller0: entered promiscuous mode [ 367.931828][T16089] syzkaller0: entered allmulticast mode [ 368.018282][T16093] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2860'. [ 368.025830][T16094] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2860'. [ 368.058487][T16089] tipc: Resetting bearer [ 368.129723][T16089] tipc: Disabling bearer [ 368.612627][T16126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2868'. [ 368.707146][T16127] netlink: 'syz.6.2869': attribute type 1 has an invalid length. [ 368.798146][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2869'. [ 368.923416][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.938642][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.947432][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.960688][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.969472][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 369.108366][T16138] wg1 speed is unknown, defaulting to 1000 [ 369.197564][T16150] tipc: Enabling of bearer rejected, failed to enable media [ 369.291706][T16150] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 369.343333][T16150] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 369.446079][T16167] netlink: 'syz.5.2877': attribute type 1 has an invalid length. [ 369.475841][T16167] netlink: 'syz.5.2877': attribute type 3 has an invalid length. [ 369.650606][T16167] syzkaller1: entered promiscuous mode [ 369.656704][T16167] syzkaller1: entered allmulticast mode [ 369.699749][T16176] netlink: 'syz.2.2880': attribute type 18 has an invalid length. [ 369.750425][T16179] veth0_to_team: entered promiscuous mode [ 370.001920][T16187] bond16: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 370.016472][T16187] bond16 (unregistering): Released all slaves [ 370.311346][T16218] netlink: 'syz.2.2887': attribute type 1 has an invalid length. [ 370.319680][T16218] netlink: 'syz.2.2887': attribute type 3 has an invalid length. [ 371.025262][ T5843] Bluetooth: hci0: command tx timeout [ 372.772498][T16138] chnl_net:caif_netlink_parms(): no params data found [ 372.918138][T16300] __nla_validate_parse: 13 callbacks suppressed [ 372.918156][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2901'. [ 373.095787][ T5843] Bluetooth: hci0: command tx timeout [ 373.197938][T16314] v: renamed from vlan0 [ 373.316174][T16326] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2907'. [ 373.509487][T16326] team0: No ports can be present during mode change [ 373.514065][T16339] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2908'. [ 373.549523][T16138] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.574466][T16138] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.616732][T16138] bridge_slave_0: entered allmulticast mode [ 373.659657][T16138] bridge_slave_0: entered promiscuous mode [ 373.689932][T16326] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 373.724780][T16138] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.731936][T16138] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.789451][T16138] bridge_slave_1: entered allmulticast mode [ 373.812067][T16138] bridge_slave_1: entered promiscuous mode [ 373.865973][T16349] netlink: 'syz.6.2911': attribute type 11 has an invalid length. [ 374.004882][T16138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.079232][T16138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.185303][T16354] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2912'. [ 374.293526][T16138] team0: Port device team_slave_0 added [ 374.325354][T16138] team0: Port device team_slave_1 added [ 374.475829][T16380] tipc: Started in network mode [ 374.491673][T16380] tipc: Node identity 4a8dec918191, cluster identity 4711 [ 374.535213][T16380] tipc: Enabled bearer , priority 0 [ 374.560302][T16138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.589130][T16138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.649434][T16138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.688694][T16389] tipc: Disabling bearer [ 374.704096][T16380] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2918'. [ 374.730280][T16138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.754229][T16138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.824345][T16138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.143632][T16138] hsr_slave_0: entered promiscuous mode [ 375.176217][ T5843] Bluetooth: hci0: command tx timeout [ 375.184998][T16138] hsr_slave_1: entered promiscuous mode [ 375.206170][T16427] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2929'. [ 375.215741][T16427] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2929'. [ 375.225163][T16427] netlink: 'syz.2.2929': attribute type 5 has an invalid length. [ 375.233086][T16427] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2929'. [ 375.380658][T16428] netlink: 'syz.1.2930': attribute type 4 has an invalid length. [ 375.396768][T16432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.473769][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 376.067570][T16474] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 376.247303][T16452] tipc: Enabled bearer , priority 0 [ 376.268683][T16451] tipc: Resetting bearer [ 376.540716][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 377.768801][T16451] tipc: Disabling bearer [ 377.791639][T16474] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 377.817487][ T24] tipc: Node number set to 3407670417 [ 377.871863][ T68] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.907671][ T68] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 377.972421][T16138] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.006119][T16515] __nla_validate_parse: 1 callbacks suppressed [ 378.006136][T16515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2952'. [ 378.013032][T16138] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 378.031842][T16138] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 378.112244][ T68] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.145611][ T68] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.252981][T16138] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.300236][T16138] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 378.327352][T16138] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 378.352765][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2956'. [ 378.362083][T16536] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2959'. [ 378.396189][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2956'. [ 378.497165][T16138] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.525068][T16138] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 378.561783][T16138] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 378.699772][T16138] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.721239][T16138] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 378.731405][T16138] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 378.766076][T16553] syzkaller0: entered promiscuous mode [ 378.771639][T16553] syzkaller0: entered allmulticast mode [ 378.824061][T16562] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 378.956534][T16567] tipc: Enabled bearer , priority 0 [ 378.996069][T16567] syzkaller0: entered promiscuous mode [ 379.002852][T16567] syzkaller0: entered allmulticast mode [ 379.073267][T16567] tipc: Resetting bearer [ 379.092853][T16138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.110206][T16565] tipc: Resetting bearer [ 379.140476][T16565] tipc: Disabling bearer [ 379.160663][T16138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.192057][T16138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.220952][T16138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.408367][T16590] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 379.418104][T16590] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 379.831576][T16607] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2974'. [ 380.143556][T16625] netlink: 'syz.6.2978': attribute type 1 has an invalid length. [ 381.452533][T16138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.544868][T16138] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.580588][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.587835][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.640884][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.648122][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.767764][T16138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.812138][T16653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.031405][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 382.033495][T16666] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 382.074627][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 382.263055][T16680] netlink: 'syz.2.2991': attribute type 1 has an invalid length. [ 382.399285][T16680] 8021q: adding VLAN 0 to HW filter on device bond16 [ 382.516083][T16138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.699391][T16698] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 382.709389][T16138] veth0_vlan: entered promiscuous mode [ 382.795956][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 382.902495][T16138] veth1_vlan: entered promiscuous mode [ 383.017563][T16138] veth0_macvtap: entered promiscuous mode [ 383.063731][T16138] veth1_macvtap: entered promiscuous mode [ 383.169988][T16138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.194018][T16138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.223375][T15997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.255039][T15997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.312573][T15997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.330454][T15997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.359204][T16735] netlink: 'syz.5.3003': attribute type 3 has an invalid length. [ 383.369992][T16735] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3003'. [ 383.509659][T16738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.596541][T15997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.605050][T15997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.613000][T16745] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3006'. [ 383.617429][T16742] gre1: entered promiscuous mode [ 383.644422][T16742] gre1: entered allmulticast mode [ 383.645403][T16745] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 383.732609][T16743] gre1: entered promiscuous mode [ 383.776993][T16743] gre1: entered allmulticast mode [ 383.848354][T16748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3007'. [ 383.891999][T16753] 8021q: adding VLAN 0 to HW filter on device bond13 [ 383.957344][T16759] wg1 speed is unknown, defaulting to 1000 [ 383.965224][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.007670][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.275726][T16782] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 384.698709][T16798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3018'. [ 384.734999][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'. [ 384.763378][T16788] wg1 speed is unknown, defaulting to 1000 [ 385.223340][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.233654][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.244123][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.261365][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.270109][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.380556][T16806] wg1 speed is unknown, defaulting to 1000 [ 385.717213][T16826] netlink: 'syz.2.3025': attribute type 1 has an invalid length. [ 385.806424][T16826] 8021q: adding VLAN 0 to HW filter on device bond19 [ 385.957908][T16830] batadv_slave_1: entered promiscuous mode [ 386.033124][T16829] batadv_slave_1: left promiscuous mode [ 386.388823][T16806] chnl_net:caif_netlink_parms(): no params data found [ 386.562514][T16859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3034'. [ 386.575782][T16863] netlink: 'syz.5.3036': attribute type 22 has an invalid length. [ 386.585317][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3036'. [ 386.692172][T16806] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.700087][T16806] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.707859][T16806] bridge_slave_0: entered allmulticast mode [ 386.716431][T16806] bridge_slave_0: entered promiscuous mode [ 386.727047][T16806] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.736739][T16806] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.767695][T16806] bridge_slave_1: entered allmulticast mode [ 386.783525][T16806] bridge_slave_1: entered promiscuous mode [ 386.947479][T16806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.959054][T16806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.098749][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 387.162487][T16894] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 387.335068][ T5843] Bluetooth: hci3: command tx timeout [ 387.758347][T16806] team0: Port device team_slave_0 added [ 387.786221][T16806] team0: Port device team_slave_1 added [ 387.869076][T16914] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3049'. [ 387.911477][T16914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.009210][T16923] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3049'. [ 388.024639][T16923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.042422][T16806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.050372][T16806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.081009][T16806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.098114][T16806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.114373][T16806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.174289][T16806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.291591][T16941] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 388.305267][T16941] bond3 (unregistering): Released all slaves [ 388.336598][T16949] tipc: Started in network mode [ 388.337865][T16948] xt_TPROXY: Can be used only with -p tcp or -p udp [ 388.341572][T16949] tipc: Node identity 1a872315854f, cluster identity 4711 [ 388.356608][T16949] tipc: Enabled bearer , priority 0 [ 388.439669][T16944] syzkaller0: entered promiscuous mode [ 388.445792][T16944] syzkaller0: entered allmulticast mode [ 388.507170][T16944] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 388.606912][T16944] tipc: Resetting bearer [ 388.662125][T16806] hsr_slave_0: entered promiscuous mode [ 388.669065][T16806] hsr_slave_1: entered promiscuous mode [ 388.685333][T16806] debugfs: 'hsr0' already exists in 'hsr' [ 388.694704][T16806] Cannot create hsr debugfs directory [ 388.714743][T16943] tipc: Resetting bearer [ 388.740945][T16943] tipc: Disabling bearer [ 388.966053][T16977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3064'. [ 388.993036][T16980] netlink: 'syz.2.3066': attribute type 6 has an invalid length. [ 389.036774][T16977] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.107980][T16977] bridge_slave_1 (unregistering): left allmulticast mode [ 389.116089][T16977] bridge_slave_1 (unregistering): left promiscuous mode [ 389.130153][T16977] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.151744][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3069'. [ 389.221064][T16987] bond20: entered promiscuous mode [ 389.230153][T16987] bond20: entered allmulticast mode [ 389.267872][T16987] 8021q: adding VLAN 0 to HW filter on device bond20 [ 389.293153][T16990] veth1_macvtap: left promiscuous mode [ 389.299419][T16990] macsec0: entered promiscuous mode [ 389.306060][T16990] macsec0: entered allmulticast mode [ 389.325824][T16991] vlan0: entered allmulticast mode [ 389.332012][T16991] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 389.361203][T16992] veth1_macvtap: entered promiscuous mode [ 389.374403][T16992] veth1_macvtap: entered allmulticast mode [ 389.381679][T16992] macsec0: left promiscuous mode [ 389.391977][T16992] macsec0: left allmulticast mode [ 389.397720][T16992] veth1_macvtap: left allmulticast mode [ 389.414359][ T5843] Bluetooth: hci3: command tx timeout [ 389.571343][T17005] netlink: 'syz.0.3074': attribute type 16 has an invalid length. [ 389.622937][T16806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.702078][T17008] tipc: Cannot configure node identity twice [ 389.717968][T17008] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 389.752417][T17008] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 389.780468][T16806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.857120][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3080'. [ 389.954445][T16806] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 389.968500][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3081'. [ 389.985747][T16806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.161542][T16806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.175694][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 390.224739][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 390.423103][T17043] sctp: [Deprecated]: syz.2.3086 (pid 17043) Use of int in maxseg socket option. [ 390.423103][T17043] Use struct sctp_assoc_value instead [ 390.567805][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'. [ 390.758275][T17059] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3089'. [ 390.779663][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3090'. [ 390.792453][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3089'. [ 390.899362][T16806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 390.926320][T16806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 390.943097][T17073] netlink: 'syz.2.3094': attribute type 83 has an invalid length. [ 390.945745][T16806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.039346][T16806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.120960][T17080] syz_tun: entered allmulticast mode [ 391.163650][T17080] dvmrp6: entered allmulticast mode [ 391.230587][T17075] syz_tun: left allmulticast mode [ 391.287358][T16806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.329088][T16806] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.343045][T16006] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.347872][T17100] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 391.350245][T16006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.411711][T16006] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.418997][T16006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.499927][ T5843] Bluetooth: hci3: command tx timeout [ 391.647349][T17113] netlink: 'syz.5.3106': attribute type 1 has an invalid length. [ 391.741576][T16806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.827146][T17122] openvswitch: netlink: Flow key attr not present in new flow. [ 391.840204][T16806] veth0_vlan: entered promiscuous mode [ 391.868828][T16806] veth1_vlan: entered promiscuous mode [ 391.948931][T16806] veth0_macvtap: entered promiscuous mode [ 391.962905][T16806] veth1_macvtap: entered promiscuous mode [ 391.992558][T16806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.011778][T16806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.041562][T16004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.051441][T16004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.062209][T16004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.073250][T16004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.251722][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.279378][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.343777][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ad57400: rx timeout, send abort [ 392.352976][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ad57400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 392.357450][T16006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.376924][T17147] IPVS: Error connecting to the multicast addr [ 392.424894][T16006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.670009][T17158] netlink: 'syz.1.3016': attribute type 21 has an invalid length. [ 393.432101][T17188] netlink: zone id is out of range [ 393.446889][T17188] netlink: zone id is out of range [ 393.478790][T17188] netlink: zone id is out of range [ 393.491802][T17189] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.506972][T17188] netlink: zone id is out of range [ 393.512125][T17188] netlink: zone id is out of range [ 393.528011][T17188] netlink: del zone limit has 4 unknown bytes [ 393.579390][ T5843] Bluetooth: hci3: command tx timeout [ 393.618927][ T5837] syz_tun (unregistering): left allmulticast mode [ 393.637873][ T5837] syz_tun (unregistering): left promiscuous mode [ 393.638652][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.644673][ T5837] bridge0: port 4(syz_tun) entered disabled state [ 393.670076][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.680142][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.693257][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.702934][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 393.854116][T17196] wg1 speed is unknown, defaulting to 1000 [ 394.357472][T17223] __nla_validate_parse: 11 callbacks suppressed [ 394.357489][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3143'. [ 394.432558][T17223] netlink: 'syz.5.3143': attribute type 10 has an invalid length. [ 394.473475][T17229] : entered promiscuous mode [ 394.480331][T17223] batadv0: entered allmulticast mode [ 394.495655][T17231] netlink: 'syz.5.3143': attribute type 10 has an invalid length. [ 394.514321][T17231] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3143'. [ 394.540740][T17223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.606613][T17223] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 394.646089][T17231] batadv0: entered promiscuous mode [ 394.656636][T17231] bond0: (slave batadv0): Releasing backup interface [ 394.672723][T17231] bridge0: port 3(batadv0) entered blocking state [ 394.686619][T17231] bridge0: port 3(batadv0) entered disabled state [ 394.878531][T17249] netlink: 'syz.1.3149': attribute type 24 has an invalid length. [ 395.065435][T16005] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 395.075779][T16005] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 395.120874][T17196] chnl_net:caif_netlink_parms(): no params data found [ 395.283698][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.303953][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.325063][T17196] bridge_slave_0: entered allmulticast mode [ 395.333044][T17196] bridge_slave_0: entered promiscuous mode [ 395.350152][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.358295][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.366100][T17196] bridge_slave_1: entered allmulticast mode [ 395.374085][T17196] bridge_slave_1: entered promiscuous mode [ 395.394631][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.403916][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.413416][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3153'. [ 395.437995][T17283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'. [ 395.457675][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.526485][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.540802][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.557957][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.627292][T17196] team0: Port device team_slave_0 added [ 395.656180][T17196] team0: Port device team_slave_1 added [ 395.746070][ T5843] Bluetooth: hci4: command tx timeout [ 395.999090][T17313] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3156'. [ 396.072507][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.094996][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.133608][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.167393][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.175843][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.211855][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.231060][T17325] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 396.464002][T17196] hsr_slave_0: entered promiscuous mode [ 396.507633][T17196] hsr_slave_1: entered promiscuous mode [ 396.534466][T17196] debugfs: 'hsr0' already exists in 'hsr' [ 396.560611][T17196] Cannot create hsr debugfs directory [ 396.569207][T17343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.607324][T17343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3164'. [ 396.943016][T17359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.151727][T17196] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.177484][T17196] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.272919][T17196] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.284604][T17196] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.393266][T17196] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.424339][T17196] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.491292][T17376] wg1 speed is unknown, defaulting to 1000 [ 397.510598][T17196] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.542343][T17196] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.652738][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3176'. [ 397.765103][T17390] --map-set only usable from mangle table [ 397.786830][T17390] 8021q: VLANs not supported on ip6tnl0 [ 397.816586][ T5843] Bluetooth: hci4: command tx timeout [ 398.151584][T17196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.172034][T17196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.213690][T17196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.303312][T17196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 398.702982][T17428] IPVS: Error connecting to the multicast addr [ 398.793598][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.891065][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.918715][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.925899][T16004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.982356][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.989594][T16004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.000269][T17434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'. [ 399.045897][T17434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.058560][T17434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.126430][T17434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.133853][T17434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.269241][T17459] netlink: 'syz.5.3192': attribute type 12 has an invalid length. [ 399.322272][T17459] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3192'. [ 399.343193][T17196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.483860][T17466] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20004 [ 399.587829][T17474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.687214][T17478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3198'. [ 399.799738][T17486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3201'. [ 399.850907][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.861981][T17489] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3200'. [ 399.895142][ T5843] Bluetooth: hci4: command tx timeout [ 399.934341][T17488] raw_sendmsg: syz.6.3202 forgot to set AF_INET. Fix it! [ 399.934599][T17490] netlink: 'syz.6.3202': attribute type 10 has an invalid length. [ 400.021432][T17490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 400.063270][T17502] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3205'. [ 400.081847][T17196] veth0_vlan: entered promiscuous mode [ 400.092255][T17490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.144595][T17196] veth1_vlan: entered promiscuous mode [ 400.246508][T17196] veth0_macvtap: entered promiscuous mode [ 400.279415][T17196] veth1_macvtap: entered promiscuous mode [ 400.347777][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.369440][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.419425][T15996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.432533][T15996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.470586][T15996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.491629][T15996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.564264][ T30] audit: type=1107 audit(1762996362.907:3): pid=17517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_Ry '4_\c`_ڦCRz= ,T#SKLSDվgbqcnRB' [ 400.622810][T17523] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 400.650864][T17523] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 400.757753][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.772995][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.944581][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.952440][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.086811][T17537] netlink: 'syz.1.3214': attribute type 4 has an invalid length. [ 401.104713][T17541] netlink: 'syz.0.3216': attribute type 2 has an invalid length. [ 401.113051][T17537] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3214'. [ 401.131142][T17541] netlink: 'syz.0.3216': attribute type 8 has an invalid length. [ 401.143996][T17541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3216'. [ 401.160753][T17537] `: renamed from bond0 (while UP) [ 401.247668][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3215'. [ 401.392729][T17551] netlink: 'syz.1.3217': attribute type 29 has an invalid length. [ 401.408580][T17551] netlink: 'syz.1.3217': attribute type 29 has an invalid length. [ 401.520172][T17557] netlink: 'syz.1.3217': attribute type 29 has an invalid length. [ 401.637055][ T5833] IPVS: starting estimator thread 0... [ 401.653500][T17565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3221'. [ 401.707255][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 401.737167][T17564] IPVS: using max 33 ests per chain, 79200 per kthread [ 401.908071][T17565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3221'. [ 401.985031][ T5843] Bluetooth: hci4: command tx timeout [ 402.713823][T17613] netlink: 'syz.0.3233': attribute type 10 has an invalid length. [ 402.716118][T17615] `: entered promiscuous mode [ 402.736531][T17615] bond_slave_0: entered promiscuous mode [ 402.745734][T17615] bond_slave_1: entered promiscuous mode [ 402.805119][T17613] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 402.912041][T17621] netlink: 'syz.6.3236': attribute type 2 has an invalid length. [ 403.005801][T17627] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000 [ 403.293576][T17644] syzkaller1: entered allmulticast mode [ 403.490177][T17665] netlink: 'syz.6.3251': attribute type 10 has an invalid length. [ 403.553369][T17665] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.618362][T17665] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.625621][T17665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.642697][T17665] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 404.082411][T17693] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 404.601633][T17731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.116863][T17775] netlink: 'syz.6.3279': attribute type 1 has an invalid length. [ 405.395147][T17782] bond3: (slave gretap1): making interface the new active one [ 405.415893][T17782] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 405.469677][T17797] sit1: entered promiscuous mode [ 405.476017][T17797] sit1: entered allmulticast mode [ 406.018940][T17837] sctp: [Deprecated]: syz.5.3291 (pid 17837) Use of int in maxseg socket option. [ 406.018940][T17837] Use struct sctp_assoc_value instead [ 406.129095][T17845] __nla_validate_parse: 50 callbacks suppressed [ 406.129114][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3293'. [ 406.708496][T17882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3298'. [ 406.832935][T17894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3302'. [ 406.849746][T17894] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3302'. [ 406.881948][T17894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3302'. [ 407.076325][T17907] netlink: 'syz.5.3300': attribute type 30 has an invalid length. [ 407.160338][T17907] bond4: option arp_missed_max: invalid value (0) [ 407.167870][T17907] bond4: option arp_missed_max: allowed values 1 - 255 [ 407.217480][T17907] bond4 (unregistering): Released all slaves [ 407.337283][T17923] tipc: Enabling of bearer rejected, failed to enable media [ 407.495660][T17930] sctp: [Deprecated]: syz.6.3309 (pid 17930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.495660][T17930] Use struct sctp_sack_info instead [ 407.500106][T17931] netlink: 'syz.1.3310': attribute type 1 has an invalid length. [ 407.538686][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3309'. [ 407.784027][T17946] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.882257][T17936] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 407.890261][T17936] netlink: 'syz.0.3311': attribute type 11 has an invalid length. [ 407.898604][T17936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3311'. [ 408.168138][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.175982][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.425741][T17934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.449158][T17934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.763772][T17940] geneve2: entered promiscuous mode [ 408.770089][T17940] geneve2: entered allmulticast mode [ 408.778372][T17951] vet0_virt_wifi: renamed from dummy0 [ 408.805364][T16001] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.850018][T16001] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 408.874775][T16001] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.885121][T16001] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 408.895409][T16001] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.914334][T16001] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 408.926941][T16001] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.954677][T16001] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 409.078820][T17979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3320'. [ 409.154427][T17969] wg1 speed is unknown, defaulting to 1000 [ 409.245768][T17979] tipc: Started in network mode [ 409.250724][T17979] tipc: Node identity fedd362b3397, cluster identity 4711 [ 409.263927][T17979] tipc: Enabled bearer , priority 0 [ 409.372548][T17979] syzkaller0: entered promiscuous mode [ 409.383994][T17979] syzkaller0: entered allmulticast mode [ 409.415132][T17979] tipc: Resetting bearer [ 409.438854][T17988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 409.449249][T17997] openvswitch: netlink: IP tunnel dst address not specified [ 409.480103][T17987] bridge2: entered promiscuous mode [ 409.499507][T17987] bridge2: entered allmulticast mode [ 409.516341][T17978] tipc: Resetting bearer [ 409.667113][T18005] Bluetooth: MGMT ver 1.23 [ 409.817611][T18013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3325'. [ 411.001731][T17978] tipc: Disabling bearer [ 411.078426][ T5833] tipc: Node number set to 3444192811 [ 411.337302][T18030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3331'. [ 411.358028][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 411.383229][T18033] tipc: Enabled bearer , priority 0 [ 411.397617][T18033] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 411.601365][T18044] geneve2: left promiscuous mode [ 411.620101][T18044] bridge2: left promiscuous mode [ 411.681814][T15434] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 411.690701][T18038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.701331][T15434] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 411.721112][T18047] netlink: 'syz.6.3335': attribute type 2 has an invalid length. [ 411.736218][T18047] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3335'. [ 411.754415][T15434] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 411.856465][T18051] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 411.887718][T15434] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 412.029138][T18060] pim6reg: entered allmulticast mode [ 412.072819][T18054] : renamed from veth1_vlan [ 412.522551][ T9614] IPVS: starting estimator thread 0... [ 412.617343][T18070] IPVS: using max 32 ests per chain, 76800 per kthread [ 413.870962][ T9617] tipc: Node number set to 3549317681 [ 413.915894][T18091] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3343'. [ 413.932481][T18091] netlink: 'syz.6.3343': attribute type 1 has an invalid length. [ 414.321863][T18115] bridge0: port 3(batadv0) entered blocking state [ 414.328621][T18115] bridge0: port 3(batadv0) entered forwarding state [ 414.337189][T18115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.470590][ T5833] IPVS: starting estimator thread 0... [ 414.486442][T18123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.565897][T18122] IPVS: using max 38 ests per chain, 91200 per kthread [ 414.592081][T18125] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3354'. [ 414.668569][T18130] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3355'. [ 414.976060][T18150] x_tables: unsorted underflow at hook 3 [ 415.055784][T18156] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3365'. [ 415.370969][T18182] netlink: 'syz.1.3368': attribute type 12 has an invalid length. [ 415.379801][T18182] netlink: 'syz.1.3368': attribute type 29 has an invalid length. [ 415.389321][T18182] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3368'. [ 415.405313][T18182] netlink: 51 bytes leftover after parsing attributes in process `syz.1.3368'. [ 415.838854][T18213] bridge1: entered promiscuous mode [ 415.863354][T18213] bridge1: entered allmulticast mode [ 415.892413][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3374'. [ 416.112499][T18232] xt_HMARK: proto mask must be zero with L3 mode [ 416.357615][T18246] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 416.683411][T18265] netlink: 'syz.5.3394': attribute type 7 has an invalid length. [ 416.738384][T18269] __nla_validate_parse: 1 callbacks suppressed [ 416.738403][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3394'. [ 417.190857][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3398'. [ 417.413872][T18304] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 417.544624][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3405'. [ 417.553705][T18307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.591425][T18307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.862358][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3413'. [ 417.897706][T18330] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3413'. [ 417.934422][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3413'. [ 417.997450][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 418.036636][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.064251][T18342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3417'. [ 418.073452][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.127847][T18342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3417'. [ 418.150969][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.173462][T18352] batadv_slave_1: entered promiscuous mode [ 418.180715][T18346] tipc: Started in network mode [ 418.187016][T18346] tipc: Node identity c64d36146046, cluster identity 4711 [ 418.195335][T18346] tipc: Enabled bearer , priority 0 [ 418.202630][T18350] batadv_slave_1: left promiscuous mode [ 418.209542][T18346] syzkaller0: entered promiscuous mode [ 418.209782][T18342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3417'. [ 418.217398][T18346] syzkaller0: entered allmulticast mode [ 418.265231][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.273866][T18345] tipc: Resetting bearer [ 418.328696][T18345] tipc: Disabling bearer [ 418.346554][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.355101][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.373417][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.389783][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.448600][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.472414][T18362] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 418.489498][T18342] netlink: 'syz.2.3417': attribute type 15 has an invalid length. [ 418.553382][T18362] lo: MTU too low for tipc bearer [ 418.609703][T18362] tipc: Enabling of bearer rejected, failed to enable media [ 418.647869][T18373] syzkaller0: entered promiscuous mode [ 418.662990][T18373] syzkaller0: entered allmulticast mode [ 418.758986][T18381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.819195][T18387] xt_hashlimit: size too large, truncated to 1048576 [ 419.241511][T16005] tipc: Subscription rejected, illegal request [ 419.881675][T18453] bridge3: port 1(veth5) entered blocking state [ 419.889725][T18453] bridge3: port 1(veth5) entered disabled state [ 419.897471][T18453] veth5: entered allmulticast mode [ 419.903963][T18453] veth5: entered promiscuous mode [ 419.924661][T18453] bridge3: port 2(veth7) entered blocking state [ 419.931256][T18453] bridge3: port 2(veth7) entered disabled state [ 419.937860][T18453] veth7: entered allmulticast mode [ 419.945250][T18453] veth7: entered promiscuous mode [ 420.851922][T18488] team0: Device wireguard0 is of different type [ 421.186429][T18512] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 421.518692][T18533] bond2: entered promiscuous mode [ 421.524404][T18533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.820277][T18558] __nla_validate_parse: 136 callbacks suppressed [ 421.820295][T18558] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3483'. [ 422.021566][T18560] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3485'. [ 422.185102][T18560] TC_ACT_REPEAT abuse ? [ 422.205511][T18560] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 422.330169][T18577] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3492'. [ 422.343504][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3492'. [ 422.362885][T18577] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.370684][T18577] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.177996][T18635] bond2: invalid ARP target 0.0.0.0 specified for addition [ 423.187126][T18635] bond2: option arp_ip_target: invalid value (0) [ 423.199080][T18635] bond2 (unregistering): Released all slaves [ 423.322895][T18647] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 423.373248][T18649] ipt_rpfilter: unknown options [ 423.379058][T18649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3513'. [ 423.456907][T18651] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3513'. [ 423.523725][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 423.541974][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 423.551981][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 423.561972][T18653] validate_nla: 386 callbacks suppressed [ 423.561990][T18653] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 423.575132][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 423.584312][T18653] nbd: error processing sock list [ 423.584393][T18653] block nbd8: shutting down sockets [ 423.666638][T18653] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 423.674717][T18653] nbd: error processing sock list [ 423.679876][T18653] block nbd8: shutting down sockets [ 423.698851][T18664] netlink: 'syz.2.3517': attribute type 1 has an invalid length. [ 423.766165][T18653] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 423.798766][T18669] sctp: [Deprecated]: syz.5.3518 (pid 18669) Use of int in maxseg socket option. [ 423.798766][T18669] Use struct sctp_assoc_value instead [ 423.804514][T18653] nbd: error processing sock list [ 423.823909][T18669] netlink: 'syz.5.3518': attribute type 39 has an invalid length. [ 423.843035][T18653] block nbd8: shutting down sockets [ 423.894490][T18653] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 423.915805][T18653] nbd: error processing sock list [ 423.921218][T18653] block nbd8: shutting down sockets [ 423.970490][T18670] bond3: (slave gretap1): making interface the new active one [ 423.981413][T18670] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 423.995404][T18653] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 424.005670][T18653] nbd: error processing sock list [ 424.030689][T18653] block nbd8: shutting down sockets [ 424.094930][T18653] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 424.108185][T18653] nbd: error processing sock list [ 424.123419][T18653] block nbd8: shutting down sockets [ 424.249105][T18653] netlink: 'syz.6.3514': attribute type 1 has an invalid length. [ 424.259850][T18690] syzkaller1: entered promiscuous mode [ 424.279096][T18653] nbd: error processing sock list [ 424.289022][T18653] block nbd8: shutting down sockets [ 424.308865][T18690] syzkaller1: entered allmulticast mode [ 424.589517][T18713] wlan0 speed is unknown, defaulting to 1000 [ 424.606967][T18713] wlan0 speed is unknown, defaulting to 1000 [ 424.647104][T18713] wlan0 speed is unknown, defaulting to 1000 [ 424.723079][T18713] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 424.793988][T18713] wlan0 speed is unknown, defaulting to 1000 [ 424.828735][T18713] wlan0 speed is unknown, defaulting to 1000 [ 424.860892][T18713] wlan0 speed is unknown, defaulting to 1000 [ 425.027842][T18713] wlan0 speed is unknown, defaulting to 1000 [ 425.036395][T18713] wlan0 speed is unknown, defaulting to 1000 [ 425.046306][T18713] wlan0 speed is unknown, defaulting to 1000 [ 425.055179][T18713] wlan0 speed is unknown, defaulting to 1000 [ 425.083903][T18713] wlan0 speed is unknown, defaulting to 1000 [ 426.146592][T18812] netlink: 'syz.1.3555': attribute type 2 has an invalid length. [ 426.442878][T18819] bridge4: entered promiscuous mode [ 426.451549][T18819] bridge4: entered allmulticast mode [ 426.576179][T18819] bridge4: entered promiscuous mode [ 426.581624][T18819] bridge4: entered allmulticast mode [ 426.892383][T18846] tipc: Enabled bearer , priority 0 [ 426.905835][T18846] syzkaller0: entered promiscuous mode [ 426.912558][T18846] syzkaller0: entered allmulticast mode [ 426.989856][T18858] tipc: Resetting bearer [ 427.032401][T18861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.086540][T18844] tipc: Resetting bearer [ 427.139733][T18844] tipc: Disabling bearer [ 427.246221][T18869] __nla_validate_parse: 135 callbacks suppressed [ 427.246238][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3573'. [ 427.271199][T18867] wg1 speed is unknown, defaulting to 1000 [ 427.568339][T18867] wlan0 speed is unknown, defaulting to 1000 [ 428.557350][T18930] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3588'. [ 428.686742][T18940] xt_hashlimit: size too large, truncated to 1048576 [ 428.722974][T18947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.817507][T18931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.861089][T18933] bond1: (slave geneve2): making interface the new active one [ 428.876616][T18933] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 428.886343][T18937] IPVS: Error connecting to the multicast addr [ 429.466899][T18981] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 430.085293][T19016] xt_hashlimit: size too large, truncated to 1048576 [ 430.235794][T19023] validate_nla: 1 callbacks suppressed [ 430.235813][T19023] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 430.297776][T19030] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 430.309257][T19026] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 430.316716][T19026] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 430.321286][T19023] netlink: 'syz.1.3610': attribute type 2 has an invalid length. [ 430.359271][T19033] syzkaller1: entered promiscuous mode [ 430.365112][T19033] syzkaller1: entered allmulticast mode [ 430.365130][T19030] netlink: 'syz.1.3610': attribute type 2 has an invalid length. [ 430.771017][T19049] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3616'. [ 430.834924][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 430.878302][T17851] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.901621][T17851] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.919350][T17851] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.933458][T17851] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.946563][T19055] nbd8: detected capacity change from 0 to 127 [ 430.956752][ T5843] block nbd8: Receive control failed (result -32) [ 430.970261][ T7819] block nbd8: Dead connection, failed to find a fallback [ 431.003146][ T7819] block nbd8: shutting down sockets [ 431.034318][ T7819] blk_print_req_error: 138 callbacks suppressed [ 431.034336][ T7819] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.053289][ T7819] buffer_io_error: 138 callbacks suppressed [ 431.053306][ T7819] Buffer I/O error on dev nbd8, logical block 0, async page read [ 431.069727][ T7819] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.079331][ T7819] Buffer I/O error on dev nbd8, logical block 1, async page read [ 431.089511][ T7819] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.109158][ T7819] Buffer I/O error on dev nbd8, logical block 2, async page read [ 431.118349][ T7819] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.129633][ T7819] Buffer I/O error on dev nbd8, logical block 3, async page read [ 431.139878][ T7819] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.150449][ T7819] Buffer I/O error on dev nbd8, logical block 0, async page read [ 431.196767][ T7819] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.219998][T19071] netlink: 'syz.6.3626': attribute type 12 has an invalid length. [ 431.224503][ T7819] Buffer I/O error on dev nbd8, logical block 1, async page read [ 431.231447][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3622'. [ 431.250255][T19070] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3625'. [ 431.256192][ T7819] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.279454][ T7819] Buffer I/O error on dev nbd8, logical block 2, async page read [ 431.282610][T19070] nbd: couldn't find a device at index 0 [ 431.317518][ T7819] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.333661][ T7819] Buffer I/O error on dev nbd8, logical block 3, async page read [ 431.361408][T19075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3627'. [ 431.370785][ T7819] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.373756][T19075] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3627'. [ 431.387281][ T7819] Buffer I/O error on dev nbd8, logical block 0, async page read [ 431.399785][ T7819] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 431.411650][ T7819] Buffer I/O error on dev nbd8, logical block 1, async page read [ 431.429778][ T7819] ldm_validate_partition_table(): Disk read failed. [ 431.441873][ T7819] Dev nbd8: unable to read RDB block 0 [ 431.451799][ T7819] nbd8: unable to read partition table [ 431.544880][ T7819] ldm_validate_partition_table(): Disk read failed. [ 431.556300][ T7819] Dev nbd8: unable to read RDB block 0 [ 431.574033][ T7819] nbd8: unable to read partition table [ 431.677296][T19084] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3630'. [ 431.852900][T19111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3636'. [ 431.990382][T19119] delete_channel: no stack [ 432.061312][T19123] tipc: Enabled bearer , priority 0 [ 432.069227][T19123] syzkaller0: entered promiscuous mode [ 432.075235][T19123] syzkaller0: entered allmulticast mode [ 432.110901][T19123] tipc: Resetting bearer [ 432.136131][T19122] tipc: Resetting bearer [ 432.180546][T19122] tipc: Disabling bearer [ 432.345404][T19135] syzkaller0: entered promiscuous mode [ 432.351011][T19135] syzkaller0: entered allmulticast mode [ 432.390136][T19138] __nla_validate_parse: 1 callbacks suppressed [ 432.390153][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3646'. [ 432.435470][T19135] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3645'. [ 432.436180][T19138] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3646'. [ 432.507488][T19143] netlink: 'syz.1.3648': attribute type 7 has an invalid length. [ 432.518169][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 432.572876][T19145] netlink: 212340 bytes leftover after parsing attributes in process `syz.6.3649'. [ 432.583583][T19145] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 433.042679][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3657'. [ 433.042681][T19171] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3659'. [ 433.129485][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3662'. [ 433.155087][T19180] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3659'. [ 433.203068][T19182] netlink: 'syz.5.3661': attribute type 33 has an invalid length. [ 433.211590][T19182] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3661'. [ 433.870741][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.480365][T19167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.508238][T19167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.834015][T19167] vlan0: left allmulticast mode [ 434.839867][T19167] veth0_vlan: left allmulticast mode [ 434.845486][T19167] vlan0: left promiscuous mode [ 434.964692][T13454] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.000921][T13454] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.054346][T17965] wlan0 speed is unknown, defaulting to 1000 [ 435.057427][T13454] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.086327][T17965] syz0: Port: 1 Link DOWN [ 435.090459][T13454] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.119517][T19194] netlink: 'syz.2.3666': attribute type 1 has an invalid length. [ 435.123897][T19191] netlink: 'syz.1.3663': attribute type 64 has an invalid length. [ 435.154666][T19193] netlink: 'syz.2.3666': attribute type 1 has an invalid length. [ 435.250412][T19204] netlink: 'syz.5.3668': attribute type 2 has an invalid length. [ 436.143404][T19212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.176708][T19212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.656332][T13454] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.679570][T13454] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.712885][T13454] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.734344][T13454] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.784048][T13454] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.806288][T19251] netlink: 'syz.5.3679': attribute type 8 has an invalid length. [ 436.815860][T13454] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.825391][T19253] netlink: 'syz.5.3679': attribute type 8 has an invalid length. [ 436.833469][T13454] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.862877][T13454] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.464568][T19301] netlink: 'syz.1.3689': attribute type 12 has an invalid length. [ 437.557226][T19301] bond2: option primary_reselect: invalid value (255) [ 437.598853][T19313] netlink: 'syz.1.3689': attribute type 16 has an invalid length. [ 437.636115][T19313] netlink: 'syz.1.3689': attribute type 17 has an invalid length. [ 437.729456][T19301] bond2 (unregistering): Released all slaves [ 437.947717][T19313] `: left promiscuous mode [ 437.952270][T19313] bond_slave_0: left promiscuous mode [ 437.975727][T19313] bond_slave_1: left promiscuous mode [ 437.985348][T19313] 8021q: adding VLAN 0 to HW filter on device ` [ 437.990210][T19332] netlink: 'syz.0.3698': attribute type 1 has an invalid length. [ 438.001981][T19313] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.017423][T19313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.110554][T19332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.139913][T19341] __nla_validate_parse: 9 callbacks suppressed [ 438.139928][T19341] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3701'. [ 438.233390][T19345] netlink: 'syz.2.3700': attribute type 1 has an invalid length. [ 438.266681][ T30] audit: type=1800 audit(1762996400.607:4): pid=19344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3702" name="memory.events" dev="tmpfs" ino=669 res=0 errno=0 [ 438.308581][ T30] audit: type=1804 audit(1762996400.607:5): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3702" name="/newroot/128/memory.events" dev="tmpfs" ino=669 res=1 errno=0 [ 438.375031][T19355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3706'. [ 438.380471][T19348] macvlan2: entered promiscuous mode [ 438.397455][T19348] macvlan2: entered allmulticast mode [ 438.403962][T19348] bond4: entered promiscuous mode [ 438.410324][T19348] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.458267][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'. [ 438.487148][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3703'. [ 438.516430][T19348] bond4: left promiscuous mode [ 438.692703][T19350] $H: renamed from bond0 [ 438.700563][T19350] $H: entered promiscuous mode [ 438.706377][T19350] bond_slave_0: entered promiscuous mode [ 438.712417][T19350] bond_slave_1: entered promiscuous mode [ 438.719039][T19350] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 438.726513][T19350] bridge0: entered promiscuous mode [ 438.891236][T19373] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 438.957682][T19375] netlink: 51 bytes leftover after parsing attributes in process `syz.6.3710'. [ 439.022289][T19375] netlink: 'syz.6.3710': attribute type 1 has an invalid length. [ 439.039843][T19375] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3710'. [ 439.050415][T19375] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3710'. [ 439.161916][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3716'. [ 439.248432][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.281698][T19402] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3720'. [ 439.302374][T19403] netlink: 'syz.2.3719': attribute type 1 has an invalid length. [ 439.387547][T19403] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.418919][T19408] bond5: (slave veth3): Enslaving as an active interface with a down link [ 439.433731][T19403] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 439.560931][T19403] bond5: (slave veth5): Enslaving as an active interface with a down link [ 439.692694][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3729'. [ 439.747981][T19434] xfrm1: entered promiscuous mode [ 439.758946][T19434] xfrm1: entered allmulticast mode [ 439.853197][T19440] wg1 speed is unknown, defaulting to 1000 [ 440.250626][T19440] wlan0 speed is unknown, defaulting to 1000 [ 440.363152][T19457] x_tables: duplicate entry at hook 3 [ 440.837497][T19473] netlink: 'syz.2.3739': attribute type 1 has an invalid length. [ 440.884555][T19473] netlink: 'syz.2.3739': attribute type 1 has an invalid length. [ 441.646781][T19511] xt_l2tp: invalid flags combination: 0 [ 442.236175][T19564] veth0: entered promiscuous mode [ 442.249556][T19563] veth0: left promiscuous mode [ 443.227512][T19628] __nla_validate_parse: 10 callbacks suppressed [ 443.227529][T19628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3776'. [ 443.739986][T19645] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 1, id = 0 [ 443.740269][T19646] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3781'. [ 443.798538][T19648] delete_channel: no stack [ 443.813802][T19648] delete_channel: no stack [ 444.119595][T19667] xt_nat: multiple ranges no longer supported [ 444.342503][T19678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.668408][T19697] sit0: mtu less than device minimum [ 444.695141][T19697] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3798'. [ 444.905813][T19715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3800'. [ 444.917053][T19716] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.058731][T19724] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 445.101908][T19724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.270648][T19735] x_tables: unsorted underflow at hook 3 [ 445.458063][T19741] syzkaller1: entered promiscuous mode [ 445.476894][T19741] syzkaller1: entered allmulticast mode [ 445.491320][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3811'. [ 445.516427][T19748] netlink: 'syz.6.3813': attribute type 10 has an invalid length. [ 445.598669][T19750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3811'. [ 445.619437][T19752] tipc: Enabled bearer , priority 0 [ 445.627701][T19752] syzkaller0: entered promiscuous mode [ 445.633653][T19752] syzkaller0: entered allmulticast mode [ 445.693413][T19752] tipc: Resetting bearer [ 445.730979][T19751] tipc: Resetting bearer [ 445.791126][T19751] tipc: Disabling bearer [ 446.161790][T19790] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3823'. [ 446.342099][T19796] bond4: Removing last ns target with arp_interval on [ 446.677249][T19815] lo: entered allmulticast mode [ 446.709913][T19815] dvmrp6: entered allmulticast mode [ 446.743065][T19815] ip6gre1: entered allmulticast mode [ 447.021174][T19838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.103937][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'. [ 447.171332][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3844'. [ 447.187916][T19849] netlink: 'syz.6.3844': attribute type 10 has an invalid length. [ 447.202038][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.184542][T19858] netlink: 'syz.2.3847': attribute type 1 has an invalid length. [ 448.271159][T19858] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3847'. [ 448.328781][T19860] syzkaller0: entered promiscuous mode [ 448.334863][T19860] syzkaller0: entered allmulticast mode [ 448.367552][T19862] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3848'. [ 448.510560][T19881] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3852'. [ 448.590082][T19886] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 448.599457][T19886] tipc: Enabled bearer , priority 10 [ 448.607828][T19890] netlink: 'syz.5.3853': attribute type 1 has an invalid length. [ 448.732901][T19897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3856'. [ 448.752370][T19897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3856'. [ 449.956134][T19890] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 450.155525][T19903] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.171552][T19903] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.453090][T19931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3864'. [ 450.522189][T19933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3865'. [ 450.623032][T19903] bridge1: left promiscuous mode [ 450.729560][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3866'. [ 450.767400][T19933] bond0: (slave bond_slave_1): Releasing backup interface [ 450.828173][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.837802][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.861936][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.895905][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.997574][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 451.008760][T19947] netlink: 516 bytes leftover after parsing attributes in process `syz.0.3870'. [ 451.056745][T19957] netlink: 'syz.5.3872': attribute type 1 has an invalid length. [ 451.394980][T19981] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 451.468443][T19986] openvswitch: netlink: Missing key (keys=40, expected=80) [ 451.763043][ T9622] IPVS: starting estimator thread 0... [ 451.875151][T20007] IPVS: using max 31 ests per chain, 74400 per kthread [ 451.897653][T20014] veth0: entered promiscuous mode [ 451.961180][T20013] veth0: left promiscuous mode [ 452.264858][T20035] netlink: 'syz.1.3894': attribute type 2 has an invalid length. [ 452.323218][T20035] 9: entered promiscuous mode [ 453.296706][T20072] netlink: 'syz.6.3900': attribute type 2 has an invalid length. [ 453.545536][T20094] __nla_validate_parse: 10 callbacks suppressed [ 453.545554][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3905'. [ 453.700632][T20106] netlink: 'syz.5.3909': attribute type 7 has an invalid length. [ 453.724802][T20106] netlink: 'syz.5.3909': attribute type 7 has an invalid length. [ 454.115163][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3914'. [ 454.519157][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 454.535895][T20138] hsr_slave_0: left promiscuous mode [ 454.542078][T20141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.554365][T20138] hsr_slave_1: left promiscuous mode [ 455.049459][T20157] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 455.074396][T20157] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 455.356153][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3923'. [ 455.385325][T20173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3923'. [ 455.608830][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3927'. [ 455.907170][T20215] sit0: entered promiscuous mode [ 455.918648][T20215] netlink: 'syz.6.3932': attribute type 1 has an invalid length. [ 455.937852][T20215] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3932'. [ 455.996606][T20220] macvtap1: entered promiscuous mode [ 456.001943][T20220] vlan0: entered promiscuous mode [ 456.080860][T20220] macvtap1: entered allmulticast mode [ 456.111780][T20230] netlink: 'syz.1.3937': attribute type 3 has an invalid length. [ 456.121318][T20220] vlan0: entered allmulticast mode [ 456.140704][T20220] veth0_vlan: entered allmulticast mode [ 456.231300][T20223] macvtap2: entered promiscuous mode [ 456.255276][T20223] macvtap2: entered allmulticast mode [ 456.951312][T20273] netlink: 'syz.1.3949': attribute type 1 has an invalid length. [ 457.417518][T20308] tipc: Enabled bearer , priority 0 [ 457.446664][T20308] syzkaller0: entered promiscuous mode [ 457.456346][T20308] syzkaller0: entered allmulticast mode [ 457.627179][T20308] tipc: Resetting bearer [ 457.705204][T20305] tipc: Resetting bearer [ 457.819167][T20305] tipc: Disabling bearer [ 457.853504][T20334] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3964'. [ 458.145478][T20353] netlink: 'syz.5.3969': attribute type 10 has an invalid length. [ 458.443820][T20374] openvswitch: netlink: Flow key attr not present in new flow. [ 458.495131][T20377] syzkaller1: entered promiscuous mode [ 458.510512][T20377] syzkaller1: entered allmulticast mode [ 458.521852][T20380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3979'. [ 458.548007][T20382] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3979'. [ 458.578482][T20384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3980'. [ 458.739907][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3982'. [ 458.771047][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3982'. [ 458.818241][T20396] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3982'. [ 458.845511][T20396] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3982'. [ 458.885429][T20396] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3982'. [ 459.008969][T20405] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 459.046330][T20405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.590989][T20443] xt_l2tp: invalid flags combination: 8 [ 459.616485][T20445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3996'. [ 459.632503][T20445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3996'. [ 459.849969][ T5493] veth0_vlan: left promiscuous mode [ 459.880238][ T5493] veth0_vlan: entered promiscuous mode [ 460.146039][T20472] SET target dimension over the limit! [ 460.735159][T20502] openvswitch: netlink: EtherType 50a is less than min 600 [ 460.808505][T20505] tipc: Enabled bearer , priority 0 [ 460.816498][T20506] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4008'. [ 460.820409][T20505] syzkaller0: entered promiscuous mode [ 460.841189][T20505] syzkaller0: entered allmulticast mode [ 460.879846][T20505] tipc: Resetting bearer [ 460.893792][T20505] delete_channel: no stack [ 460.922649][T20512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4012'. [ 460.938439][T20503] tipc: Resetting bearer [ 461.003683][T20503] tipc: Disabling bearer [ 461.561483][T20550] netlink: 'syz.2.4022': attribute type 1 has an invalid length. [ 461.621322][T20550] netlink: 'syz.2.4022': attribute type 11 has an invalid length. [ 461.691696][T20562] wg1 speed is unknown, defaulting to 1000 [ 462.077917][T20562] wlan0 speed is unknown, defaulting to 1000 [ 462.448364][T20606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.634508][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 462.692134][T20627] netlink: 'syz.5.4039': attribute type 21 has an invalid length. [ 462.701324][T20628] netlink: 'syz.5.4039': attribute type 21 has an invalid length. [ 463.012357][T20641] SET target dimension over the limit! [ 463.141141][T20654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.279743][T17853] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.301244][T17853] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.313377][T17853] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.363998][T17853] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.439798][T20671] SET target dimension over the limit! [ 463.680402][T20691] __nla_validate_parse: 14 callbacks suppressed [ 463.680419][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4058'. [ 463.698770][T20691] netlink: 'syz.0.4058': attribute type 12 has an invalid length. [ 463.707011][T20691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4058'. [ 463.721988][T20690] tipc: Enabled bearer , priority 0 [ 463.730351][T20691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.736569][T20690] syzkaller0: entered promiscuous mode [ 463.756987][T20690] syzkaller0: entered allmulticast mode [ 463.777518][T20695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4057'. [ 463.786733][T20695] netlink: 'syz.6.4057': attribute type 7 has an invalid length. [ 463.798849][T20695] netlink: 'syz.6.4057': attribute type 8 has an invalid length. [ 463.808023][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4057'. [ 463.851312][T20695] gretap0: entered promiscuous mode [ 463.857677][T20695] batadv_slave_1: entered promiscuous mode [ 463.863639][T20695] batadv_slave_1: left promiscuous mode [ 463.870071][T20695] gretap0: left promiscuous mode [ 463.880636][T20690] tipc: Resetting bearer [ 463.958214][T20687] tipc: Resetting bearer [ 464.009841][T20687] tipc: Disabling bearer [ 464.069911][T20707] tipc: Resetting bearer [ 464.078117][T20705] tipc: Enabling of bearer rejected, already enabled [ 464.130299][T20713] netlink: 'syz.5.4064': attribute type 32 has an invalid length. [ 464.138820][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4064'. [ 464.191469][T20713] bond5: option coupled_control: invalid value (52) [ 464.217757][T20713] bond5 (unregistering): Released all slaves [ 464.381649][T20727] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4068'. [ 464.408914][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4068'. [ 464.855174][T16005] tipc: Resetting bearer [ 465.090712][T20762] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4077'. [ 465.212102][T20796] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4081'. [ 465.240762][T20754] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 465.482336][T20751] bridge0: port 3(batadv0) entered disabled state [ 465.489436][T20751] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.563849][T20751] batadv0: left allmulticast mode [ 465.577262][T20751] batadv0: left promiscuous mode [ 465.582876][T20751] bridge0: port 3(batadv0) entered disabled state [ 465.629685][T20751] bridge_slave_0: left allmulticast mode [ 465.636556][T20751] bridge_slave_0: left promiscuous mode [ 465.642428][T20751] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.657813][T20751] bridge_slave_1: left allmulticast mode [ 465.672224][T20751] bridge_slave_1: left promiscuous mode [ 465.679157][T20751] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.703786][T20751] bond0: (slave 1!): Releasing backup interface [ 465.748364][T20751] team0: Port device team_slave_0 removed [ 465.766527][T20751] team0: Port device team_slave_1 removed [ 465.789843][T20751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.809020][T20751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.828774][T20751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 466.186839][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 466.503828][T20850] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001 [ 466.777820][T20872] team0: Device gtp0 is of different type [ 467.271676][T20914] netlink: 'syz.2.4111': attribute type 2 has an invalid length. [ 467.295095][T20914] netlink: 'syz.2.4111': attribute type 8 has an invalid length. [ 467.319724][T20906] netlink: 'syz.5.4109': attribute type 1 has an invalid length. [ 467.831657][T20943] bridge4: entered promiscuous mode [ 467.841389][T20943] bridge4: entered allmulticast mode [ 468.455911][T20978] wg1 speed is unknown, defaulting to 1000 [ 468.456022][T20980] netlink: 'syz.0.4129': attribute type 7 has an invalid length. [ 468.646600][T20994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.729071][T20978] wlan0 speed is unknown, defaulting to 1000 [ 468.863260][T21005] netlink: 'syz.6.4139': attribute type 12 has an invalid length. [ 468.902548][T21005] bond0: option primary_reselect: invalid value (255) [ 468.912846][T21005] bond0 (unregistering): Released all slaves [ 468.932596][T21012] __nla_validate_parse: 11 callbacks suppressed [ 468.932614][T21012] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4136'. [ 468.998063][T21012] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.4136'. [ 469.179591][T21007] tipc: Enabled bearer , priority 0 [ 469.202059][T21023] syzkaller0: entered promiscuous mode [ 469.207890][T21030] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4143'. [ 469.218145][T21023] syzkaller0: entered allmulticast mode [ 469.230423][T21032] veth0_to_team: entered promiscuous mode [ 469.246159][T21007] tipc: Resetting bearer [ 469.338255][T21003] tipc: Resetting bearer [ 469.408148][T21003] tipc: Disabling bearer [ 469.539585][T21050] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4148'. [ 470.013280][T21069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4154'. [ 470.248567][T21084] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4156'. [ 470.305961][T21083] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4156'. [ 470.346942][T21088] netlink: 'syz.1.4158': attribute type 1 has an invalid length. [ 470.415820][T21084] vlan0: entered allmulticast mode [ 470.420992][T21084] gretap0: entered allmulticast mode [ 470.448476][T21083] vlan0: entered allmulticast mode [ 470.470396][ T8707] udevd[8707]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 470.502219][T21090] bond2 (unregistering): Released all slaves [ 470.519037][T21088] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 470.519542][T21098] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4161'. [ 470.577994][T21095] 8021q: adding VLAN 0 to HW filter on device bond8 [ 470.587150][T21095] bond0: (slave bond8): Enslaving as an active interface with an up link [ 470.598718][T21102] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4161'. [ 470.608693][T21098] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4161'. [ 470.721069][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.755955][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.767768][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.792429][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.810833][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.843025][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.856997][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.888686][T21115] netlink: 'syz.6.4164': attribute type 6 has an invalid length. [ 470.889183][T21125] netdevsim netdevsim5: Direct firmware load for /. failed with error -2 [ 470.909429][T21125] netdevsim netdevsim5: Falling back to sysfs fallback for: /. [ 471.125983][T21132] [ 471.128351][T21132] ====================================================== [ 471.135372][T21132] WARNING: possible circular locking dependency detected [ 471.142402][T21132] syzkaller #0 Not tainted [ 471.146813][T21132] ------------------------------------------------------ [ 471.153826][T21132] syz.6.4169/21132 is trying to acquire lock: [ 471.159887][T21132] ffff888027ef1988 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 471.169305][T21132] [ 471.169305][T21132] but task is already holding lock: [ 471.176670][T21132] ffff888027ef1448 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 471.186880][T21132] [ 471.186880][T21132] which lock already depends on the new lock. [ 471.186880][T21132] [ 471.197286][T21132] [ 471.197286][T21132] the existing dependency chain (in reverse order) is: [ 471.206304][T21132] [ 471.206304][T21132] -> #6 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 471.214927][T21132] lock_acquire+0x120/0x360 [ 471.219950][T21132] blk_alloc_queue+0x538/0x620 [ 471.225221][T21132] __blk_mq_alloc_disk+0x15c/0x340 [ 471.230833][T21132] nbd_dev_add+0x46c/0xae0 [ 471.235751][T21132] nbd_genl_connect+0x919/0x18f0 [ 471.241196][T21132] genl_family_rcv_msg_doit+0x215/0x300 [ 471.247245][T21132] genl_rcv_msg+0x60e/0x790 [ 471.252248][T21132] netlink_rcv_skb+0x208/0x470 [ 471.257521][T21132] genl_rcv+0x28/0x40 [ 471.262016][T21132] netlink_unicast+0x82f/0x9e0 [ 471.267293][T21132] netlink_sendmsg+0x805/0xb30 [ 471.272579][T21132] __sock_sendmsg+0x21c/0x270 [ 471.277765][T21132] ____sys_sendmsg+0x505/0x830 [ 471.283041][T21132] ___sys_sendmsg+0x21f/0x2a0 [ 471.288235][T21132] __x64_sys_sendmsg+0x19b/0x260 [ 471.293688][T21132] do_syscall_64+0xfa/0xfa0 [ 471.298704][T21132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.305102][T21132] [ 471.305102][T21132] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 471.312322][T21132] lock_acquire+0x120/0x360 [ 471.317324][T21132] fs_reclaim_acquire+0x72/0x100 [ 471.322766][T21132] kmem_cache_alloc_node_noprof+0x48/0x710 [ 471.329078][T21132] __alloc_skb+0x112/0x2d0 [ 471.334002][T21132] __ip6_append_data+0x2c16/0x3f30 [ 471.339626][T21132] ip6_append_data+0x1c1/0x380 [ 471.344893][T21132] rawv6_sendmsg+0x1286/0x1830 [ 471.350154][T21132] __sock_sendmsg+0x19c/0x270 [ 471.355330][T21132] ____sys_sendmsg+0x505/0x830 [ 471.360594][T21132] ___sys_sendmsg+0x21f/0x2a0 [ 471.365768][T21132] __x64_sys_sendmsg+0x19b/0x260 [ 471.371204][T21132] do_syscall_64+0xfa/0xfa0 [ 471.376209][T21132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.382604][T21132] [ 471.382604][T21132] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 471.390318][T21132] lock_acquire+0x120/0x360 [ 471.395326][T21132] lock_sock_nested+0x48/0x100 [ 471.400594][T21132] inet_shutdown+0x6a/0x390 [ 471.405594][T21132] nbd_mark_nsock_dead+0x2e9/0x560 [ 471.411208][T21132] recv_work+0x1af4/0x1c10 [ 471.416126][T21132] process_scheduled_works+0xae1/0x17b0 [ 471.422176][T21132] worker_thread+0x8a0/0xda0 [ 471.427264][T21132] kthread+0x711/0x8a0 [ 471.431838][T21132] ret_from_fork+0x4bc/0x870 [ 471.436928][T21132] ret_from_fork_asm+0x1a/0x30 [ 471.442199][T21132] [ 471.442199][T21132] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 471.449840][T21132] lock_acquire+0x120/0x360 [ 471.454863][T21132] __mutex_lock+0x187/0x1350 [ 471.460052][T21132] nbd_queue_rq+0x257/0xf10 [ 471.465060][T21132] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 471.471112][T21132] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 471.477949][T21132] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 471.484451][T21132] blk_mq_run_hw_queue+0x348/0x4f0 [ 471.490068][T21132] blk_mq_dispatch_list+0xd0c/0xe00 [ 471.495776][T21132] blk_mq_flush_plug_list+0x469/0x550 [ 471.501653][T21132] __blk_flush_plug+0x3d3/0x4b0 [ 471.507012][T21132] __submit_bio+0x2d3/0x5a0 [ 471.512018][T21132] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 471.518155][T21132] block_read_full_folio+0x599/0x830 [ 471.523958][T21132] filemap_read_folio+0x117/0x380 [ 471.529503][T21132] do_read_cache_folio+0x350/0x590 [ 471.535127][T21132] read_part_sector+0xb6/0x2b0 [ 471.540405][T21132] adfspart_check_ICS+0xa4/0xa50 [ 471.545847][T21132] bdev_disk_changed+0x75f/0x14b0 [ 471.551377][T21132] blkdev_get_whole+0x380/0x510 [ 471.556751][T21132] bdev_open+0x31e/0xd30 [ 471.561498][T21132] blkdev_open+0x457/0x600 [ 471.566416][T21132] do_dentry_open+0x953/0x13f0 [ 471.571686][T21132] vfs_open+0x3b/0x340 [ 471.576254][T21132] path_openat+0x2ee5/0x3830 [ 471.581351][T21132] do_filp_open+0x1fa/0x410 [ 471.586364][T21132] do_sys_openat2+0x121/0x1c0 [ 471.591563][T21132] __x64_sys_openat+0x138/0x170 [ 471.596931][T21132] do_syscall_64+0xfa/0xfa0 [ 471.601949][T21132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.608356][T21132] [ 471.608356][T21132] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 471.615561][T21132] lock_acquire+0x120/0x360 [ 471.620587][T21132] __mutex_lock+0x187/0x1350 [ 471.625690][T21132] nbd_queue_rq+0xc8/0xf10 [ 471.630612][T21132] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 471.636662][T21132] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 471.643496][T21132] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 471.649977][T21132] blk_mq_run_hw_queue+0x348/0x4f0 [ 471.655594][T21132] blk_mq_dispatch_list+0xd0c/0xe00 [ 471.661299][T21132] blk_mq_flush_plug_list+0x469/0x550 [ 471.667188][T21132] __blk_flush_plug+0x3d3/0x4b0 [ 471.672543][T21132] __submit_bio+0x2d3/0x5a0 [ 471.677546][T21132] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 471.683680][T21132] block_read_full_folio+0x599/0x830 [ 471.689562][T21132] filemap_read_folio+0x117/0x380 [ 471.695092][T21132] do_read_cache_folio+0x350/0x590 [ 471.700705][T21132] read_part_sector+0xb6/0x2b0 [ 471.705971][T21132] adfspart_check_ICS+0xa4/0xa50 [ 471.711412][T21132] bdev_disk_changed+0x75f/0x14b0 [ 471.716940][T21132] blkdev_get_whole+0x380/0x510 [ 471.722299][T21132] bdev_open+0x31e/0xd30 [ 471.727058][T21132] blkdev_open+0x457/0x600 [ 471.731973][T21132] do_dentry_open+0x953/0x13f0 [ 471.737236][T21132] vfs_open+0x3b/0x340 [ 471.741805][T21132] path_openat+0x2ee5/0x3830 [ 471.746901][T21132] do_filp_open+0x1fa/0x410 [ 471.751915][T21132] do_sys_openat2+0x121/0x1c0 [ 471.757092][T21132] __x64_sys_openat+0x138/0x170 [ 471.762442][T21132] do_syscall_64+0xfa/0xfa0 [ 471.767460][T21132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.773856][T21132] [ 471.773856][T21132] -> #1 (set->srcu){.+.+}-{0:0}: [ 471.781049][T21132] lock_sync+0xba/0x160 [ 471.785706][T21132] __synchronize_srcu+0x96/0x3a0 [ 471.791144][T21132] elevator_switch+0x12b/0x640 [ 471.796415][T21132] elevator_change+0x315/0x4c0 [ 471.801682][T21132] elevator_set_default+0x186/0x260 [ 471.807385][T21132] blk_register_queue+0x34e/0x3f0 [ 471.812909][T21132] __add_disk+0x677/0xd50 [ 471.817742][T21132] add_disk_fwnode+0xfc/0x480 [ 471.822918][T21132] nbd_dev_add+0x717/0xae0 [ 471.827834][T21132] nbd_init+0x1c6/0x240 [ 471.832505][T21132] do_one_initcall+0x236/0x820 [ 471.837792][T21132] do_initcall_level+0x104/0x190 [ 471.843246][T21132] do_initcalls+0x59/0xa0 [ 471.848081][T21132] kernel_init_freeable+0x334/0x4b0 [ 471.853786][T21132] kernel_init+0x1d/0x1d0 [ 471.858619][T21132] ret_from_fork+0x4bc/0x870 [ 471.863711][T21132] ret_from_fork_asm+0x1a/0x30 [ 471.868981][T21132] [ 471.868981][T21132] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 471.876782][T21132] validate_chain+0xb9b/0x2140 [ 471.882138][T21132] __lock_acquire+0xab9/0xd20 [ 471.887314][T21132] lock_acquire+0x120/0x360 [ 471.892318][T21132] __mutex_lock+0x187/0x1350 [ 471.897415][T21132] elevator_change+0x1e5/0x4c0 [ 471.902688][T21132] elevator_set_none+0x42/0xb0 [ 471.907958][T21132] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 471.914266][T21132] nbd_start_device+0x17f/0xb10 [ 471.919705][T21132] nbd_genl_connect+0x135b/0x18f0 [ 471.925229][T21132] genl_family_rcv_msg_doit+0x215/0x300 [ 471.931280][T21132] genl_rcv_msg+0x60e/0x790 [ 471.936290][T21132] netlink_rcv_skb+0x208/0x470 [ 471.941556][T21132] genl_rcv+0x28/0x40 [ 471.946043][T21132] netlink_unicast+0x82f/0x9e0 [ 471.951311][T21132] netlink_sendmsg+0x805/0xb30 [ 471.956575][T21132] __sock_sendmsg+0x21c/0x270 [ 471.961761][T21132] ____sys_sendmsg+0x505/0x830 [ 471.967025][T21132] ___sys_sendmsg+0x21f/0x2a0 [ 471.972200][T21132] __x64_sys_sendmsg+0x19b/0x260 [ 471.977639][T21132] do_syscall_64+0xfa/0xfa0 [ 471.982650][T21132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.989045][T21132] [ 471.989045][T21132] other info that might help us debug this: [ 471.989045][T21132] [ 471.999261][T21132] Chain exists of: [ 471.999261][T21132] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#70 [ 471.999261][T21132] [ 472.012979][T21132] Possible unsafe locking scenario: [ 472.012979][T21132] [ 472.020408][T21132] CPU0 CPU1 [ 472.025757][T21132] ---- ---- [ 472.031101][T21132] lock(&q->q_usage_counter(io)#70); [ 472.036462][T21132] lock(fs_reclaim); [ 472.042944][T21132] lock(&q->q_usage_counter(io)#70); [ 472.050821][T21132] lock(&q->elevator_lock); [ 472.055396][T21132] [ 472.055396][T21132] *** DEADLOCK *** [ 472.055396][T21132] [ 472.063516][T21132] 6 locks held by syz.6.4169/21132: [ 472.068690][T21132] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 472.076857][T21132] #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 472.085806][T21132] #2: ffff8880782b91c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 472.097178][T21132] #3: ffff8880782b90d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 472.108114][T21132] #4: ffff888027ef1448 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 472.118719][T21132] #5: ffff888027ef1480 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 472.129580][T21132] [ 472.129580][T21132] stack backtrace: [ 472.135462][T21132] CPU: 0 UID: 0 PID: 21132 Comm: syz.6.4169 Not tainted syzkaller #0 PREEMPT(full) [ 472.135490][T21132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.135504][T21132] Call Trace: [ 472.135510][T21132] [ 472.135518][T21132] dump_stack_lvl+0x189/0x250 [ 472.135543][T21132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.135559][T21132] ? __pfx__printk+0x10/0x10 [ 472.135572][T21132] ? print_lock_name+0xde/0x100 [ 472.135586][T21132] print_circular_bug+0x2ee/0x310 [ 472.135603][T21132] check_noncircular+0x134/0x160 [ 472.135619][T21132] validate_chain+0xb9b/0x2140 [ 472.135641][T21132] __lock_acquire+0xab9/0xd20 [ 472.135655][T21132] ? elevator_change+0x1e5/0x4c0 [ 472.135671][T21132] lock_acquire+0x120/0x360 [ 472.135682][T21132] ? elevator_change+0x1e5/0x4c0 [ 472.135703][T21132] __mutex_lock+0x187/0x1350 [ 472.135721][T21132] ? elevator_change+0x1e5/0x4c0 [ 472.135738][T21132] ? xa_find_after+0xae/0x430 [ 472.135752][T21132] ? xa_find_after+0x402/0x430 [ 472.135763][T21132] ? elevator_change+0x1e5/0x4c0 [ 472.135779][T21132] ? xa_find_after+0xae/0x430 [ 472.135790][T21132] ? __pfx___mutex_lock+0x10/0x10 [ 472.135809][T21132] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 472.135825][T21132] elevator_change+0x1e5/0x4c0 [ 472.135844][T21132] elevator_set_none+0x42/0xb0 [ 472.135862][T21132] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 472.135881][T21132] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 472.135901][T21132] ? sysfs_add_file_mode_ns+0x259/0x300 [ 472.135917][T21132] nbd_start_device+0x17f/0xb10 [ 472.135933][T21132] ? device_create_file+0xf4/0x1c0 [ 472.135947][T21132] nbd_genl_connect+0x135b/0x18f0 [ 472.135963][T21132] ? __pfx_nbd_genl_connect+0x10/0x10 [ 472.135977][T21132] ? rcu_is_watching+0x15/0xb0 [ 472.135992][T21132] ? __nla_parse+0x40/0x60 [ 472.136006][T21132] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 472.136026][T21132] genl_family_rcv_msg_doit+0x215/0x300 [ 472.136043][T21132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 472.136063][T21132] ? stack_trace_save+0x9c/0xe0 [ 472.136080][T21132] genl_rcv_msg+0x60e/0x790 [ 472.136097][T21132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.136111][T21132] ? __pfx_nbd_genl_connect+0x10/0x10 [ 472.136127][T21132] netlink_rcv_skb+0x208/0x470 [ 472.136139][T21132] ? __lock_acquire+0xab9/0xd20 [ 472.136150][T21132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.136165][T21132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.136182][T21132] ? down_read+0x1ad/0x2e0 [ 472.136194][T21132] genl_rcv+0x28/0x40 [ 472.136207][T21132] netlink_unicast+0x82f/0x9e0 [ 472.136227][T21132] ? __pfx_netlink_unicast+0x10/0x10 [ 472.136243][T21132] ? netlink_sendmsg+0x642/0xb30 [ 472.136254][T21132] ? skb_put+0x11b/0x210 [ 472.136267][T21132] netlink_sendmsg+0x805/0xb30 [ 472.136283][T21132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.136296][T21132] ? aa_sock_msg_perm+0xf1/0x1d0 [ 472.136315][T21132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.136327][T21132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.136339][T21132] __sock_sendmsg+0x21c/0x270 [ 472.136356][T21132] ____sys_sendmsg+0x505/0x830 [ 472.136371][T21132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.136387][T21132] ? import_iovec+0x74/0xa0 [ 472.136403][T21132] ___sys_sendmsg+0x21f/0x2a0 [ 472.136417][T21132] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.136441][T21132] ? __fget_files+0x2a/0x420 [ 472.136452][T21132] ? __fget_files+0x3a0/0x420 [ 472.136467][T21132] __x64_sys_sendmsg+0x19b/0x260 [ 472.136480][T21132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.136498][T21132] ? do_syscall_64+0xbe/0xfa0 [ 472.136516][T21132] do_syscall_64+0xfa/0xfa0 [ 472.136532][T21132] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.136551][T21132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.136564][T21132] ? clear_bhb_loop+0x60/0xb0 [ 472.136577][T21132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.136593][T21132] RIP: 0033:0x7f1d48d8f6c9 [ 472.136606][T21132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.136617][T21132] RSP: 002b:00007f1d49cf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.136631][T21132] RAX: ffffffffffffffda RBX: 00007f1d48fe5fa0 RCX: 00007f1d48d8f6c9 [ 472.136641][T21132] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 472.136650][T21132] RBP: 00007f1d48e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.136658][T21132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.136666][T21132] R13: 00007f1d48fe6038 R14: 00007f1d48fe5fa0 R15: 00007ffd2cab39f8 [ 472.136681][T21132] [ 472.640401][ T5843] block nbd0: Receive control failed (result -32) [ 472.643037][ T5841] block nbd0: Receive control failed (result -32)