last executing test programs: 2.876001262s ago: executing program 3 (id=4504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002dbd7000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a0018000343030303030000040008010400cc7c"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xc, 0xc}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r14 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000480)=""/126, 0x7e}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000800)=""/90, 0x5a}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x12080) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) 2.552872566s ago: executing program 3 (id=4510): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x0, 0x0, 0xe60, 0xc, 0x9, 0x0, 0x2}}]}}]}, 0x4c}}, 0x24000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r2, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x184680, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r10, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000c02) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x5c, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 2.134587624s ago: executing program 3 (id=4516): r0 = socket(0x40000000015, 0x5, 0x0) bind$qrtr(r0, &(0x7f00000001c0)={0x2a, 0x1, 0x2}, 0xc) (async) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.978485231s ago: executing program 0 (id=4518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xd, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.700773937s ago: executing program 1 (id=4519): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x50}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000000100)=[{r3}, {r3, 0xe003}], 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x232, &(0x7f0000000280)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x1fc, 0x3a, 0xff, @empty, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xdd, {0x6, 0x6, "fca838", 0x156b, 0x0, 0x0, @mcast2, @mcast2, [@dstopts={0x33, 0x18, '\x00', [@ra={0x5, 0x2, 0x2}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x50, {0x2, 0x12, 0x10, 0x69, [0x0, 0x1, 0x0, 0xc56, 0xd4, 0x7, 0x9, 0x6, 0x27e]}}, @jumbo={0xc2, 0x4, 0xe}, @ra={0x5, 0x2, 0x9}, @pad1, @generic={0x0, 0x52, "bcfdb5e431c28cd487f3b5449b7a1e1c8fbd51eddb5816131875dca5b80a162a415e20a7d5c5b31855f098caefb656647956bd3dfb6f7e1b4b44daed4ccd3fda2922221863f2128a5816e82494a4b077948f"}, @enc_lim={0x4, 0x1, 0xe}]}], "7f0b60ff793df5400c8c711497cd1f52ab9f48969a1bd263c1fba8517e6f9fe7ef769086dbdc8c9a1b5001e55ec3c60497d86eadb317fc2a3e1170d1d28dad8857c18ac22d2669aea449fa1afb80e21be3e823833c1883d5da87ec9c5145306ea67d1df5b6d5f395ce715fc0b7e5fbb315879f529a739a3628d1cebebcf18948eb3aeb7de2eb32e8448f6004d146ebb8d60d231497b0104329c50ec39401b29d0bc86c3d585022b79475c899134f61c065841af8d39b98b6c0c67af0cdff8555a90120350b42e62345e3348e7fca1a9d2c292fdc7bac38cded557401c51d96e1c04585feee0621b83784fea0964879e1baf1784b412d86139c4616ae"}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000000003c0000", @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.697323844s ago: executing program 3 (id=4520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) 1.612822441s ago: executing program 2 (id=4521): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400"], 0xc8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x80081) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000ff010000000018010000202069250000000000fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b71a00000000000085000000060000009500"/168], &(0x7f0000000100)='GPL\x00'}, 0x90) 1.447710597s ago: executing program 1 (id=4522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040044) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close(r2) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xbf4d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x19, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x0, 0xe, 0x2, 0x1, 0xc}, @jmp={0x5, 0x1, 0x6, 0x7, 0x7, 0xfffffffffffffffc, 0x4}, @jmp={0x5, 0x1, 0x3, 0xa, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @jmp={0x5, 0x1, 0x5, 0x6, 0x1, 0x6, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd23}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000380)=""/33, 0x41100, 0x50, '\x00', 0x0, @fallback=0xb, r6, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5dc, 0x4, 0x891, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000580)=[r7, r8], &(0x7f00000005c0)=[{0x5, 0x2, 0xe}], 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'nr0\x00', 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x6, [@enum64={0xe, 0x6, 0x0, 0x13, 0x0, 0xa, [{0x9, 0xb, 0xcd8}, {0x4, 0xffffffc0, 0x6}, {0x8, 0x6, 0x6}, {0x1, 0x9, 0x2}, {0xe, 0x5b66, 0x8}, {0x6, 0x7fff, 0x4}]}, @struct={0x2, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xc, 0x1, 0x7ff}]}, @enum={0x4, 0xa, 0x0, 0x6, 0x4, [{0xc, 0x1}, {0xc, 0x10000}, {0x10, 0x4}, {0x5, 0xf62}, {0x3, 0x2}, {0xa, 0xffffffff}, {0x4, 0x5}, {0x1, 0x40}, {0x10, 0xb}, {0x1, 0xbd9b}]}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1, 0x3}, @struct={0x4, 0x3, 0x0, 0x4, 0x1, 0x934, [{0x9, 0x2}, {0xf, 0x2, 0x2}, {0x10, 0x2, 0x7}]}, @const={0xa, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x61, 0x2e, 0x30]}}, &(0x7f0000000840)=""/179, 0x132, 0xb3, 0x1, 0x800, 0x10000, @value=r3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x9, 0x4, 0x3, 0x50010, r6, 0x3, '\x00', r9, r10, 0x2, 0x2, 0xfd, 0xd}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000f40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x4c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0xf02, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x104, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7bbdb10d}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d49c2f3}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7a2d01b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2472655c}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x1ac, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_DESC={0x17c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x171c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeec}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff489}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_DESC_CONCAT={0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfe05}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbeb}]}]}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}]}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_DELRULE={0x5c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x13c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xf0, 0x6, "0b2310f480a81f30fadf079702783520f5f658d49a8cbe33cf24cd944acf712d861fe0c78d021d95cbb9e94a8ffc6985072ccc369533dc0d7c425bfbd6c774aaa968bca3ba2e47d5a35357bdb63fb26a58c7905e1cba1219fb14dc60517a4e0174840c8b81bc93010d4a19e0339fe94c22e065a63d52fdb66af674f0a23fb6d6a9595ee6c9e3a7da2d8fb6c5dd2a02fea6cc50946ce5cddbaa8e018f050a5f4eba1431f8ca834a1b7c60284af9bbb7c35819d3ac26f71bcb0de360189cd470aae74f936ba68029fdd6dd6960b0becc72fd6a5c6bd067e90a679d17bdf804d0ee76a633e902b5198430c922e1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4e4}, 0x1, 0x0, 0x0, 0xc800}, 0x20000800) r11 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r11, &(0x7f0000000f80)={0x2c, 0x8, r9, 0xc, r6}, 0x10) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r12, &(0x7f0000000fc0)=@full={0xb, @remote, @netrom, 0x0, [@rose, @remote, @netrom, @bcast, @default, @bcast]}, &(0x7f0000001000)=0x40, 0x80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r11, 0xc400941d, &(0x7f0000001040)={0x0, 0x8, 0x4, 0x1}) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x24}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, r13, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f00000015c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001800)={0x2, [0x0, 0x0]}, &(0x7f0000001840)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000001900)={r14, 0x80, &(0x7f0000001880)=[@in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7}, @in6={0xa, 0x4e24, 0x732dbbd4, @private0, 0x10}, @in6={0xa, 0x4e24, 0x10001, @private2, 0x7}]}, &(0x7f0000001940)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000001980)={'bridge0\x00', 0x10001}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a00), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000001fc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001b00)={0x44c, r15, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x1c, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0xc, 0x1, 'bridge0\x00'}, {0x5, 0x1, '#'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x1e4, 0x13, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [{0xc, 0x1, ']$-,&\\}\x00'}, {0xc, 0x1, 'geneve0\x00'}, {0x9, 0x1, 'syz1\x00'}, {0x8, 0x1, '\'\x9e)\xd2'}, {0x4}, {0x5, 0x1, '\x00'}, {0x9, 0x1, 'syz2\x00'}]}, {0x54, 0x0, 0x0, 0x1, [{0x12, 0x1, '@!!$]\'-.\\)\'{,\\'}, {0x11, 0x1, 'NLBL_CIPSOv4\x00'}, {0x9, 0x1, 'syz1\x00'}, {0x7, 0x1, 'lo\x00'}, {0x7, 0x1, '\\,.'}, {0x9, 0x1, 'syz0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x7, 0x1, 'lo\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x5, 0x1, '*'}, {0x5, 0x1, ']'}, {0x4}, {0x7, 0x1, '[-@'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x48, 0x0, 0x0, 0x1, [{0x8, 0x1, ']-\'&'}, {0x30, 0x1, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}, {0x9, 0x1, 'syz0\x00'}]}, {0x14, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x14, 0x1, '*))$++$(.-}({/[$'}, {0x11, 0x1, 'team_slave_0\x00'}]}, {0x68, 0x0, 0x0, 0x1, [{0x6, 0x1, '#-'}, {0xe, 0x1, 'syzkaller\x00'}, {0x30, 0x1, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0xc, 0x1, 'bridge0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0xcc, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0x8, 0x1, '+&*['}, {0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x9, 0x1, 'syz1\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0xc, 0x1, 'geneve0\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x7, 0x1, ',#/'}, {0x5, 0x1, '\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0xd, 0x1, 'ip6_vti0\x00'}, {0xa, 0x1, '\':]-}/'}, {0x9, 0x1, 'syz1\x00'}, {0x5, 0x1, '/'}, {0x9, 0x1, 'syz2\x00'}, {0x9, 0x1, 'syz1\x00'}, {0x9, 0x1, 'h-(&-'}]}, {0x14, 0x0, 0x0, 0x1, [{0xd, 0x1, '\'!@*})\xc0{#'}]}]}, @NFC_ATTR_LLC_SDP={0x154, 0x13, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0xc, 0x1, 'geneve0\x00'}, {0xc, 0x1, ').:\\.^-*'}, {0x11, 0x1, 'team_slave_0\x00'}, {0x6, 0x1, '/*'}, {0xa, 0x1, '(*}%@]'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, '(/*/'}]}, {0x8, 0x0, 0x0, 0x1, [{0x4}]}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nr0\x00'}, {0x9, 0x1, 'syz0\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0xc, 0x1, 'bridge0\x00'}, {0x6, 0x1, '/]'}]}, {0x28, 0x0, 0x0, 0x1, [{0xd, 0x1, 'ip6_vti0\x00'}, {0x4}, {0x6, 0x1, '(*'}, {0x5, 0x1, '/'}]}, {0x10, 0x0, 0x0, 0x1, [{0x9, 0x1, '#\'\'@,'}]}, {0x4}, {0x40, 0x0, 0x0, 0x1, [{0xd, 0x1, '\\(^@/ \xb7\')'}, {0xc, 0x1, 'ip_vti0\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, ')\x17'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0x9, 0x1, 'syz1\x00'}, {0x7, 0x1, '):\''}, {0x11, 0x1, '@[(,,}^-&&}\\['}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44c}, 0x1, 0x0, 0x0, 0x24008080}, 0x2000c400) 1.446849372s ago: executing program 3 (id=4523): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e20, @loopback}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x4e20, @loopback}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0x4844}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$kcm(0x23, 0x2, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) 1.439607164s ago: executing program 2 (id=4524): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) (rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x18103, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r7, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffff9}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1c0}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40001) 1.391587084s ago: executing program 0 (id=4525): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x1600, 0x8, 0x0, 0x5}) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000080)=0x3, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/231, 0xe7}, {&(0x7f00000001c0)=""/151, 0x97}, {&(0x7f0000000280)=""/140, 0x8c}], 0x3, 0x3, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_bridge\x00'}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000810) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_getaddr={0x30, 0x16, 0x100, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x11}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x81}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x894) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000600)={0x0, 0x10}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000680)={0x0, 0x40}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000700)={r3, 0x2, 0x2, 0x0, 0x3, 0x4e, 0x2, 0x5, {r4, @in6={{0xa, 0x4e22, 0x5, @private1, 0xfffffffe}}, 0x1, 0xb, 0x200, 0x70, 0x10000}}, &(0x7f00000007c0)=0xb0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000800)={@ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000840)=0x14) pwrite64(r0, &(0x7f0000000880)="a07ca104d51d029083d3d8919753e6e2", 0x10, 0x9) splice(r0, &(0x7f00000008c0)=0x4, r0, &(0x7f0000000900)=0x1, 0x2c00000000000, 0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, &(0x7f0000000940)="98dadb77b6b66ba3a387ef4cced4fd4bc7860e9134a49bc8d7c8e8bf3f8026c29ea2432a66c80bb0420c763f9d827ae37f1e895fab32bc348b8042b2571458d8e5d1f92f847c5489cd864721883b0ea4a2e503f602dfea68f018ca6009784845bf19ca2e471b15952fa814497c47b2ca88a77d3ad5b4a5d5db5154adb07f59d895ac7ffc37cc1a31260d1f9bbf765204f637557418cb374b2d10150cc9fc82d19c12e2f24064b9a32340d0fa8c35fbad9aaa3447c559d246b994ad6c044551ffeec3bdbab239164338d971ce41a1713946a658821c0bb6a1b772e6fdf9b2bdad", 0xe0, 0x4000800, &(0x7f0000000a40)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "6ab2d6241651c02ba7d50b23b7d509ee"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) read$rfkill(r7, &(0x7f0000000bc0), 0x8) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x20080, 0x0) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000c40)={0x80fb, 0x2}) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000c80)=""/159, &(0x7f0000000d40)=0x9f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000d80)=0xffffffffffffffff, 0x4) readv(r7, &(0x7f0000000dc0), 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e40), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e80)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r10, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1.160611423s ago: executing program 0 (id=4527): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$packet(r4, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100)=0x2200, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r6, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff0000000000", 0x19, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r7, 0x29, 0x4e, &(0x7f0000000400), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r8, @ANYBLOB="b1e67ee9f84e1a9c94b69bb33b3fe3f0a8a079fdecaa6b7bf0c324c37273e7f465051f61a253cd281e859f580273e5b40c3ed7b1568b5d4166165801ee079c41c21a60999296a14f5ef61a872f8add6beaa8e91b9b5a72ea871ca17935bc4712561289d71339b4ee19d0c0df5d6dd3fd9108731149aed78b686c0480fad64a75bfd600ec3dd981613268d6db62fc51d841d7860458b8bb63b03fa245c180b6086883c4", @ANYRESDEC=r9], 0x1a8}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) 1.115642659s ago: executing program 2 (id=4528): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x158, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "b770e11e1f2430207533038339681ba871da3da68be9d36310aedb36543aae6dd5fefd8267a4ed7ab512b9525bc9ba9c52f1d4a0564fc0aca1a3ab05239d4777739dd47f472185caa8c2ba336732f9a3d78d95c06824d7ecc1a57aeca439e09dc6f3c084b48e6058bd48fb6a6113474d18860f42e3cb487ba3402d482de13558f5a7ddeac0aab72c25df4957e39cd2d02373c8bda7622251f1c7c48dea9c06bef807bddcd5ed0dfd4eb9a99d6d3a45c8c1a8a5e40a3db4b3500b6f77d8030a5de04abf456e21733fcbaf55b2e8cb720e5df4ad24c3bff4f88ee5b5c558657141c8faf1ce77ca43d10c3e565a53ddf9"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1a4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5ba1}]}, @NFTA_CHAIN_USERDATA={0x84, 0xc, "20adc8fd4e2bde1cf0d28cc02bf1806f8ecada401d130d38bd9d91cc9d76101739b77b96d72a32b126324a1d061e342bcd2ed38dfe8d9f27f4806ed25c813ff24c94f578d77e333ea7f92b0f4ef70f5fd9a3e48f6831c074f204d9ca6ebabbca541a07370a7fd23749933453073dc3affc590d50c2ba9f55083ff6a16834c808"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x81, 0xc, "dbc654d55e39ccba41dc92259844fddab66447a4b298fbaac48e3bde59870ca75dd53e1fe28e4a4ed7053408a3dea0d13fa73833870fa6456cb06d304c8a65b3b81a821eb86b8fbaeb6ebabd61b27d9111678bcdae8ec26890de0ae7e5013426fbb6468cbce44c645b58d1abe95f7c6e9c50092b9658c05248c7349e16"}]}, @NFT_MSG_DELTABLE={0x200, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "6cbd411777408c7ca6ffe500e84e57374805da75cf946631d3196f93e51a198be70161cd77937e7abe4ca8ececd0d837a88b5c2f45d6b58ef3ce664ca71d0d7c4fe15dbb84f3b9ca681343881e250b246b724f2d51eda55c1def8658d0d6c88bd82786f8ec964dd2c2ad204f524ec720776003e49ddfd8e796a9edfa45c400e9ed731267e7e5c5d7ae827deeda89fa4c8395d247bdb0396c630bff24d0845fcec4f19031050ace45b6d589"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "7aa571b42a4f9ee354516246790d501fffa68f5a59fcfaf2820324d2f433944efd22a49477e145a09de61f73bee6363e4139b6614fed15421820dd692de4ed07e6cf0b8b9f80aa971b375bcf0f6fb80819b65ae9932866ad296ffd342cc76b480ad5c506675003f4fbad5a8da7f252d62978cdff4387abb7313ae380161f82fe6af3a8634d790183bcc75b64da464402fdbdb3b93dc4e5065f5d8c1a075163b21d97829e25614d7f00017fee89904bbb90b2f1f4b3a761a1ed"}, @NFTA_TABLE_USERDATA={0x50, 0x6, "b4acb30a21608fd440a4f9b0b4e5190928e3147b9bb0eeeee3b39a6bf48dd32a75a3997c79a11fac1acc09cfe25bc5705d9a0d94d0be0880207d295f54bd4e1046d606f7f9b8ce42bd34727e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x7a44c757f3e6f53e, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_DELRULE={0x74, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x650}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x158, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "b770e11e1f2430207533038339681ba871da3da68be9d36310aedb36543aae6dd5fefd8267a4ed7ab512b9525bc9ba9c52f1d4a0564fc0aca1a3ab05239d4777739dd47f472185caa8c2ba336732f9a3d78d95c06824d7ecc1a57aeca439e09dc6f3c084b48e6058bd48fb6a6113474d18860f42e3cb487ba3402d482de13558f5a7ddeac0aab72c25df4957e39cd2d02373c8bda7622251f1c7c48dea9c06bef807bddcd5ed0dfd4eb9a99d6d3a45c8c1a8a5e40a3db4b3500b6f77d8030a5de04abf456e21733fcbaf55b2e8cb720e5df4ad24c3bff4f88ee5b5c558657141c8faf1ce77ca43d10c3e565a53ddf9"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1a4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5ba1}]}, @NFTA_CHAIN_USERDATA={0x84, 0xc, "20adc8fd4e2bde1cf0d28cc02bf1806f8ecada401d130d38bd9d91cc9d76101739b77b96d72a32b126324a1d061e342bcd2ed38dfe8d9f27f4806ed25c813ff24c94f578d77e333ea7f92b0f4ef70f5fd9a3e48f6831c074f204d9ca6ebabbca541a07370a7fd23749933453073dc3affc590d50c2ba9f55083ff6a16834c808"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x81, 0xc, "dbc654d55e39ccba41dc92259844fddab66447a4b298fbaac48e3bde59870ca75dd53e1fe28e4a4ed7053408a3dea0d13fa73833870fa6456cb06d304c8a65b3b81a821eb86b8fbaeb6ebabd61b27d9111678bcdae8ec26890de0ae7e5013426fbb6468cbce44c645b58d1abe95f7c6e9c50092b9658c05248c7349e16"}]}, @NFT_MSG_DELTABLE={0x200, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "6cbd411777408c7ca6ffe500e84e57374805da75cf946631d3196f93e51a198be70161cd77937e7abe4ca8ececd0d837a88b5c2f45d6b58ef3ce664ca71d0d7c4fe15dbb84f3b9ca681343881e250b246b724f2d51eda55c1def8658d0d6c88bd82786f8ec964dd2c2ad204f524ec720776003e49ddfd8e796a9edfa45c400e9ed731267e7e5c5d7ae827deeda89fa4c8395d247bdb0396c630bff24d0845fcec4f19031050ace45b6d589"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "7aa571b42a4f9ee354516246790d501fffa68f5a59fcfaf2820324d2f433944efd22a49477e145a09de61f73bee6363e4139b6614fed15421820dd692de4ed07e6cf0b8b9f80aa971b375bcf0f6fb80819b65ae9932866ad296ffd342cc76b480ad5c506675003f4fbad5a8da7f252d62978cdff4387abb7313ae380161f82fe6af3a8634d790183bcc75b64da464402fdbdb3b93dc4e5065f5d8c1a075163b21d97829e25614d7f00017fee89904bbb90b2f1f4b3a761a1ed"}, @NFTA_TABLE_USERDATA={0x50, 0x6, "b4acb30a21608fd440a4f9b0b4e5190928e3147b9bb0eeeee3b39a6bf48dd32a75a3997c79a11fac1acc09cfe25bc5705d9a0d94d0be0880207d295f54bd4e1046d606f7f9b8ce42bd34727e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x7a44c757f3e6f53e, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, @NFT_MSG_DELRULE={0x74, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x650}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) 1.112426696s ago: executing program 1 (id=4529): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) getsockopt$rose(r0, 0x104, 0x7, 0x0, &(0x7f00000001c0)=0xfffffffffffffe3e) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)="b09d191f", 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', r1}, 0x94) 1.012551525s ago: executing program 4 (id=4530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0xff, 0x10}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f00000005c0)}, 0x20) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x6bfffb9f930f353e}, 0xc) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @ldst={0x1, 0x0, 0x4, 0x1, 0x5, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x97, &(0x7f0000000380)=""/151, 0x41000, 0x0, '\x00', r3, @sk_lookup, r4, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0x4, 0xb868104}, 0x10, 0xffffffffffffffff, r5, 0x8, &(0x7f0000000680)=[r6, r7, r8, r9, r10, r11], &(0x7f00000006c0)=[{0x4, 0x2, 0x1, 0xb}, {0x1, 0x5, 0x9, 0x8}, {0x5, 0x3, 0x6, 0x2}, {0x4, 0x3, 0xe, 0x5}, {0x2, 0x1, 0x9, 0x1}, {0x5, 0x1, 0x7, 0x7}, {0x4, 0x5, 0x3, 0x3}, {0x0, 0x4, 0x0, 0xa}], 0x10, 0x7}, 0x94) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040500000000000000002c9654320006000640bff200000500010001"], 0x24}}, 0x20000020) close(0x3) 986.41496ms ago: executing program 1 (id=4531): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="189500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x4) accept(r2, 0x0, 0x0) shutdown(r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r4, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xfff}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0x3, 0x3}, {0x6}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x200, "2b8f14f0f8bd2cde8c37fba7fd11668f"}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000010) 960.708833ms ago: executing program 4 (id=4532): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x2, 0x1004, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x9c35}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x5, 0x0, 0x6, 0x8]}, 0xc) 868.210274ms ago: executing program 3 (id=4533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x440400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x30c, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc04}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1136}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2e}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x237b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x14}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2965}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x830}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x11}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc30}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41fa567b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x556}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x87d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b35}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}}}]}]}, 0x30c}}, 0x40004) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="34000000120001000001000000000000100000000c0000000000000014"], 0x34}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x13b0, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xb}, @ETHTOOL_A_LINKMODES_OURS={0x1084, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "f410fcc66c538cb7d77c1208b447a6e73683bc0500403e509866062c2cfd01a1038bba40479837d8e034794e1bea8a7eb071441b86983764ed76c27995250e414866690479260970d092438a09edb157e366cf23906fb69f3e710a2dc97aa507aa080c1dd00c00839956ab21e38744907e76218676ac9e0e"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5, 0x4, '\r'}]}, @ETHTOOL_A_LINKMODES_OURS={0x2c4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')-$]\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[){\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_VALUE={0x8b, 0x4, "55cdaf0b8228ce4915e45dee1051b5d38e0a9452e7860c472ca41e18f9ac34656b6dfd4afe020d168f26dc8824fad275411470b92263e91a2bdb1858755973b15d33dfb518d6f114ec242d73366ae3b2baa80969868e4bc6059965917866ee6a54a6399ce0a30268e458f4ee1d32436dbc22937612324209882abc7df18a8bb1edaee798c9bd0f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':#&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'ib\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@!@G\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xffffffff}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x13b0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet(r8, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r9 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) close(r0) 857.375107ms ago: executing program 2 (id=4534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000000), &(0x7f0000000640)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000000), &(0x7f0000000640)=r0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 738.837525ms ago: executing program 4 (id=4535): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xd}, 0x8) 671.193534ms ago: executing program 2 (id=4536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000040)={0x6, 'macsec0\x00', {0x10001}, 0x40}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) (async, rerun: 64) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) (rerun: 64) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @local, 0x8001}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='syzkaller1\x00', 0x10) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x12, 0x80000) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000340)={0x4b, 0x74}) (async, rerun: 32) connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7741}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3103}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x880) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) pselect6(0x40, &(0x7f0000000600)={0x2, 0xda5, 0x4, 0x0, 0x15e24e8f, 0x9, 0x4, 0x40}, &(0x7f0000000640)={0x5, 0xc5, 0x7, 0x8, 0xfffffffffffffffc, 0xe6, 0x31338e83, 0x9}, &(0x7f0000000680)={0x5, 0x1, 0x100000000, 0x1, 0x8000000000, 0x2, 0x5, 0x4}, &(0x7f00000006c0), &(0x7f0000000740)={&(0x7f0000000700)={[0x396]}, 0x8}) (async, rerun: 64) socketpair(0x1a, 0x5, 0xc, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), r4) (async, rerun: 64) r9 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x8c, r8, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xb}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan1\x00'}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004010) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x83, 0x83, 0x7, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0x3, 0x4}, {0x1}, {0x5, 0x2}, {0x9, 0x2}]}, @datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x3, 0x1}], "6c16d3"}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @fwd={0x7}, @var={0x10, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x61, 0x30, 0x30, 0x61, 0x61]}}, &(0x7f0000000a40)=""/92, 0xa3, 0x5c, 0x0, 0x7}, 0x28) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r6) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r10, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) (async, rerun: 32) r11 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) bind$inet(r11, &(0x7f0000000c40)={0x2, 0x4e21, @empty}, 0x10) (async) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000044}, 0x40) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000f40)=0x0) sendmsg$unix(r6, &(0x7f0000001100)={&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)="2cd075a44e6c70a2e1d806adbd96bdd8cda75c351a725ed8f816486c0f43de49511a7bf443517130d2643c61b587d65aefe2865e6f8a76f2f3f3e8694e0cb060256cb8d3d46522794592f81ba4cc06b9eedcb18c5f2472b41180ef5fb6e1c8b797a79815d4abf57f391c35587f7a9af3b1d7cec80515e4593fd197fff358eadf4b8a8da92c2a0839201cfc3a67087f8c96d55d68760bb5cb5ad42e1731d90469700d0fd4bfe786ca9a33fecb55f52ac963712c6a18c27f9e88d668c2968b988f5306f993de67343e8d", 0xc9}], 0x1, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xffffffffffffffff}}}], 0x20, 0x20008001}, 0x480c0) 624.823809ms ago: executing program 4 (id=4537): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7, 0x7f}, {0xf7, 0x3}, {0x9, 0x6}, {0x7}, {0x2, 0x7}], "33dfd98130977dbe"}}]}, 0x34}}, 0x18) 587.533335ms ago: executing program 1 (id=4538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@call={0x85, 0x0, 0x0, 0x3b}, @call={0x85, 0x0, 0x0, 0xba}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x6, 0x4, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x9, 0x9}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000000), &(0x7f0000000440)=r2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@call={0x85, 0x0, 0x0, 0x3b}, @call={0x85, 0x0, 0x0, 0xba}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x6, 0x4, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x9, 0x9}], 0x10, 0x6}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000000), &(0x7f0000000440)=r2}, 0x20) (async) 456.802682ms ago: executing program 4 (id=4539): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b0000000001004057000000060000400000000080", 0x48}, {&(0x7f0000001280)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f807ee4636aad1b45472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee27010000002328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb0d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b81bcd3732736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c090000004b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac15b0d0000000000007bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca25e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b40101015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2e6f52585ffdfae76e26691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb02706420be6fccad116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664ab61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2f10800001f6c23e08ff0ddb488b95504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06641fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67c8cfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f0470223e2c6bf779f4211a41285c1a370b652a5ae67d3", 0xf13}, {&(0x7f00000021c0)="4915d6b41d855ee71763c3fe27e1b7b0b45faf3e771432ecea48fd75221d3d32c33487cf3b780094280c6f7b96afb387c93340372539", 0x36}, {0x0}], 0x4}, 0x8010) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079110000950074000500"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 454.956274ms ago: executing program 2 (id=4540): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x26, 0xa, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000040)=""/104, 0x68}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010022, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd95, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x95}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) r7 = accept(r5, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000100)=0x80) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4) 399.588278ms ago: executing program 4 (id=4541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r6, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0xa) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e3371", 0x24}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x48, r1, 0x1, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xf7, 0x6, 0xfff, 0x48, @empty, @private1, 0x8000, 0x7, 0x4, 0x8003}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={@loopback, 0x6e, r9}) 352.014956ms ago: executing program 1 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000bd"], 0x24}, 0x1, 0x5502000000000000}, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x1, 0x62, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r6, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}]}, 0x40}}, 0x1) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 267.451876ms ago: executing program 0 (id=4543): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x4000084) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000003580)) splice(r2, &(0x7f0000000180)=0x2, r4, &(0x7f00000001c0)=0x5, 0xfffffffffffffffd, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000005b93d22bfee391d400000000340000013400000006000000040000000000000e0200000000000000000000000d000009040000000000000000000004000000000000000000000008000000000000000061004016d1dd8f6c9d184edccef9856e78e4d45ad176a26f6b094fb6f1c0ddd0b32cae7c1b67688c7171b50f10e633bebdc42ff7c0c3d324d1f3e30fe646bff86cddfcdf4d6e2e65c06302558a82c725596692edab92"], 0x0, 0x52}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000060000000000000000000003000000000400000005000000090000000000000000000003000000000100000004000000537b0000000000000000000d00000000005f10008600301defd3976f24e26d581871747a9f6a20c34a742a35dc6dd099769e5f91bc6058bceafd49190294f64d3cae6ce49386736ac0fedad1f19d7931da04160e7b00"/166], 0x0, 0x5a, 0x0, 0x1, 0xfffffffc}, 0x28) 9.289317ms ago: executing program 0 (id=4544): r0 = socket$inet6(0xa, 0x3, 0x2) socket$inet6(0xa, 0xa, 0x80000001) (async) getsockname(r0, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 0s ago: executing program 0 (id=4545): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r5, 0x135, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8000}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c7a1c40e4ff2"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040020) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r10, r11, 0x0, 0x7feff000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={0xffffffffffffffff, r10}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000280)=0x4) mkdirat$cgroup(r12, &(0x7f00000002c0)='syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000002000000000000000000000014000000000000000000000002000000000000000000000011000000000000000000ecfa010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kernel console output (not intermixed with test programs): 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 330.751709][T15897] netlink: 'syz.1.2781': attribute type 11 has an invalid length. [ 330.845735][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2783'. [ 330.861097][T15902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2783'. [ 331.418388][T15942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2795'. [ 331.464551][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 331.509652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.599768][T15957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.874566][T15974] netlink: 'syz.1.2804': attribute type 10 has an invalid length. [ 332.124510][T15985] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 332.137120][T15984] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 332.147983][T15984] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 332.273274][T15994] pim6reg: left allmulticast mode [ 332.580060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.182387][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.192953][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.201897][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.213512][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.222196][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.346208][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.356418][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.367922][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.379109][ T5183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.391987][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.723909][T16035] veth0_to_team: entered promiscuous mode [ 333.739730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.740322][T16035] veth0_to_team: entered allmulticast mode [ 333.821479][T16020] lo speed is unknown, defaulting to 1000 [ 333.905607][T16039] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 334.073509][T16043] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 334.135838][T16043] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 334.166670][T16043] bond10: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 334.344567][T16039] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 334.364745][T16039] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 334.648526][T16066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.719861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.880219][T16087] __nla_validate_parse: 6 callbacks suppressed [ 334.880238][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 334.895841][T16087] nbd: nbd0 already in use [ 334.902420][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 334.911758][T16086] nbd: nbd0 already in use [ 335.214068][T16089] syzkaller0: entered promiscuous mode [ 335.253263][T16089] syzkaller0: entered allmulticast mode [ 335.432450][ T5865] Bluetooth: hci1: command tx timeout [ 335.541964][T16099] netlink: 'syz.1.2836': attribute type 1 has an invalid length. [ 335.603042][T16099] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2836'. [ 335.748574][T16020] chnl_net:caif_netlink_parms(): no params data found [ 335.759812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.187003][T16020] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.205082][T16020] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.225607][T16020] bridge_slave_0: entered allmulticast mode [ 336.246845][T16020] bridge_slave_0: entered promiscuous mode [ 336.264024][T16020] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.278105][T16020] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.299304][T16020] bridge_slave_1: entered allmulticast mode [ 336.322065][T16020] bridge_slave_1: entered promiscuous mode [ 336.496417][T16020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.543456][T16020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.653632][T16020] team0: Port device team_slave_0 added [ 336.665389][T16020] team0: Port device team_slave_1 added [ 336.712430][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 336.766551][T16020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.773744][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.810262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.884702][T16020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.977219][T16020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.987727][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.030441][T16020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.129644][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2854'. [ 337.158416][T16161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2854'. [ 337.183299][T16163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2855'. [ 337.218561][T16020] hsr_slave_0: entered promiscuous mode [ 337.231918][T16020] hsr_slave_1: entered promiscuous mode [ 337.238545][T16020] debugfs: 'hsr0' already exists in 'hsr' [ 337.249630][T16020] Cannot create hsr debugfs directory [ 337.511986][ T5865] Bluetooth: hci1: command tx timeout [ 337.779957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.927186][T16020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.939993][T16020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.116964][T16020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.157812][T16020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.200380][T16206] netlink: 'syz.4.2865': attribute type 11 has an invalid length. [ 338.208442][T16206] netlink: 'syz.4.2865': attribute type 11 has an invalid length. [ 338.221991][T16206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2865'. [ 338.324034][T16020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.350053][T16020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.540783][T16220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2871'. [ 338.714182][T16225] sctp: [Deprecated]: syz.1.2872 (pid 16225) Use of int in maxseg socket option. [ 338.714182][T16225] Use struct sctp_assoc_value instead [ 338.860206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.898510][T16020] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.946497][T16020] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.969013][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'. [ 339.001168][T16020] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.017997][T16246] netlink: 'syz.3.2879': attribute type 1 has an invalid length. [ 339.132288][T16020] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.170665][T16250] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 339.191314][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.274586][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.324025][T12279] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.339883][T12279] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.558444][T16278] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 339.592420][ T5865] Bluetooth: hci1: command tx timeout [ 339.626877][T16020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.728377][T16020] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.774430][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.781698][T12279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.806136][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.813513][T12279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.839650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.241929][T16301] bond8: entered promiscuous mode [ 340.247243][T16301] bond8: entered allmulticast mode [ 340.253718][T16301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 340.269324][T16308] netlink: 'syz.1.2893': attribute type 3 has an invalid length. [ 340.290581][T16304] sch_fq: defrate 0 ignored. [ 340.488321][T16316] __nla_validate_parse: 4 callbacks suppressed [ 340.488342][T16316] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2895'. [ 340.505252][T16020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.597225][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 340.620788][T16020] veth0_vlan: entered promiscuous mode [ 340.675947][T16020] veth1_vlan: entered promiscuous mode [ 340.784132][T16020] veth0_macvtap: entered promiscuous mode [ 340.817886][T16020] veth1_macvtap: entered promiscuous mode [ 340.869892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.893924][T16020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.910704][T16020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.978505][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.014822][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.093345][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.128213][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.170174][T16333] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2899'. [ 341.444792][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.488157][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.493216][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 341.546808][T16353] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 341.573191][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.583062][T16359] ksmbd: Unknown IPC event: 3, ignore. [ 341.599102][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.600203][T16353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.652396][T16358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2905'. [ 341.669763][ T5865] Bluetooth: hci1: command tx timeout [ 341.966811][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2911'. [ 341.995583][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'. [ 341.999651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.163417][T16388] syz_tun: entered allmulticast mode [ 342.196583][T16380] syz_tun: left allmulticast mode [ 342.208051][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 342.594792][T16403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2919'. [ 342.970354][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.285995][T16442] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2928'. [ 344.004699][T16470] can: request_module (can-proto-3) failed. [ 344.099931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.797281][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.810696][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.821802][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.836176][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.845794][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.965254][T16510] lo speed is unknown, defaulting to 1000 [ 345.069997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.248378][T16531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.557969][T16549] __nla_validate_parse: 6 callbacks suppressed [ 345.557990][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2961'. [ 345.968600][T16574] netlink: 'syz.4.2965': attribute type 13 has an invalid length. [ 346.079648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.175959][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 346.185264][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 346.258562][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 346.331580][T16588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2970'. [ 346.404398][T16596] netlink: 'syz.2.2973': attribute type 18 has an invalid length. [ 346.412561][T16596] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2973'. [ 346.575088][T16510] chnl_net:caif_netlink_parms(): no params data found [ 346.586788][T16602] netlink: 'syz.4.2975': attribute type 10 has an invalid length. [ 346.612530][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2978'. [ 346.739380][T16621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2978'. [ 346.870682][ T5865] Bluetooth: hci0: command tx timeout [ 346.916129][T16630] netlink: 'syz.0.2983': attribute type 11 has an invalid length. [ 347.044915][T16510] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.052578][T16510] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.060725][T16510] bridge_slave_0: entered allmulticast mode [ 347.069147][T16510] bridge_slave_0: entered promiscuous mode [ 347.078736][T16510] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.082183][T16641] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 347.093154][T16510] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.106869][T16510] bridge_slave_1: entered allmulticast mode [ 347.115671][T16510] bridge_slave_1: entered promiscuous mode [ 347.143633][T16638] netlink: 'syz.4.2984': attribute type 4 has an invalid length. [ 347.227419][T16646] Bluetooth: MGMT ver 1.23 [ 347.229657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.377737][T16652] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2988'. [ 347.441791][T16510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.477233][T16510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.605341][T16510] team0: Port device team_slave_0 added [ 347.628021][T16510] team0: Port device team_slave_1 added [ 347.745078][T16510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.759240][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.794682][T16510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.811612][T16510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.818905][T16510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.863060][T16510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.968501][T16680] IPVS: length: 123 != 24 [ 347.993893][T16510] hsr_slave_0: entered promiscuous mode [ 348.039276][T16510] hsr_slave_1: entered promiscuous mode [ 348.067172][T16510] debugfs: 'hsr0' already exists in 'hsr' [ 348.077673][T16510] Cannot create hsr debugfs directory [ 348.108240][T16679] lo speed is unknown, defaulting to 1000 [ 348.149623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.421185][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2999'. [ 348.660820][T16510] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.674368][T16510] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.726484][T16510] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.854939][T16510] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.866327][T16510] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.885422][T16510] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 348.950753][ T5865] Bluetooth: hci0: command tx timeout [ 348.972318][T16715] netlink: 'syz.0.3003': attribute type 2 has an invalid length. [ 349.080561][T16510] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.122304][T16510] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.145006][T16510] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.200971][T16720] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 349.252129][T16510] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.310283][T16510] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.340373][T16510] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 349.359718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.662685][T16731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.803830][T16733] netlink: 'syz.4.3008': attribute type 21 has an invalid length. [ 349.825871][T16733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.833196][T16733] IPv6: NLM_F_CREATE should be set when creating new route [ 349.840549][T16733] IPv6: NLM_F_CREATE should be set when creating new route [ 349.847890][T16733] IPv6: NLM_F_CREATE should be set when creating new route [ 349.921349][T16510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.939388][T16510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.957078][T16510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.989131][T16510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 350.088983][T16743] net veth1_virt_wifi .: renamed from virt_wifi0 [ 350.108432][T16743] netlink: 'syz.2.3012': attribute type 10 has an invalid length. [ 350.170340][T16743] team0: Port device geneve0 added [ 350.300118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.447053][T16510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.525465][T16510] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.559185][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.567385][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.612870][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.620124][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.729409][T16778] __nla_validate_parse: 2 callbacks suppressed [ 350.729429][T16778] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3022'. [ 350.788302][T16779] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3022'. [ 350.969416][T16788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3024'. [ 350.983215][T16788] netlink: 'syz.2.3024': attribute type 7 has an invalid length. [ 350.992636][T16788] netlink: 'syz.2.3024': attribute type 8 has an invalid length. [ 351.001014][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'. [ 351.031666][ T5865] Bluetooth: hci0: command tx timeout [ 351.113244][T16795] team0: Cannot enslave team device to itself [ 351.244223][T16798] IPVS: ip_vs_edit_dest(): server weight less than zero [ 351.277382][T16801] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 351.329634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.343742][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.528473][T16510] veth0_vlan: entered promiscuous mode [ 351.577415][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3030'. [ 351.667621][T16510] veth1_vlan: entered promiscuous mode [ 351.837431][T16510] veth0_macvtap: entered promiscuous mode [ 351.893764][T16510] veth1_macvtap: entered promiscuous mode [ 351.907175][T16821] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 351.995542][T16510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.017298][T16510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.063636][T12279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.115171][T12279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.136880][T12279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.189201][T12279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.319827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.337714][T16843] netlink: 'syz.4.3043': attribute type 8 has an invalid length. [ 352.666663][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 352.748488][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 352.927623][T16878] netlink: 'syz.3.3051': attribute type 2 has an invalid length. [ 352.976434][ T30] audit: type=1107 audit(1757558387.962:8): pid=16873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='LFˆ”òé=›Q—âà…iù0©©{ïd 2_FãY»{€÷:J—!yòXf#Ôéß)×ïðjiHZzC/]•E%øbE [ 352.976434][ T30] œyêáàlêGØPîèÝsOÅUMŠÑà$ÂÉi”b­`÷!å<e(²ÀÃèÍägS†”d²Q+ëo2›p`Qn5*xC+%›hãxa]@q,m3»W‚î<õ¯¼œI O­'+B¯x~·ã‚ÎOŠL' [ 353.020517][T16882] syzkaller1: entered promiscuous mode [ 353.026017][T16882] syzkaller1: entered allmulticast mode [ 353.110653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.119167][ T5865] Bluetooth: hci0: command tx timeout [ 353.284297][T12279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.306326][T12279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.395867][T16893] tipc: Enabling of bearer rejected, media not registered [ 353.404543][T16894] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 353.412417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.418514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.447308][T16893] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 353.449226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.476781][T16896] syzkaller1: entered promiscuous mode [ 353.486647][T16893] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 353.488597][T16896] syzkaller1: entered allmulticast mode [ 353.495700][T16893] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3057'. [ 353.693249][T16904] netlink: 'syz.1.2937': attribute type 12 has an invalid length. [ 354.369381][T16917] netlink: 'syz.2.3065': attribute type 2 has an invalid length. [ 354.439985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.523554][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.533980][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 354.543789][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 354.557821][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 354.569009][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.682983][T16920] lo speed is unknown, defaulting to 1000 [ 355.072414][ T5937] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0 [ 355.116704][ T5937] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 355.191789][ T5865] Bluetooth: hci0: command tx timeout [ 355.509743][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.536331][T16935] fido_id[16935]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 356.057210][T16920] chnl_net:caif_netlink_parms(): no params data found [ 356.213987][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.222660][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.233743][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.243849][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.261834][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.277356][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.285992][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.294843][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.304265][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.318695][T16973] netlink: 'syz.2.3078': attribute type 3 has an invalid length. [ 356.405734][T16983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3081'. [ 356.449183][T16920] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.470116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.477093][T16920] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.486794][T16973] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3078'. [ 356.491604][T16920] bridge_slave_0: entered allmulticast mode [ 356.507283][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 356.518925][T16920] bridge_slave_0: entered promiscuous mode [ 356.537014][T16983] geneve0: left allmulticast mode [ 356.572694][T16992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3084'. [ 356.618605][T16920] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.630659][ T5865] Bluetooth: hci5: command tx timeout [ 356.636135][T16920] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.653402][T16920] bridge_slave_1: entered allmulticast mode [ 356.662874][T16920] bridge_slave_1: entered promiscuous mode [ 356.804383][T16920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.860026][T16920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.078787][T16920] team0: Port device team_slave_0 added [ 357.123379][T16920] team0: Port device team_slave_1 added [ 357.304677][T16920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.323704][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.373992][T16920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.441376][T16920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.462307][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.499151][T16920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.525341][T17041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3098'. [ 357.609595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.643863][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3101'. [ 357.684333][T16920] hsr_slave_0: entered promiscuous mode [ 357.707771][T16920] hsr_slave_1: entered promiscuous mode [ 357.726749][T16920] debugfs: 'hsr0' already exists in 'hsr' [ 357.750620][T16920] Cannot create hsr debugfs directory [ 357.963072][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 357.981398][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3108'. [ 358.154568][T17069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.290194][T17069] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3110'. [ 358.549628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.702427][T17089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.712783][ T5865] Bluetooth: hci5: command tx timeout [ 358.756152][T16920] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.768900][T16920] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.833838][T17078] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.868837][T17077] lo speed is unknown, defaulting to 1000 [ 358.971263][T16920] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.995910][T16920] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.113426][T16920] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.124438][T16920] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.196729][T16920] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.207835][T16920] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.494143][T16920] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.520541][T16920] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.542398][T16920] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.569169][T16920] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.600021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.719123][T16920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.747796][T16920] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.750302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.767598][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.774786][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.785087][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.792325][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.015266][T16920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.261570][T16920] veth0_vlan: entered promiscuous mode [ 360.273816][T16920] veth1_vlan: entered promiscuous mode [ 360.314077][T16920] veth0_macvtap: entered promiscuous mode [ 360.324549][T16920] veth1_macvtap: entered promiscuous mode [ 360.347870][T16920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.366626][T16920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.388177][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.397750][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.407939][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.417144][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.493050][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.512208][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.545371][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.555907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.634573][T17109] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 360.639851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.790592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.800348][ T5865] Bluetooth: hci5: command tx timeout [ 361.689659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.809599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.869687][ T5865] Bluetooth: hci5: command tx timeout [ 363.849805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.819966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.969905][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.929640][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.989830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.009723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.059961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.140180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.189827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.209591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.319887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.329620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.279653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.279619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.470221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.717024][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.725670][ T1304] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 379.449805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.439613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.499837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.499944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.649878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.589649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.589997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.739896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.750181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.749666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.950409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.800091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.859920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.829691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.019994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.920050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.089700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.079980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.069914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.150031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.119998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.250069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.189717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.259815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.309712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.319852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.369898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.419742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.499620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.469756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.709293][T17113] openvswitch: netlink: IP tunnel attribute has 201 unknown bytes. [ 408.925350][T17128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3118'. [ 409.016156][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'. [ 409.085776][T17121] lo speed is unknown, defaulting to 1000 [ 409.509173][T17143] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 409.529840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.747288][T17153] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3124'. [ 409.890165][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.900974][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.909316][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.920797][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.921572][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'. [ 409.928551][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 409.961685][T17158] tipc: Enabling of bearer rejected, failed to enable media [ 410.130307][T17151] lo speed is unknown, defaulting to 1000 [ 410.599902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.683637][T17155] lo speed is unknown, defaulting to 1000 [ 411.044917][T17194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 411.650254][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.870316][T17219] validate_nla: 40 callbacks suppressed [ 411.870336][T17219] netlink: 'syz.4.3140': attribute type 16 has an invalid length. [ 411.907177][T17219] netlink: 'syz.4.3140': attribute type 17 has an invalid length. [ 411.942245][T17223] rdma_rxe: rxe_newlink: failed to add lo [ 411.990440][ T5865] Bluetooth: hci3: command tx timeout [ 412.094931][T17219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.175593][T17155] chnl_net:caif_netlink_parms(): no params data found [ 412.513710][T17220] lec:lec_atm_close: lec0: Shut down! [ 412.630573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.746553][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.770455][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.787239][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.826834][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.849743][T17155] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.900121][T17155] bridge_slave_0: entered allmulticast mode [ 412.922336][T17155] bridge_slave_0: entered promiscuous mode [ 412.945674][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.963980][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.986833][T17155] bridge_slave_1: entered allmulticast mode [ 413.010027][T17155] bridge_slave_1: entered promiscuous mode [ 413.030965][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.132734][T17252] nbd: device at index 4 is going down [ 413.289864][T17276] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3153'. [ 413.456214][T17263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3152'. [ 413.490906][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 413.545205][T17266] syzkaller1: entered promiscuous mode [ 413.571794][T17266] syzkaller1: entered allmulticast mode [ 413.621693][T17125] udevd[17125]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 413.649824][T17155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.723316][T17155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.819642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.861576][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 413.977162][T17295] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3159'. [ 414.005024][T17155] team0: Port device team_slave_0 added [ 414.024903][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 414.049908][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3160'. [ 414.071790][ T5865] Bluetooth: hci3: command tx timeout [ 414.072124][T17155] team0: Port device team_slave_1 added [ 414.128703][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.130235][T17300] netlink: 'syz.3.3161': attribute type 1 has an invalid length. [ 414.159835][T12279] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.179137][T17300] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3161'. [ 414.200397][T17300] netlink: 'syz.3.3161': attribute type 2 has an invalid length. [ 414.217931][T17300] netlink: 'syz.3.3161': attribute type 1 has an invalid length. [ 414.284203][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.287887][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3163'. [ 414.308750][T17305] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3163'. [ 414.310872][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.346088][T17303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3162'. [ 414.355597][T17303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3162'. [ 414.360727][T17309] sctp: [Deprecated]: syz.1.3164 (pid 17309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.360727][T17309] Use struct sctp_sack_info instead [ 414.431976][T17155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.461604][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.509341][T17155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.526101][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 414.554520][T17155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.565150][T17318] netlink: 'syz.0.3166': attribute type 1 has an invalid length. [ 414.581063][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.607428][T17318] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3166'. [ 414.701577][T17155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.719586][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.768674][T17325] dvmrp0: entered allmulticast mode [ 414.894275][T17155] hsr_slave_0: entered promiscuous mode [ 414.924852][T17155] hsr_slave_1: entered promiscuous mode [ 414.944765][T17155] debugfs: 'hsr0' already exists in 'hsr' [ 414.979888][T17155] Cannot create hsr debugfs directory [ 415.003813][T17338] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001 [ 415.058044][T17344] openvswitch: netlink: Key type 29 is not supported [ 415.092550][T17342] ip6gre1: entered allmulticast mode [ 415.312824][T17356] rdma_rxe: rxe_newlink: failed to add lo [ 415.598266][T17155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.629594][T17155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.791095][T17366] netlink: 'syz.0.3182': attribute type 3 has an invalid length. [ 415.796206][T17155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.798970][T17366] netlink: 'syz.0.3182': attribute type 2 has an invalid length. [ 415.824755][T17155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.839587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.916043][T17373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.924497][T17373] batadv_slave_0: entered promiscuous mode [ 416.082125][T17379] IPv6: Can't replace route, no match found [ 416.152520][ T5865] Bluetooth: hci3: command tx timeout [ 416.708422][T17385] netlink: 'syz.4.3189': attribute type 8 has an invalid length. [ 416.829689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.866984][T17155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.911182][T17155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.088903][T17405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.096265][T17405] IPv6: NLM_F_CREATE should be set when creating new route [ 417.115377][T17405] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 417.127731][T17155] bond0: (slave netdevsim0): Releasing backup interface [ 417.139163][T17155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.156845][T17155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.609345][T17424] netlink: 'syz.4.3201': attribute type 10 has an invalid length. [ 417.652646][T17422] team_slave_1 (unregistering): left promiscuous mode [ 417.673642][T17422] team0: Port device team_slave_1 removed [ 417.688935][T17155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.708029][T17424] team0: Device ipvlan1 failed to register rx_handler [ 417.740362][T17155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.785170][T17155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.816958][T17155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.889917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.126539][T17446] netlink: 'syz.4.3207': attribute type 1 has an invalid length. [ 418.234664][ T5865] Bluetooth: hci3: command tx timeout [ 419.020162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.919732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.196898][T17462] IPVS: length: 221 != 8 [ 420.518926][T17155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.574068][T17482] netlink: 'syz.3.3218': attribute type 10 has an invalid length. [ 420.605313][T17155] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.642090][T17481] __nla_validate_parse: 15 callbacks suppressed [ 420.642113][T17481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3217'. [ 420.714205][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.721429][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.755372][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.762661][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.902178][T17498] netlink: 'syz.3.3223': attribute type 1 has an invalid length. [ 420.929704][T17498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.040042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.190757][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3225'. [ 421.434378][T17523] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 421.454844][T17523] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3228'. [ 421.475999][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'. [ 421.491281][T17525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3229'. [ 421.535759][T17523] sctp: [Deprecated]: syz.3.3228 (pid 17523) Use of int in maxseg socket option. [ 421.535759][T17523] Use struct sctp_assoc_value instead [ 421.566533][T17155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.595273][T17528] netlink: 'syz.4.3231': attribute type 83 has an invalid length. [ 421.681861][T17155] veth0_vlan: entered promiscuous mode [ 421.708385][T17155] veth1_vlan: entered promiscuous mode [ 421.738880][ T982] IPVS: starting estimator thread 0... [ 421.804413][T17155] veth0_macvtap: entered promiscuous mode [ 421.830279][T17155] veth1_macvtap: entered promiscuous mode [ 421.850418][T17533] IPVS: using max 25 ests per chain, 60000 per kthread [ 421.876873][T17155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.927680][T17155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.963096][T12282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.982151][T12282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.012297][T12282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.022148][T12282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.109781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.200361][T17546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3238'. [ 422.264847][T12282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.283381][T12282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.372133][T11614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.422262][T11614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.553855][T17558] lo speed is unknown, defaulting to 1000 [ 422.698910][T17568] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.039593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.767328][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 423.792141][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 423.805947][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 423.817111][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 423.834522][T17608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3254'. [ 423.844039][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 423.851574][T17608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3254'. [ 424.109716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.204286][T12282] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.215751][T12282] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.245733][T17603] lo speed is unknown, defaulting to 1000 [ 424.277270][T17626] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 424.286181][ T982] IPVS: starting estimator thread 0... [ 424.368488][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 424.387888][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 424.401241][T17627] IPVS: using max 29 ests per chain, 69600 per kthread [ 424.419057][T12282] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.440595][T12282] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.487068][T17626] wg2: entered promiscuous mode [ 424.500336][T17626] wg2: entered allmulticast mode [ 424.549005][T12282] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.575452][T12282] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.703315][T12282] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.744833][T12282] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.057140][T17642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.159754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.245736][T17644] Bluetooth: MGMT ver 1.23 [ 425.342269][T12282] veth3: left allmulticast mode [ 425.347691][T12282] veth3: left promiscuous mode [ 425.354558][T12282] bridge1: port 1(veth3) entered disabled state [ 425.381545][T12282] bridge0: port 1(macsec0) entered disabled state [ 425.868319][T12282] bond4 (unregistering): (slave gretap1): Releasing active interface [ 425.913630][ T5865] Bluetooth: hci4: command tx timeout [ 425.980016][T12282] dvmrp0 (unregistering): left allmulticast mode [ 426.018809][T12282] bond2 (unregistering): (slave geneve2): Releasing active interface [ 426.077484][T12282] geneve0 (unregistering): left promiscuous mode [ 426.087133][T12282] team0: Port device geneve0 removed [ 426.487311][T12282] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 426.499363][T12282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.510923][T12282] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 426.530501][T12282] bond0 (unregistering): Released all slaves [ 426.549036][T12282] bond1 (unregistering): Released all slaves [ 426.684510][T12282] bond2 (unregistering): Released all slaves [ 426.700024][T12282] bond3 (unregistering): Released all slaves [ 426.835088][T12282] bond4 (unregistering): Released all slaves [ 426.967472][T12282] bond5 (unregistering): (slave veth5): Releasing active interface [ 426.977187][T12282] bond5 (unregistering): Released all slaves [ 427.106672][T12282] bond6 (unregistering): Released all slaves [ 427.126549][T12282] bond7 (unregistering): Released all slaves [ 427.267788][T12282] bond8 (unregistering): Released all slaves [ 427.407682][T12282] bond9 (unregistering): Released all slaves [ 427.424184][T12282] bond10 (unregistering): Released all slaves [ 427.459321][T17660] tipc: Started in network mode [ 427.468831][T17660] tipc: Node identity fe495d24baa7, cluster identity 4711 [ 427.477705][T17660] tipc: Enabled bearer , priority 0 [ 427.533492][T17658] tipc: Disabling bearer [ 427.872736][T17603] chnl_net:caif_netlink_parms(): no params data found [ 427.991035][ T5865] Bluetooth: hci4: command tx timeout [ 428.023914][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.031387][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.038657][T17603] bridge_slave_0: entered allmulticast mode [ 428.047804][T17603] bridge_slave_0: entered promiscuous mode [ 428.056634][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.063997][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.072338][T17603] bridge_slave_1: entered allmulticast mode [ 428.081922][T17603] bridge_slave_1: entered promiscuous mode [ 428.121043][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.133436][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.177153][T17603] team0: Port device team_slave_0 added [ 428.187089][T17603] team0: Port device team_slave_1 added [ 428.224233][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.231710][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.258502][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.272534][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.279758][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.307132][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.367965][T17603] hsr_slave_0: entered promiscuous mode [ 428.374944][T17603] hsr_slave_1: entered promiscuous mode [ 428.381134][T17603] debugfs: 'hsr0' already exists in 'hsr' [ 428.387866][T17603] Cannot create hsr debugfs directory [ 428.794396][T17693] __nla_validate_parse: 2 callbacks suppressed [ 428.794417][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 428.819133][T17693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3277'. [ 428.840872][T17693] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3277'. [ 428.904856][T17695] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3278'. [ 428.967843][T17699] netlink: 'syz.2.3279': attribute type 2 has an invalid length. [ 428.976471][T17699] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3279'. [ 429.082144][T12282] tipc: Disabling bearer [ 429.089051][T12282] tipc: Disabling bearer [ 429.182497][T12282] tipc: Left network mode [ 429.541902][T17728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.561367][T17729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.579124][T17603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.616425][T17603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.709987][T17603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.773203][T17603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.896813][ T5974] IPVS: starting estimator thread 0... [ 430.000523][T17742] IPVS: using max 28 ests per chain, 67200 per kthread [ 430.073781][ T5865] Bluetooth: hci4: command tx timeout [ 430.249132][T17749] netlink: 'syz.2.3292': attribute type 1 has an invalid length. [ 430.284701][T17752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3293'. [ 430.322539][T17750] bond1 (unregistering): Released all slaves [ 430.416416][T17603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.543491][T17603] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.596466][T11614] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.604032][T11614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.689181][T11614] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.696450][T11614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.974756][T17777] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3299'. [ 431.011227][T12282] hsr_slave_0: left promiscuous mode [ 431.017458][T12282] hsr_slave_1: left promiscuous mode [ 431.023577][T12282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.055045][T12282] veth1_macvtap: left allmulticast mode [ 431.062522][T12282] veth1_macvtap: left promiscuous mode [ 431.068458][T12282] veth0_macvtap: left promiscuous mode [ 431.074530][T12282] veth1_vlan: left promiscuous mode [ 431.080417][T12282] veth0_vlan: left promiscuous mode [ 431.693078][T12282] team_slave_0 (unregistering): left promiscuous mode [ 431.702659][T12282] team0 (unregistering): Port device team_slave_0 removed [ 432.162423][ T5865] Bluetooth: hci4: command tx timeout [ 432.409925][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3302'. [ 432.440509][T17784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.758221][T17811] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3309'. [ 434.810693][T17821] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3313'. [ 434.918029][T17826] tipc: Enabling of bearer rejected, failed to enable media [ 434.939758][T12282] IPVS: stop unused estimator thread 0... [ 435.037009][T17603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.213277][T17603] veth0_vlan: entered promiscuous mode [ 435.247674][T17603] veth1_vlan: entered promiscuous mode [ 435.361212][T17603] veth0_macvtap: entered promiscuous mode [ 435.404611][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'. [ 435.418708][T17603] veth1_macvtap: entered promiscuous mode [ 435.477560][T17853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3321'. [ 435.532633][T17603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.577391][T17603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.656512][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.677583][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.696337][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.707063][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.853610][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.868496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.928537][T12292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.938494][T12292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.020330][T17875] netlink: 808 bytes leftover after parsing attributes in process `syz.3.3245'. [ 436.136108][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 436.281495][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 436.290267][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 436.301128][T17886] netlink: 'syz.0.3333': attribute type 3 has an invalid length. [ 436.315829][T17886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3333'. [ 436.326937][T17886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3333'. [ 436.565797][T17901] veth0: entered promiscuous mode [ 436.576549][T17899] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 436.599500][T17898] veth0: left promiscuous mode [ 436.946501][T17915] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 437.048505][T17915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.070409][T17926] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 437.094244][T17923] vlan2: entered promiscuous mode [ 437.098868][T17926] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 437.107742][T17923] bond1: entered promiscuous mode [ 437.129292][T17923] vlan2: entered allmulticast mode [ 437.156931][T17923] bond1: entered allmulticast mode [ 437.167064][T17924] netlink: 'syz.2.3345': attribute type 30 has an invalid length. [ 437.246061][T17927] bond1: (slave gretap1): making interface the new active one [ 437.269424][T17927] gretap1: entered promiscuous mode [ 437.275995][T17927] gretap1: entered allmulticast mode [ 437.298568][T17927] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 437.311864][T17938] IPVS: sed: FWM 3 0x00000003 - no destination available [ 437.339625][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.350130][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 437.376799][T12292] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.401178][T12292] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.449227][T12292] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.604712][T17949] netlink: 'syz.2.3354': attribute type 14 has an invalid length. [ 437.721731][T17949] netlink: 'syz.2.3354': attribute type 14 has an invalid length. [ 437.741599][T17954] tipc: Started in network mode [ 437.760497][T17954] tipc: Node identity c6116da19714, cluster identity 4711 [ 437.776385][T17954] tipc: Enabled bearer , priority 0 [ 437.862911][T17954] syzkaller0: entered promiscuous mode [ 437.881227][T17954] syzkaller0: entered allmulticast mode [ 437.993026][T17954] tipc: Resetting bearer [ 438.130882][ T3513] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 438.351017][T17983] netlink: 'syz.1.3364': attribute type 26 has an invalid length. [ 438.443660][T17983] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 438.559422][T17953] tipc: Resetting bearer [ 438.608547][T17953] tipc: Disabling bearer [ 438.867334][T18010] wireguard: wg2: Could not create IPv4 socket [ 439.324605][T18037] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 439.326822][T18033] netlink: 'syz.4.3381': attribute type 4 has an invalid length. [ 439.387023][T18037] bond2: (slave bridge3): making interface the new active one [ 439.395530][T18037] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 439.529653][T18047] veth0_to_bridge: entered promiscuous mode [ 439.591968][T18046] veth0_to_bridge: left promiscuous mode [ 439.770642][T18059] __nla_validate_parse: 21 callbacks suppressed [ 439.770664][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'. [ 439.791988][T18061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3389'. [ 439.825319][T18064] tipc: Started in network mode [ 439.839212][T18064] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 439.877509][T18067] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3391'. [ 439.878431][T18064] tipc: Enabled bearer , priority 10 [ 440.143946][T18078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3393'. [ 440.167317][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.177119][ T1304] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 440.194093][T18078] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3393'. [ 440.434264][T18096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3398'. [ 440.462344][T18096] sch_tbf: burst 88 is lower than device veth1_macvtap mtu (1514) ! [ 440.806707][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 440.838386][T18125] ip6gre1: entered allmulticast mode [ 440.909172][T18120] can: request_module (can-proto-0) failed. [ 440.999999][ T9] tipc: Node number set to 4269801492 [ 441.103641][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3411'. [ 441.567597][T18154] validate_nla: 2 callbacks suppressed [ 441.567618][T18154] netlink: 'syz.3.3420': attribute type 7 has an invalid length. [ 441.588653][T18154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3420'. [ 441.724337][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 441.905560][T18170] netlink: 'syz.1.3427': attribute type 1 has an invalid length. [ 441.987199][T18180] ªªªªªª: renamed from vlan0 (while UP) [ 442.760903][T18228] netlink: 'syz.3.3440': attribute type 27 has an invalid length. [ 442.934707][T18238] netlink: 'syz.2.3444': attribute type 23 has an invalid length. [ 443.300889][T18249] netlink: 'syz.4.3448': attribute type 1 has an invalid length. [ 443.328186][T18249] netlink: 'syz.4.3448': attribute type 1 has an invalid length. [ 443.340200][T18253] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 443.368526][T18249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.518672][T18264] netlink: 'syz.2.3454': attribute type 1 has an invalid length. [ 443.671558][T18264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.840542][T18273] bond1: (slave veth5): Enslaving as an active interface with a down link [ 443.894112][T18264] bond1: (slave veth0_to_bond): making interface the new active one [ 443.903545][T18264] veth0_to_bond: entered promiscuous mode [ 443.910300][T18264] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 443.955608][T18279] bond1: (slave veth7): Enslaving as an active interface with a down link [ 443.974781][T18284] C: renamed from lo (while UP) [ 445.512759][T18332] __nla_validate_parse: 5 callbacks suppressed [ 445.512780][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'. [ 445.813467][ T5865] block nbd1: Receive control failed (result -32) [ 446.008588][T18358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3477'. [ 446.034351][T18360] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3480'. [ 446.044540][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'. [ 446.066643][T18360] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3480'. [ 446.078819][T18362] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 446.087116][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'. [ 446.097428][T18360] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3480'. [ 446.329053][T18366] bond3: (slave bridge2): making interface the new active one [ 446.353605][T18366] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 446.361570][T18382] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3485'. [ 446.596700][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3490'. [ 446.670730][T18396] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 446.901687][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 447.742547][T18451] netlink: 'syz.3.3505': attribute type 5 has an invalid length. [ 447.826788][T18465] sit1: entered promiscuous mode [ 447.856728][T18465] sit1: entered allmulticast mode [ 448.048816][T18473] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 448.110087][T18479] netlink: 'syz.2.3512': attribute type 12 has an invalid length. [ 448.946749][T18538] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 449.223772][T18556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.334090][T18552] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 449.531557][T18577] netlink: 'syz.2.3540': attribute type 25 has an invalid length. [ 449.664972][T18577] netem: change failed [ 449.970041][T18602] netlink: 'syz.1.3547': attribute type 1 has an invalid length. [ 450.026022][T18603] macvtap1: entered allmulticast mode [ 450.031663][T18603] veth0_macvtap: entered allmulticast mode [ 450.697103][T18647] netlink: 'syz.4.3558': attribute type 49 has an invalid length. [ 450.958271][T18656] tipc: Enabled bearer , priority 0 [ 450.976491][T18656] syzkaller0: entered promiscuous mode [ 450.990018][T18656] syzkaller0: entered allmulticast mode [ 451.003343][T18659] __nla_validate_parse: 11 callbacks suppressed [ 451.003362][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 451.048943][T18664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 451.228910][T18675] syzkaller0: entered allmulticast mode [ 451.310317][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3568'. [ 451.336465][T18661] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3565'. [ 451.367711][T18654] tipc: Resetting bearer [ 451.464023][T18654] tipc: Disabling bearer [ 451.948421][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.969232][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.025657][T18713] erspan0: entered promiscuous mode [ 452.035655][T18713] erspan0: entered allmulticast mode [ 452.235202][T18719] nbd: must specify a device to reconfigure [ 452.384147][T18727] netlink: 'syz.4.3585': attribute type 1 has an invalid length. [ 452.446350][T18730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.682462][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 452.744891][T18749] netlink: 'syz.1.3590': attribute type 1 has an invalid length. [ 452.773251][T18749] netlink: 'syz.1.3590': attribute type 2 has an invalid length. [ 453.148704][T18765] lo speed is unknown, defaulting to 1000 [ 453.183076][T18768] netlink: 'syz.3.3595': attribute type 21 has an invalid length. [ 453.203960][T18768] IPv6: NLM_F_CREATE should be specified when creating new route [ 453.223350][T18768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 453.230659][T18768] IPv6: NLM_F_CREATE should be set when creating new route [ 453.238012][T18768] IPv6: NLM_F_CREATE should be set when creating new route [ 453.245311][T18768] IPv6: NLM_F_CREATE should be set when creating new route [ 453.454741][T18743] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 453.934263][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'. [ 454.513510][T18816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3612'. [ 454.544383][T18821] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3613'. [ 454.563496][T18821] openvswitch: netlink: Flow key attr not present in new flow. [ 454.629897][ T5865] Bluetooth: hci0: command 0x0c20 tx timeout [ 455.095112][T18844] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 455.274695][ T64] veth0_to_bond: left promiscuous mode [ 455.771836][T18865] pimreg: entered allmulticast mode [ 456.613660][T18898] IPv6: Can't replace route, no match found [ 456.936396][T18910] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 456.960089][T18910] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 456.972872][T18917] netlink: 'syz.3.3643': attribute type 11 has an invalid length. [ 457.019820][T18917] netlink: 13636 bytes leftover after parsing attributes in process `syz.3.3643'. [ 457.090032][T18927] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3645'. [ 457.120148][T18929] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3645'. [ 457.200647][T18931] netlink: 'syz.4.3646': attribute type 83 has an invalid length. [ 457.290653][T18940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.443888][T18950] netlink: 'syz.4.3652': attribute type 1 has an invalid length. [ 457.482545][T18951] gretap2: entered promiscuous mode [ 457.508135][T18950] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 457.716831][T18964] erspan0: entered promiscuous mode [ 458.177849][T18991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 458.260844][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 458.282773][T18998] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3663'. [ 458.351368][T18998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3663'. [ 458.376530][T18998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3663'. [ 458.394652][T19006] netlink: 'syz.4.3662': attribute type 3 has an invalid length. [ 458.426056][T18998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3663'. [ 458.533218][T19008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3665'. [ 459.013688][T19038] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 459.088963][T19038] bond2: entered promiscuous mode [ 459.095007][T19038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.424392][T19067] netlink: 'syz.1.3679': attribute type 39 has an invalid length. [ 459.426645][T19063] netlink: 'syz.0.3680': attribute type 4 has an invalid length. [ 459.910137][T19088] tipc: Started in network mode [ 459.931612][T19088] tipc: Node identity b6f05e440fa2, cluster identity 4711 [ 459.957807][T19088] tipc: Enabled bearer , priority 0 [ 459.982654][T19088] syzkaller0: entered promiscuous mode [ 460.004190][T19088] syzkaller0: entered allmulticast mode [ 460.020815][T19088] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 460.110262][T19088] tipc: Resetting bearer [ 460.203739][T19087] tipc: Resetting bearer [ 460.261159][T19087] tipc: Disabling bearer [ 460.652710][T19106] hsr_slave_0 (unregistering): left promiscuous mode [ 461.487336][T19171] vlan2: entered allmulticast mode [ 461.493076][T19171] syz_tun: entered allmulticast mode [ 461.512663][T19175] netlink: 'syz.4.3714': attribute type 22 has an invalid length. [ 461.672639][T19175] netlink: 'syz.4.3714': attribute type 22 has an invalid length. [ 462.596796][T19232] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 462.624554][T19232] netlink: 'syz.4.3733': attribute type 4 has an invalid length. [ 462.646057][T19232] __nla_validate_parse: 11 callbacks suppressed [ 462.646079][T19232] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3733'. [ 462.681404][T19238] netlink: 'syz.4.3733': attribute type 1 has an invalid length. [ 462.714039][ T5183] Bluetooth: hci1: command 0x0406 tx timeout [ 462.739530][T19238] netlink: 'syz.4.3733': attribute type 4 has an invalid length. [ 462.747318][T19238] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3733'. [ 462.870132][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3737'. [ 463.454181][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3742'. [ 463.596046][T19267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.626989][T19271] openvswitch: netlink: Flow actions attr not present in new flow. [ 463.870606][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3749'. [ 463.892660][T19276] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.3749'. [ 463.910767][T19277] netlink: 29 bytes leftover after parsing attributes in process `syz.0.3745'. [ 463.923225][T19288] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3750'. [ 464.095534][T19297] bond5: entered promiscuous mode [ 464.100992][T19297] bond5: entered allmulticast mode [ 464.106756][T19297] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.157905][T19299] sctp: [Deprecated]: syz.2.3752 (pid 19299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.157905][T19299] Use struct sctp_sack_info instead [ 464.272787][T19309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.478141][T19311] syzkaller0: entered promiscuous mode [ 464.485364][T19311] syzkaller0: entered allmulticast mode [ 464.896754][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 464.906888][T19337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3763'. [ 466.841650][T19330] batadv_slave_1: entered promiscuous mode [ 466.864898][T19337] geneve2: entered promiscuous mode [ 466.876127][T19337] geneve2: entered allmulticast mode [ 466.884814][T19331] batadv_slave_1: left promiscuous mode [ 467.056795][T19347] openvswitch: netlink: Unknown key attributes 2 [ 467.089311][T19351] tipc: Enabled bearer , priority 10 [ 467.102439][T19352] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 467.180303][T19351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.203285][T19360] validate_nla: 1 callbacks suppressed [ 467.203306][T19360] netlink: 'syz.1.3770': attribute type 1 has an invalid length. [ 467.419528][T19366] bridge0: entered promiscuous mode [ 467.428630][T19366] macsec1: entered promiscuous mode [ 467.434512][T19366] macsec1: entered allmulticast mode [ 467.440012][T19366] bridge0: entered allmulticast mode [ 467.447171][T19366] bridge0: port 3(macsec1) entered blocking state [ 467.454451][T19366] bridge0: port 3(macsec1) entered disabled state [ 467.471740][T19366] bridge0: left allmulticast mode [ 467.477449][T19366] bridge0: left promiscuous mode [ 467.537897][T19367] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 467.550727][T19374] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 467.564618][T19374] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 467.747246][T19386] __nla_validate_parse: 3 callbacks suppressed [ 467.747267][T19386] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3777'. [ 467.788272][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3778'. [ 467.808351][T19389] vlan0: entered allmulticast mode [ 467.815187][T19389] hsr0: entered allmulticast mode [ 467.823266][T19389] hsr_slave_0: entered allmulticast mode [ 467.828948][T19389] hsr_slave_1: entered allmulticast mode [ 468.000270][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 468.203838][ T5937] tipc: Node number set to 1359310241 [ 468.215427][T19407] macsec0: entered promiscuous mode [ 468.252548][T19407] macsec0: entered allmulticast mode [ 468.272614][T19407] veth1_macvtap: entered allmulticast mode [ 468.282560][T19407] bridge0: port 3(macsec0) entered blocking state [ 468.295432][T19407] bridge0: port 3(macsec0) entered disabled state [ 468.335795][T19407] bridge0: port 3(macsec0) entered blocking state [ 468.342490][T19407] bridge0: port 3(macsec0) entered forwarding state [ 468.364890][T19408] tipc: Enabling of bearer rejected, failed to enable media [ 468.497123][T19410] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3784'. [ 468.509735][T19410] macsec0: entered promiscuous mode [ 468.515210][T19410] macsec0: entered allmulticast mode [ 468.530340][T19410] veth1_macvtap: entered allmulticast mode [ 468.536584][T19410] bridge0: port 3(macsec0) entered blocking state [ 468.595457][T19410] bridge0: port 3(macsec0) entered disabled state [ 468.608879][T19410] bridge0: port 3(macsec0) entered blocking state [ 468.616634][T19410] bridge0: port 3(macsec0) entered forwarding state [ 468.671064][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3787'. [ 468.691684][T19424] netlink: 'syz.4.3787': attribute type 3 has an invalid length. [ 468.709273][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3788'. [ 468.749977][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3788'. [ 468.767095][T19424] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.3787'. [ 468.824126][T19429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3786'. [ 468.884074][T19437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3789'. [ 469.179319][T19447] pim6reg1: entered promiscuous mode [ 469.186190][T19447] pim6reg1: entered allmulticast mode [ 469.355198][T19455] netlink: 'syz.4.3797': attribute type 8 has an invalid length. [ 469.602398][T19474] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20003 [ 470.057092][T19503] sch_fq: defrate 0 ignored. [ 470.415909][T19530] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 470.429585][T19530] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 471.007629][T19557] netlink: 'syz.3.3822': attribute type 22 has an invalid length. [ 471.020347][T19560] netlink: 'syz.2.3821': attribute type 14 has an invalid length. [ 471.046935][T19557] netlink: 'syz.3.3822': attribute type 22 has an invalid length. [ 471.074560][ T1169] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.083551][ T1169] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.110513][T19560] netlink: 'syz.2.3821': attribute type 14 has an invalid length. [ 471.167631][ T1169] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.250282][T19571] netlink: 'syz.2.3826': attribute type 15 has an invalid length. [ 471.258941][T19571] netlink: 'syz.2.3826': attribute type 1 has an invalid length. [ 471.287055][ T1169] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.339712][T19575] 8021q: VLANs not supported on lo [ 473.080352][T19594] __nla_validate_parse: 17 callbacks suppressed [ 473.080375][T19594] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3834'. [ 473.099279][T19590] netlink: 'syz.2.3833': attribute type 83 has an invalid length. [ 473.145319][T19590] nbd: must specify a size in bytes for the device [ 473.152902][T19593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3831'. [ 473.741083][T19605] netlink: 'syz.2.3837': attribute type 11 has an invalid length. [ 473.754233][T19605] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3837'. [ 473.873661][T19615] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3843'. [ 473.967908][T19624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3840'. [ 474.124258][T19632] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3845'. [ 474.316561][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3850'. [ 474.326835][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3850'. [ 474.342449][T19644] vlan0: entered allmulticast mode [ 474.347634][T19644] bridge0: entered allmulticast mode [ 474.517395][T19653] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 474.530337][T19653] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 474.538860][T19653] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3854'. [ 474.658714][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3856'. [ 474.673642][T19660] netlink: 'syz.3.3856': attribute type 2 has an invalid length. [ 474.685611][T19658] openvswitch: netlink: Actions may not be safe on all matching packets [ 474.777083][T19666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.115060][T19678] netlink: 'syz.2.3861': attribute type 10 has an invalid length. [ 475.371245][T19698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.599260][T19707] IPv6: NLM_F_REPLACE set, but no existing node found! [ 475.614046][T19707] IPv6: NLM_F_REPLACE set, but no existing node found! [ 475.669980][T19714] netlink: 'syz.0.3871': attribute type 12 has an invalid length. [ 476.012829][T19731] netlink: 'syz.1.3877': attribute type 39 has an invalid length. [ 476.021032][T19729] macsec1: entered promiscuous mode [ 476.026283][T19729] macsec1: entered allmulticast mode [ 476.531874][T19762] veth0: entered promiscuous mode [ 477.088329][T19762] veth0: left promiscuous mode [ 477.244051][T19790] netlink: 'syz.2.3891': attribute type 10 has an invalid length. [ 477.282090][T19790] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 477.316481][T19790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.382716][T19798] syzkaller1: entered promiscuous mode [ 477.400780][T19798] syzkaller1: entered allmulticast mode [ 477.468722][T19798] pimreg: entered allmulticast mode [ 478.072216][ T5183] Bluetooth: hci5: command 0x0406 tx timeout [ 478.161030][T19850] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 478.737457][ T982] IPVS: starting estimator thread 0... [ 478.865751][T19884] IPVS: using max 27 ests per chain, 64800 per kthread [ 479.021197][T19904] __nla_validate_parse: 19 callbacks suppressed [ 479.021218][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3919'. [ 479.091358][T19904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3919'. [ 479.235421][T19920] netlink: 'syz.3.3924': attribute type 1 has an invalid length. [ 479.243694][T19920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.307168][T19925] netlink: 'syz.3.3924': attribute type 10 has an invalid length. [ 479.319464][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.327497][T19925] bridge_slave_1: left allmulticast mode [ 479.337010][T19925] bridge_slave_1: left promiscuous mode [ 479.345241][T19925] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.365398][T19925] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 480.055040][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3929'. [ 480.087300][T19936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.543588][T19955] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20002 [ 480.569360][T19966] netlink: 'syz.4.3936': attribute type 1 has an invalid length. [ 480.646580][T19965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 480.705454][T19966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.785652][T19969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3938'. [ 480.818711][T19971] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3940'. [ 480.840121][T19969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 480.872747][T19976] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.932135][T19979] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3941'. [ 481.055669][T19989] netlink: 'syz.1.3945': attribute type 6 has an invalid length. [ 481.095077][T19989] netlink: 'syz.1.3945': attribute type 2 has an invalid length. [ 481.130811][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3944'. [ 481.150189][T19989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.214545][T19991] syzkaller1: entered promiscuous mode [ 481.227325][T19991] syzkaller1: entered allmulticast mode [ 481.244248][T19991] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 481.365090][T20000] netlink: 'syz.4.3950': attribute type 11 has an invalid length. [ 481.376558][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3949'. [ 481.972657][T20039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3962'. [ 482.031465][T20027] batman_adv: batadv0: Adding interface: wlan1 [ 482.037690][T20027] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.070143][T20027] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 482.180479][ T5937] IPVS: starting estimator thread 0... [ 482.285470][T20053] IPVS: using max 24 ests per chain, 57600 per kthread [ 482.377932][T20063] netlink: 'syz.2.3969': attribute type 2 has an invalid length. [ 482.605496][T20080] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20001 [ 482.756143][T20089] sctp: [Deprecated]: syz.1.3977 (pid 20089) Use of int in max_burst socket option. [ 482.756143][T20089] Use struct sctp_assoc_value instead [ 482.795412][T20089] sctp: [Deprecated]: syz.1.3977 (pid 20089) Use of int in max_burst socket option. [ 482.795412][T20089] Use struct sctp_assoc_value instead [ 482.856094][T20099] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 482.856682][T20097] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 482.876448][T20089] sctp: [Deprecated]: syz.1.3977 (pid 20089) Use of int in max_burst socket option. [ 482.876448][T20089] Use struct sctp_assoc_value instead [ 482.912300][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 483.178082][T20113] sctp: [Deprecated]: syz.2.3982 (pid 20113) Use of int in max_burst socket option. [ 483.178082][T20113] Use struct sctp_assoc_value instead [ 483.366055][T20114] lo speed is unknown, defaulting to 1000 [ 486.274427][T20137] tipc: Enabling of bearer rejected, failed to enable media [ 486.307850][T20147] : entered promiscuous mode [ 486.964513][T20179] netlink: 'syz.1.3999': attribute type 28 has an invalid length. [ 486.972962][T20179] netlink: 'syz.1.3999': attribute type 3 has an invalid length. [ 486.981379][T20179] __nla_validate_parse: 7 callbacks suppressed [ 486.981397][T20179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3999'. [ 486.998664][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 487.320312][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 487.366877][T20188] netlink: 'syz.2.4001': attribute type 1 has an invalid length. [ 487.417600][T20196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'. [ 487.431283][T20188] netlink: 'syz.2.4001': attribute type 2 has an invalid length. [ 487.585657][T20201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4007'. [ 487.635435][T20199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4006'. [ 487.666000][T20199] netlink: 'syz.1.4006': attribute type 20 has an invalid length. [ 487.872149][T19494] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.898834][T20211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4009'. [ 487.906510][T19494] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.944680][T19494] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.985143][T20211] bridge0: port 3(macsec0) entered disabled state [ 487.997669][T20219] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4012'. [ 488.026731][T20211] bridge_slave_1: left allmulticast mode [ 488.044831][T20211] bridge_slave_1: left promiscuous mode [ 488.071579][T20211] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.112151][T20211] bridge_slave_0: left allmulticast mode [ 488.120344][T20211] bridge_slave_0: left promiscuous mode [ 488.126374][T20211] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.258065][T19494] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.493208][T20240] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 488.525163][T20242] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 488.663203][T20238] netlink: 'syz.3.4017': attribute type 1 has an invalid length. [ 488.711782][T20254] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4022'. [ 488.733792][T20254] openvswitch: netlink: Missing key (keys=40, expected=100) [ 488.813798][T20261] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4025'. [ 488.907918][T20267] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 488.939929][T20268] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 489.054651][T20271] netlink: 'syz.2.4030': attribute type 24 has an invalid length. [ 489.076489][T20272] C: entered promiscuous mode [ 489.099020][T20272] netlink: 'syz.0.4029': attribute type 2 has an invalid length. [ 489.111606][T20272] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 489.492002][T20295] delete_channel: no stack [ 490.368225][T20337] netlink: 'syz.3.4051': attribute type 25 has an invalid length. [ 490.400171][T20337] netlink: 'syz.3.4051': attribute type 8 has an invalid length. [ 490.614446][T20345] syzkaller0: entered promiscuous mode [ 490.623397][T20345] syzkaller0: entered allmulticast mode [ 490.639362][T20343] tipc: Started in network mode [ 490.654399][T20343] tipc: Node identity , cluster identity 4711 [ 490.662721][T20343] tipc: Failed to obtain node identity [ 490.668217][T20343] tipc: Enabling of bearer rejected, failed to enable media [ 490.956299][ T5865] Bluetooth: hci0: command tx timeout [ 493.154987][T20362] hsr_slave_1: left promiscuous mode [ 493.416889][T20397] __nla_validate_parse: 9 callbacks suppressed [ 493.416908][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4066'. [ 493.469183][T20397] veth0_macvtap: left promiscuous mode [ 493.481188][ T5913] hid (null): unknown global tag 0xe0 [ 493.486873][ T5913] hid (null): report_id 3522079371 is invalid [ 493.545090][T20409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4070'. [ 493.571273][ T5913] hid-generic 0005:0004:000F.0002: unexpected long global item [ 493.598187][T20412] netlink: 'syz.0.4071': attribute type 11 has an invalid length. [ 493.603104][ T5913] hid-generic 0005:0004:000F.0002: probe with driver hid-generic failed with error -22 [ 493.612384][T20415] netlink: 576 bytes leftover after parsing attributes in process `syz.4.4070'. [ 493.667394][T20407] syzkaller0: entered promiscuous mode [ 493.684924][T20407] syzkaller0: entered allmulticast mode [ 493.708972][T20419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4071'. [ 494.146052][T20439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4079'. [ 494.173730][T20435] syzkaller1: entered promiscuous mode [ 494.178266][T20439] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4079'. [ 494.179249][T20435] syzkaller1: entered allmulticast mode [ 494.226393][T20443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4080'. [ 494.285665][T20451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 494.310692][T20442] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4081'. [ 494.335369][T20453] validate_nla: 2 callbacks suppressed [ 494.335388][T20453] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 494.396652][T20439] tipc: Started in network mode [ 494.403835][T20439] tipc: Node identity d6f1e0f6670b, cluster identity 4711 [ 494.416323][T20439] tipc: Enabled bearer , priority 0 [ 494.450918][T20451] syzkaller0: entered promiscuous mode [ 494.468834][T20451] syzkaller0: entered allmulticast mode [ 494.477392][T20459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4084'. [ 494.613937][T20438] tipc: Resetting bearer [ 494.644748][T20466] netlink: 'syz.3.4086': attribute type 10 has an invalid length. [ 494.704540][T20438] tipc: Disabling bearer [ 494.791094][T20466] veth1_macvtap: left promiscuous mode [ 494.978226][T20473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.007943][T20473] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.053435][T20484] openvswitch: netlink: Unknown key attributes 2 [ 495.221950][T20473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.233883][T20473] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.261473][T20478] syzkaller1: entered promiscuous mode [ 495.278845][T20478] syzkaller1: entered allmulticast mode [ 495.386430][T20473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.407271][T20473] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.418437][T20498] netlink: 'syz.1.4097': attribute type 9 has an invalid length. [ 495.608553][T20473] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.666566][T20473] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.801035][T20507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.085450][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.118818][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.156819][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.165839][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.197313][ T1169] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.205796][ T1169] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.262804][ T1169] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.320178][ T1169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.446578][T20544] syzkaller0: entered promiscuous mode [ 496.457384][T20544] syzkaller0: entered allmulticast mode [ 496.619704][T20537] lo speed is unknown, defaulting to 1000 [ 498.333899][T20627] netlink: 'syz.2.4133': attribute type 10 has an invalid length. [ 498.686022][T20640] bond3 (unregistering): Released all slaves [ 498.900214][T20656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.906018][T20655] __nla_validate_parse: 14 callbacks suppressed [ 498.906035][T20655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4142'. [ 498.907512][T20656] IPv6: NLM_F_CREATE should be set when creating new route [ 499.047472][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4143'. [ 499.087585][T20662] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4145'. [ 499.345105][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4150'. [ 499.365909][T20673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4149'. [ 499.397783][T20678] netlink: 'syz.3.4150': attribute type 1 has an invalid length. [ 499.405867][T20678] netlink: 'syz.3.4150': attribute type 2 has an invalid length. [ 499.415108][T20677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4151'. [ 499.424997][T20678] netlink: 'syz.3.4150': attribute type 1 has an invalid length. [ 499.441041][T20677] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4151'. [ 499.462081][T20678] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.4150'. [ 499.475567][T20677] vlan0: entered allmulticast mode [ 499.834914][T20697] netlink: 'syz.2.4156': attribute type 4 has an invalid length. [ 499.849094][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4157'. [ 499.886023][T20701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4159'. [ 499.896486][T20703] netlink: 'syz.2.4156': attribute type 4 has an invalid length. [ 500.327613][T20724] netlink: 'syz.1.4165': attribute type 29 has an invalid length. [ 500.366613][T20724] netlink: 'syz.1.4165': attribute type 29 has an invalid length. [ 500.378500][T20724] netlink: 'syz.1.4165': attribute type 29 has an invalid length. [ 500.397751][T20724] netlink: 'syz.1.4165': attribute type 29 has an invalid length. [ 500.538752][T20737] wg1: entered promiscuous mode [ 500.942977][T20746] syzkaller0: entered promiscuous mode [ 500.953409][T20746] syzkaller0: entered allmulticast mode [ 501.017551][T20761] tipc: Enabled bearer , priority 0 [ 501.609721][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.618818][ T1304] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 502.152889][ T9] tipc: Node number set to 2986008822 [ 503.610824][T20753] syzkaller0: entered promiscuous mode [ 503.616744][T20753] syzkaller0: entered allmulticast mode [ 503.636109][T20761] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 503.693419][T20776] tipc: Resetting bearer [ 503.727311][T20752] tipc: Resetting bearer [ 503.791654][T20752] tipc: Disabling bearer [ 504.010792][T20797] __nla_validate_parse: 7 callbacks suppressed [ 504.010817][T20797] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4184'. [ 504.243371][T20814] netlink: 'syz.4.4190': attribute type 2 has an invalid length. [ 504.293295][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4190'. [ 504.341344][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4190'. [ 504.604344][T20835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 504.827787][T20842] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4199'. [ 504.837415][T20842] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4199'. [ 504.849108][T20842] netlink: 'syz.4.4199': attribute type 5 has an invalid length. [ 504.862564][T20842] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4199'. [ 504.878991][T20842] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4199'. [ 504.969900][T20847] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 505.075251][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 505.159072][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 505.170991][T20853] vlan0: entered allmulticast mode [ 505.176195][T20853] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 505.353836][T20866] openvswitch: netlink: IP tunnel TTL not specified. [ 505.729401][T20876] netlink: 'syz.2.4210': attribute type 1 has an invalid length. [ 505.737723][T20876] netlink: 'syz.2.4210': attribute type 1 has an invalid length. [ 505.746415][T20876] netlink: 'syz.2.4210': attribute type 2 has an invalid length. [ 505.832630][T20880] syzkaller1: entered allmulticast mode [ 506.027784][T20892] openvswitch: netlink: Tunnel attr 64 out of range max 16 [ 506.844447][T20937] vlan2: entered allmulticast mode [ 506.873259][T20937] veth0_to_bond: entered allmulticast mode [ 506.918108][T20948] sock: sock_set_timeout: `syz.1.4230' (pid 20948) tries to set negative timeout [ 507.160974][T20962] IPv4: Oversized IP packet from 127.202.26.0 [ 507.338751][T20972] netlink: 'syz.0.4236': attribute type 17 has an invalid length. [ 507.402515][T20972] gretap0: entered promiscuous mode [ 507.408979][T20972] gretap0: left promiscuous mode [ 507.455163][T20976] tipc: Enabling of bearer rejected, failed to enable media [ 507.762820][T20994] tc_dump_action: action bad kind [ 508.025898][T21005] tipc: Enabling of bearer rejected, failed to enable media [ 508.241723][T21016] netlink: 'syz.3.4251': attribute type 9 has an invalid length. [ 508.464215][T21022] netlink: 'syz.3.4253': attribute type 1 has an invalid length. [ 508.517379][T21022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.882783][T21044] tipc: New replicast peer: 255.255.255.255 [ 508.921158][T21044] tipc: Enabled bearer , priority 10 [ 509.227165][T21064] xt_limit: Overflow, try lower: 604147548/4200216962 [ 509.258655][T21063] netlink: 'syz.2.4267': attribute type 11 has an invalid length. [ 509.267286][T21064] lo: entered promiscuous mode [ 509.292072][T21064] tunl0: entered promiscuous mode [ 509.324139][T21064] gre0: entered promiscuous mode [ 509.384948][T21064] gretap0: entered promiscuous mode [ 509.385797][T21070] __nla_validate_parse: 12 callbacks suppressed [ 509.385814][T21070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 509.428538][T21064] erspan0: entered promiscuous mode [ 509.474227][T21064] ip_vti0: entered promiscuous mode [ 509.584828][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4266'. [ 509.676697][T21083] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4271'. [ 509.893056][T21090] bond0: entered promiscuous mode [ 509.899907][T21090] bond_slave_0: entered promiscuous mode [ 509.920460][T21090] bond_slave_1: entered promiscuous mode [ 509.928026][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4273'. [ 509.932325][T21090] batadv0: entered promiscuous mode [ 509.967804][T21090] debugfs: 'hsr1' already exists in 'hsr' [ 509.976008][T21090] Cannot create hsr debugfs directory [ 509.986638][T21101] delete_channel: no stack [ 509.995385][T21090] hsr1: entered allmulticast mode [ 510.002763][T21090] bond0: entered allmulticast mode [ 510.026388][T21090] bond_slave_0: entered allmulticast mode [ 510.033092][ T5913] tipc: Node number set to 1156472100 [ 510.039536][T21090] bond_slave_1: entered allmulticast mode [ 510.045440][T21090] batadv0: entered allmulticast mode [ 510.053583][T21090] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 510.064658][T21090] bond0: left promiscuous mode [ 510.070424][T21090] bond_slave_0: left promiscuous mode [ 510.076280][T21090] bond_slave_1: left promiscuous mode [ 510.083601][T21090] batadv0: left promiscuous mode [ 510.206239][T21106] xt_time: unknown flags 0xf4 [ 510.333525][T21117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.379964][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4281'. [ 510.434825][T21116] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4281'. [ 510.435572][T21124] pim6reg1: entered promiscuous mode [ 510.461133][T21124] pim6reg1: entered allmulticast mode [ 510.482204][T21125] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4281'. [ 510.500986][T21114] ve: renamed from ipvlan1 [ 510.557939][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4284'. [ 510.805834][T21135] dvmrp8: entered allmulticast mode [ 510.974845][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4289'. [ 511.024892][T21143] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 511.073677][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4291'. [ 511.084403][T21152] netlink: 'syz.1.4290': attribute type 10 has an invalid length. [ 511.093853][T21143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.155159][T21151] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 511.204031][T21152] team0: Port device geneve0 added [ 511.672221][T21170] netlink: 'syz.2.4298': attribute type 10 has an invalid length. [ 511.823540][T21181] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 511.850494][T21181] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 511.970359][T21191] netlink: 'syz.3.4302': attribute type 10 has an invalid length. [ 512.093958][T21191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 512.198632][T21197] netlink: 'syz.0.4306': attribute type 1 has an invalid length. [ 512.568734][T21215] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 512.588201][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 512.950167][T21233] wg1: entered promiscuous mode [ 512.963740][T21238] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 512.963877][T21233] wg1: entered allmulticast mode [ 513.049190][T21238] netlink: 'syz.3.4319': attribute type 3 has an invalid length. [ 513.059225][T21241] netlink: 'syz.1.4321': attribute type 3 has an invalid length. [ 513.092228][T21243] netlink: 'syz.4.4320': attribute type 4 has an invalid length. [ 513.415701][T21259] syzkaller1: entered promiscuous mode [ 513.428232][T21259] syzkaller1: entered allmulticast mode [ 513.524178][T21268] sctp: [Deprecated]: syz.2.4330 (pid 21268) Use of int in max_burst socket option deprecated. [ 513.524178][T21268] Use struct sctp_assoc_value instead [ 514.504833][T21312] __nla_validate_parse: 13 callbacks suppressed [ 514.504854][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4344'. [ 514.630417][T21320] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 514.768677][T21332] gre2: entered allmulticast mode [ 515.068646][T21341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4353'. [ 515.885843][T21383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4364'. [ 515.973920][T21392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4367'. [ 515.987000][T21392] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4367'. [ 515.998142][T21392] netlink: 'syz.1.4367': attribute type 5 has an invalid length. [ 516.043284][T21392] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4367'. [ 516.062561][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4364'. [ 516.223561][T21389] tipc: Enabled bearer , priority 0 [ 516.250660][T21394] syzkaller0: entered promiscuous mode [ 516.256192][T21394] syzkaller0: entered allmulticast mode [ 516.372447][T21389] tipc: Resetting bearer [ 516.403776][T21389] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 516.485732][T21420] netlink: 'syz.2.4373': attribute type 10 has an invalid length. [ 516.497466][T21420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4373'. [ 516.662505][T21388] tipc: Resetting bearer [ 516.692138][T21388] tipc: Disabling bearer [ 516.927118][T21442] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4379'. [ 517.041558][T21446] ieee802154 phy0 wpan0: encryption failed: -90 [ 517.629939][T21461] netlink: 'syz.0.4386': attribute type 2 has an invalid length. [ 517.746288][T21465] netlink: 'syz.0.4388': attribute type 4 has an invalid length. [ 518.004205][T21475] bridge8: entered promiscuous mode [ 518.012100][T21475] bridge8: entered allmulticast mode [ 518.185357][T21483] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 518.551661][T21498] openvswitch: netlink: IPv6 tunnel dst address is zero [ 518.745411][T21503] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 518.773727][T21506] netlink: 'syz.1.4403': attribute type 1 has an invalid length. [ 518.805693][T21507] netlink: 'syz.2.4405': attribute type 1 has an invalid length. [ 518.994232][T21512] bond3 (unregistering): Released all slaves [ 519.035950][T21514] ip6tnl2: entered promiscuous mode [ 519.041607][T21514] ip6tnl2: entered allmulticast mode [ 519.065777][T21522] syzkaller1: left promiscuous mode [ 519.094006][T21520] netlink: 'syz.3.4408': attribute type 5 has an invalid length. [ 519.101960][T21522] syzkaller1: left allmulticast mode [ 519.340738][T21531] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20004 [ 519.511062][T21543] __nla_validate_parse: 7 callbacks suppressed [ 519.511083][T21543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4416'. [ 519.548815][T21543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4416'. [ 519.751603][T21548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4417'. [ 519.777790][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 519.846170][T21548] team1: entered promiscuous mode [ 519.853751][T21548] team1: entered allmulticast mode [ 520.362980][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4427'. [ 520.414303][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4427'. [ 520.527416][T21595] Unsupported ieee802154 address type: 0 [ 520.559150][T21594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4430'. [ 520.680451][T21579] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 520.693303][T21595] netlink: 'syz.0.4428': attribute type 3 has an invalid length. [ 520.747257][T21595] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4428'. [ 520.771243][T21594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4430'. [ 520.955661][T21605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4432'. [ 520.987423][T21610] tipc: Enabled bearer , priority 12 [ 521.845171][T21614] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.590774][T21614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.624596][T21614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.081956][T21614] veth0_macvtap: left allmulticast mode [ 523.289365][ T1169] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.315927][ T1169] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.336090][ T1169] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.376331][ T1169] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.407634][ T1169] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.455766][ T1169] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.512702][ T1169] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.528230][ T1169] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.586892][T21639] lo speed is unknown, defaulting to 1000 [ 523.825485][T21668] netlink: 'syz.1.4444': attribute type 1 has an invalid length. [ 523.834096][T21668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.860656][T21673] netlink: 'syz.4.4446': attribute type 1 has an invalid length. [ 524.234518][T21689] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 4094 [ 524.326862][T21673] lo speed is unknown, defaulting to 1000 [ 527.195516][T21698] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 527.203500][T21698] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 527.669311][T21727] tipc: Enabled bearer , priority 0 [ 527.682228][T21729] openvswitch: netlink: Flow key attribute not present in set flow. [ 527.805093][T21727] syzkaller0: entered promiscuous mode [ 527.818629][T21727] syzkaller0: entered allmulticast mode [ 527.826511][T21727] tipc: Resetting bearer [ 527.833499][T21729] veth1_macvtap: left allmulticast mode [ 527.846617][T21729] veth1_macvtap: left promiscuous mode [ 527.862978][T21735] veth1_macvtap: entered promiscuous mode [ 527.868870][T21735] veth1_macvtap: entered allmulticast mode [ 527.876175][T21735] macsec0: left promiscuous mode [ 527.882836][T21735] macsec0: left allmulticast mode [ 527.888069][T21735] veth1_macvtap: left allmulticast mode [ 527.935096][T21726] tipc: Resetting bearer [ 530.282888][T21726] tipc: Disabling bearer [ 530.803070][T21771] __nla_validate_parse: 2 callbacks suppressed [ 530.803093][T21771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4473'. [ 530.819514][T21771] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4473'. [ 530.846384][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 530.858731][T21771] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4473'. [ 530.877794][T21771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4473'. [ 530.897305][T21771] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4473'. [ 530.917405][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 530.953485][T21780] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4477'. [ 530.959556][T21771] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4473'. [ 530.979948][T21771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4473'. [ 531.045987][T21771] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4473'. [ 531.101925][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.127841][T21771] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4473'. [ 531.128619][T21783] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 531.147706][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.165631][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.191053][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.208662][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.217970][T21783] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 531.234044][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.237135][T21783] gretap1: entered promiscuous mode [ 531.267086][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.273977][T21783] gretap1: entered allmulticast mode [ 531.307474][T21771] netlink: 'syz.2.4473': attribute type 5 has an invalid length. [ 531.563407][T21801] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.214197][T21839] sctp: [Deprecated]: syz.4.4498 (pid 21839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.214197][T21839] Use struct sctp_sack_info instead [ 532.238179][T21835] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.283430][T21842] bond4: (slave gretap1): making interface the new active one [ 532.294214][T21842] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 532.336607][T21840] : entered promiscuous mode [ 532.398471][T21844] bridge0: port 3(team0) entered blocking state [ 532.408338][T21844] bridge0: port 3(team0) entered disabled state [ 532.431890][T21844] team0: entered allmulticast mode [ 532.449894][T21844] team_slave_0: entered allmulticast mode [ 532.466191][T21844] team_slave_1: entered allmulticast mode [ 532.484870][T21844] team0: entered promiscuous mode [ 532.498968][T21844] team_slave_0: entered promiscuous mode [ 532.509301][T21844] team_slave_1: entered promiscuous mode [ 532.540815][T21844] bridge0: port 3(team0) entered blocking state [ 532.547289][T21844] bridge0: port 3(team0) entered forwarding state [ 533.057807][T21874] tipc: Enabling of bearer rejected, already enabled [ 533.078885][T21877] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.097937][T21879] macvtap1: entered allmulticast mode [ 533.121184][T21879] veth0_macvtap: entered allmulticast mode [ 533.651412][T21907] tipc: Enabled bearer , priority 0 [ 533.683365][T21907] syzkaller0: entered promiscuous mode [ 533.699237][T21907] syzkaller0: entered allmulticast mode [ 533.789183][T21907] tipc: Resetting bearer [ 533.884224][T21906] tipc: Resetting bearer [ 533.941758][T21906] tipc: Disabling bearer [ 534.304833][T21928] IPVS: length: 159 != 24 [ 534.396377][ T5183] Bluetooth: hci3: command 0x0406 tx timeout [ 534.703407][T21957] tipc: Enabled bearer , priority 0 [ 534.748490][T21957] ipvlan2: entered promiscuous mode [ 535.016158][T21978] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 535.127387][T21981] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 535.139075][T21981] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 535.167275][T21986] syzkaller1: entered promiscuous mode [ 535.189626][T21986] syzkaller1: entered allmulticast mode [ 535.222882][T21989] geneve2: entered promiscuous mode [ 535.228221][T21989] geneve2: entered allmulticast mode [ 535.240304][T19484] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 535.310213][T21993] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 535.346379][T21989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.360683][T21989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.386946][T11614] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 535.445996][T11614] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 535.655393][T21992] [ 535.657788][T21992] ====================================================== [ 535.664818][T21992] WARNING: possible circular locking dependency detected [ 535.671948][T21992] syzkaller #0 Not tainted [ 535.676361][T21992] ------------------------------------------------------ [ 535.683373][T21992] syz.4.4541/21992 is trying to acquire lock: [ 535.689781][T21992] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 535.699364][T21992] [ 535.699364][T21992] but task is already holding lock: [ 535.706729][T21992] ffff888024aa4558 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 535.717035][T21992] [ 535.717035][T21992] which lock already depends on the new lock. [ 535.717035][T21992] [ 535.727454][T21992] [ 535.727454][T21992] the existing dependency chain (in reverse order) is: [ 535.736673][T21992] [ 535.736673][T21992] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 535.745290][T21992] lock_acquire+0x120/0x360 [ 535.750334][T21992] blk_alloc_queue+0x538/0x620 [ 535.755622][T21992] __blk_mq_alloc_disk+0x15c/0x340 [ 535.761249][T21992] nbd_dev_add+0x46c/0xae0 [ 535.766190][T21992] nbd_init+0x168/0x1f0 [ 535.770893][T21992] do_one_initcall+0x233/0x820 [ 535.776180][T21992] do_initcall_level+0x104/0x190 [ 535.781638][T21992] do_initcalls+0x59/0xa0 [ 535.786491][T21992] kernel_init_freeable+0x334/0x4b0 [ 535.792305][T21992] kernel_init+0x1d/0x1d0 [ 535.797154][T21992] ret_from_fork+0x3fc/0x770 [ 535.802265][T21992] ret_from_fork_asm+0x1a/0x30 [ 535.807590][T21992] [ 535.807590][T21992] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 535.814801][T21992] lock_acquire+0x120/0x360 [ 535.819840][T21992] fs_reclaim_acquire+0x72/0x100 [ 535.825341][T21992] prepare_alloc_pages+0x153/0x610 [ 535.831170][T21992] __alloc_frozen_pages_noprof+0x123/0x370 [ 535.837507][T21992] __alloc_pages_noprof+0xa/0x30 [ 535.843228][T21992] pcpu_populate_chunk+0x182/0xb30 [ 535.848864][T21992] pcpu_alloc_noprof+0xcbf/0x16b0 [ 535.854415][T21992] bpf_map_alloc_percpu+0xbc/0x1b0 [ 535.860057][T21992] prealloc_init+0x225/0x630 [ 535.865173][T21992] htab_map_alloc+0x6ce/0xc70 [ 535.870372][T21992] map_create+0xaa0/0x14d0 [ 535.875314][T21992] __sys_bpf+0x60f/0x870 [ 535.880076][T21992] __x64_sys_bpf+0x7c/0x90 [ 535.885018][T21992] do_syscall_64+0xfa/0x3b0 [ 535.890039][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.896455][T21992] [ 535.896455][T21992] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 535.904185][T21992] validate_chain+0xb9b/0x2140 [ 535.909920][T21992] __lock_acquire+0xab9/0xd20 [ 535.915147][T21992] lock_acquire+0x120/0x360 [ 535.920194][T21992] __mutex_lock+0x187/0x1350 [ 535.925312][T21992] pcpu_alloc_noprof+0x286/0x16b0 [ 535.930871][T21992] sbitmap_init_node+0x1e1/0x630 [ 535.936325][T21992] sbitmap_queue_init_node+0x3e/0x4d0 [ 535.942215][T21992] blk_mq_init_tags+0x110/0x280 [ 535.947586][T21992] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 535.953569][T21992] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 535.959891][T21992] nbd_start_device+0x17f/0xb10 [ 535.965269][T21992] nbd_genl_connect+0x135b/0x18f0 [ 535.970814][T21992] genl_family_rcv_msg_doit+0x212/0x300 [ 535.976887][T21992] genl_rcv_msg+0x60e/0x790 [ 535.981913][T21992] netlink_rcv_skb+0x208/0x470 [ 535.987201][T21992] genl_rcv+0x28/0x40 [ 535.991708][T21992] netlink_unicast+0x82c/0x9e0 [ 535.997000][T21992] netlink_sendmsg+0x805/0xb30 [ 536.002285][T21992] __sock_sendmsg+0x219/0x270 [ 536.007492][T21992] ____sys_sendmsg+0x505/0x830 [ 536.012788][T21992] ___sys_sendmsg+0x21f/0x2a0 [ 536.018072][T21992] __x64_sys_sendmsg+0x19b/0x260 [ 536.023530][T21992] do_syscall_64+0xfa/0x3b0 [ 536.028553][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.034963][T21992] [ 536.034963][T21992] other info that might help us debug this: [ 536.034963][T21992] [ 536.045191][T21992] Chain exists of: [ 536.045191][T21992] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#51 [ 536.045191][T21992] [ 536.058852][T21992] Possible unsafe locking scenario: [ 536.058852][T21992] [ 536.066302][T21992] CPU0 CPU1 [ 536.071668][T21992] ---- ---- [ 536.077029][T21992] lock(&q->q_usage_counter(io)#51); [ 536.082497][T21992] lock(fs_reclaim); [ 536.089014][T21992] lock(&q->q_usage_counter(io)#51); [ 536.097007][T21992] lock(pcpu_alloc_mutex); [ 536.101771][T21992] [ 536.101771][T21992] *** DEADLOCK *** [ 536.101771][T21992] [ 536.109913][T21992] 6 locks held by syz.4.4541/21992: [ 536.115118][T21992] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 536.123310][T21992] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 536.132282][T21992] #2: ffff8880250c7188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 536.143680][T21992] #3: ffff8880250c70d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 536.154639][T21992] #4: ffff888024aa4558 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 536.165351][T21992] #5: ffff888024aa4590 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 536.176328][T21992] [ 536.176328][T21992] stack backtrace: [ 536.182214][T21992] CPU: 0 UID: 0 PID: 21992 Comm: syz.4.4541 Not tainted syzkaller #0 PREEMPT(full) [ 536.182233][T21992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.182242][T21992] Call Trace: [ 536.182249][T21992] [ 536.182256][T21992] dump_stack_lvl+0x189/0x250 [ 536.182275][T21992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.182291][T21992] ? __pfx__printk+0x10/0x10 [ 536.182311][T21992] ? print_lock_name+0xde/0x100 [ 536.182330][T21992] print_circular_bug+0x2ee/0x310 [ 536.182347][T21992] check_noncircular+0x134/0x160 [ 536.182366][T21992] validate_chain+0xb9b/0x2140 [ 536.182387][T21992] __lock_acquire+0xab9/0xd20 [ 536.182409][T21992] ? pcpu_alloc_noprof+0x286/0x16b0 [ 536.182429][T21992] lock_acquire+0x120/0x360 [ 536.182447][T21992] ? pcpu_alloc_noprof+0x286/0x16b0 [ 536.182471][T21992] __mutex_lock+0x187/0x1350 [ 536.182484][T21992] ? pcpu_alloc_noprof+0x286/0x16b0 [ 536.182505][T21992] ? kasan_save_track+0x4f/0x80 [ 536.182522][T21992] ? kasan_save_track+0x3e/0x80 [ 536.182536][T21992] ? __kasan_kmalloc+0x93/0xb0 [ 536.182553][T21992] ? blk_mq_init_tags+0x85/0x280 [ 536.182569][T21992] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 536.182588][T21992] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 536.182601][T21992] ? pcpu_alloc_noprof+0x286/0x16b0 [ 536.182620][T21992] ? nbd_genl_connect+0x135b/0x18f0 [ 536.182638][T21992] ? genl_family_rcv_msg_doit+0x212/0x300 [ 536.182655][T21992] ? genl_rcv_msg+0x60e/0x790 [ 536.182670][T21992] ? __pfx___mutex_lock+0x10/0x10 [ 536.182682][T21992] ? ____sys_sendmsg+0x505/0x830 [ 536.182697][T21992] ? do_syscall_64+0xfa/0x3b0 [ 536.182710][T21992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.182729][T21992] pcpu_alloc_noprof+0x286/0x16b0 [ 536.182754][T21992] sbitmap_init_node+0x1e1/0x630 [ 536.182768][T21992] ? __kasan_kmalloc+0x93/0xb0 [ 536.182787][T21992] sbitmap_queue_init_node+0x3e/0x4d0 [ 536.182802][T21992] blk_mq_init_tags+0x110/0x280 [ 536.182819][T21992] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 536.182842][T21992] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 536.182862][T21992] ? kfree+0x18e/0x440 [ 536.182880][T21992] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 536.182900][T21992] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 536.182921][T21992] ? sysfs_add_file_mode_ns+0x259/0x300 [ 536.182945][T21992] nbd_start_device+0x17f/0xb10 [ 536.182967][T21992] ? device_create_file+0xf4/0x1c0 [ 536.182981][T21992] nbd_genl_connect+0x135b/0x18f0 [ 536.183004][T21992] ? __pfx_nbd_genl_connect+0x10/0x10 [ 536.183027][T21992] ? __nla_parse+0x40/0x60 [ 536.183048][T21992] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 536.183068][T21992] genl_family_rcv_msg_doit+0x212/0x300 [ 536.183087][T21992] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 536.183109][T21992] ? stack_trace_save+0x9c/0xe0 [ 536.183127][T21992] genl_rcv_msg+0x60e/0x790 [ 536.183145][T21992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.183160][T21992] ? __pfx_nbd_genl_connect+0x10/0x10 [ 536.183184][T21992] netlink_rcv_skb+0x208/0x470 [ 536.183203][T21992] ? __lock_acquire+0xab9/0xd20 [ 536.183222][T21992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 536.183239][T21992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.183264][T21992] ? down_read+0x1ad/0x2e0 [ 536.183278][T21992] genl_rcv+0x28/0x40 [ 536.183293][T21992] netlink_unicast+0x82c/0x9e0 [ 536.183314][T21992] ? __pfx_netlink_unicast+0x10/0x10 [ 536.183332][T21992] ? netlink_sendmsg+0x642/0xb30 [ 536.183344][T21992] ? skb_put+0x11b/0x210 [ 536.183359][T21992] netlink_sendmsg+0x805/0xb30 [ 536.183374][T21992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.183387][T21992] ? aa_sock_msg_perm+0xf1/0x1d0 [ 536.183400][T21992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.183416][T21992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.183429][T21992] __sock_sendmsg+0x219/0x270 [ 536.183448][T21992] ____sys_sendmsg+0x505/0x830 [ 536.183465][T21992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.183482][T21992] ? import_iovec+0x74/0xa0 [ 536.183499][T21992] ___sys_sendmsg+0x21f/0x2a0 [ 536.183514][T21992] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.183540][T21992] ? __fget_files+0x2a/0x420 [ 536.183552][T21992] ? __fget_files+0x3a0/0x420 [ 536.183567][T21992] __x64_sys_sendmsg+0x19b/0x260 [ 536.183582][T21992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.183601][T21992] ? rcu_is_watching+0x15/0xb0 [ 536.183617][T21992] ? do_syscall_64+0xbe/0x3b0 [ 536.183630][T21992] do_syscall_64+0xfa/0x3b0 [ 536.183642][T21992] ? lockdep_hardirqs_on+0x9c/0x150 [ 536.183661][T21992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.183674][T21992] ? clear_bhb_loop+0x60/0xb0 [ 536.183690][T21992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.183703][T21992] RIP: 0033:0x7fb8d1f8eba9 [ 536.183717][T21992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.183730][T21992] RSP: 002b:00007fb8d2e53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.183745][T21992] RAX: ffffffffffffffda RBX: 00007fb8d21d6090 RCX: 00007fb8d1f8eba9 [ 536.183756][T21992] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 536.183766][T21992] RBP: 00007fb8d2011e19 R08: 0000000000000000 R09: 0000000000000000 [ 536.183775][T21992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.183784][T21992] R13: 00007fb8d21d6128 R14: 00007fb8d21d6090 R15: 00007ffee9fa4148 [ 536.183799][T21992] [ 536.703175][ T5921] tipc: Node number set to 3109183044 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 536.723294][ T5865] block nbd2: Receive control failed (result -32) [ 536.730915][ T5183] block nbd2: Receive control failed (result -32) [ 536.759951][T21992] nbd2: detected capacity change from 0 to 127 [ 536.776096][T21746] block nbd2: Dead connection, failed to find a fallback [ 536.784201][T21746] block nbd2: shutting down sockets [ 536.795837][T21746] blk_print_req_error: 138 callbacks suppressed [ 536.795856][T21746] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.819716][T21746] buffer_io_error: 138 callbacks suppressed [ 536.819736][T21746] Buffer I/O error on dev nbd2, logical block 0, async page read [ 536.838194][T21746] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.852466][T21746] Buffer I/O error on dev nbd2, logical block 1, async page read [ 536.860714][T21746] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.872339][T21746] Buffer I/O error on dev nbd2, logical block 2, async page read [ 536.880988][T21746] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.013980][T21746] Buffer I/O error on dev nbd2, logical block 3, async page read [ 537.022000][T21746] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.031315][T21746] Buffer I/O error on dev nbd2, logical block 0, async page read [ 537.040103][T21746] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.049252][T21746] Buffer I/O error on dev nbd2, logical block 1, async page read [ 537.057188][T21746] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.066270][T21746] Buffer I/O error on dev nbd2, logical block 2, async page read [ 537.074466][T21746] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.087122][T21746] Buffer I/O error on dev nbd2, logical block 3, async page read [ 537.095520][T21746] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.104835][T21746] Buffer I/O error on dev nbd2, logical block 0, async page read [ 537.112758][T21746] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.121947][T21746] Buffer I/O error on dev nbd2, logical block 1, async page read [ 537.132311][T21746] ldm_validate_partition_table(): Disk read failed. [ 537.140981][T21746] Dev nbd2: unable to read RDB block 0 [ 537.148073][T21746] nbd2: unable to read partition table [ 537.158764][T21746] ldm_validate_partition_table(): Disk read failed. [ 537.210519][T21746] Dev nbd2: unable to read RDB block 0 [ 537.217477][T21746] nbd2: unable to read partition table [ 537.232301][T21989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.293077][T21989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.310208][T21989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 537.590941][T21989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.605814][T21989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.618381][T21989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 537.687604][T21989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.698366][T21989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.708726][T21989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 537.778711][ T1169] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.787404][ T1169] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.795930][ T1169] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 537.809221][T19770] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.817860][T19770] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.826297][T19770] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 537.838354][T19770] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.847041][T19770] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.855772][T19770] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 537.867667][ T1169] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.876581][ T1169] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 537.885082][ T1169] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 538.005224][T19770] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.015682][T19770] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 538.026787][T19770] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 538.063117][T19770] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.074259][T19770] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 538.085639][T19770] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 538.143613][T19770] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.153460][T19770] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 538.164112][T19770] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 538.211623][T19770] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.221824][T19770] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 538.232538][T19770] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 541.673736][T19770] bridge0: port 3(macsec0) entered disabled state [ 541.687385][T19770] bridge_slave_1: left allmulticast mode [ 541.694146][T19770] bridge_slave_1: left promiscuous mode [ 541.699988][T19770] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.708249][T19770] bridge_slave_0: left allmulticast mode [ 541.714304][T19770] bridge_slave_0: left promiscuous mode [ 541.720667][T19770] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.768408][T19770] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 541.873998][T19770] team0: Port device geneve0 removed [ 541.992875][T19770] bond3 (unregistering): (slave bridge2): Releasing active interface [ 542.325121][T19770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.335353][T19770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.346648][T19770] bond0 (unregistering): Released all slaves [ 542.355710][T19770] bond1 (unregistering): Released all slaves [ 542.365341][T19770] bond2 (unregistering): Released all slaves [ 542.376708][T19770] bond3 (unregistering): Released all slaves [ 542.385610][T19770] bond4 (unregistering): Released all slaves [ 542.509361][T19770] bond5 (unregistering): Released all slaves [ 542.518397][T19770] bond6 (unregistering): Released all slaves [ 542.527307][T19770] bond7 (unregistering): Released all slaves [ 544.001926][T19770] tipc: Disabling bearer [ 544.007363][T19770] tipc: Left network mode [ 544.060851][T19770] batman_adv: batadv0: Removing interface: wlan1 [ 544.242530][T19770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.254939][T19770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.273559][T19770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.281086][T19770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.291564][T19770] veth1_macvtap: left allmulticast mode [ 544.297203][T19770] veth1_macvtap: left promiscuous mode [ 544.303304][T19770] veth1_vlan: left promiscuous mode [ 544.308565][T19770] veth0_vlan: left promiscuous mode [ 544.344868][T19770] pimreg (unregistering): left allmulticast mode [ 544.441669][T19770] team0 (unregistering): Port device team_slave_1 removed [ 544.473820][T19770] team0 (unregistering): Port device team_slave_0 removed [ 544.745599][T19770] IPVS: stop unused estimator thread 0...