last executing test programs: 2.908350089s ago: executing program 0 (id=4155): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x20000000) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 2.791296334s ago: executing program 3 (id=4159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xf1}}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x4, 0x6}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000200)=""/50, 0x44, 0x32, 0x1, 0x2}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r3, 0x20, &(0x7f0000000500)={&(0x7f00000006c0)=""/231, 0xe7, 0x0, &(0x7f0000000d40)=""/4096, 0x1000}}, 0x10) sendto$inet6(r2, &(0x7f0000000d00)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x6}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x2000000000000002, {0x2, 0x1}, {0x0, 0xf0, 0x4}, 0x2, 0x4}, {0x0, 0x14d1, {0x2, 0x0, 0x2}, {0x2, 0xff, 0x1}, 0xfd, 0xfe}], 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 2.677481421s ago: executing program 3 (id=4160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000001000000000000090000000800010001000000050008000b0000000500080009000000050007"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0xc004) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) getsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.046981089s ago: executing program 3 (id=4164): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x7}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 2.028047789s ago: executing program 2 (id=4165): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x80000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x81}]}}}]}, 0x3c}}, 0x40) 1.941140033s ago: executing program 0 (id=4167): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfff3}, {0x0, 0x7}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x11}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x13}]}}]}, 0x48}}, 0x0) (async) bind$xdp(r3, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, r3, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001500)=@newae={0x40, 0x1e, 0x400, 0x70bd27, 0x25dfdbfe, {{@in=@loopback, 0x4d2, 0xcf85ec230b1bac61, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7, 0x3502}}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000000900020073797a32000000000900010073797a310000000028000480240001800b0001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x80}}, 0x0) (async) sendmmsg(r7, 0x0, 0x0, 0x0) 1.916433492s ago: executing program 1 (id=4168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)=ANY=[@ANYBLOB="1a0000001900010000000000eeffffff1c"], 0x2c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/247, 0xf7}], 0x1, &(0x7f0000001d40)=""/4080, 0xff0}, 0x40000222) close(r1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x24040000, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000002000)=0x4080, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 1.747978168s ago: executing program 2 (id=4169): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x78}, 0x1, 0x7}, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) (async) close(0x3) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x2) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001100)={0x0, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="0c009900ff070000740000001400040073797a6b616c6c65723000000000000008000500040000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1.647859188s ago: executing program 2 (id=4170): socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) listen(0xffffffffffffffff, 0x8000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r4 = socket(0x1e, 0x805, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x80000001, 0x4) sendfile(r1, r3, &(0x7f0000000040)=0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000340)=0x4, &(0x7f0000000380)=0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept(r5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) 1.588677077s ago: executing program 0 (id=4171): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x14, 0x16, 0x9, 0x78bd26, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711087000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xe000000, @mcast2, 0x7ff}}, 0x9, 0xcf3, 0x7046, 0x3, 0x0, 0xa, 0x10}, &(0x7f0000000140)=0x9c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0x76, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x1001}, &(0x7f0000000280)=0x20) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000fcdbdf26a26b419a983b310098bdfd4320d2584ccb890000000000001d003400b456122ec54a0c39861d20a4cc0db7f7dd545621b95b5b236e7e567811497f27a37762fecbc476f13100000008002201030000000800270000000000050018010600000008002600a30c42c7460026006c0900000a000600ffffffffffff0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4011}, 0x20000000) 1.540366411s ago: executing program 3 (id=4172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00000098ecfabcd413e09900", @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32, @ANYBLOB="040013001400030017"], 0x68}}, 0x20008004) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0xe}, 0x94) 1.448184834s ago: executing program 4 (id=4173): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b2c, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010004b0400007a0039ce000000000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c000280060005004e2600001400030067656e65766530000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="2257c5b3bf58e81a37f63f86dd43435aa388f8295777f248a798f41f2ddcfd2204e5ab9748fcb598c8855e18c95becfd0c4edcefbc10544f9c85b848a3cba7f88f5397a1a8ccad8797e5f5e3516a35ad6efe19f363ebef68809360bbea0223e6a3a85c83f4a40118bf3cd6402bc3de0030ed", @ANYRES16=r3, @ANYBLOB="0100feffffff000000005c00000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00k\x00<\x00\x00\x00'], 0x24}}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000001140)=ANY=[@ANYRES32=r6, @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095909f26ab55778f36b106864fd40d036db6d03d070cdb3d690efc8182e7bf54cfc46fc3e7f7333a9fdc76aa1d0f9fb2725a3318d84145f6eae5cc18dbda2e666464ea7eaafac1695a4adc256c541821f7441d2a3ec58f8715978cf4605d66afc6a72577c430dd5ef6b9a78b87e2cbd09e161e45a6c6bd6c7469ec63cfcdd55e784063b6f1d839943debf4c66f4213736fdaec8f9e5983716ba6f4"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xb7) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x50) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="21d162c4c119d7d20f000000000000000020000000080003003b91edeffad4b5ae904a7ca762d2549bad560870f06b305dfdfbb166ac8f2f7563bd4d152bd7a7a73a5228984907eddd08cd6690e6041e5bb2b7ed0cfa16424a374c93ed8ff290368406f7a50c9d270021cb0d993d85f60a", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4203c1aeaef06cfc}, 0xc, &(0x7f0000000240)={&(0x7f0000001240)=ANY=[@ANYBLOB="b3a0360f1f351c68df00000000000000000000461e310ebc5b98159c218ec1a12c58e52e034336327968f85b1c454d72a01bd436520793e0d805d781aaf0d1ee4037630117720680c170ff498b9213e408331b50009919ec1769b2537fee827a46266a1dbbcd915f8707a5abfd1136b62dea2caf11e1b822b2ef562b0080c523358caf06c9df98ec12a15504f89f5c9f13642ad14581929aef50ab", @ANYRES16=r10, @ANYBLOB="000425bd7000fbdbdf251b0000000800010005000000060021006100000005009200ec0000000400cc000400cc000500920009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008804}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'virt_wifi0\x00'}) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r8, @ANYRESHEX=r2], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000003ed0000000000000000000000950b000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) (async, rerun: 32) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async, rerun: 32) r13 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$packet_fanout_data(r13, 0x107, 0x16, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x7ff, 0x0, 0x7, 0x8}, {0x3, 0x6d, 0x7f, 0xe}, {0x9, 0xd, 0x1, 0x80}, {0x800, 0x7, 0x3, 0x10001}, {0x1, 0x3, 0x1, 0x9}, {0x0, 0xa7, 0x8, 0x8}, {0x83, 0x5, 0x4f}]}, 0x10) 1.340919589s ago: executing program 4 (id=4174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x280, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_DESC={0x250, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb032}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x59e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0ff745}]}]}, @NFTA_SET_DESC_CONCAT={0x168, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7ed}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0000}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8a7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x65b9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0xfffffffffffffe9a, 0x1, 0x1, 0x0, 0x7032}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfa43}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd6f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6612}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ffd}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ef}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x0, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2a8}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010200000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b140000001100010000000000000000020300000a"], 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x8000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000200)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="d020bd7e0400000003000000120000", @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500"/12, @ANYRES32, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.140088723s ago: executing program 4 (id=4175): r0 = socket(0x2c, 0x3, 0x0) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x4000004) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) sendmmsg$inet6(r1, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000000)="1aa60fb3", 0x4}, {0x0}], 0x2}}], 0x1, 0xc0000) r2 = socket(0x840000000002, 0x3, 0x100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='mptcp_subflow_get_send\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r5, 0x0, r5}, 0x10) close(r4) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f00000007c0)={{r2}, "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"}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000c0000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r8 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) getsockopt$netrom_NETROM_T4(r8, 0x103, 0x6, &(0x7f0000000200)=0x1, &(0x7f0000000440)=0x4) 956.291772ms ago: executing program 1 (id=4176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000240)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300090000009500"/32], &(0x7f0000000100)='GPL\x00', 0x2e, 0x79, &(0x7f0000000640)=""/121, 0x41100, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xc, 0x9ce, 0xb127}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x4, 0x5, 0x10, 0x9}, {0x4, 0x3, 0x6, 0x1}, {0x5, 0x4, 0x5, 0x1}, {0x5, 0x4, 0x10, 0xc}, {0x3, 0x1, 0x3, 0x2}, {0x3, 0x1, 0x8, 0x4}], 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='ext4_update_sb\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a090400000000000000fbd4e09f99be29b8a8f7e6f2a3feab000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f7461f298dc9d0002800c0001400000000000000008140000001100010000000000000000"], 0xa4}}, 0x0) 869.824497ms ago: executing program 4 (id=4177): socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x5, 0x2000081, 0x8001fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x6) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0xfffffff9, 0x4003, 0x7, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210007000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000480)={'veth1_to_bond\x00', &(0x7f0000000400)=@ethtool_coalesce={0xe, 0x8, 0x3, 0x9, 0x3, 0x7, 0x6, 0x18000000, 0x2, 0x9, 0xfe, 0x4, 0x6e0, 0x4, 0x7, 0x5, 0x8000, 0x8, 0x743, 0x23, 0x4, 0x5, 0x10000}}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x80}}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x1}}]}, 0x8c}}, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x58, &(0x7f0000000680)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r10, 0x0, 0x10}, 0xc) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r10, 0x0, 0x10}, 0xc) close(r11) recvmmsg(r8, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x8020, 0x0) (async) recvmmsg(r8, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x8020, 0x0) sendmsg$802154_dgram(r8, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendmsg$netlink(r4, 0x0, 0x4000841) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001700)=""/4087, 0xff7}], 0x1}, 0x20) 824.555243ms ago: executing program 1 (id=4178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0xe8, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4b6}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6cdc}, {0x6, 0x11, 0x9a37}}]}, 0xe8}, 0x1, 0x0, 0x0, 0xd5}, 0x400c010) (async) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @sched_cls, r5}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000080), &(0x7f0000000240)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="103c5a50718abd5440a343162b1348d3da637c54ea9293009e804a4a9d46b3d4ebf4e50508c7ded8ed8cf713edb0", @ANYRES64=0x0], 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r8, r8, 0x2f, 0x2028, 0x4, @void, @void, @value=r11}, 0x20) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff03000008000900010000f308000700030000001400"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="ceaaa581b74be1bb0b4eb259da1e549ff3b844"], 0x44}}, 0x4000050) socket$kcm(0x2, 0x3, 0x2) 664.272624ms ago: executing program 2 (id=4179): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 604.136151ms ago: executing program 0 (id=4180): pipe(&(0x7f0000000740)) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="2200030000000000000000000000000000000000aa6db10ca8d3f1522b8ad103379f6c079feac3ba0f81dc9aa5e1160dd66437b67e85a1bf2302f2b6cda50b844dfc67ca9c3c86261c2afa1f2ea17d5348a2b0007a729921738c041491d7acea3825e66540b3e567317d0d4fb968004f284ea3dde5da257d9e89f9a895e4c7f57b6da211de79ba4f2d6871a0827f6ddaec13cf755d617aaa13073bd3860277507e7dd830927a99e129784d090f27ca0724ed5c8f9bcf4102f3650b9252cc872dd21b71efda779383a5c43d704f2c267c5554435815686a40d64c58db7a78d3ccf7f2375012c90d40530bfb606406374ad627e77d8cfca458cf86d8caf9579f5ac76d057cef3a6bc1a92a0f8817d0d1c6e2f0bf1f2247a7a14938f8f82412aa14ab13e74c3d05f6546c28016605f2291b697a01e89a32672673786b7449e48795bef08d161b4fa59c981ad4ffaf789f2579e1296a1d6535602af6c85c8ed349244afe6443f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a200100000000000500000014000500200100000000000000000100000000001c00090018"], 0x4c}}, 0x40000) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007a80), 0x0, 0x20000000) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) (async) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) write(r3, 0x0, 0x0) close(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, 0x2, 0x7, 0x304, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0xb55a72e4309e3a03) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, 0x2, 0x7, 0x304, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0xb55a72e4309e3a03) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 583.005311ms ago: executing program 4 (id=4181): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="014b00004000000000f70100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x120, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfd}}]}, 0x120}, 0x1, 0x0, 0x0, 0xc2}, 0x40801) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 491.682276ms ago: executing program 2 (id=4182): ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @remote}, 0x100, 0x0, 0x0, 0x0, 0x73fd, &(0x7f0000000000)='veth0_to_team\x00', 0x24, 0x100000000000000, 0x6}) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x4) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x81, 0x5, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000180)=@default) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)=0x1, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000200)={@loopback, @rand_addr=0x64010100, 0x0, 0x1, [@local]}, 0x14) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_newnexthop={0xf4, 0x68, 0x4, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x2, 0x0, 0x1a}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_GROUP={0x54, 0x2, [{0x2, 0x7f}, {0x2, 0x9}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x0, 0xff}]}, @NHA_ENCAP={0x30, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x2c, 0x1, {0x8, 0x28, 0x1, 0x87, 0x80, [@mcast2, @empty]}}}, @NHA_FDB={0x4}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x5}}}}, @NHA_BLACKHOLE={0x4}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x781deac8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2bd}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x52}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3ab}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x81}]}, @NHA_OIF={0x8, 0x5, r5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40d0}, 0x40) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0xa, 0x4e24, 0x0, @empty, 0x3}, 0x0, {[0xaa, 0x5, 0x9, 0x6, 0x9, 0x0, 0xfffffbff, 0x7]}}, 0x5c) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r8, 0x822, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8084}, 0x80) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.swap.events\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000000680)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r10}) (async) r11 = accept4$nfc_llcp(r9, 0x0, &(0x7f00000006c0), 0x800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r11, 0xf503, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000700)={0x0, 0x6}, 0x8) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x1404, 0x200, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20050810) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x1, 0x72) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000840)='bond0\x00', 0x10) 473.05804ms ago: executing program 1 (id=4183): r0 = socket$inet6(0xa, 0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) pwritev(r0, &(0x7f00000008c0)=[{&(0x7f0000000000)="b691311898fa9fa4fd2a10ee6fa97b1772ee9e0b9421666a760dbee204d2356c3c947fc2136ab240b3a5980f8d6fb062d65db865b4df291b9f2519f26ae079f212263e82b7a98fc518ef586e1b4f719a40d0ffb6fbd1a587217a8565f9ca16a734b35249abb15ece9bf2de68e52fc6", 0x6f}, {&(0x7f0000000140)="5454608946921b083d9221d7ffa1b1d8fac79992fab356320f8fd4b4db7da950eea32c32c87ab1b7136a86b42910fb223835ebd98df47d82a065551f5d485ef184e58f1d22e0b4fd4f278dfbe9ff485d1417da037a8c9df79765b8164746d699a82895b54ef313482a6d1a92d1c6956bf7a7812323405bf62464edcfe5cccdd8488c7e7d95fe7d4821ea071d60a1cbd22fb452d5c777febfa2921cc1f5577d949bce37f834b8331ce75b21b4a799b72ea5f08078a7d04c028e38dcfc27542490ee580bc441ecd7648d8a648edbda0a17d658751d9055c2da780016b5ce04cd651001d5a3c0ff0436a7acb47f81ebb71b9026", 0xf2}, {&(0x7f0000000540)="6dd1fc536e7edc4d8ee345d45062c9e7437b77c2dd656879f347e4dad573f02d58ad97c8265f4c8b72b56f45bfb807b098773c4111996cf2b26f66f3ffa8e5f3e4ef6741585d8a4158e2dc9add9a394f89146d4bb25b97c26fd3ff5fe033d59059e2e2a794280ba98591cc3a516e997165ab5428153c170eeba83254d1c485527e465b2aa26bffefb8989ec4ae5722366955f898ec7da6d32045be75d2f009104e543b2613755a5a05239ef77e8622daf01fe544352708630508b6908ce4fb4eb12cb19ac4cec66a3dee329786e2b4ec76ab5488884777129f46aa1d262c167329e96ebd1d0010d927ab858f2aaa8225a1", 0xf1}, {&(0x7f0000000640)="9673fa258595fe7da8fb7547be2a152416552f96f4d9562624472d24687a8fdf5741b4498a226308e8ba150a9ae814874f4c15ca5051ff4a8eb59d0ccd7dc68a3206d83f9e99f3f2fc6947cdc988cfab5d610b0732826f1deed04d6d155e75cc3b237431760b3425468ff808eb7cf3d631e12244b5622854c0697967ab621f75c86c28ac5a5d8c94d4e4684cc898bbe4fdc91794b73b97d581", 0x99}, {&(0x7f0000000080)}, {&(0x7f0000000700)="c5b157940febdbd0d3af87e517b3ebf65dee0cdbef3111c9a305f012eac54ca462b40f5e5aa26238b6d18201ae77e7b64bfc4c6e4e399eb0de254133ee61f9561eb5579f8d00a9e5d919a906f4476dd0b876572c44e0778e369c", 0x5a}, {&(0x7f00000000c0)="f1710b58c53a61b2a5fadb39e20072fa2361580d", 0x14}, {&(0x7f0000000780)="51a31930cdb5a1302d7bda117046cafdc94e237e46a79ceffd716a09c8bb5368086d1b11bb14acfc01e2ff759eecde28f0d4672757bfac45f2cea7f6c7a0e8d5dd0c03aaf5c89f2947d2ff2f7b5fdce3f6be4e1395e3a8c2ba3f12b1e44b17710214bcdf85870f763b", 0x69}, {&(0x7f0000000240)="d03c995b158b9a3cfec7b197d115432a45d415f79a62caa34b4cdc9400c404d9cc7d6abcc9031e2f977d67f871ef6c77b3233b99edf1c775ae6ee9d76e2b", 0x3e}, {&(0x7f0000000800)="b985ce4bc23171aad7da806bcca7f3388bbfb9e4eb6e9d89246bf36659cc10cc87145a5af76bf382a3ab94b235bd24f989b44658259e6d94313ce06f4a3f06bc361c2b4c8a9eed6126a5b410682c971fcd1f9466d643f159c004da621908a58e34bdba6e5959a9bdb2b0f0e15a2c75d63e0d353bb880ba05295b8865a8c6f3910f3366084e173937e72a2025eb50bc929ffdb8509c5af7520242d2e6a849408d3a9a0e5a730b8153", 0xa8}], 0xa, 0x6, 0xffff70a0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00', @ANYBLOB="28f2e047afd25fe1032b9a816d7c010026be590c650acabd7000fddbdf2506000000140002000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 469.260074ms ago: executing program 4 (id=4184): unshare(0x6a040000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001400014a00000000000000000288"], 0x48}, 0x1, 0x0, 0x0, 0x4042144}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) select(0x95, &(0x7f0000000000)={0x8, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0xd7a4526debf47abd) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44) 363.948842ms ago: executing program 0 (id=4185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x20050800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) 318.126327ms ago: executing program 3 (id=4186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1d, 0x0, 0x28) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) sendto$inet6(r1, &(0x7f0000000300)="df99ebdcbdf7fb460315463787849a430be97a09a79eec3981314d8767d1f34b62e58ac313e7cf5a5575aac48f0ba306e2df241064f436d136bc8ec18c41bfa2adeb52c26113cfba85ab80a7f43414783f494732633488", 0x57, 0x1, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) (async) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000140)='&:\x00', 0x3) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 159.155052ms ago: executing program 0 (id=4187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000002c0007012bbd7000ffdbdf25077c0000080001800400dd80100003800c0003"], 0x2c}}, 0x2000c004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x200, 0xc8, 0x0, {0xa, 0x2, 0x3, 0x1, 0x4, 0x3}, {0x6, 0x1, 0x1, 0xbbc0, 0x9, 0x1}, 0x96f, 0x7f, 0xa}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x6, 0x2, 0x7f, 0x3, 0x8, 0x5, 0x3, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x8, 0x80000000, 0x6032, 0xc2, 0x9, 0x1000, 0x6, 0x6f, 0x7c45, 0x0, 0x5, 0x9, 0x9, 0xef, 0x291d, 0x0, 0x8, 0x1, 0x8, 0x1, 0x0, 0x2, 0x0, 0xf08, 0xb, 0x6, 0x0, 0xf96a, 0x8, 0x2, 0xc791, 0x6597121a, 0x9, 0x25dc, 0x40, 0x0, 0x0, 0x6, 0x93, 0x7, 0x0, 0x7, 0x4, 0xde1, 0x7fffffff, 0xe32, 0x1, 0xfffffff7, 0x9, 0x10000, 0x6ff0, 0x9, 0x0, 0xfffffff9, 0x1, 0x9, 0xb, 0x58000, 0x2bcd, 0x80000001, 0x1, 0x10001, 0x3, 0x19, 0x1, 0xffffffff, 0x8001, 0x1, 0x1, 0x2, 0x9, 0x9, 0x8000, 0x490000, 0xfffffff2, 0xb3f, 0xffffb6fa, 0x4, 0x0, 0x401, 0x5, 0xd, 0x8, 0x401, 0x4, 0x1ff, 0x3, 0x7f, 0x9, 0x5, 0x97, 0x3, 0x3, 0xc, 0xf, 0x3, 0x3ff, 0x4, 0x80000000, 0x10, 0x8, 0x30, 0x0, 0x4, 0x5, 0xb, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x101, 0x1, 0xfffffff7, 0x3, 0x0, 0xcc, 0x1, 0x26c0, 0x2, 0x1, 0x5, 0x9, 0x9, 0x2, 0xfffffff8, 0xdc88, 0x8, 0x0, 0x3f, 0x7, 0x6, 0x5, 0x3, 0x0, 0x4, 0x2, 0xd, 0x0, 0xbbb, 0x27e, 0x1, 0x75b, 0x8, 0x2, 0x7, 0x2, 0x3, 0x9, 0xfffffffc, 0x5, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1ff, 0x9, 0xa461, 0x8, 0x7, 0x2, 0x800, 0x0, 0x0, 0x6, 0x9, 0x9, 0x49e88dee, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x9b85, 0x37, 0x800, 0xfffffffe, 0x6, 0x5, 0x6, 0x3, 0x2, 0xd, 0xffffffb4, 0x8000, 0x5, 0xfffffffa, 0x2, 0x3, 0x4a00000, 0x80000001, 0xe71a, 0x6, 0x9, 0x4, 0x2, 0x4, 0x61, 0x1, 0x2, 0xfffffffc, 0x10001, 0x6, 0x2, 0x2, 0x7, 0x7, 0x6, 0x80000000, 0x2, 0x7fff, 0x5, 0xf, 0x401, 0x400, 0xba, 0x8, 0x200, 0x8, 0xb33b, 0x9, 0x7, 0x1, 0x4, 0x8, 0x7, 0x0, 0x2, 0x3, 0x9, 0x0, 0x10, 0xd177, 0x7, 0x6ef, 0x2bd, 0x1, 0x2d, 0xa047, 0xe9e, 0x120000, 0x7, 0x38000]}]}]}}]}, 0x478}}, 0x20004811) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000500)={[0xfe9]}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x7, 0x30}]}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 158.947477ms ago: executing program 1 (id=4188): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0xfffd, {0xaaaaaaaaaaaa0102}}}, 0x14) 115.312677ms ago: executing program 2 (id=4189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="e00000001300010000000000000000004015143f4529d72384a65b0f683ca0a21fdf11440000bf3bc8d961bdc2e3267150aaca5d87ea3a2d0572f6a7882ef366b38649334f9e14aa669004dbd601f7a573479bda64e1a21a8d8224968c420b2358508e8b0e65ea507a9d564c6e29ad53eb774cd5a8114674850d36744c882033716525c99530fc100d4a5998ba6bdfed"], 0xe0}], 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xe0b, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth0_to_batadv\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x60, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x1, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffff9, 0x7, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7c}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x60}}, 0x8d0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 72.545238ms ago: executing program 1 (id=4190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40020000", @ANYRES16=r1, @ANYBLOB="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", @ANYBLOB='!'], 0x240}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000010) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r2, r4, 0x24, 0x0, @void}, 0x10) 0s ago: executing program 3 (id=4191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x0, 0x7}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x0, 0x7}) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) (async) close(r5) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) kernel console output (not intermixed with test programs): ted]: syz.3.2867 (pid 17362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.393525][T17362] Use struct sctp_sack_info instead [ 356.450976][T17363] __nla_validate_parse: 11 callbacks suppressed [ 356.450993][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2867'. [ 356.475916][T11060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.485998][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 356.501264][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'. [ 356.510623][T11060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.526098][T17363] netlink: 'syz.3.2867': attribute type 14 has an invalid length. [ 356.536652][T17363] netlink: 'syz.3.2867': attribute type 12 has an invalid length. [ 356.554424][T17359] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 356.587590][T17359] bond1: (slave batadv1): making interface the new active one [ 356.609828][T17359] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 356.620213][ T250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.832953][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.842116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.952910][T17354] bond1 (unregistering): (slave batadv1): Releasing active interface [ 356.965476][T17354] bond1 (unregistering): Released all slaves [ 357.103535][T11052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.129799][T11052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.504221][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 357.540056][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 357.556701][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 357.570648][T17412] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 357.800511][T17433] gretap0: entered promiscuous mode [ 357.806818][T17433] vlan3: entered promiscuous mode [ 357.874222][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 357.897654][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 357.923572][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 357.935602][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'. [ 357.956584][T17441] xt_hashlimit: size too large, truncated to 1048576 [ 357.974283][T17444] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 357.993096][T17436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.006043][T17436] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.016461][T17436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.090956][T17444] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 358.110464][ T250] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.129600][ T250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.206579][T17455] netlink: 'syz.1.2892': attribute type 2 has an invalid length. [ 358.244342][T17455] !©9: entered promiscuous mode [ 358.250597][T17455] netlink: 'syz.1.2892': attribute type 2 has an invalid length. [ 358.269700][ T5151] Bluetooth: hci0: command tx timeout [ 358.285730][T17455] !©9: left promiscuous mode [ 358.670755][T17496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.752027][T11054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.761126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.840350][T17512] netlink: 'syz.4.2903': attribute type 13 has an invalid length. [ 358.866764][T17512] netlink: 'syz.4.2903': attribute type 17 has an invalid length. [ 360.348671][ T5151] Bluetooth: hci0: command tx timeout [ 360.358344][T17592] xt_hashlimit: size too large, truncated to 1048576 [ 360.486282][T17592] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.941492][T17613] syzkaller0: entered promiscuous mode [ 360.991683][T17613] syzkaller0: entered allmulticast mode [ 361.562531][T17657] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 361.787051][T17666] __nla_validate_parse: 19 callbacks suppressed [ 361.787071][T17666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2945'. [ 361.884368][T17669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2947'. [ 362.436327][ T5151] Bluetooth: hci0: command tx timeout [ 362.597652][T11035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.606348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.373272][T17671] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 363.379014][T17672] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 363.534005][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 363.561907][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 363.575273][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 363.585071][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 363.747500][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2951'. [ 363.841376][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 363.878086][T11052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.888861][T11052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.126204][T17714] bridge12: port 1(veth11) entered blocking state [ 364.144187][T17714] bridge12: port 1(veth11) entered disabled state [ 364.171128][T17714] veth11: entered allmulticast mode [ 364.196932][T17714] veth11: entered promiscuous mode [ 364.214826][T17715] bridge12: port 2(veth0_to_bond) entered blocking state [ 364.248847][T17715] bridge12: port 2(veth0_to_bond) entered disabled state [ 364.273365][T17715] veth0_to_bond: entered allmulticast mode [ 364.299652][T17715] veth0_to_bond: entered promiscuous mode [ 364.499303][T17723] bridge12: port 3(veth13) entered blocking state [ 364.508396][ T5964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.510497][T17723] bridge12: port 3(veth13) entered disabled state [ 364.519222][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.535876][T11052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.544914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.560802][T17723] veth13: entered allmulticast mode [ 364.587998][T17723] veth13: entered promiscuous mode [ 364.630529][T17702] lo speed is unknown, defaulting to 1000 [ 364.860990][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.880885][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.893579][T17738] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2963'. [ 364.904612][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.913070][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.920983][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.928836][T17738] netlink: 'syz.2.2963': attribute type 42 has an invalid length. [ 364.966942][T17733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2963'. [ 365.097494][T17747] netlink: 'syz.4.2962': attribute type 5 has an invalid length. [ 365.194957][T17747] geneve2: entered promiscuous mode [ 365.200445][T17747] geneve2: entered allmulticast mode [ 365.282122][T17743] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.330559][T11035] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 365.396361][T11035] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 365.419932][T11035] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 366.113442][T17737] lo speed is unknown, defaulting to 1000 [ 366.489422][T17751] lo speed is unknown, defaulting to 1000 [ 366.565442][T17737] chnl_net:caif_netlink_parms(): no params data found [ 366.711157][T17779] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 366.916954][T17777] gretap1: left promiscuous mode [ 366.970072][ T5881] lo speed is unknown, defaulting to 1000 [ 366.976212][ T5881] syz2: Port: 1 Link DOWN [ 366.987849][ T5151] Bluetooth: hci4: command tx timeout [ 367.011801][T11030] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.154307][T17743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.166121][T17743] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.205267][T11030] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.232197][T11030] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.306307][T11030] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.343921][T17743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.354558][T17743] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.372690][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.380574][T17737] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.388168][T17737] bridge_slave_0: entered allmulticast mode [ 367.396295][T17737] bridge_slave_0: entered promiscuous mode [ 367.417512][T17798] __nla_validate_parse: 2 callbacks suppressed [ 367.417530][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 367.453051][T17743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.463641][T17743] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 367.483769][T17737] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.491378][T17737] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.498806][T17737] bridge_slave_1: entered allmulticast mode [ 367.510039][T17737] bridge_slave_1: entered promiscuous mode [ 367.577257][T17806] netlink: 'syz.3.2977': attribute type 1 has an invalid length. [ 367.662730][T17737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.692095][T17737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.840390][T11054] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 367.855704][T11054] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.889005][T17737] team0: Port device team_slave_0 added [ 367.911936][T11054] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 367.937011][T11054] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.970547][T17737] team0: Port device team_slave_1 added [ 367.982925][T17808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2978'. [ 368.033729][T11054] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 368.048490][T11054] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.256870][T11054] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 368.283130][T11054] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.304554][T17737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.318832][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.345505][T17737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.355433][T11052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.365000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.367994][T17737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.380916][T17737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.407854][T17737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.471208][T17737] hsr_slave_0: entered promiscuous mode [ 368.478196][T17737] hsr_slave_1: entered promiscuous mode [ 368.484677][T17737] debugfs: 'hsr0' already exists in 'hsr' [ 368.490508][T17737] Cannot create hsr debugfs directory [ 368.733483][T17823] netlink: 'syz.3.2980': attribute type 29 has an invalid length. [ 368.772195][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 368.988816][T17737] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.991789][T11052] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.009676][T11052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.067839][ T5151] Bluetooth: hci4: command tx timeout [ 369.105563][T17737] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.223597][T17737] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.292865][T17737] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.583272][T17871] tipc: Enabled bearer , priority 0 [ 369.590231][T17874] netlink: 'syz.4.2990': attribute type 1 has an invalid length. [ 369.650465][T17871] syzkaller0: entered promiscuous mode [ 369.656051][T17871] syzkaller0: entered allmulticast mode [ 369.683994][T17737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 369.721756][T17737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 369.730789][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.739972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.753279][T17877] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 369.805228][T17737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.894712][T17737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.935120][T17871] bridge: RTM_NEWNEIGH with invalid ether address [ 369.994575][T17870] tipc: Resetting bearer [ 370.013782][T17870] tipc: Disabling bearer [ 370.100023][T17904] netlink: 'syz.4.2995': attribute type 10 has an invalid length. [ 370.140650][T17904] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.164775][T17904] bond0: (slave team0): Enslaving as an active interface with an up link [ 370.169611][T17910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2997'. [ 370.243304][T17911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2997'. [ 370.270593][T17911] openvswitch: netlink: Flow key attr not present in new flow. [ 370.280086][T17737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.290085][T17910] openvswitch: netlink: Flow key attr not present in new flow. [ 370.352862][T17737] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.393778][T17918] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2999'. [ 370.437501][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'. [ 370.440753][T17918] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 370.524910][T11035] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.532162][T11035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.580715][T17937] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3003'. [ 370.586504][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.596854][T11054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.704615][T17737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.717754][T17737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.864483][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3006'. [ 370.970869][T17950] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 370.991838][T17950] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 371.053347][T17955] tipc: New replicast peer: 0.0.0.0 [ 371.068736][T17955] tipc: Enabled bearer , priority 10 [ 371.099425][T17955] tipc: New replicast peer: 172.30.1.1 [ 371.112187][T17955] geneve0: entered allmulticast mode [ 371.147857][ T5151] Bluetooth: hci4: command tx timeout [ 371.150276][T17737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.256399][T17737] veth0_vlan: entered promiscuous mode [ 371.275348][T17737] veth1_vlan: entered promiscuous mode [ 371.359035][T17737] veth0_macvtap: entered promiscuous mode [ 371.376307][T17737] veth1_macvtap: entered promiscuous mode [ 371.438820][T17737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.461243][T17737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.488831][T11054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.573316][T11054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.589420][T11054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.606887][T11054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.792265][T17991] netlink: 'syz.0.3018': attribute type 2 has an invalid length. [ 371.804626][T11057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.828193][T17991] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 371.837753][T11057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.854894][T17991] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 371.968630][T11032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.976772][T11032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.074469][T17996] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3020'. [ 372.193817][T12335] tipc: Node number set to 3925772429 [ 372.494767][T18018] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3023'. [ 372.970593][T18041] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 372.991082][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3031'. [ 373.025356][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3031'. [ 373.238182][ T5151] Bluetooth: hci4: command tx timeout [ 373.547566][T18078] xt_limit: Overflow, try lower: 268435456/134217728 [ 373.589541][T11052] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.618165][T11052] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.679630][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.692770][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.702610][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.712748][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.721689][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.755585][T11052] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.755758][T18087] x_tables: duplicate underflow at hook 2 [ 373.778521][T11052] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.851511][T11052] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.874219][T11052] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.913997][T18096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3046'. [ 373.925358][T11052] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.943498][T11052] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.955729][T18098] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3047'. [ 373.969265][T18096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3046'. [ 373.985956][T18098] block nbd0: reconnected socket [ 373.986612][ T5151] block nbd0: Receive control failed (result -107) [ 374.111160][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.121947][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.133920][T11060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.142930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.223515][T18109] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 374.304981][T18084] lo speed is unknown, defaulting to 1000 [ 374.613445][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 374.750904][T11029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 374.761710][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.394836][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.403545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.637316][T11052] bond0 (unregistering): (slave 30): Releasing backup interface [ 375.648213][T11052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.658394][T11052] bond0 (unregistering): Released all slaves [ 375.670524][T11052] bond1 (unregistering): Released all slaves [ 375.684076][T11052] bond2 (unregistering): Released all slaves [ 375.776537][T11052] bond3 (unregistering): Released all slaves [ 375.788762][ T5151] Bluetooth: hci1: command tx timeout [ 375.872868][T11052] bond4 (unregistering): Released all slaves [ 375.965529][T11052] bond5 (unregistering): (slave veth13): Releasing active interface [ 375.975686][T11052] bond5 (unregistering): Released all slaves [ 375.988707][T11052] bond6 (unregistering): Released all slaves [ 376.024039][T18115] syzkaller1: entered promiscuous mode [ 376.030848][T18115] syzkaller1: entered allmulticast mode [ 376.064823][T18128] tipc: Enabling of bearer rejected, failed to enable media [ 376.090106][T11052] [†’Ì: left promiscuous mode [ 376.208786][T11052] tipc: Left network mode [ 376.306006][T11052] IPVS: stopping backup sync thread 11098 ... [ 376.396282][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'. [ 376.471496][T18159] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3058'. [ 376.493860][T18150] netlink: 1311 bytes leftover after parsing attributes in process `syz.1.3055'. [ 376.704857][T18084] chnl_net:caif_netlink_parms(): no params data found [ 376.763540][T18176] tipc: Started in network mode [ 376.772263][T18176] tipc: Node identity fa5924c844bb, cluster identity 4711 [ 376.784583][T18176] tipc: Enabled bearer , priority 0 [ 376.851737][T18178] syzkaller0: entered promiscuous mode [ 376.860325][T18178] syzkaller0: entered allmulticast mode [ 376.965970][T18176] tipc: Resetting bearer [ 376.998430][T18175] tipc: Resetting bearer [ 377.022537][T18175] tipc: Disabling bearer [ 377.092757][T18084] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.109978][T18084] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.131712][T18084] bridge_slave_0: entered allmulticast mode [ 377.148197][T18084] bridge_slave_0: entered promiscuous mode [ 377.211417][T18084] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.225269][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.236925][T18084] bridge_slave_1: entered allmulticast mode [ 377.251483][T18084] bridge_slave_1: entered promiscuous mode [ 377.264369][T18195] : entered promiscuous mode [ 377.337928][ T11] block nbd0: Possible stuck request ffff888024b80000: control (read@0,1024B). Runtime 240 seconds [ 377.353296][ T11] block nbd0: Possible stuck request ffff888024b801c0: control (read@1024,1024B). Runtime 240 seconds [ 377.364928][ T11] block nbd0: Possible stuck request ffff888024b80380: control (read@2048,1024B). Runtime 240 seconds [ 377.376798][T18202] block nbd0: Dead connection, failed to find a fallback [ 377.386998][ T11] block nbd0: Possible stuck request ffff888024b80540: control (read@3072,1024B). Runtime 240 seconds [ 377.398936][T18202] block nbd0: shutting down sockets [ 377.404814][T18202] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.415974][T18202] Buffer I/O error on dev nbd0, logical block 1, async page read [ 377.424400][T18202] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.433789][T18202] Buffer I/O error on dev nbd0, logical block 0, async page read [ 377.441903][T18202] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.451089][T18202] Buffer I/O error on dev nbd0, logical block 3, async page read [ 377.459253][T18202] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.468630][T18202] Buffer I/O error on dev nbd0, logical block 2, async page read [ 377.478471][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.494139][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 377.502531][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.512040][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read [ 377.520656][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.529835][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read [ 377.538033][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.547292][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read [ 377.560711][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.569987][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 377.577961][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.587013][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read [ 377.599080][ T5841] ldm_validate_partition_table(): Disk read failed. [ 377.607902][ T5841] Dev nbd0: unable to read RDB block 0 [ 377.615951][ T5841] nbd0: unable to read partition table [ 377.635746][ T5201] udevd[5201]: worker [5841] terminated by signal 9 (Killed) [ 377.645057][ T5201] udevd[5201]: worker [5841] failed while handling '/devices/virtual/block/nbd0' [ 377.870361][ T5151] Bluetooth: hci1: command tx timeout [ 379.056782][T18182] lo speed is unknown, defaulting to 1000 [ 379.062059][T18084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.222785][T11052] hsr_slave_0: left promiscuous mode [ 379.231135][T11052] hsr_slave_1: left promiscuous mode [ 379.261077][T11052] batadv_slave_0: left promiscuous mode [ 379.273080][T11052] veth1_to_hsr: left allmulticast mode [ 379.278962][T11052] veth1_to_hsr: left promiscuous mode [ 379.284631][T11052] veth1_vlan: left allmulticast mode [ 379.290447][T11052] veth1_vlan: left promiscuous mode [ 379.295951][T11052] veth0_vlan: left promiscuous mode [ 379.872973][T11055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.880064][T11029] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.882027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.899688][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.948171][ T5151] Bluetooth: hci1: command tx timeout [ 380.113397][T11052] team0 (unregistering): Port device team_slave_1 removed [ 380.151197][T11052] team0 (unregistering): Port device team_slave_0 removed [ 380.171604][T18233] netlink: 'syz.2.3074': attribute type 13 has an invalid length. [ 380.183014][T18233] netlink: 'syz.2.3074': attribute type 17 has an invalid length. [ 380.491331][T18084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.538690][ T5964] infiniband syz0: ib_query_port failed (-19) [ 380.588014][T18233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.666505][T18084] team0: Port device team_slave_0 added [ 380.712829][T18239] syzkaller1: entered promiscuous mode [ 380.719066][T18239] syzkaller1: entered allmulticast mode [ 380.732028][T18084] team0: Port device team_slave_1 added [ 380.866798][T18084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.879060][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.907928][T18084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.958265][T18084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.967752][T18084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.005836][T18084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.173739][T11029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.182765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.240199][T18084] hsr_slave_0: entered promiscuous mode [ 381.250703][T18084] hsr_slave_1: entered promiscuous mode [ 381.257373][T18084] debugfs: 'hsr0' already exists in 'hsr' [ 381.268069][T18084] Cannot create hsr debugfs directory [ 381.559131][T18273] __nla_validate_parse: 2 callbacks suppressed [ 381.559148][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3085'. [ 381.812413][T18280] žÿ: renamed from team_slave_1 (while UP) [ 382.029218][ T5151] Bluetooth: hci1: command tx timeout [ 382.169857][T18295] tipc: Enabled bearer , priority 0 [ 382.197602][T18295] syzkaller0: entered promiscuous mode [ 382.208876][T18295] syzkaller0: entered allmulticast mode [ 382.316075][T18299] sctp: [Deprecated]: syz.4.3092 (pid 18299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.316075][T18299] Use struct sctp_sack_info instead [ 382.385506][T18269] lo speed is unknown, defaulting to 1000 [ 382.418292][T18301] tipc: Resetting bearer [ 382.440042][T18293] tipc: Resetting bearer [ 382.487268][T18293] tipc: Disabling bearer [ 382.585195][T18305] team_slave_0: entered promiscuous mode [ 382.591129][T18305] žÿ: entered promiscuous mode [ 382.606343][T18084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 382.620287][T18084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 382.645810][T18310] netlink: 'syz.2.3094': attribute type 1 has an invalid length. [ 382.665505][T18084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 382.715964][T18310] bond5: entered promiscuous mode [ 382.721865][T18310] bond5: entered allmulticast mode [ 382.727444][T18310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.750945][T18084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 382.775911][T11052] IPVS: stop unused estimator thread 0... [ 382.827571][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3096'. [ 382.893743][T18324] netlink: 'syz.1.3097': attribute type 5 has an invalid length. [ 383.498383][T11052] bond3 (unregistering): (slave bridge3): Releasing active interface [ 383.538480][T11052] bond3 (unregistering): (slave bridge4): Releasing active interface [ 384.650976][T11052] bond0 (unregistering): (slave €Â): Releasing backup interface [ 384.659144][T11052] €Â: left promiscuous mode [ 384.665416][T11052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.674702][T11052] bond_slave_1: left promiscuous mode [ 384.682666][T11052] bond0 (unregistering): Released all slaves [ 384.783510][T11052] bond1 (unregistering): (slave batadv1): Releasing active interface [ 384.793731][T11052] bond1 (unregistering): Released all slaves [ 384.888933][T11052] bond2 (unregistering): Released all slaves [ 384.901522][T11052] bond3 (unregistering): Released all slaves [ 384.914495][T11052] bond4 (unregistering): Released all slaves [ 384.928527][T11052] bond5 (unregistering): Released all slaves [ 384.943348][T11052] bond6 (unregistering): Released all slaves [ 384.961014][T11052] bond7 (unregistering): Released all slaves [ 384.975383][T11052] bond8 (unregistering): Released all slaves [ 385.161800][T11052] tipc: Left network mode [ 385.208228][T11052] IPVS: stopping backup sync thread 12308 ... [ 385.293600][T18084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.462968][T18084] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.506805][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.514012][T11060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.560380][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.567576][T11060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.586633][T18360] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3106'. [ 385.612558][T18360] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 385.676795][T18361] netlink: 'syz.1.3104': attribute type 13 has an invalid length. [ 385.678757][T18352] bond1: option arp_validate: invalid value (18446744073491447809) [ 385.695393][T18352] bond1 (unregistering): Released all slaves [ 386.005309][T18380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.095684][T18387] netlink: 'syz.4.3115': attribute type 7 has an invalid length. [ 386.133565][T18387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 386.332247][T11052] hsr_slave_0: left promiscuous mode [ 386.366103][T11052] hsr_slave_1: left promiscuous mode [ 386.373215][T11052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.382831][T11052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.391419][T11052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.421039][T11052] macsec0: left allmulticast mode [ 386.553186][T18416] netlink: 352 bytes leftover after parsing attributes in process `syz.2.3120'. [ 386.571277][T11052] team0 (unregistering): Port device batadv2 removed [ 386.640932][T11052] pimreg3 (unregistering): left allmulticast mode [ 386.995985][T11052] team0 (unregistering): Port device team_slave_1 removed [ 387.041073][T11052] team0 (unregistering): Port device team_slave_0 removed [ 387.391063][T18084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.408063][T18409] gretap2: entered allmulticast mode [ 387.421309][T18416] tipc: Invalid UDP bearer configuration [ 387.421368][T18416] tipc: Enabling of bearer rejected, failed to enable media [ 387.603200][T18084] veth0_vlan: entered promiscuous mode [ 387.633568][T18084] veth1_vlan: entered promiscuous mode [ 387.691836][T18438] tipc: Enabling of bearer rejected, media not registered [ 387.744912][T18440] ipvlan2: entered promiscuous mode [ 387.804867][T18084] veth0_macvtap: entered promiscuous mode [ 387.815880][T18084] veth1_macvtap: entered promiscuous mode [ 387.873873][T18084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.090583][T18451] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 388.110322][T18084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.148039][T11040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.162107][T11052] IPVS: stop unused estimator thread 0... [ 388.169750][T11040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.197825][T11040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.218884][T11040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.247466][T18455] netlink: 'syz.1.3129': attribute type 1 has an invalid length. [ 388.257582][T18460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 388.288160][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'. [ 388.297290][T18460] netlink: 'syz.4.3131': attribute type 14 has an invalid length. [ 388.365955][T18455] syzkaller0: entered promiscuous mode [ 388.407944][T18455] syzkaller0: entered allmulticast mode [ 389.094915][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 389.462200][T18484] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3139'. [ 390.291257][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.320113][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.343254][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.368920][T11055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.384785][T18488] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 390.398259][T11055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.434577][T18501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3141'. [ 390.443285][T11055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.448329][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3141'. [ 390.457309][T11055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.472330][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.483273][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.498476][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.516329][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.526867][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.534788][T18488] wg1 speed is unknown, defaulting to 1000 [ 390.615772][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3033'. [ 390.692576][T18509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3142'. [ 390.791229][T18509] netlink: 85520 bytes leftover after parsing attributes in process `syz.1.3142'. [ 391.028098][T18509] hsr_slave_1 (unregistering): left promiscuous mode [ 391.288141][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.302350][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.312884][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.336809][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.348211][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.372486][T18539] bond1: option ad_select: invalid value (34) [ 391.393224][T18539] bond1 (unregistering): Released all slaves [ 391.530855][T18544] syzkaller1: entered promiscuous mode [ 391.543330][T18544] syzkaller1: entered allmulticast mode [ 391.645410][T18538] lo speed is unknown, defaulting to 1000 [ 391.656578][T18538] wg1 speed is unknown, defaulting to 1000 [ 391.939675][T18535] lo speed is unknown, defaulting to 1000 [ 391.951042][T18535] wg1 speed is unknown, defaulting to 1000 [ 392.156399][T18559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.291095][T18566] xt_connbytes: Forcing CT accounting to be enabled [ 392.746811][T18573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3159'. [ 392.828799][T18580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.903996][T18535] chnl_net:caif_netlink_parms(): no params data found [ 393.061990][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.082755][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.092470][T18535] bridge_slave_0: entered allmulticast mode [ 393.100615][T18535] bridge_slave_0: entered promiscuous mode [ 393.110851][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.118333][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.129811][T18535] bridge_slave_1: entered allmulticast mode [ 393.140713][T18535] bridge_slave_1: entered promiscuous mode [ 393.221887][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.258095][T18592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.317860][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.392469][ T5829] Bluetooth: hci2: command tx timeout [ 393.424658][T18535] team0: Port device team_slave_0 added [ 393.451738][T18535] team0: Port device team_slave_1 added [ 393.536786][T18604] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 393.593652][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.601979][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.655879][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.682517][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.694070][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.739380][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.752089][T18593] lo speed is unknown, defaulting to 1000 [ 393.814628][T18593] wg1 speed is unknown, defaulting to 1000 [ 393.864350][T18535] hsr_slave_0: entered promiscuous mode [ 393.871969][T18535] hsr_slave_1: entered promiscuous mode [ 393.880042][T18535] debugfs: 'hsr0' already exists in 'hsr' [ 393.885989][T18535] Cannot create hsr debugfs directory [ 393.909997][T18619] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3169'. [ 394.051958][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'. [ 394.061847][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3172'. [ 394.097121][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'. [ 394.106950][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3172'. [ 394.216721][T18631] ªªªªªª: renamed from wg2 [ 394.302158][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'. [ 394.531466][T18637] netlink: 'syz.3.3176': attribute type 1 has an invalid length. [ 394.851294][T18535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.876806][T18535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.897310][T18535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.923392][T18535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.964449][T18658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3180'. [ 395.124620][T18535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.178790][T18535] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.201884][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.209130][T11060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.286515][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.293731][T11052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.468105][ T5829] Bluetooth: hci2: command tx timeout [ 395.534725][ T30] audit: type=1800 audit(1765764688.465:4): pid=18678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3184" name="memory.events" dev="tmpfs" ino=84 res=0 errno=0 [ 395.563436][T18669] lo speed is unknown, defaulting to 1000 [ 395.572710][T18669] wg1 speed is unknown, defaulting to 1000 [ 395.636200][ T30] audit: type=1804 audit(1765764688.495:5): pid=18678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3184" name="memory.events" dev="tmpfs" ino=84 res=1 errno=0 [ 395.893963][T18535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.911854][T18670] lo speed is unknown, defaulting to 1000 [ 395.928109][T18670] wg1 speed is unknown, defaulting to 1000 [ 395.950220][T18535] veth0_vlan: entered promiscuous mode [ 395.974005][T18695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3187'. [ 396.080904][T18698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3189'. [ 396.145948][T18535] veth1_vlan: entered promiscuous mode [ 396.316912][T18535] veth0_macvtap: entered promiscuous mode [ 396.369656][T18535] veth1_macvtap: entered promiscuous mode [ 396.411998][T18535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.456249][T18535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.491915][T18672] lo speed is unknown, defaulting to 1000 [ 396.517278][T11060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.543075][T11060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.586818][T11060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.604453][T11060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.655910][T18672] wg1 speed is unknown, defaulting to 1000 [ 397.208832][T11040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.217992][T11040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.273573][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.298400][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.339455][T18716] lo speed is unknown, defaulting to 1000 [ 397.350389][T18716] wg1 speed is unknown, defaulting to 1000 [ 397.405711][T18738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3197'. [ 397.547997][ T5829] Bluetooth: hci2: command tx timeout [ 398.170991][T18773] tipc: Enabled bearer , priority 0 [ 398.192869][T18771] tipc: Enabling of bearer rejected, already enabled [ 398.228283][T18773] syzkaller0: entered promiscuous mode [ 398.238805][T18773] syzkaller0: entered allmulticast mode [ 398.324216][T18780] tipc: Resetting bearer [ 398.409739][T18776] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 398.487621][T18769] tipc: Resetting bearer [ 398.538478][T18769] tipc: Disabling bearer [ 398.788597][T18774] lo speed is unknown, defaulting to 1000 [ 398.809110][T18774] wg1 speed is unknown, defaulting to 1000 [ 399.627969][ T5829] Bluetooth: hci2: command tx timeout [ 462.587978][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 471.258146][T18836] __nla_validate_parse: 3 callbacks suppressed [ 471.258164][T18836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3219'. [ 471.326396][T18815] lo speed is unknown, defaulting to 1000 [ 471.338604][T18815] wg1 speed is unknown, defaulting to 1000 [ 471.715611][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3220'. [ 471.777146][T18840] netlink: zone id is out of range [ 471.783605][T18840] netlink: zone id is out of range [ 472.105085][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 472.131938][T18811] lo speed is unknown, defaulting to 1000 [ 472.143684][T18811] wg1 speed is unknown, defaulting to 1000 [ 472.178508][T18849] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3223'. [ 472.350651][T18868] x_tables: duplicate underflow at hook 4 [ 472.936966][T18887] vlan2: entered promiscuous mode [ 472.944430][T18887] bridge0: entered promiscuous mode [ 473.029199][T18897] ip6gre1: entered promiscuous mode [ 473.038176][T18897] ip6gre1: entered allmulticast mode [ 473.041204][T18899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 473.056179][T18899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3235'. [ 473.360081][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3240'. [ 473.419306][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3242'. [ 473.480142][T18921] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3241'. [ 473.513671][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'. [ 473.543954][T18919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.599920][T18901] lo speed is unknown, defaulting to 1000 [ 473.631589][T18901] wg1 speed is unknown, defaulting to 1000 [ 473.777442][T18919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.814969][T18933] xt_hashlimit: size too large, truncated to 1048576 [ 473.940003][T18919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.087235][T18919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.451318][T11032] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.481965][T11032] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.531421][T11032] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.554201][T11032] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.673137][T18949] syzkaller0: entered promiscuous mode [ 474.685193][T18949] syzkaller0: entered allmulticast mode [ 474.702167][T18952] pim6reg: entered allmulticast mode [ 474.745693][T18952] pim6reg: left allmulticast mode [ 474.784660][T18951] tipc: Started in network mode [ 474.790518][T18951] tipc: Node identity b25413da8a71, cluster identity 4711 [ 474.790802][T18955] netlink: 'syz.1.3252': attribute type 6 has an invalid length. [ 474.808163][T18951] tipc: Enabled bearer , priority 0 [ 474.864271][T18955] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.872037][T18955] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.038150][T18948] tipc: Resetting bearer [ 475.099432][T18948] tipc: Disabling bearer [ 475.317494][T18981] netlink: 'syz.2.3258': attribute type 4 has an invalid length. [ 475.474042][T18993] tipc: Enabled bearer , priority 0 [ 475.482989][T18993] syzkaller0: entered promiscuous mode [ 475.489904][T18993] syzkaller0: entered allmulticast mode [ 475.533184][T18992] tipc: Resetting bearer [ 475.562327][T18992] tipc: Disabling bearer [ 476.168119][T18998] lo speed is unknown, defaulting to 1000 [ 476.181571][T18998] wg1 speed is unknown, defaulting to 1000 [ 476.220873][T19015] openvswitch: netlink: IP tunnel dst address not specified [ 476.436882][T19018] __nla_validate_parse: 10 callbacks suppressed [ 476.436900][T19018] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3270'. [ 476.649860][T19025] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.690860][T19025] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.746636][T19030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3274'. [ 476.854293][T19025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.864176][T19025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.004334][T19025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 477.023503][T19025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.114807][T19038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.222022][T19025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 477.234343][T19025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.253183][T19047] netem: change failed [ 477.378301][T11035] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 477.390306][T11035] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.439618][T19051] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3278'. [ 477.474914][T11029] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 477.488035][T11029] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.531167][T11029] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 477.539780][T11029] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.573021][T19025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 477.611645][T19059] netlink: 'syz.0.3280': attribute type 3 has an invalid length. [ 477.646077][T19025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.704787][T19062] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3281'. [ 477.736239][T19025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 477.748135][T19025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.809501][T19025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 477.818371][T19068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3283'. [ 477.821401][T19025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.851747][T19070] netlink: 'syz.1.3282': attribute type 10 has an invalid length. [ 477.886663][T19070] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.897582][T19070] bond0: (slave team0): Enslaving as an active interface with an up link [ 477.965453][T19073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3284'. [ 477.980237][T19073] xt_hashlimit: size too large, truncated to 1048576 [ 477.987198][T19073] xt_hashlimit: max too large, truncated to 1048576 [ 477.993424][T19074] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3285'. [ 478.003123][T19074] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3285'. [ 478.012448][T19074] netlink: 'syz.0.3285': attribute type 6 has an invalid length. [ 478.015007][T19073] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 478.032685][T19074] netlink: 'syz.0.3285': attribute type 5 has an invalid length. [ 478.057607][T19074] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3285'. [ 478.075341][T19074] netlink: 'syz.0.3285': attribute type 4 has an invalid length. [ 478.099113][T19074] netlink: 'syz.0.3285': attribute type 4 has an invalid length. [ 478.110929][ T9] lo speed is unknown, defaulting to 1000 [ 478.118523][ T9] syz2: Port: 1 Link ACTIVE [ 478.232314][T19087] IPv6: Can't replace route, no match found [ 478.271892][T19089] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3289'. [ 479.004882][T19101] lo speed is unknown, defaulting to 1000 [ 479.027448][T19101] wg1 speed is unknown, defaulting to 1000 [ 479.355551][T19124] bridge_slave_1: left allmulticast mode [ 479.363176][T19124] bridge_slave_1: left promiscuous mode [ 479.369198][T19124] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.382760][T19124] bridge_slave_0: left allmulticast mode [ 479.414653][T19124] bridge_slave_0: left promiscuous mode [ 479.432216][T19124] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.693075][T19135] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 479.915850][T19138] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 479.964202][T19138] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 479.986392][T19158] netlink: 'syz.1.3303': attribute type 7 has an invalid length. [ 479.994796][T19158] netlink: 'syz.1.3303': attribute type 8 has an invalid length. [ 480.008054][T19138] bond1: (slave xfrm1): making interface the new active one [ 480.016801][T19138] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 480.252868][T19168] ip6erspan1: entered allmulticast mode [ 480.424255][T19155] lo speed is unknown, defaulting to 1000 [ 480.451931][T19155] wg1 speed is unknown, defaulting to 1000 [ 481.133430][T19203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.205655][T19203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.499214][T19228] __nla_validate_parse: 7 callbacks suppressed [ 481.499232][T19228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3319'. [ 481.532309][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3320'. [ 481.605123][T19237] netlink: 'syz.2.3322': attribute type 4 has an invalid length. [ 481.900465][T19251] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 481.915012][T19251] bond3 (unregistering): Released all slaves [ 482.074419][T19253] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 482.093329][T19253] bond3 (unregistering): Released all slaves [ 482.404102][T19268] syzkaller0: entered promiscuous mode [ 482.423258][T19271] netlink: 'syz.2.3331': attribute type 1 has an invalid length. [ 482.423281][T19268] syzkaller0: entered allmulticast mode [ 482.443292][T19270] netlink: 'syz.2.3331': attribute type 1 has an invalid length. [ 482.563324][T19275] tipc: Failed to remove unknown binding: 66,1,1/0:3333552210/3333552212 [ 482.653321][T19270] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 482.654460][T19271] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 482.686828][T19273] tipc: Started in network mode [ 482.748228][T19273] tipc: Node identity 8a99f4958b45, cluster identity 4711 [ 482.755709][T19273] tipc: Enabled bearer , priority 0 [ 482.877377][T19267] tipc: Resetting bearer [ 482.944030][T19267] tipc: Disabling bearer [ 483.068178][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 483.313057][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3338'. [ 483.360608][T19304] IPVS: length: 121 != 8 [ 483.553934][T19243] lo speed is unknown, defaulting to 1000 [ 483.608174][T19243] wg1 speed is unknown, defaulting to 1000 [ 483.654322][T19315] tipc: Enabled bearer , priority 10 [ 484.371974][T19294] lo speed is unknown, defaulting to 1000 [ 484.434840][T19294] wg1 speed is unknown, defaulting to 1000 [ 484.783698][T12335] tipc: Node number set to 3202491592 [ 485.296798][T19297] lo speed is unknown, defaulting to 1000 [ 485.311456][T19297] wg1 speed is unknown, defaulting to 1000 [ 485.318522][T19348] wg1 speed is unknown, defaulting to 1000 [ 485.324491][T19348] wg1 speed is unknown, defaulting to 1000 [ 485.354609][T19348] wg1 speed is unknown, defaulting to 1000 [ 485.415609][T19348] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 485.486082][T19361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3354'. [ 485.772344][T19348] wg1 speed is unknown, defaulting to 1000 [ 485.841878][T19348] wg1 speed is unknown, defaulting to 1000 [ 486.009616][T19369] batman_adv: batadv0: Adding interface: ip6gretap1 [ 486.016345][T19369] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.057906][T19369] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 486.079411][T19348] wg1 speed is unknown, defaulting to 1000 [ 486.117982][T19348] wg1 speed is unknown, defaulting to 1000 [ 486.125973][T19348] wg1 speed is unknown, defaulting to 1000 [ 486.138640][T19348] wg1 speed is unknown, defaulting to 1000 [ 486.167064][T19348] wg1 speed is unknown, defaulting to 1000 [ 486.248333][T19348] wg1 speed is unknown, defaulting to 1000 [ 486.557178][T19384] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3359'. [ 486.604858][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'. [ 486.637915][T19383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3359'. [ 486.928535][T19399] Cannot find del_set index 1 as target [ 487.308211][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3371'. [ 487.640430][T19433] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3375'. [ 487.731746][T19436] syzkaller0: entered promiscuous mode [ 487.737250][T19436] syzkaller0: entered allmulticast mode [ 487.750900][T19439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3378'. [ 487.781198][T19442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'. [ 487.865627][T19447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'. [ 487.917146][T19448] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 487.932541][T19448] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3380'. [ 488.012473][T19452] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3380'. [ 489.299602][T19452] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 489.456252][T19459] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 489.504880][T19459] bond1 (unregistering): Released all slaves [ 489.574549][T19458] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 489.586645][T19458] bond1 (unregistering): Released all slaves [ 489.723258][T19486] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 489.799228][T19486] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.811991][T19486] bond0: (slave team0): Enslaving as an active interface with an up link [ 490.175459][T19483] lo speed is unknown, defaulting to 1000 [ 490.184993][T19483] wg1 speed is unknown, defaulting to 1000 [ 490.194147][T19483] wg1 speed is unknown, defaulting to 1000 [ 490.297397][T19513] netlink: 'syz.2.3397': attribute type 1 has an invalid length. [ 491.479284][T19517] lo speed is unknown, defaulting to 1000 [ 491.520148][T19517] wg1 speed is unknown, defaulting to 1000 [ 491.533686][T19517] wg1 speed is unknown, defaulting to 1000 [ 491.566002][T19536] siw: device registration error -23 [ 491.588328][T19545] __nla_validate_parse: 4 callbacks suppressed [ 491.588346][T19545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3408'. [ 491.744961][T19548] ip6gretap1: entered allmulticast mode [ 491.815675][T19550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 491.840999][T19552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3411'. [ 492.000635][T19542] lo speed is unknown, defaulting to 1000 [ 492.030595][T19542] wg1 speed is unknown, defaulting to 1000 [ 492.076376][T19542] wg1 speed is unknown, defaulting to 1000 [ 493.034811][T19595] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3423'. [ 493.154289][T19600] openvswitch: netlink: IP tunnel dst address not specified [ 493.178848][T19600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3425'. [ 493.281853][T19585] lo speed is unknown, defaulting to 1000 [ 493.298645][T19585] wg1 speed is unknown, defaulting to 1000 [ 493.306175][T19585] wg1 speed is unknown, defaulting to 1000 [ 493.386159][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3428'. [ 493.410416][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3428'. [ 493.661993][T19619] tipc: Enabling of bearer rejected, failed to enable media [ 493.676527][T19624] netlink: 'syz.1.3431': attribute type 3 has an invalid length. [ 494.216699][T19638] bond3: option resend_igmp: invalid value (2878) [ 494.237812][T19638] bond3: option resend_igmp: allowed values 0 - 255 [ 494.254963][T19638] bond3 (unregistering): Released all slaves [ 494.375003][T19644] tipc: Enabled bearer , priority 0 [ 494.413164][T19646] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3438'. [ 494.476912][T19652] netlink: 'syz.2.3440': attribute type 2 has an invalid length. [ 494.479546][T19649] bridge_slave_0: default FDB implementation only supports local addresses [ 494.493533][T19652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3440'. [ 494.680813][T11057] tipc: Resetting bearer [ 494.696517][T19647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3438'. [ 494.703671][T19661] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3442'. [ 494.887411][T19662] syzkaller0: entered promiscuous mode [ 494.893276][T19662] syzkaller0: entered allmulticast mode [ 494.990896][T19635] tipc: Resetting bearer [ 496.102273][T19705] netlink: 'syz.0.3452': attribute type 1 has an invalid length. [ 496.806001][T19635] tipc: Disabling bearer [ 496.899792][T19706] bond2 (unregistering): Released all slaves [ 497.038460][T11040] bridge_slave_1: left allmulticast mode [ 497.045946][T11040] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.088585][T19716] openvswitch: netlink: IP tunnel dst address not specified [ 497.121816][T11040] bridge_slave_0: left allmulticast mode [ 497.121820][T19721] __nla_validate_parse: 3 callbacks suppressed [ 497.121833][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 497.131229][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.134788][T19721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3458'. [ 497.223062][T11040] veth13: left allmulticast mode [ 497.230271][T11040] veth13: left promiscuous mode [ 497.235324][T11040] bridge12: port 3(veth13) entered disabled state [ 497.256716][T11040] veth0_to_bond: left allmulticast mode [ 497.264162][T11040] veth0_to_bond: left promiscuous mode [ 497.269969][T11040] bridge12: port 2(veth0_to_bond) entered disabled state [ 497.289853][T11040] veth11: left allmulticast mode [ 497.297842][T11040] veth11: left promiscuous mode [ 497.302964][T11040] bridge12: port 1(veth11) entered disabled state [ 497.322514][T11040] tipc: Resetting bearer [ 497.400669][T11040] batman_adv: batadv0: Removing interface: ip6gretap1 [ 497.481977][T19712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3453'. [ 498.087398][T11040] tipc: Disabling bearer [ 498.317377][T11040] bond3 (unregistering): (slave bridge10): Releasing active interface [ 498.427898][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 498.544902][T11040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.555169][T11040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.565691][T11040] bond0 (unregistering): Released all slaves [ 498.664754][T11040] bond1 (unregistering): Released all slaves [ 498.676979][T11040] bond2 (unregistering): Released all slaves [ 498.689129][T11040] bond3 (unregistering): Released all slaves [ 498.701204][T11040] bond4 (unregistering): Released all slaves [ 498.806558][T11040] bond5 (unregistering): Released all slaves [ 498.819196][T19721] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 498.958676][T11040] tipc: Left network mode [ 498.974812][T19747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3462'. [ 499.004438][T19747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3462'. [ 499.046826][T11040] IPVS: stopping backup sync thread 10612 ... [ 499.138642][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'. [ 499.156378][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'. [ 499.195055][T19757] syzkaller0: entered promiscuous mode [ 499.200900][T19757] syzkaller0: entered allmulticast mode [ 499.267373][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3465'. [ 499.539551][T19773] netlink: 'syz.2.3467': attribute type 10 has an invalid length. [ 499.592187][T19773] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.634745][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3467'. [ 499.651048][T19773] bond0: (slave team0): Enslaving as an active interface with an up link [ 499.686556][T19774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3467'. [ 499.834162][T19780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 500.199366][T19793] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 501.660842][T19803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.895803][T19818] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 501.929028][T19821] netlink: 'syz.1.3477': attribute type 4 has an invalid length. [ 501.966213][T19819] ip6gre1: entered promiscuous mode [ 502.061367][T19825] netlink: 'syz.1.3477': attribute type 4 has an invalid length. [ 502.169835][T19829] __nla_validate_parse: 2 callbacks suppressed [ 502.169854][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 502.201916][T19829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3478'. [ 502.233942][T19786] lo speed is unknown, defaulting to 1000 [ 502.320031][T19786] wg1 speed is unknown, defaulting to 1000 [ 502.327567][T19786] wg1 speed is unknown, defaulting to 1000 [ 502.908793][T19838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 502.927288][T19838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3481'. [ 502.966002][T19838] IPVS: set_ctl: invalid protocol: 17916 255.255.255.255:20003 [ 503.044858][T11040] hsr_slave_0: left promiscuous mode [ 503.059641][T11040] hsr_slave_1: left promiscuous mode [ 503.067123][T11040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.234183][T19858] netlink: 'syz.4.3483': attribute type 39 has an invalid length. [ 503.554809][T11040] team0 (unregistering): Port device team_slave_1 removed [ 503.605183][T11040] team0 (unregistering): Port device team_slave_0 removed [ 503.613975][ T250] smc: removing ib device !yz! [ 504.065805][T19852] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 504.715457][T19885] netlink: 'syz.2.3488': attribute type 1 has an invalid length. [ 505.453687][T19884] veth5: entered promiscuous mode [ 505.489111][T19885] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 506.788609][T19910] tipc: Enabled bearer , priority 0 [ 506.830778][T19901] pim6reg1: entered promiscuous mode [ 506.848176][T19901] pim6reg1: entered allmulticast mode [ 507.009336][T19910] tipc: Disabling bearer [ 507.020374][T19899] delete_channel: no stack [ 507.326182][T11040] IPVS: stop unused estimator thread 0... [ 507.882218][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3498'. [ 507.904859][T19938] netlink: 'syz.4.3502': attribute type 4 has an invalid length. [ 507.950487][T19936] veth1_to_bridge: entered promiscuous mode [ 507.956623][T19936] veth1_to_bridge: entered allmulticast mode [ 507.978472][T19940] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 507.991176][T19940] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 508.001393][T19930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.031572][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 508.046127][T19942] x_tables: duplicate underflow at hook 2 [ 508.202134][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3507'. [ 508.225445][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3507'. [ 508.259494][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 508.324344][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805e6ba000: rx timeout, send abort [ 508.333332][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031cc6800: rx timeout, send abort [ 508.343148][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805e6ba000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 508.357848][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888031cc6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 508.450941][T19963] tipc: Enabled bearer , priority 0 [ 508.458513][T19963] syzkaller0: entered promiscuous mode [ 508.464000][T19963] syzkaller0: entered allmulticast mode [ 508.546606][T19963] tipc: Resetting bearer [ 508.565043][T19962] tipc: Resetting bearer [ 508.603171][T19962] tipc: Disabling bearer [ 508.833104][T19985] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3515'. [ 508.834929][T19989] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 509.014888][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3507'. [ 509.032926][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3519'. [ 509.090126][T20000] vlan2: entered promiscuous mode [ 509.107905][T20000] bond0: entered promiscuous mode [ 509.126325][T20000] bond_slave_0: entered promiscuous mode [ 509.141903][T20000] bond_slave_1: entered promiscuous mode [ 509.161207][T20000] team0: entered promiscuous mode [ 509.166276][T20000] team_slave_0: entered promiscuous mode [ 509.189011][T20000] team_slave_1: entered promiscuous mode [ 509.213201][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 509.302256][T20006] bond2: down delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 509.312109][T20006] bond2: peer notification delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 509.324629][T20006] bond2 (unregistering): Released all slaves [ 509.360791][T20009] gretap0: entered promiscuous mode [ 509.461542][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3524'. [ 509.527090][T20019] syzkaller0: entered promiscuous mode [ 509.533918][T20019] syzkaller0: entered allmulticast mode [ 509.547169][T20024] C: renamed from team_slave_0 (while UP) [ 509.558421][T20024] netlink: 'syz.3.3528': attribute type 8 has an invalid length. [ 509.578153][T20024] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 509.593777][T20023] syzkaller0: entered promiscuous mode [ 509.599500][T20023] syzkaller0: entered allmulticast mode [ 510.302599][T20075] sctp: [Deprecated]: syz.4.3539 (pid 20075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 510.302599][T20075] Use struct sctp_sack_info instead [ 510.429722][T20081] Bluetooth: MGMT ver 1.23 [ 510.485317][T20087] netlink: 'syz.3.3542': attribute type 28 has an invalid length. [ 510.721074][T20100] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 510.750051][T20098] netlink: 'syz.0.3546': attribute type 2 has an invalid length. [ 510.804145][T20098] : entered promiscuous mode [ 511.101211][T20119] xt_hashlimit: overflow, try lower: 0/0 [ 511.130373][T20119] tipc: Enabling of bearer rejected, failed to enable media [ 511.512292][T20132] lo speed is unknown, defaulting to 1000 [ 511.605490][T20132] wg1 speed is unknown, defaulting to 1000 [ 511.760709][T20155] netlink: 'syz.1.3560': attribute type 3 has an invalid length. [ 512.130554][T20167] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.280835][T20167] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.425330][T20167] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.488073][T20178] nbd4: detected capacity change from 0 to 63 [ 512.510288][ T30] audit: type=1800 audit(1765764805.445:6): pid=20184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3568" name="0" dev="tmpfs" ino=782 res=0 errno=0 [ 512.538372][T20182] block nbd4: NBD_DISCONNECT [ 512.544586][T20182] block nbd4: Disconnected due to user request. [ 512.594383][T20167] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.639527][T20182] block nbd4: shutting down sockets [ 512.660713][T20192] syzkaller0: entered promiscuous mode [ 512.668828][ C1] blk_print_req_error: 54 callbacks suppressed [ 512.668847][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.680279][T20192] syzkaller0: entered allmulticast mode [ 512.684151][ C1] buffer_io_error: 54 callbacks suppressed [ 512.684164][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 512.703272][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.711516][T20189] tipc: Enabling of bearer rejected, failed to enable media [ 512.712364][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 512.728922][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.738004][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 512.745799][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.754882][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 512.798558][T18821] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.807639][T18821] Buffer I/O error on dev nbd4, logical block 0, async page read [ 512.836272][T18821] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.874837][T18821] Buffer I/O error on dev nbd4, logical block 1, async page read [ 512.884941][T18821] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.902209][T18821] Buffer I/O error on dev nbd4, logical block 2, async page read [ 512.910764][T18821] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.920545][T18821] Buffer I/O error on dev nbd4, logical block 3, async page read [ 512.929180][T18821] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.942456][T18821] Buffer I/O error on dev nbd4, logical block 0, async page read [ 512.950609][T18821] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.971498][T18821] Buffer I/O error on dev nbd4, logical block 1, async page read [ 512.982537][T18821] ldm_validate_partition_table(): Disk read failed. [ 512.993733][T18821] Dev nbd4: unable to read RDB block 0 [ 513.008420][T18821] nbd4: unable to read partition table [ 513.023995][T18821] ldm_validate_partition_table(): Disk read failed. [ 513.071076][T18821] Dev nbd4: unable to read RDB block 0 [ 513.089970][T18821] nbd4: unable to read partition table [ 513.136385][T11047] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.165499][T20211] __nla_validate_parse: 14 callbacks suppressed [ 513.165519][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 513.225645][T11047] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.274616][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 513.280098][T11047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.308420][T11047] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.314393][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'. [ 513.399547][T20222] bond0: option all_slaves_active: invalid value (7) [ 513.454852][T20229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3582'. [ 513.554203][T11055] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 513.721004][T20237] lo speed is unknown, defaulting to 1000 [ 513.764260][T20237] wg1 speed is unknown, defaulting to 1000 [ 514.553950][T20286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3594'. [ 514.585806][T20283] batadv1: entered promiscuous mode [ 514.772604][T20290] lo speed is unknown, defaulting to 1000 [ 514.794678][T20290] wg1 speed is unknown, defaulting to 1000 [ 515.229790][T20314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.919891][T20361] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 515.953791][T20361] tipc: Enabled bearer , priority 10 [ 516.002601][T20361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3612'. [ 516.048188][T20361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'. [ 516.088005][T20361] macvlan0: entered allmulticast mode [ 516.093442][T20361] veth1_vlan: entered allmulticast mode [ 516.328403][T20379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3614'. [ 516.418492][T20382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3614'. [ 516.736335][T20392] netlink: 'syz.3.3619': attribute type 4 has an invalid length. [ 517.550294][T20396] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3618'. [ 517.603816][T20435] sctp: [Deprecated]: syz.3.3630 (pid 20435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.603816][T20435] Use struct sctp_sack_info instead [ 517.694456][T20436] netlink: 'syz.3.3630': attribute type 6 has an invalid length. [ 517.756903][T11047] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.773315][T20436] netlink: 'syz.3.3630': attribute type 6 has an invalid length. [ 517.785155][T11047] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.804783][T11047] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.822760][T11047] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.356483][T20459] __nla_validate_parse: 5 callbacks suppressed [ 518.356499][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 518.428754][T20469] x_tables: unsorted entry at hook 3 [ 518.463857][T20464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3639'. [ 518.922892][T18535] cgroup: fork rejected by pids controller in /syz2 [ 519.364549][T11057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.487540][T20506] gretap3: entered allmulticast mode [ 519.684228][T11057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.744587][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 519.810581][T20525] tipc: Enabling of bearer rejected, failed to enable media [ 519.830386][T20523] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3654'. [ 519.882633][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3654'. [ 519.909663][T11057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.030037][T11057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.200739][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 520.262604][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 520.275655][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 520.285831][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.295694][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.310334][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.362201][T11057] bridge_slave_1: left allmulticast mode [ 520.368378][T11057] bridge_slave_1: left promiscuous mode [ 520.374170][T11057] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.404340][T11057] bridge_slave_0: left allmulticast mode [ 520.411465][T11057] bridge_slave_0: left promiscuous mode [ 520.417304][T11057] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.703274][T11057] batman_adv: batadv0: Removing interface: ip6gretap1 [ 520.708623][T20551] Cannot find set identified by id 0 to match [ 520.980647][T11057] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 521.140195][T20562] netlink: 'syz.4.3666': attribute type 4 has an invalid length. [ 521.169119][T20562] netlink: 'syz.4.3666': attribute type 11 has an invalid length. [ 521.187405][T20562] netlink: 'syz.4.3666': attribute type 11 has an invalid length. [ 521.212253][T20562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3666'. [ 521.265794][T20562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.438530][T11057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.449504][T11057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.460317][T11057] bond0 (unregistering): (slave team0): Releasing backup interface [ 521.470719][T11057] bond0 (unregistering): Released all slaves [ 521.483872][T11057] bond1 (unregistering): Released all slaves [ 521.497271][T11057] bond2 (unregistering): Released all slaves [ 521.509268][T20535] lo speed is unknown, defaulting to 1000 [ 521.520140][T20535] wg1 speed is unknown, defaulting to 1000 [ 521.537569][T20570] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 521.896911][T20584] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 522.296033][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3676'. [ 522.347842][ T5151] Bluetooth: hci2: command tx timeout [ 522.910560][T20608] tipc: Resetting bearer [ 523.386190][T20608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.890171][T20614] geneve2: entered promiscuous mode [ 523.915975][ T914] wg1 speed is unknown, defaulting to 1000 [ 523.925158][T11052] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.935570][ T914] syz0: Port: 1 Link DOWN [ 523.957234][T11052] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 523.997535][T11052] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.008159][T11052] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 524.043620][T11052] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.054361][T11052] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 524.080262][T11057] hsr_slave_0: left promiscuous mode [ 524.097035][T11057] hsr_slave_1: left promiscuous mode [ 524.116821][T11057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.127967][T11057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.144460][T11057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.169487][T11057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.203769][T11057] veth1_macvtap: left promiscuous mode [ 524.209678][T11057] veth0_macvtap: left promiscuous mode [ 524.215430][T11057] veth1_vlan: left promiscuous mode [ 524.221962][T11057] veth0_vlan: left promiscuous mode [ 524.429988][ T5151] Bluetooth: hci2: command tx timeout [ 524.736321][T11057] team0 (unregistering): Port device team_slave_1 removed [ 524.779731][T11057] team0 (unregistering): Port device team_slave_0 removed [ 525.154197][T11052] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.162773][T11052] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 525.183640][T20679] tipc: Enabling of bearer rejected, failed to enable media [ 525.242134][T20535] chnl_net:caif_netlink_parms(): no params data found [ 525.267508][T20656] lo speed is unknown, defaulting to 1000 [ 525.325237][T20656] wg1 speed is unknown, defaulting to 1000 [ 525.636601][T20705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3698'. [ 525.664658][T20535] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.674685][T20535] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.686002][T20535] bridge_slave_0: entered allmulticast mode [ 525.694528][T20535] bridge_slave_0: entered promiscuous mode [ 525.721043][T20535] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.746419][T20535] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.754804][T20535] bridge_slave_1: entered allmulticast mode [ 525.764113][T20535] bridge_slave_1: entered promiscuous mode [ 525.844945][T20705] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3698'. [ 525.892297][T20535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.926825][T20535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.948243][T20719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3698'. [ 526.056227][T20535] team0: Port device team_slave_0 added [ 526.085408][T20535] team0: Port device team_slave_1 added [ 526.222217][T20535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.238006][T20535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.299323][T20535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.313619][T20535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.323446][T20535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.365848][T20535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.401908][T20722] lo speed is unknown, defaulting to 1000 [ 526.453113][T20739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3703'. [ 526.458548][T20722] wg1 speed is unknown, defaulting to 1000 [ 526.509321][ T5151] Bluetooth: hci2: command tx timeout [ 526.526447][T20736] lo speed is unknown, defaulting to 1000 [ 526.591605][T20736] wg1 speed is unknown, defaulting to 1000 [ 526.610414][T20745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3707'. [ 526.678738][T20535] hsr_slave_0: entered promiscuous mode [ 526.685804][T20535] hsr_slave_1: entered promiscuous mode [ 526.692555][T20535] debugfs: 'hsr0' already exists in 'hsr' [ 526.698417][T20535] Cannot create hsr debugfs directory [ 526.725519][T20726] netlink: 'syz.0.3701': attribute type 1 has an invalid length. [ 526.745734][T20726] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3701'. [ 526.840483][T20744] vxcan2: entered allmulticast mode [ 526.882151][T20726] netlink: 'syz.0.3701': attribute type 2 has an invalid length. [ 527.188338][T20762] netlink: 'syz.3.3711': attribute type 15 has an invalid length. [ 527.213275][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3711'. [ 527.269802][T20766] netlink: 'syz.4.3714': attribute type 9 has an invalid length. [ 527.299032][T20766] netlink: 'syz.4.3714': attribute type 11 has an invalid length. [ 527.326734][T20766] netlink: 'syz.4.3714': attribute type 12 has an invalid length. [ 527.338300][T20766] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3714'. [ 527.409522][T20773] netem: incorrect ge model size [ 527.418881][T20766] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 527.438389][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 527.456344][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3715'. [ 527.479733][T20766] syzkaller0: entered promiscuous mode [ 527.486179][T20766] syzkaller0: entered allmulticast mode [ 527.574638][T20779] vlan0: entered allmulticast mode [ 527.583370][T20779] veth0_vlan: entered allmulticast mode [ 527.607106][T20766] tipc: Enabling of bearer rejected, failed to enable media [ 527.757418][T20785] tun0: tun_chr_ioctl cmd 1074025672 [ 527.765173][T20785] tun0: ignored: set checksum disabled [ 528.000536][T20535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 528.069090][T20535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 528.101821][T20535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 528.147819][T20535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 528.165276][T20816] netlink: 'syz.3.3730': attribute type 1 has an invalid length. [ 528.251177][T20816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.302121][T20824] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.310804][T20824] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 528.322303][T20824] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 528.451810][T20816] veth3: entered promiscuous mode [ 528.501471][T20816] bond2: (slave veth3): Enslaving as an active interface with a down link [ 528.587750][ T5829] Bluetooth: hci2: command tx timeout [ 528.605756][T20826] lo speed is unknown, defaulting to 1000 [ 528.667037][T20826] wg1 speed is unknown, defaulting to 1000 [ 528.878482][T20535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.053004][T20535] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.085065][T11029] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.092229][T11029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.156807][T11029] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.164079][T11029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.176965][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 529.424746][T20817] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 530.239173][T20535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.272237][T20892] syzkaller0: entered promiscuous mode [ 530.280876][T20892] syzkaller0: entered allmulticast mode [ 530.362579][T20892] tipc: Enabled bearer , priority 0 [ 530.612923][T20896] tipc: Resetting bearer [ 530.655772][T20896] tipc: Disabling bearer [ 530.666959][T20535] veth0_vlan: entered promiscuous mode [ 530.693346][T20535] veth1_vlan: entered promiscuous mode [ 530.761689][T20535] veth0_macvtap: entered promiscuous mode [ 530.774888][T20906] __nla_validate_parse: 6 callbacks suppressed [ 530.774914][T20906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3743'. [ 530.794764][T20535] veth1_macvtap: entered promiscuous mode [ 530.820428][T20535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.850228][T20535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.931480][ T250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.946222][ T250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.975720][ T250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.998953][ T250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.248564][ T250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.258230][ T250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.369658][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.380238][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.205941][T20950] xt_connbytes: Forcing CT accounting to be enabled [ 532.211873][T20948] syzkaller0: entered promiscuous mode [ 532.218722][T20948] syzkaller0: entered allmulticast mode [ 532.258923][T20955] xt_hashlimit: invalid rate [ 532.468473][T20961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3756'. [ 532.472423][T20964] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3758'. [ 534.066760][T20975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.069815][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 534.091568][T20978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3761'. [ 534.146722][T20987] openvswitch: netlink: Message has 4 unknown bytes. [ 534.150336][T20983] netlink: 'syz.1.3763': attribute type 10 has an invalid length. [ 534.159516][T20987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.176821][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 534.196712][T20983] veth1_macvtap: left promiscuous mode [ 534.222457][T20983] team0: Device veth1_macvtap failed to register rx_handler [ 534.333065][T20975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.372965][T21004] tipc: Enabling of bearer rejected, failed to enable media [ 534.622768][T20975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.950289][T20975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.064681][T21038] bond3: option fail_over_mac: invalid value (127) [ 535.114971][T21038] bond3 (unregistering): Released all slaves [ 535.221057][T21045] tipc: Enabled bearer , priority 0 [ 535.262350][T21045] syzkaller0: entered promiscuous mode [ 535.278534][T21045] syzkaller0: entered allmulticast mode [ 535.354548][T21053] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3774'. [ 535.391201][T11032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.473419][T11052] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.500345][T21047] tipc: Resetting bearer [ 535.538748][T11047] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.602834][T21071] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3776'. [ 535.671934][T21065] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3775'. [ 535.698247][T21044] tipc: Resetting bearer [ 535.871458][T21044] tipc: Disabling bearer [ 535.896768][T11052] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.915401][T21085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3777'. [ 535.936344][T21089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3777'. [ 536.094479][T21092] lo speed is unknown, defaulting to 1000 [ 536.120577][T21092] wg1 speed is unknown, defaulting to 1000 [ 536.297054][T21108] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3784'. [ 536.498401][T21120] netlink: 'syz.1.3787': attribute type 12 has an invalid length. [ 536.506579][T21120] netlink: 'syz.1.3787': attribute type 12 has an invalid length. [ 536.625026][T21092] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3778'. [ 536.752405][T21131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3790'. [ 536.791198][T21132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3790'. [ 536.940606][T21135] lo speed is unknown, defaulting to 1000 [ 536.949241][T21135] wg1 speed is unknown, defaulting to 1000 [ 537.002963][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3793'. [ 537.076836][T21151] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3793'. [ 537.091025][T21153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3795'. [ 537.100732][T21151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3793'. [ 537.249082][T21148] team0 (unregistering): Port device team_slave_0 removed [ 537.264574][T21148] team0 (unregistering): Port device team_slave_1 removed [ 537.499132][T21170] dummy0: entered promiscuous mode [ 537.507133][T21170] dummy0: left promiscuous mode [ 538.181564][T21201] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 538.192857][T21201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.757858][ T5829] Bluetooth: hci2: command 0x0405 tx timeout [ 540.001511][T21296] xt_connbytes: Forcing CT accounting to be enabled [ 540.062755][T21301] xt_hashlimit: invalid rate [ 540.094468][T21300] lo speed is unknown, defaulting to 1000 [ 540.103349][T21299] lo speed is unknown, defaulting to 1000 [ 540.111333][T21300] wg1 speed is unknown, defaulting to 1000 [ 540.120464][T21299] wg1 speed is unknown, defaulting to 1000 [ 540.208621][T21306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.220808][T21306] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.330148][T21306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.345460][T21306] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.482313][T21306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.494509][T21306] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.582713][T21306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.608321][T21306] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.800051][T11040] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.808400][T11040] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.845703][T11035] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.858528][T11035] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.913091][T11035] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.923570][T11035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.970336][T11052] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.998653][T11052] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.152397][T21339] __nla_validate_parse: 8 callbacks suppressed [ 541.152420][T21339] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3846'. [ 541.205163][T21342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3847'. [ 541.297515][T21350] netlink: 'syz.2.3850': attribute type 1 has an invalid length. [ 541.385559][T21361] netlink: 212176 bytes leftover after parsing attributes in process `syz.2.3850'. [ 541.433834][T21350] bond1 (unregistering): Released all slaves [ 541.524233][T21349] lo speed is unknown, defaulting to 1000 [ 541.542529][T21349] wg1 speed is unknown, defaulting to 1000 [ 541.846987][T21385] geneve2: entered promiscuous mode [ 541.857044][T11052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 541.896386][T21395] netlink: 'syz.4.3857': attribute type 2 has an invalid length. [ 541.903482][T11052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 541.934252][T11052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 541.940500][T21390] netlink: 'syz.4.3857': attribute type 2 has an invalid length. [ 541.956812][T11052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 542.125966][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'. [ 542.262434][T21421] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3861'. [ 542.559314][T21430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3865'. [ 542.592605][T21435] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3868'. [ 542.593174][T21436] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3868'. [ 542.614857][T21438] syzkaller0: entered promiscuous mode [ 542.631291][T21438] syzkaller0: entered allmulticast mode [ 542.640784][T21436] netlink: 'syz.3.3868': attribute type 3 has an invalid length. [ 542.649309][T21434] tipc: Enabled bearer , priority 0 [ 542.649403][T21436] netlink: 'syz.3.3868': attribute type 2 has an invalid length. [ 542.677575][T21436] netlink: 'syz.3.3868': attribute type 2 has an invalid length. [ 542.688813][T21441] netlink: 'syz.3.3868': attribute type 3 has an invalid length. [ 542.711732][T21441] netlink: 'syz.3.3868': attribute type 2 has an invalid length. [ 542.724068][T21441] netlink: 'syz.3.3868': attribute type 2 has an invalid length. [ 542.736284][T21434] tipc: Resetting bearer [ 542.780636][T21434] tipc: Disabling bearer [ 542.925246][T21460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3874'. [ 542.949749][T21461] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3875'. [ 543.224785][T21481] netlink: 'syz.1.3880': attribute type 14 has an invalid length. [ 543.757387][T21518] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 543.773089][T21518] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 543.874467][T12335] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4 [ 543.894965][T12335] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 544.600965][T21588] lo speed is unknown, defaulting to 1000 [ 544.614480][T21588] wg1 speed is unknown, defaulting to 1000 [ 544.706100][T21594] pimreg: tun_chr_ioctl cmd 1074025680 [ 544.713118][T21591] pimreg: tun_chr_ioctl cmd 1074025673 [ 545.161892][T21606] lo speed is unknown, defaulting to 1000 [ 545.185304][T21606] wg1 speed is unknown, defaulting to 1000 [ 545.614778][T21634] wireguard: wg1: Could not create IPv4 socket [ 545.623043][T21634] wg1: entered promiscuous mode [ 545.639126][T21634] wg1: entered allmulticast mode [ 546.420646][T21671] lo speed is unknown, defaulting to 1000 [ 546.451677][T21671] wg1 speed is unknown, defaulting to 1000 [ 546.610340][T21686] lo speed is unknown, defaulting to 1000 [ 546.626123][T21691] __nla_validate_parse: 13 callbacks suppressed [ 546.626146][T21691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3940'. [ 546.653361][T21686] wg1 speed is unknown, defaulting to 1000 [ 546.664790][T21693] ksmbd: Unknown IPC event: 8, ignore. [ 546.694504][T21693] validate_nla: 3 callbacks suppressed [ 546.694522][T21693] netlink: 'syz.4.3941': attribute type 3 has an invalid length. [ 546.712769][T21693] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3941'. [ 546.860523][T21703] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3942'. [ 547.141797][T21714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 547.249349][T21727] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 547.343737][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 547.404433][T21737] netlink: 'syz.3.3950': attribute type 1 has an invalid length. [ 547.414918][T21724] lo speed is unknown, defaulting to 1000 [ 547.446663][T21724] wg1 speed is unknown, defaulting to 1000 [ 547.451266][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3950'. [ 547.520186][T21741] x_tables: duplicate underflow at hook 3 [ 547.974754][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3960'. [ 548.033885][T21776] netlink: 'syz.4.3963': attribute type 1 has an invalid length. [ 548.134276][T21776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.214836][T21784] bond1: (slave ip6gretap1): making interface the new active one [ 548.225443][T21784] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 548.280371][T21790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3966'. [ 548.295108][T21784] veth7: entered promiscuous mode [ 548.309287][T21791] erspan0: entered allmulticast mode [ 548.333999][T21788] lo speed is unknown, defaulting to 1000 [ 548.434969][T21788] wg1 speed is unknown, defaulting to 1000 [ 548.492073][T21796] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3968'. [ 548.560171][T21796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3968'. [ 548.668990][T21796] macvtap1: entered allmulticast mode [ 548.674430][T21796] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 548.696959][T21796] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 548.732957][T21805] macvtap1: entered allmulticast mode [ 548.745686][T21805] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 548.754902][T21805] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 548.799814][T21808] lo speed is unknown, defaulting to 1000 [ 548.807417][T21808] wg1 speed is unknown, defaulting to 1000 [ 548.852474][T21809] hsr_slave_0: left promiscuous mode [ 548.886696][T21809] hsr_slave_1: left promiscuous mode [ 549.086436][T21824] netlink: 'syz.3.3974': attribute type 8 has an invalid length. [ 549.137813][T21824] netlink: 'syz.3.3974': attribute type 9 has an invalid length. [ 549.169004][T21824] netlink: 'syz.3.3974': attribute type 10 has an invalid length. [ 549.192702][T21824] netlink: 'syz.3.3974': attribute type 11 has an invalid length. [ 549.492878][T21844] lo speed is unknown, defaulting to 1000 [ 549.531631][T21856] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 549.570217][T21844] wg1 speed is unknown, defaulting to 1000 [ 549.577841][T21846] lo speed is unknown, defaulting to 1000 [ 549.623761][T21846] wg1 speed is unknown, defaulting to 1000 [ 549.632681][T21856] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 549.774035][T21856] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 549.948949][ T5151] Bluetooth: hci2: command 0x0405 tx timeout [ 550.004635][T21869] vlan4: entered promiscuous mode [ 550.025704][T21869] bond2: entered promiscuous mode [ 550.053265][T21869] bond2: (slave vlan4): Opening slave failed [ 550.125193][T21879] netlink: 'syz.4.3989': attribute type 1 has an invalid length. [ 550.174593][T21856] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 550.284274][T11047] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 550.320123][T11040] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 550.444224][T11047] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 550.481299][T11052] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 550.545299][T21894] dvmrp0: entered allmulticast mode [ 550.812992][T21925] syzkaller0: entered promiscuous mode [ 550.819371][T21925] syzkaller0: entered allmulticast mode [ 550.907063][T21924] lo speed is unknown, defaulting to 1000 [ 550.941637][T21924] wg1 speed is unknown, defaulting to 1000 [ 551.105588][T21938] lo speed is unknown, defaulting to 1000 [ 551.160133][T21938] wg1 speed is unknown, defaulting to 1000 [ 551.160174][T21939] lo speed is unknown, defaulting to 1000 [ 551.266249][T21939] wg1 speed is unknown, defaulting to 1000 [ 551.754299][T21966] netlink: 'syz.1.4010': attribute type 12 has an invalid length. [ 551.776965][T21969] __nla_validate_parse: 11 callbacks suppressed [ 551.776990][T21969] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4009'. [ 551.788154][T21966] netlink: 'syz.1.4010': attribute type 29 has an invalid length. [ 551.840948][T21966] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4010'. [ 552.088562][T21984] netlink: 'syz.1.4015': attribute type 1 has an invalid length. [ 552.181559][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4015'. [ 552.245936][T21988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.324085][T21991] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 552.353775][T21984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.396575][T21984] bond1: (slave geneve3): making interface the new active one [ 552.435042][T21984] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 552.487215][T21991] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 552.488608][T11029] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.555864][T11029] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.583368][T21989] lo speed is unknown, defaulting to 1000 [ 552.583498][T11029] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 552.630208][T21989] wg1 speed is unknown, defaulting to 1000 [ 552.673631][T11029] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 553.086052][T22011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4020'. [ 553.161027][T22016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4020'. [ 553.239438][T22018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4020'. [ 553.346511][T22018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.376489][T22020] tipc: Enabled bearer , priority 0 [ 553.423987][T22020] tipc: Resetting bearer [ 553.511001][T22025] Cannot find add_set index 0 as target [ 553.518494][T22023] block nbd2: server does not support multiple connections per device. [ 553.538867][T22023] block nbd2: shutting down sockets [ 553.680693][T22032] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4025'. [ 553.701300][T22037] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 553.730724][T22032] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4025'. [ 553.741564][T22038] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 553.760500][T22032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4025'. [ 553.802519][T22043] syzkaller1: entered promiscuous mode [ 553.827827][T22043] syzkaller1: entered allmulticast mode [ 554.176035][T22060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4033'. [ 554.195868][T22061] block nbd2: Unsupported socket: should be TCP or UNIX. [ 554.385095][T22070] veth1_vlan: entered allmulticast mode [ 555.164097][T22105] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 555.190548][T22105] bond0: entered promiscuous mode [ 555.201367][T22105] bond_slave_0: entered promiscuous mode [ 555.213945][T22105] bond_slave_1: entered promiscuous mode [ 555.232240][T22105] team0: entered promiscuous mode [ 555.246265][T22105] team_slave_0: entered promiscuous mode [ 555.263307][T22105] team_slave_1: entered promiscuous mode [ 555.282909][T22105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.315354][T22105] bridge0: port 3(bond0) entered blocking state [ 555.336383][T22105] bridge0: port 3(bond0) entered disabled state [ 555.357197][T22105] bond0: entered allmulticast mode [ 555.375247][T22105] bond_slave_0: entered allmulticast mode [ 555.395443][T22105] bond_slave_1: entered allmulticast mode [ 555.413102][T22105] team0: entered allmulticast mode [ 555.428249][T22105] team_slave_0: entered allmulticast mode [ 555.440338][T22105] team_slave_1: entered allmulticast mode [ 555.464404][T22105] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 555.485733][T22105] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 555.500299][T22105] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 555.518124][T22105] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 555.532932][T22105] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 556.109766][T22116] bond3: entered promiscuous mode [ 556.115303][T22116] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.143040][T22120] bond3: (slave bridge0): making interface the new active one [ 556.150665][T22120] bridge0: entered promiscuous mode [ 556.168509][T22120] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 556.191613][T22126] vlan0: entered promiscuous mode [ 556.329876][T22133] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 556.883238][T22179] __nla_validate_parse: 40 callbacks suppressed [ 556.883258][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'. [ 557.070638][T22184] mac80211_hwsim hwsim37 ªªªªª;: renamed from wlan0 [ 557.373014][T22198] lo speed is unknown, defaulting to 1000 [ 557.395570][T22204] x_tables: unsorted entry at hook 3 [ 557.402950][T22198] wg1 speed is unknown, defaulting to 1000 [ 557.484570][T22206] xt_TCPMSS: Only works on TCP SYN packets [ 557.532157][T22209] validate_nla: 28 callbacks suppressed [ 557.532176][T22209] netlink: 'syz.3.4070': attribute type 1 has an invalid length. [ 557.737024][T22211] lo speed is unknown, defaulting to 1000 [ 557.813352][T22211] wg1 speed is unknown, defaulting to 1000 [ 558.112603][T22221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4073'. [ 558.189776][T22223] syzkaller1: entered promiscuous mode [ 558.195280][T22223] syzkaller1: entered allmulticast mode [ 558.330243][T22225] syzkaller0: entered promiscuous mode [ 558.335954][T22225] syzkaller0: entered allmulticast mode [ 558.437161][T22235] sctp: [Deprecated]: syz.0.4076 (pid 22235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.437161][T22235] Use struct sctp_sack_info instead [ 558.531949][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4077'. [ 558.556328][T22240] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4077'. [ 558.657074][T22250] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4077'. [ 558.729368][T22242] lo speed is unknown, defaulting to 1000 [ 558.750998][T22242] wg1 speed is unknown, defaulting to 1000 [ 558.946063][T22260] netlink: 'syz.1.4083': attribute type 39 has an invalid length. [ 558.981015][T22262] tipc: MTU too low for tipc bearer [ 559.046391][T22266] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4085'. [ 559.076896][T22266] block nbd0: reconnected socket [ 559.109077][ T5151] block nbd0: Receive control failed (result -32) [ 559.314324][T22284] lo speed is unknown, defaulting to 1000 [ 559.321775][T22284] wg1 speed is unknown, defaulting to 1000 [ 559.599036][T22304] syzkaller0: entered promiscuous mode [ 559.607888][T22304] syzkaller0: entered allmulticast mode [ 559.664562][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4095'. [ 559.729128][T22306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4095'. [ 559.759221][T22312] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4094'. [ 559.813917][T22316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4097'. [ 560.013974][ T250] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 560.029846][ T250] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 560.113441][T11047] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 560.128590][T11047] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 560.200064][T11035] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 560.219322][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.231205][T11035] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 560.268671][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.281857][T22334] xt_TCPMSS: Only works on TCP SYN packets [ 560.348191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.396955][T11035] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 560.407334][T11035] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 560.463330][T22341] lo speed is unknown, defaulting to 1000 [ 560.486044][T22341] wg1 speed is unknown, defaulting to 1000 [ 560.541241][T22347] syzkaller1: entered promiscuous mode [ 560.546755][T22347] syzkaller1: entered allmulticast mode [ 560.577636][T22359] tipc: Enabled bearer , priority 0 [ 560.644004][T22359] tipc: Disabling bearer [ 560.822934][T22373] netlink: 'syz.2.4112': attribute type 13 has an invalid length. [ 560.965719][T22373] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.973286][T22373] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.061327][T22388] netlink: 'syz.4.4115': attribute type 5 has an invalid length. [ 561.087797][T22388] netlink: 'syz.4.4115': attribute type 6 has an invalid length. [ 561.104591][T22388] netlink: 'syz.4.4115': attribute type 4 has an invalid length. [ 561.120053][T22373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.139938][T22373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.179863][T22384] netlink: 'syz.4.4115': attribute type 4 has an invalid length. [ 561.277047][T11035] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.287005][T11035] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.306515][T11035] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.394498][T11035] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.466144][T22399] netlink: 'syz.2.4119': attribute type 26 has an invalid length. [ 561.526537][T22397] syzkaller1: entered promiscuous mode [ 561.533323][T22397] syzkaller1: entered allmulticast mode [ 561.813314][T22413] pim6reg1: entered promiscuous mode [ 561.828279][T22413] pim6reg1: entered allmulticast mode [ 562.036270][T22432] __nla_validate_parse: 25 callbacks suppressed [ 562.036288][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4130'. [ 562.057175][T22428] syzkaller1: entered promiscuous mode [ 562.064165][T22428] syzkaller1: entered allmulticast mode [ 562.072924][T22433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4130'. [ 562.103384][T22430] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4129'. [ 562.113271][T22430] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 562.481580][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4134'. [ 562.510380][T22459] bond0: left allmulticast mode [ 562.522009][T22459] bond_slave_0: left allmulticast mode [ 562.528652][T22459] bond_slave_1: left allmulticast mode [ 562.536589][T22459] team0: left allmulticast mode [ 562.567461][T22459] team_slave_0: left allmulticast mode [ 562.573784][T22459] team_slave_1: left allmulticast mode [ 562.583180][T22459] bridge0: port 3(bond0) entered disabled state [ 562.610234][T22459] bridge_slave_1: left allmulticast mode [ 562.615916][T22459] bridge_slave_1: left promiscuous mode [ 562.623661][T22459] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.665991][T22459] bridge_slave_0: left allmulticast mode [ 562.672076][T22459] bridge_slave_0: left promiscuous mode [ 562.688186][T22459] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.918826][T22475] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4140'. [ 563.018706][T22481] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 563.038575][T22481] bridge1: entered allmulticast mode [ 563.262030][T22487] xt_cgroup: invalid path, errno=-2 [ 563.433097][T22493] netlink: 'syz.1.4148': attribute type 6 has an invalid length. [ 563.473498][T22498] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20000 [ 563.896864][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4159'. [ 564.285316][T22548] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4161'. [ 564.619237][T22552] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4163'. [ 564.779025][T22566] netlink: 'syz.0.4167': attribute type 13 has an invalid length. [ 564.790358][T22560] bond3: Unable to set down delay as MII monitoring is disabled [ 564.821608][T22566] netlink: 'syz.0.4167': attribute type 17 has an invalid length. [ 564.831884][T22560] bond3 (unregistering): Released all slaves [ 564.996739][T22574] syzkaller0: entered promiscuous mode [ 565.002753][T22574] syzkaller0: entered allmulticast mode [ 565.180132][T22585] lo speed is unknown, defaulting to 1000 [ 565.188666][T22585] wg1 speed is unknown, defaulting to 1000 [ 565.230019][T22591] tipc: Enabling of bearer rejected, failed to enable media [ 565.361436][T22600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4174'. [ 565.645890][T22602] lo speed is unknown, defaulting to 1000 [ 565.653617][T22602] wg1 speed is unknown, defaulting to 1000 [ 565.691396][T22604] netlink: 'syz.4.4175': attribute type 21 has an invalid length. [ 566.462203][T22639] lo speed is unknown, defaulting to 1000 [ 566.511854][T22639] wg1 speed is unknown, defaulting to 1000 [ 566.699844][T21076] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 566.711761][T21076] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 566.720183][T21076] CPU: 0 UID: 0 PID: 21076 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 566.729397][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.739457][T21076] RIP: 0010:klist_del+0x49/0x110 [ 566.744410][T21076] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 69 e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 69 e7 f6 4d 8b 7e 58 4c 89 f7 e8 9f 14 [ 566.764018][T21076] RSP: 0018:ffffc9000ba07768 EFLAGS: 00010202 [ 566.770074][T21076] RAX: 000000000000000b RBX: ffff88805cda1c60 RCX: ffff88806ac41e80 [ 566.778025][T21076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 566.786062][T21076] RBP: ffffc9000ba07890 R08: ffff88804c71f0f3 R09: 1ffff110098e3e1e [ 566.794011][T21076] R10: dffffc0000000000 R11: ffffed10098e3e1f R12: dffffc0000000000 [ 566.801961][T21076] R13: 1ffff1100b9b438c R14: 0000000000000000 R15: ffff88805d06e758 [ 566.809916][T21076] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 566.818827][T21076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 566.825388][T21076] CR2: 0000200000000550 CR3: 0000000060e08000 CR4: 00000000003526f0 [ 566.833341][T21076] Call Trace: [ 566.836612][T21076] [ 566.839524][T21076] device_del+0x280/0x8e0 [ 566.843841][T21076] ? _raw_spin_unlock_irq+0x2e/0x50 [ 566.849019][T21076] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 566.855069][T21076] ? __pfx_device_del+0x10/0x10 [ 566.859899][T21076] ? netdev_unregister_kobject+0x344/0x450 [ 566.865684][T21076] unregister_netdevice_many_notify+0x1da6/0x2310 [ 566.872085][T21076] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 566.878825][T21076] ? rtnl_net_dev_lock+0x36/0x2f0 [ 566.883830][T21076] ? rtnl_net_dev_lock+0x36/0x2f0 [ 566.888852][T21076] unregister_netdev+0x157/0x1f0 [ 566.893790][T21076] ? __pfx_unregister_netdev+0x10/0x10 [ 566.899244][T21076] ? remove_wait_queue+0x33/0x120 [ 566.904435][T21076] bnep_session+0x294d/0x2b40 [ 566.909107][T21076] ? rcu_is_watching+0x15/0xb0 [ 566.913890][T21076] ? trace_sched_exit_tp+0x36/0xf0 [ 566.918988][T21076] ? __schedule+0x14d2/0x5000 [ 566.923650][T21076] ? __pfx_bnep_session+0x10/0x10 [ 566.928676][T21076] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 566.934561][T21076] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 566.940868][T21076] ? __pfx_woken_wake_function+0x10/0x10 [ 566.946486][T21076] ? __kthread_parkme+0x7b/0x200 [ 566.951438][T21076] ? __kthread_parkme+0x1a1/0x200 [ 566.956447][T21076] kthread+0x711/0x8a0 [ 566.960501][T21076] ? __pfx_bnep_session+0x10/0x10 [ 566.965626][T21076] ? __pfx_kthread+0x10/0x10 [ 566.970264][T21076] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.975462][T21076] ? lockdep_hardirqs_on+0x98/0x140 [ 566.980645][T21076] ? __pfx_kthread+0x10/0x10 [ 566.985215][T21076] ret_from_fork+0x599/0xb30 [ 566.989785][T21076] ? __pfx_ret_from_fork+0x10/0x10 [ 566.994880][T21076] ? __switch_to_asm+0x39/0x70 [ 566.999622][T21076] ? __switch_to_asm+0x33/0x70 [ 567.004364][T21076] ? __pfx_kthread+0x10/0x10 [ 567.008931][T21076] ret_from_fork_asm+0x1a/0x30 [ 567.013680][T21076] [ 567.016729][T21076] Modules linked in: [ 567.021964][T21076] ---[ end trace 0000000000000000 ]--- [ 567.031135][T21076] RIP: 0010:klist_del+0x49/0x110 [ 567.036109][T21076] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 69 e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 69 e7 f6 4d 8b 7e 58 4c 89 f7 e8 9f 14 [ 567.059152][T21076] RSP: 0018:ffffc9000ba07768 EFLAGS: 00010202 [ 567.065710][T21076] RAX: 000000000000000b RBX: ffff88805cda1c60 RCX: ffff88806ac41e80 [ 567.074326][T21076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 567.082801][T21076] RBP: ffffc9000ba07890 R08: ffff88804c71f0f3 R09: 1ffff110098e3e1e [ 567.090545][T22660] udevd[22660]: failed to send result of seq 31967 to main daemon: Connection refused [ 567.091288][T21076] R10: dffffc0000000000 R11: ffffed10098e3e1f R12: dffffc0000000000 [ 567.108948][T21076] R13: 1ffff1100b9b438c R14: 0000000000000000 R15: ffff88805d06e758 [ 567.116938][T21076] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 567.126143][T21076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.133192][T21076] CR2: 0000200000000550 CR3: 0000000060e08000 CR4: 00000000003526f0 [ 567.141532][T21076] Kernel panic - not syncing: Fatal exception [ 567.150284][T21076] Kernel Offset: disabled [ 567.154642][T21076] Rebooting in 86400 seconds..