last executing test programs: 10.161095099s ago: executing program 1 (id=5994): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xc, 0x80000000, 0x4, 0x200, 0x6451, 0x5, 0xfffffffe, 0xaf4, 0x6, 0x4, 0x4, 0x7fffffff, 0x10, 0x9, 0xff, 0x2, 0x1f70d1cf, 0x9, 0x5, 0xcbf, 0x9, 0x1, 0xfffffff9, 0x3, 0x1, 0xffffffb6, 0x0, 0x6, 0x2, 0x30e, 0x5, 0x6, 0x1, 0xc, 0x0, 0x400, 0x2, 0xf, 0x5, 0x1ff, 0x1, 0x8001, 0x0, 0x9, 0x4, 0x9cbb, 0x9, 0x0, 0x5, 0x401, 0x9, 0x8, 0x157, 0x6, 0x2, 0x1000, 0x5, 0x2, 0x7, 0xfffffffe, 0x1, 0x3ff80, 0xe3, 0x3ff, 0x5, 0x5, 0xfffffff8, 0x4, 0x8, 0x4, 0x4, 0x6, 0x6, 0x1, 0x7f, 0xdd, 0xce2a, 0x1, 0x80000001, 0xf, 0xc, 0x8, 0x4, 0xffffff7f, 0x0, 0xb, 0x6, 0x3, 0x3, 0x2, 0x7, 0x1d50, 0x800, 0x6, 0x5, 0x8, 0xb8, 0x80000001, 0xd, 0x8, 0x9, 0xfffffffb, 0x2, 0x4550, 0xfffffffe, 0xc01c, 0x9, 0x3, 0x10, 0x2, 0x5, 0x8, 0x3, 0xffff, 0x4cd, 0x400, 0xfffffffe, 0x100, 0x100, 0x1, 0x6, 0x4, 0x9, 0x4, 0x9, 0x53ed, 0x0, 0x1c05, 0x1, 0x9de, 0xf, 0xffffffff, 0x0, 0x9, 0x8, 0x8, 0x5, 0x1000, 0x4, 0xa, 0x8, 0x9, 0x0, 0x4, 0x2, 0x9be, 0x7fffffff, 0x7, 0x7fffffff, 0x4, 0x5, 0x90db, 0x0, 0x4, 0x3, 0x1, 0xfffff2d2, 0x5, 0x1, 0x6, 0x7, 0x6, 0x7fffffff, 0x1, 0xb, 0x0, 0xfffffffb, 0x2, 0x454, 0x6, 0x0, 0x4, 0x400, 0x9, 0x3, 0xc300000, 0xe, 0x2, 0x3, 0x4b6, 0xffffffff, 0xfffffff7, 0x6, 0x8, 0x4, 0xffff, 0x0, 0x7, 0xff, 0x8000, 0x2, 0x800, 0x7, 0x1000, 0xfffffffc, 0x6, 0x4, 0x2, 0x1, 0x5, 0x7fff, 0x5, 0xff, 0x7, 0x2, 0x6, 0x1, 0x1, 0x3, 0xcbe5, 0xe677, 0x2, 0xf, 0x5, 0x0, 0x7, 0xf, 0x1, 0x6, 0x9, 0xd, 0x5, 0xd, 0x9, 0x17c78185, 0xfffffffe, 0x5f78, 0xedc8, 0x5, 0x8, 0x800, 0x2, 0x3, 0xdc4c, 0x4, 0x400, 0x3, 0x81, 0xa, 0xa7a, 0x4, 0x4, 0x1, 0x5, 0x40, 0x100, 0x3, 0x0, 0x4, 0x2, 0xa4, 0x800, 0xceb0, 0x6, 0x1, 0x1]}]}}]}, 0x434}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 9.867603421s ago: executing program 1 (id=5998): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'batadv_slave_1\x00', 0x400}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x4000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r2, 0x6, 0x5, 0x5}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.747246369s ago: executing program 1 (id=6001): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) accept$ax25(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x5, 0x142, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x20040000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) 9.590383482s ago: executing program 1 (id=6004): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00000004c0)=""/192, &(0x7f0000000100)=0xc0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x80) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}, 0x4) 9.383418396s ago: executing program 1 (id=6007): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000900)={@local, @empty, 0x10, 0xd}}) 9.314096993s ago: executing program 1 (id=6008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) getpeername(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x29, 0x7, 0x5, {0x10, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, 0x4e23, 0x4e23, 0xb}, {0x0, @random="11e508bee0e3", 0x9, 0x8, [0x4, 0xffffff90]}, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x100, 0x14, 0x1, 0x9}, {0x0, @random="204a59a02eaa", 0x6, 0x8, [0x4, 0x7ff]}, 0xfffffffffffffffc, 0x2}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4564591573af6ff0000000071101e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900c13832c99c7ef1bf00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf43951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc0f00d6e4edef3d93452a", 0xd8}], 0x1}, 0x800) 4.144154952s ago: executing program 3 (id=6052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) (async) 4.005300307s ago: executing program 3 (id=6054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015000000000041fff89f5d1bd85882fec8d40d000300686173683a6d61ff00000000"], 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0xa000}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) 2.528616367s ago: executing program 3 (id=6060): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r1, r2, 0x2, 0x100000000000003) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000180)=0x101, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0xb, 0xb, 0xfffffffe}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.419210947s ago: executing program 2 (id=6063): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1e27d6de6e323b4e, {0x2, 0x4, 0x4}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) 2.313560096s ago: executing program 3 (id=6064): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000000822ff00212a6b7a2f45b1f5a95599598d41a7cd5d8ba4546c7693fa7bb5dd7b8ab8d1e630d4b493b68227f46cd982a26328bf3126c8262e0c2d0c98915c03969a70d5996c9cb2c5040ade80f887b8d22af6297fb2bb2052a9d1edb635cbab35df0932d54fec22f9c66c448438793f414922733b8fc7de5e5aeb312a", @ANYRES32=r2, @ANYBLOB="0c009900000000002b00000008002600c81400000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) 2.13589184s ago: executing program 2 (id=6065): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r1, 0x0, 0x0, 0x12022, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2d, 0x25dfdbfc, {0xa, 0x10, 0x10, 0xb, 0x40, 0x0, 0x0, 0x9, 0x8}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x4000051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.997219445s ago: executing program 3 (id=6067): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) 1.811540051s ago: executing program 4 (id=6069): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32], 0x50) r3 = socket(0x1e, 0x1, 0x92f) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r1, &(0x7f0000000180)='nl80211\x00', 0x80, &(0x7f0000000200)={@_ha_fsid={[0x9, 0x4]}, {0x5c5, 0x2, 0x1, 0x3e}}, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x8}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="53fb7bdc0f56297e8d81469a615db4192f58aa8c358d9957d4f84ba90ec0a5bfe9ec59611f6a064f", 0x28}], 0x1, 0x0, 0x24c0}}], 0x1, 0x60040d1) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4c, 0x49}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004040}, 0x20004810) 1.606327671s ago: executing program 3 (id=6071): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2788a24c6588a81e0ee27b4483", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2788a24c6588a81e0ee27b4483", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 1.460080704s ago: executing program 4 (id=6073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x562, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.327689126s ago: executing program 4 (id=6075): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x45}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8aac}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x8e, 0xac, "ef274e5572fccfcde883c5e5851784971602a9c35cc39da39f13ed62e6b60b1ce964fce08c71cc4cdecc340eb45c6fb04b1466cdab879902fc8587fa3c41f46a7563495c02b64605ed3b5c8973bdac615266091082f33a831648ca0f89860166746ace9c550ff2d2ca98f286ee170b8e4781d7cc5403e43e2865f30fe2a97738ff604fd06f3fca825041"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = accept(r0, 0x0, &(0x7f0000000240)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1411, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0xc1) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000003c0)={0x7, 0x18, '\x00', 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) r4 = accept4$unix(r3, 0x0, &(0x7f0000000400), 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000480)={0x108c, 0x12, 0x300, 0x70bd2a, 0x25dfdbfb, {0x1e}, [@generic="14f28292b734ff3467bd17c4da7c6fc1e1b688a67d974008e285e0b109c36a8a30fdf9649359bcdcbe2e14bb63ab168f164611b3155c7e2ed050882e29d55dc5fcedfe4ddf542a7a553a0f1f84c6d3df2e686ce7781fa60ae59bac78d296fc580206b447eb04f94b9e939cef9e62935fe4358fdfd4c6f3be9b2e7dd60f49e1600f972f85402777aa00b66f29d807f65cea115629c2dc7b19cf752bb5e263054309f7c1b8030c3954caea23d9b1453d5a98e3807f36ff057ffdec95d07cfe8d4f5188bc6366d64a96f3f7e1743248445aeb5ef6d80c3b4ef45509313cad4cee29c3b583b9dde75ce0ff1f329bbb40807a6de7767c5cb1e4ee7901bf34e720a48e5e5efcd7da473b2f83bc9e61ee625a79b96007e95f62bc983664439ebf16be642b5619d1027f4e860ed0c03d3b7c8116ec82640374164cf75fd576dfcaed3218f58ab1df506b6b71009be87bb517ec6953436fd61a34580fb97d9f022e666f4a182ec9bbb8e85f708c35dcb12e159b33a0d3e534268925c1f54d4eb97533efe4a08016090f169dde0248dfcf8e4c5353d9d1f38697850ea48d66d46fa8f3e5e0949f3f9e63527f1e3fa6487dd036244fe437e668006d0e1f45d9d8f6bd621d0f14ff1d025f58b09770d84908cd5c3cc696e97a155f1b3dbfb1e78b660ffeac4e7cd42271cd10f3fff23a0eebef099c1dea4e48e4711bed04ae2ff2ebfaa2f8acc44ed3903415d0470ca46c4194c3261b3dca2112ea7c542b3a9a13c502fcf01a18274b83391ab18a6c098bd666454f83c197de8e3014b18536e4a67ca630525389be1ab923c5ecaea3a65bb0cc4d2ea7b0d0846ba9b3a249442d7a9679bf20015cd6d6260b1968c0ccd042797f9e285100a0d44653f9f042f66de7e67598a0cc319938798de266e4ef0908b2658cc3052ab1342b668e446d2f8b7708a4eb114f41d81ed3dac10063df9c8658367bd214490087b7be0a5c64b9ec1f1a14cd8e2655997fd16dfab9acb3e1c8775851c20244a3def1c853174bc6eeae5951aebc4b5dc56fbb3dd6c53e752110636e065b975fd2fee44e4829c2751eeff04ef44ca514ab074bf1ab6fb7eed208a43137fd908f45ce0a903994cd34a275e93f211278a4f92d88e9341348221b0f450e4756dc790f0058be880f07939e453922556e12394551bc768cf5b1a5697f61bd26aac03bff3b776a07b366af62da43d071dc8c05ada75fb3e4e22506e28f68f9d439da6163c03589c7b29f240f6f01903d0253a71971d7c6a17fff12b6aa2263f6ae8c4e959cac8fdadac6b966e8d29f98a5b890db908596d100450817062c2090546593b0ae380733d0bae17e9eb5bfa5c5ea4212bc3f9f1d7be89a969e4e30b0002efa3bcda55a92bcaffa019b3eab483562835aadee0865321993a5bd3da6a402961c514c06414b7b52a54a91b95754e6ef379e716236cd676969bd9cc027724330ddfa1308b9ffcab590c7c9c5074e471190ac472e6341d105a67eaa42467ce8a9611e0f8ca427f4c42fae811f44bb95d2b09b80cd68b1870241a1893542be7258618229c2d76390a3e098557a04b5d26f0f0e90708c3a4fc00a1ca46f06f68c1a5727c091db080f1cc019a89164eaee5201ade6f9503a511ea8b0e5d546dfc1c4eb86a8a2ec7827b6e3b8335052b549384b694ec0717c887d6c1516b520ce3f558815473a38381b447383ae80ec4091b03c69d6b95270f39d8a23f81e53e7f6c68b17580f38905f7156817c13e6d07c32c832b45b88c177abb902b401cb6e4d5f13b786137d4cd361a40bae6128b7f4436e3b2527c842ae5bee2ba3c7342a682fefbe562f6c9331205589d8b08db69999c95ccc810272ac7e96593f2216ca518bb56e9d10817a8c98f355d7fcf103c7466fd1da4c6369656ae64012f0259f52f4a5af80ce159273fc203192d7298f64870368ce1a6e471a7f76e83c86b2024661b5dd1921aa210884628005e390196e311385b0a9c6ee513237cf5fb7d8bac667610105a4815f42e5bdeee9082bb5f2fa093c421e2fe129cc1f631af076fd76853887e0b9c825e238e04758e726fc5a45033074fb1f1a5e212702eba854251af313fc9f5f81040f18adfa24895b563b9ee0fcee1fb0b890722800a3df09955dcbc865df433662873012a2d453997027de3ba43c1de57d92db78ab37cef27d1d87f41d742d5a99fc90da8de0626dfa14aa42acfef64de77bcbb7f3d708618ee493d597012713be21a77f3297ea6a4c2cd4e6635da676b393203db0927da1f399e497bcd71b98dfbc0bb477f969440b8e89931611b79c7cfcddbabcf1b94a6dbf41821770871a38fcab473fae44d5f914d60efc0c7c627b27ae020dc24c5f79c3d050231254d1bab381e0b9eea3736e8d7702e2cf6e560961848746232cc79d0d537c32fe1982c085096474dd1fa5496d8593c9f76df318e6ed5484b65fddb316b16cc3c150032f371f3bd094509242771ca0faf6ef9ad323b7c892d06a681c1a2624889fdb97d76f742a5b51f69553cea834162651c0bedff4452858f521d9c5aff382de755600c2055e272b230f842e5af1cad7c69d4d3687b3d2ab344a63c09fc19bbb3686ac59d14d3407bed9ddc0adc689f389e88a6adba934336258b8ac408b6d76daf34914382beb12bb359537081fbde3a05d473aaa37583e2e93ac3b7e48e9467e4acd9d5166926d7f6fe307899d4e9973fac7b693048661c50e2685c945ac0d8df6ef141b03d909b34f27bf33a12a7075bd372499c1f2a91443c562332783b1e401ca0682b51a1e4dbb2b2511bc4b4d6c609d3ffbf2a1fb9021ebab2262aceaa18ffc9c486d5a6847784ce42a361c6d883e55616eee9a886c0b59a9d91ea69f774eddb9e0a5b29bfb205b17236367a7cebcc0a48ed7454bc8f40bd8063015d0ee76a3f7c03b9e0f7ff17c1ec8e0687dfe90b522ea074acf7f492a774257902a59caac66e381d85b078a8602a09cb0ba6cef161f81d2f114115336a88812a5cd29ec6fbb7c7d7e88cdd27f96e7e5c88a5b5885258de362ba0439531d2b2594ea3d395ad7143817bbab29a8567e2a46df9466c69955453e9bce0d5476dc219f75ac311c6e36c59b70cb113bfb6b2ca25283418a0f51cc9657aaa7e90c57ef794608547942d910bb5ced1fd14ff649383a4d61fda7c03fa7d468ba7b6ca7292cd267a55d48863aa1e5d18a35c1b91f6f294d1db7aa9e5630a6c8c03c1d354e49713e42f1d64228dd3efbdb99d1acbbed15f581b0614127c9df62982dae94556181298e41ca0903b564f11261906ccf2783c4075c904b44f2fded32082e8b8ca1b8812dc7d45dba9b9b62c1c147173c4d7fc52ced642e765142c424a4ac27293b8b51445e8b49dd24e8a96421dfdd9f38f68de8cb6301a5d573aaa7982f8a6ac43de15c1a8a84b40e85ca8867ad0ef6fd5a878b70e18ae7e44c060fe9481819e67d6641bf97e7894cfc74acce013d6614285d379cf7186af9fec984be7b86d8a37d45cc56c33a3dde518c40dff12c14d319a3508f2479324fe9f09a5b5098df90b7841aff4f0e53ac26444cc2050af5c2a0cc2f5cf04c0c9c67f3f70fff07652cfc203c31d2ae785fe4f6ef8070be5fbebe2e75678a9834d1f181c13dccf82f6cd216c08732165b45169b8dbe3f6adfa3cee2c6ce3cbdabff4586dcbd84f319bac912c0a3a5fea6ac39763a173365a7f92af6d68e36c3f84208a6bc6a9a65bddcc4cea2e6ce0ae1114c631f3bc70f8ed0094812e9ed628f28eddcb53d280ff270276d30df8c9fa0b5546426c5610ff2e8c2cd967f0592ce838ecff4ffa9049f21562534f154626243ebd68c118ae4c8d3536c7d60416ad89d5d50ab545714e2333e15cdf3187496f3c7d1491aa5614f63ffd6caf1e3a79df8e38ae05d0b17c0fe1052fe27a35d91edfb1298f0d97bdebf241d4ab454944cef7b3498c39f26a96b6fd1e99d93b5e87d68792ef27b2caab7af3eaa4c839e44cf0a8cdffbd75f38a6c713a8b8419b5391bf11531134153169b93414674872bd2faed117f9656997b20a743f0f54775f90d0cfbc9e76a3624207e6c96b42fb2e4d74fab2574c81ae18386de8add05ea0373de33f8d165653d2d1457e0327f5d3c174e591ced01d7110fa9889ddf2f117f41aff3e46aaf73776342ecac12bd0919da2876d5550eeb1ab69ef956addbf2e6ae64f903b17e6521ee682139820cab3a5080f7a3839b420542598cb08aa1e8fc047c2718b32f74dd8c126e130f5be49099d6e6a79a50f268d445cf1557598b623c26bf28d6c02141b869cc3dfb28a42ddf30afce009f2625b2666dde29bdee1496427029a00053bd2c8a76ee0b5feafe647ec37aa7953cf27fc7b946e86c17c955c4a6bd127ec33514a18a2cd3273ea3d81596da4a913a6e8edd43463769c1ee473fa931c045b2c377e3ad12f5b6113c684c8dfbba5dbcf5f6344189c19ba5b1344647a2315ac406d47aed47345053092b8fe210b8646c226e991cdb11a833ae95c01a3d039afc040f2c166c69b9df05d7bf6bcc23ac4b10088f4d16fbfd27ccb13dc9ea0baf8e7dba2407ecb2ed5023610a2ba2ba1d5c217ed8869e1a302dc0009284b4248c7842a9c3881b96a39477c9cfd009a9b25677446f2066dd095739e6ec334cb8997f7e85bdbdbf6e8441c44f2b66b9b920b236a41ba8e174115cd2db47f1c87c5d2c6b6c8a3c61e4d747c3e990f7c5aafe23979e7959b87554cf176b89106dc0cc9b7cffdc76d781524b960203ca877e8e8eb44a4483f462bc461e650194a461f87d3cb06388988f8c38b9a180cbd3243adc69c0967d864e543df7b40b3bb5ae84f937e9d0d909c3a5d8a669f235f52834e520780f066160e9996f0a30c0f5521b8af7c5afdf91523d8b2e9bb73fb093ad061cbb531d0bb3dfa2ec02d379532659d07b9e75260146bee1ff0c6c633eb21691120488aed4f29ce0c3f1a5030d181f4a8945c6c8c90d677c350e59af61b5fbad77fc2251574aa822d617cdb44aa91d29b9ba210b3313d61331625db1985b93a4361d8f046b8b516ae029383f28382e42a0aed5453afe2f5bbd53d2eb8553be526eb4e94ac703cdc34c4010b9baf51fcbbfba0c8c690459f558ee5220aabec3256fc2bee1de210cb477bcc12ca147afc0371e06827f2d16da254f04dfa543982e3f931e31a2567d90cefc21ba6bd387e7f8f4377488e62952a2668775e34aeb87790fa327b165db7f3e7b00bf4873fb6a09d1f23bd9989f9d6184a10b0b969c8a19d518e616fb142bc26e34e8fff646708e00586612b1d51c1b3890cf33b0e35fc6afd00ef79cfc701635441ea499862d658ce1dfd33545a61c53e3b5cb617431a91262a1da61311612052896b2fcb20fbca4029ecb1129be0a858399d7e6e43d32490747f7303ba2d47f3c37cd37da116e5a157bb748eb74dbfa54eae935845fb17935635f7b1bef6c4fd8970011dc010c323d04d17a98359d1c101a536d4b87001eda6359726b93dc45219ed9343e41bb1d707e405272d0f3a3237ae5d1f9e67442c6e7f69079e9b56d40dd5c0260038ac9df7016799e318a6ff3f7555a071f86725dfff9dda530ce2b86e546afd6587755767aa913b161714235882dd6f2afa44e55f69e95deadf27329557d0413c93a7d5da1759333dddd432a181d3ac2b031148ddea476ffccd02664467db8ba1b49a778d9c29d7592da187b4946d97eb6a564935340ccceb4a04d14e917e6ec6c0758f1f3f417ec6fa1c934d92a5002cebb1fc10e529ac405c0ee0ed6c031b75", @generic="f089eb6223aaf30e27af9e3c8fc15f708fa6e5439bf76710d51f2f8800d958831fe70c6e750fdb5ef4a4d0bcf53fd3e93945f799d7e4d6ac05ac37086f541312a1d773f859cf62a06b9fa7ce8745f3a21ebf9a1cd630a3bd24bb31424aa854997f1e615ec374d9848d6311a54dec874049673e44cda7"]}, 0x108c}, 0x1, 0x0, 0x0, 0x40}, 0x44004) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001740)={'erspan0\x00', &(0x7f0000001640)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x7fff, 0x0, {{0x2a, 0x4, 0x1, 0x9, 0xa8, 0x64, 0x0, 0x3d, 0x39, 0x0, @private=0xa010101, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x59, 0x0, 0xd, [0xf, 0x6, 0x5, 0x1, 0xd, 0x2b1b]}, @rr={0x7, 0x1f, 0x80, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @local, @broadcast, @remote]}, @rr={0x7, 0x7, 0x7b, [@local]}, @cipso={0x86, 0x48, 0x1, [{0x2, 0x10, "d54b8c9b40b8c9492c7559d9f156"}, {0x0, 0x6, "d1d3bd8c"}, {0x7, 0x9, "652f002b4994e0"}, {0x7, 0x12, "df10f8df65362f59acfe1d7c6de9e4f0"}, {0x4, 0x2}, {0x0, 0x3, "ec"}, {0x2, 0xc, "22a5acff476f5a2982af"}]}, @timestamp={0x44, 0x8, 0x67, 0x0, 0x1, [0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001840)={'ip_vti0\x00', &(0x7f0000001780)={'erspan0\x00', 0x0, 0x1, 0x20, 0x1, 0x5, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x67, 0x0, 0x8, 0x2, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x1f, 0x73, [@dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @empty, @private=0xa010100, @multicast2, @broadcast, @broadcast]}, @end, @end, @rr={0x7, 0x1f, 0xfd, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast1, @local, @multicast2, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x4f, 0x1, 0x0, [{@remote, 0xffff}, {@broadcast, 0x9}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000001980)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x90, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc4}, 0x894) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000001b00)={0x0, 0x100}, &(0x7f0000001b40)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000001b80)={r11, 0x5, 0x7, 0xb, 0xffff, 0x499e, 0xfff8, 0xe, {0x0, @in6={{0xa, 0x4e24, 0x1f0, @remote, 0x81}}, 0x4, 0x2, 0x3, 0x4ac0c9aa, 0x2}}, &(0x7f0000001c40)=0xb0) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000001c80)) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000001cc0)=0x4, 0x4) connect$caif(r3, &(0x7f0000001d00)=@dbg={0x25, 0x5, 0xf7}, 0x18) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000001d40)={0x2, 'bridge_slave_1\x00', {0x1}, 0x1}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000002080)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001dc0)={0x250, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xe8, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x1f, {{}, 0x0, 0x0, @device_a, 0xa8aff5a6, @void, 0x37, 0x5, @device_a, 0x9}}, @tim={0x5, 0x31, {0xc2, 0xc5, 0x1, "b16f0346f2ac990e17bd369ee7a319e86fec001d3a835b2aad42d3ab04c41dd5da743ecc8dc956ea8a1beee4e9e7"}}, @measure_req={0x26, 0x73, {0x8e, 0x7, 0x8, "8e0fcf921e7eb695a50d1addfef3e346fabc2ae33291d72d3ca98519db1e91d3e40008f84f3c7d9cdcbd5f0c0bf04b49cf18dba2ff60f4674ae3f69d40ced9b06275b60de8d5f728eb0788117903d3cb3dfcff4695d05b8fc3a61c7ca5fc62f55a566fef3bb3aa4d7d6dd057390bfe3e"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x35, @val=0x3, @void, @val="cc3d12f8235c81efba5ef8408b4a4b6d"}}]}, @NL80211_ATTR_IE={0x127, 0x2a, [@peer_mgmt={0x75, 0x18, {0x1, 0x80, @val=0x1, @val=0x2c, @val="65614d2bba92fdfb9eb507b93150e541"}}, @measure_req={0x26, 0xff, {0xec, 0x9, 0x8, "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"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x27, 0x3c, 0x90}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6}]}, 0x250}, 0x1, 0x0, 0x0, 0x80}, 0x48011) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x40, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x50000, 0x16}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f00000021c0)={r12, 0x1}, 0x8) r13 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r13, 0x8955, &(0x7f0000002200)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @multicast}, 0x32, {0x2, 0x4e22, @empty}, 'wg2\x00'}) 1.259700999s ago: executing program 4 (id=6076): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null, @netrom={'nr', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bd42ebdd41"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "074f4dc775f052da9a712442b5"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000081}, 0x1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x404202}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20048080}, 0x40800) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xfb8d9994bd418d81}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040090}, 0x40010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r4, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xb, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r5) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1d0, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffd2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xaa, 0x3, "6cb1180562eb2c61cfe6c495040c5aa99cc409a4d381f9590c6f6154be30e392103ccea1080eea60252ddcf3b69f086f953ccc0d50abbdf55bc5c28e19ba164f95aefcba577fd5b9490bf487d77609750b1a9d0d0bf4965a1c27cef4e7622dcde750eb86cc9feb0b0ea6d009a0c7262cb7c97b69f927f147ddea99c5bfadc0302106cd416d2646ff44994a5c94f3f4404e39b681c5b07b38540c537b701abf06a9ebf3fd0bc9"}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000}, 0x8015) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000b40)={r2, &(0x7f0000000a40)='\x00', 0x80, &(0x7f0000000a80)={@align=0x9, {0x4dc, 0xb, 0xe07, 0x8000000000000001}}, 0x3, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0xff80}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x94, r4, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x94}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000d80)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@can={0xc, {{0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "4a371517f26ccd90"}}}}, &(0x7f0000000dc0)={0x0, 0x3, [0xa55, 0xab5, 0x5fa, 0x2c1]}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_DEL_INTERFACE(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fffffff, 0x19}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x24008000) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r5) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000f40)={{r2}, "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"}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000001f40)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000001fc0), &(0x7f0000002000)=0xe) syz_emit_ethernet(0x59, &(0x7f0000002040)={@local, @local, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x10, 0x5, "637b6d254777bbe1875dac8f85450debe2a39ca0e6c2cc07fd5d9df3d991543719cb8712441097bbfac40b48930ef02685d1046cb5a1bf4fd78b26104394ff1e50436b40"}}}}, &(0x7f00000020c0)={0x0, 0x1, [0x1f9, 0x12f, 0x965, 0xe76]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044881}, 0x0) 1.127461732s ago: executing program 2 (id=6078): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x3, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x3, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) r5 = openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x7, 0x12) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4020) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400001000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c0003800500010063000000080001400000000808000240000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 1.103682301s ago: executing program 4 (id=6079): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x49, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xccca0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008001600ef00000018000180140002006e657464657673696d3000000000000008001500170000000800130000170000080014"], 0x4c}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) (rerun: 32) 1.056566948s ago: executing program 2 (id=6080): syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x3a8, 0x3a8, 0xffffffff, 0x2c0, 0x228, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socket$kcm(0x29, 0x5, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @from_mac=@broadcast, {0x2, 0xa}, @value=@ver_80211n={0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4, 0x54, @default, @void, @val={0x2d, 0x1a, {0x8, 0x2, 0x4, 0x0, {0x5, 0x7, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x400, 0x8, 0xa4}}, [{0xdd, 0x34, "ce4d9deb7550c7241645d742b46029e4df588b7576636a6c0dd43eb3f90016f4c3769769b59fd97ee0227d49c42cc007df173861"}, {0xdd, 0x21, "2453ca66b22567d37ceb7d22c03e40991b03448b09f982b14840af54ad03a61277"}]}, 0x97) syz_emit_ethernet(0x70, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x4e, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}, "c214048808360b8f6d6863b4401a6f9d04711b693283f58a92b0d8828c698f4f5f4cc07a17d8898e69494374ea1a2c4fae35a63ded36adffb2bc7144b7ef"}}}}}}, 0x0) 792.299994ms ago: executing program 0 (id=6082): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200b5f383ca00ea6356b5000000000004"], 0x1c}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1184, 0x27, 0x1, 0x70bd28, 0x24dfdbff, {0xfe}, [@typed={0xfe, 0xf7, 0x0, 0x0, @binary="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"}, @generic="d673922a65dbc4f735ab0d8c9f25278d6128cc69b72145554bdf813cd9e88d411d1a0e", @generic="c4bfb8450607dcb73fbf37a7b2d21b2a8d15160ad9a58cd46ef8753ef5d58be62dc6cc68f40ce35efd9f3162c23a000e45c97f1f007eb41e9e2b71889b7ee666ae75abb9bdbafe5fa8df4494fd035ac74c30aa6ddd304e0b26b27d377e962be5a1eaf567920514e7c0ed860a67dd635517af8b4d4f4b71755668c8d9a15d4f7c24039cd1b241e21ae721f0bf039c3d0459df6a0b8615fd23be075d1c05568341ab4fdec7502727750e75a093cfefd185c1fae5ae33accd06e72f2d9c5dbe529cb37e5ca57c1716d8b6f74a217b1995d46477c43ae80f1fd6e652b3d4f9d1170872009d9aaf94a67929dd3ae600ec687091357d85028025f933a6be72778c3af3efbe541aecdca1a4df9621e5d1aa2118969a115b28b75285cc375411835320c13a1b8f283565d3af597133369004e9d39cc0cd8a580a471e59dd95e3ed737758fbe344807cf29c99ad6297e2b44bc5fff674154530f101f9920a49a34bd6bd938688154a39adbd64ce29e4e59c48941df446c514f280b3e7045b2936b91ff4f95064c99702c2caa604ebc9fddd159a382d3f880cee2fc07c06b82cd352933892b080c39ebc1858a37ee73b12173bcdf60d5cce4c94be979491542acf1f8077db041d766f6b142cc0ee44dc77a5ff36752d3e6e3b24bd1f08c76e26390064b76d8a8213abba123b2c4a046999c23d5a6f8790bf238fbe17c50c0854d192b15dd50bc26951d4e679261f8b635e300958aa3cf35e66952bfb791f488263ce3d76680601809eddbda6ca6e096f728eb5ee1bc6dadd72b648c668d230e4c561f6e0aecbd26cdb17f7306fabbb06614da594bcad47c3c5bc55db29dacb7da6ec4f838abeafba1b4d0da941b9cab2fb7667004ba99d92eff0c6812b5d4368d9ba272fc1e4c0afb921d5dfb08635bdeb71ba2e3ac3cf84c915b6e069d17574657cc47c49aed8f945c6ec8e695c4b4d2ad6ac5b84c25aeea0ce0b247f56fb1ebaa943206ee103c36052a8a65882185f92ad83d68e8a8f6ac5bbdc8a8228b71e7ed4f57b5a78ca0f217c06d70729b82d2ad53d68114df48d99c1b735fa33a8206ff0457e06bf65580f4bb633253bad9b23c064361ecff1719dfda2ed61564d28c01c83a60c299898da7eab04b1706a6afd7c6311dbe0ca3c68aefd948c1c22dd6944a5bd601b64748d075cc2f0460d17e5b2c96671e348576e5b3cf063156a2d7dee8898847a0261afa25efabac0fcb14e510d681a25d00ae2d2a09275780ddc354f96283a6739c5c854c375db9c907af8dea4fbcc82b24b07c469f4388e1c19ab5fe8122a1d074f01bbb2508ecc695728b141c372bec31e2936c8e62173a5ef99009440e20dd7a5284e8b70f2a83ae0ba023d6115b4a618b6e10590aab4ab4e18b2a27c26f353276c8885838f6df2b4fc936e2da89a00d6fe503d82dec0568c80be0dcf189110934ab21a5bb4e16ebb38aabe3c8c628db2eccee34bc579667dbba4373f3b3b4660dcb22962dca533c4cebf53f8d34a97d3bc979eb3cb1f97a36a6234d19c5df376f67ae929df9086bc9fa69e1545f0db87044c1e22cff89adea996109e71344d9a2c55d46310ef78c95e874732d477d969f6db9dd71903425f7f8cc7756e1ba56ee7a0796a017fe8806aea3db1ee1545ac7c111a2b480c8056dbefbe52c69eee8d63fef5d89ff4947e6750f4a4c071e1cd0c5696dc2b5a4910437834cc822178df6b36e0099fec25a1650001e0ea7f9fc795efd0b7cd3611149be232ff45d66360398cc0b617e07297bfd2e0dc40f6771d3d2369ef5504e15830c00fb8dc8193469debdfa6df290e80622d1992927380b16256d699b1afff28647bcb2c1d8f26ee0495743bcdddd8f82b3e7ac6cacba60c1bb93cab8b93c4b198c33bad719d5ab850c36fa6dd844dc279a7ca451e91ea8c38adb0e35c87b1f5ade525a4d5aa48ebd2bb7f445d7d93be9e0ecd2e6e62a5eb97ce4235b95e1739e5e12d535b6d10b3e7a2df4f48836d40dce29da35539570e1de4350686245c51c410a89ecd5289d2b3d8d30b7255236609a55530360ff55de99fef58ee0a21126defe9781fc2d2906f6a51519c280b986151e04ff1522b5bb20bc95682adc85bf0fc283c472344681b5864ac535eb10af23fddff82f8216b25a380f94533fa1df6a8e40afa484678d8f074f8bbbe5c0a0972848276a09fbd7d65d1001a8418a781f76efb9f6a19a800eec6c942eb8fba2ba2dce0e1c4a7dccf0a261ff0792cf1abcdbba1b91ef21395a13ccc197d47c04507f1e448727458088d464d663410cd818677e3d72e25353e520964c4cb43eaa06b21b207635d35b9b50644bdc4fb4e62d64e086ab5c3819dc1301edbec22e5f938da019df340cc4b8656aa6ee027d7a210b43a0049b04e88070d14970ce0fcf86326ed8ea9da8d1ed2fba2030d33cdfc1943c66484a922b2bd03004867d38099b422bdeff82cc96b0d426a55df878b2429c74e6a97c112fc2c75cbd56a2d33462eae17518dcfc1793684adb9d4b48cf9b192a39d7185856a1a7c20eddab2616eeb4da57cdb1552cf6fcc9f5305cfa0823e3e06a3ef7f0af45d6f71ed3f257ea783d8587b3f31ae97d1a594ff54002a9c5ea222b64525e16990c13dff6210ebc38caafb98313b3036ff9191d0fbd6788155c0cd65dcb81143e833257775b573fb9a19095757e0878b14ecba13c4f4a7656b983e412e5262ca2df1d42296bd268ddd9c18d411c1de3ada6dbcb29f9dbba934e64b9ff7ab9190bb2c332fbca3a07e6c56d2ccebd5e8fc38ea699c49028ee11d08fc98d794ad499e16592097cbd2dbca48b229096f41f0f5f3bc5e5fa1b962c7077e2bffac146b4a5c8beec21f646ec2cd1c88c2a5def73232fcef32bcf244eecc7c69db60839a4d41f602dc3abd314fe2c8b293ce6e2559736a2a0fec1f5057636c684f6b85bd20c169c75f9d30f1638d2f58cf4b3216bdb4f21eb59b167bd0c0207cc0a74c07fc7df8f3b15ef36a7a5d241ad8b04a84e9890671fa7f0794a897a543deaa1420abf84c502d06dfea05d7376d049a357714e84da9901c366b6996b8737000e07551dd2ea6a37f1f4a424b7903e90b226cf04de14d4e8768f4487e5637c624578077a6873afa60e3c39a192fbd1350b41ed60993683f8a2427f6502d01f120143b059daf35df33a2f902cf0f5ff50c4d634fe3d31d1be62da829d3b267ec8b0d032114cea881459af23cc8a5716bccf89ac2f5cb6b1599c27422fdce6638102de50446c909d02eb4556adc5b2543697f5595ef440436aa37d77515474d5cb5812c285abbd2fe8f86d3721553659418d792008b16484feac25ab8b1f8c719e1485e8c88895c4be9e14529e711ad4c8120838ca936cda73e58a5fc1dfb95a05d1b65000976e1235bedf2e14d138059307984ed4a4b521fcd891e280b7b26ed0f8e93e686d68dcf0ec4ba43c111f7a41e98b11ae6dd83a6cd1c7eec6401bf28cb74b22e2e4d435d3a4bf59f44168872f75b56110877831072e13884677e0c7625939c52fc80081db385be40ffa785e278ab2828bfb0742987980e9141113eb257d77b5424056ada42730b4542a7c429cbc6e770ddc76e463deecfd888679d1dfd5cb3c6f624870eb6182ecbf5c9b93b210c66d06ee3120c5e10d25d667433b9f0b21d6bee10dccf0885021f273f50bc9ea6771fe4b91b74b7f24edbf1405311a88421ee8b79d968b3598527d53abb6cf8d87a908878bb193e2dcf12a551ec0dcf1b6dc483ac13076570a787c5d08f640f8274d86b3386cd43ac45564eb662ecdeed9a465612aaef50bfecac58644a721f254c47d8a48c28e689957a633dd19ef126942f13d98fe2993796dc117fda70734f5d3b35a047c364cef48c4488f4328717064e5e59a489f05ce60fbbd583a6ab9ca885a0a51025541eee55f9731786c2eefd06566653f349d2db590b44fb49d4c4c8c8367153f24336bc899c796ee8804c3d8ef817c1ce290188e908467bedd21c33bc5a5e641233dd0e7ff9f7bada4f5d11047fa3c345ae5712a26dc66a3f075402013f0c2bc2fdb1afd5d28f2cdcc9a1c88bee8d3b610faa2f178062ac1f0a424616b9f78f732a287c82f53b72cc9addddc1599248eace9398ac6dcb95568c25b05d0987e2bd3f3de5bdce122d45e53baacf943e321654161f5aa9b34a7bc370ee255d9f6195b2aa789ea41f7d2cba7db2d5d035f0750a2bb37d8b118952bf74b33e66e081cd3a3e34b4d7a61f378bd85066b216c4a2b157af429fc4e225ac0b04519ab07872120e85f28ae2c292353e822e5c2e751eea0e62b066f117361e7409e4e4d90c2110c7be3f5bca6dc6bd86f2f7157acf8e3d38d500a024ec6544d75e46057b2833af6185f06714bca0806e6f2f3d637b1798f11e0e267ed933867885d1b5f4cc4bdebde954b3ab78c11782a82607aae76d3608f6f27d96b8f8a2b112a5525cd3784fde83b77f1d7fa97cbd093c3b4106458b59f3714baf7794d801ad4ba46c9ea7faa0f0fe21a0848608aa919f6de656eb43415c0dfd1fcfcbec5c5b8f88afb2e908a3f1109afdc5f3ffe55f799e360715ef37d24ed8608c7504350d3a4d8c4e2ea2da3d58ce781e596e2c3936eb79e8e73de2c6f984670b2eba00b1bb9a39e4074ff6adfdf802b0c01346515b6345a0c932ffbbde56d554e1b881865ad3e8575ba87f88c5ee3890085db3a41dbe73bba659a6a3cfbf353ae1161ac227985c3d345c32c519899557737d4a26bc9faa051890967140c5ebbb673c29f40fd54d88cf36864717813e059c22847fdb3708e8151db916f499aff44d86e04adf985a9c2ba4f292936ceb7f3944e0400abd142bfd7ad8c78bfdfa0b52c5b07a649a9f5439229ad8ed68068ac6f1ea052dee68b14dfe0d425ec58be08cda0aabd1ac99a8539cf3162f9d29fc996cb4e84a1cc410c19437ba7273471dcf3645fb19712ea9323d6bbac88a4b2c2653e2f667cd96771dc23a86ab2464cfab7e1e8a43bdce37272423a0950cb2adf06a64cf45facc4f381e6e5157b1437d7431016caefac4db5274ab9d60fdd4010f5e6a575790c45d61865bfc14d6788a4f7d10f20afd4040f6e58d5b7b76de6dc5ba6681753e5cffef8b0c7464de6bba047f829bc16c181d17271588fc23877df0a6be57503e4b6c72dd9837ad08987423102b6963b5442af8dcdcf972be0775b2d378d75f5967e9da637af332b85851c311a2264586e547da5fffc92fa0ba9a8bc034e0b7c716b7ec2b40a8ff6b423a103f76bcba22bab48f0ae862f60a3e4cf80e8331b27b9307de5c93e594c556219e4a7f5a3ba7f03d60a017ef3990f3f09a8d3f82375a7773348b31dd057701df0527012d9bd36b3d72bdb339a74ba9ead7550fbef82914b97a6881309db4db7d994dc6f358f5acb657dc107feb5476367c59907b0ae402daca8a46f976c0894a05446ca5a4e4dff2003bc4b4cb8df5d1f87cb746dd84e6277ed9ac87e0e3820d27c56b211bae22644ee5390a6d678f2cce4ad0deff060de14f17e2f4dfd1786936722d192b3995a614f1665d25e598a1d1d6b44827d771eb839f80acb8a8f8e88bcd96a06fbc979b450c28937cc810cccf0e385fc6f08bfed870d1408e1a5b22d7b5b544b5054fe5ed737258293d71de5d95be51f4c30ad0d14921dcfba5fe8bd2d85862c90d17beabd0ee275280458f667e8a89174fd2eeb73868a2ed339b45b64a07a41dd6aeb196cf641e460c01c8d0f02d2f1b0485b83c800011ff322c35c5e201e06a91d268566d7fb0cec7b174", @typed={0x8, 0xc6, 0x0, 0x0, @u32=0xfffffffa}, @nested={0x44, 0xdd, 0x0, 0x1, [@nested={0x3f, 0x55, 0x0, 0x1, [@generic="c26fd82f5ca0501707fa04abbb0d4ca1794193929072788c94b11ce8fe5b82bd3690bbb0e4035dcfb67fd8c4e15f55fab442f1b3d287c7a0c984aa"]}]}]}, 0x1184}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) 720.695247ms ago: executing program 0 (id=6083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000900000000000000000001ac144edd34549d4fddb900000041857f37dbe20c4d0000000a00000000000000", @ANYRES64=r0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a0010000100000000000000"], 0xc4}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000017000000000001ac1414aa000000000000000000000000000107014e2400050000a0003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000fcffff00000000030000009c1c01000000000095000000000000003d85f67383e99e622677943aed279ade7e2125693cba104cc1b89ea6023d4b1f4c51fe9aae2e9189675d0fb9112de80dca41ac"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd91}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000fcffff00000000030000009c1c01000000000095000000000000003d85f67383e99e622677943aed279ade7e2125693cba104cc1b89ea6023d4b1f4c51fe9aae2e9189675d0fb9112de80dca41ac"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd91}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000200000c95160536e0df4eb00c374e898f717634a6262d7721ab28bff22f9ad6d5f9c9fc58a89a0a520e4c93f98072d69c50fcd4ea3e045908d5adf38dbdcc7d5cb734b4b05ea4c4085b96d30dd", @ANYRES8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r6, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r6, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES16=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x4a014) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140400001000010000000000000000000000000ac4000000060a0b0400000000000000000200000098000480940001800a000100696e6e6572000000840002801c000580090001006d657461000000000c000280080002400000000d0800034000000007080004400000000f0800014000000000080002400000008408000140000000003c000580090001006d65000280080001400000000e08000140000000030800024000000016080001400000000208000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xec}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140400001000010000000000000000000000000ac4000000060a0b0400000000000000000200000098000480940001800a000100696e6e6572000000840002801c000580090001006d657461000000000c000280080002400000000d0800034000000007080004400000000f0800014000000000080002400000008408000140000000003c000580090001006d65000280080001400000000e08000140000000030800024000000016080001400000000208000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0xec}}, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000200000007", @ANYRES32=r6, @ANYRESDEC=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) 523.375711ms ago: executing program 0 (id=6084): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0xb, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x5, @private1, 0x349}, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fffffff}, @in6={0xa, 0x4e23, 0x6c9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x2e39e85e}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x88f}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x8000, @loopback, 0x4}], 0xbc) 422.034075ms ago: executing program 2 (id=6085): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1e}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe8, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}]}]}, @NFT_MSG_NEWFLOWTABLE={0x3cc, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'team0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe81}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_HOOK={0x18c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_HOOK={0x168, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWRULE={0x16c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "e82bba50a67f6c7f9afde7d2452e6ea2cb9fde403787f950edd6b03a587e40d0fe733bd69cb8a8b07c3438a86da1cf1ca6449ff771167ab1513e629ed84acffeb7deae3a429315bf622b724e734c99687c04d8ecb719b29ab99d7d2757891dda3975a328454b47a5fffadc409e6d9328d986c6c41591de5cf073db4ab3023000e51a3d7665c556c97cc99e1bff46df79e629fec7a2ab90950a3d4085276b"}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x670}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa0028000}) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000014000000030a01020000000000000000010000003c000000080a010100000000000000000700000e14000580080001400000005e08000140000065580c000640000000000000000408000b4000000002140000000000000000000000000a"], 0x98}}, 0x0) 382.071121ms ago: executing program 0 (id=6086): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x85, 0x1904}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000040)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2d}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 107.175213ms ago: executing program 2 (id=6087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x6c, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x6c}}, 0x20000000) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000240)={r3, &(0x7f0000000040)=',^\x00', 0x1, &(0x7f00000000c0)={@_ha_fsid={[0xfffffffb, 0x5]}, {0x0, 0xb6d, 0x9, 0x2}}, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x1}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xe, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x2, 0xfffffffa, 0x40000, r5, 0x5, '\x00', r7, r5, 0x4, 0x1, 0x4, 0xb}, 0x50) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000280)={'syz_tun\x00', @random="514813212c45"}) 106.902732ms ago: executing program 4 (id=6088): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @empty, 0xfffffff7}, 0x1c) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, '\x00', [{0xfffffff8, 0x80000001, 0x5, 0x0, 0x0, 0x401}, {0x5, 0x1, 0x4, 0xffffffffffffbafa, 0x1ff, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 106.051942ms ago: executing program 0 (id=6089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x34, 0x8, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x17, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) 0s ago: executing program 0 (id=6090): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, r0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x4ee4, 0x8, 0x40]}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5b}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1ff, 0x5f}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4048c80}, 0x20000000) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0f13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2871"], 0xe0}], 0x1}, 0x40040) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000100)={r6, &(0x7f0000000640)='\x00', 0x20400, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x7]}, {0x2, 0x4, 0x1, 0x2}}, 0x101, &(0x7f0000000080), &(0x7f00000000c0)=0x8}) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000140)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="7480efbe4937efbf32d1098bf929d1fabd5f9aed9dccc254812a89dca064f608afd5275df445df15cf739cddcaf150efd0f15a9824c54e5d6d46dae09439826fcae25a2b7bee167a9574a866a4742afc88c758a4c2db3351face152172115b3c4797f8b92d301d7253cbb9282785dc1196e559555db59e8fd6df3996c93acb3da1b75adcdd1218f17309119cb22b7259ef165044abf5d97f5db75e48274b3c72286f9d5e7ef024ca85e27228902aa00f7a63af0f3172422173fd0cf6a5ab25ab1cc3fe5a84100f25c2f057a31af49d1d1d", 0xd1}, {&(0x7f00000001c0)="c20aa95d37606436a20c15853b29c5d8590b3933a955f382b799f8721613fc29a4e8ac0a9c4cb9a572f8f2d2c4e4096a09", 0x31}, {&(0x7f0000000380)="28bed61059c1c12ff39745d0ed3b0357ccc45511cb832dcffad4fd7b6876231eed4281e06682a02ce5c1924868503905bc0abcedd0aca563839f53a09c3cbd98bb5d378b5d9beb99eefe21fbdbfffa219ca896e1a774baf8f48e0de6f90061221f1d467d763197f3d53e6dd4b98ee633c90ecbfc6c6193db1cb3e5f5ebb0356a748d4cce91961b5b1a9049495b2bedd86f84064eb051a39f85766ebb3a91b1ddbed953064df214561e64add3ff99722c57635f77e6415e5b2f1d25c6f8ffd31048b913ad695a0cbced7db3e156367df638c7d3084d21acb4de5a0c413f5bf0c9af61ff73eaccacd35492d916f5a8dad6601e7ae36c4b37513d95639aee6d", 0xfe}], 0x3, &(0x7f00000004c0)=[{0xf8, 0x103, 0x4, "e3baecba7cf2b8ca6dc01ca272a09eb6f59b47d477b6cd84fb57f3756fa405b79cc2df92cc7cc5b8b3fdb785bc74194c1d0e9092a6865d1bbf7eaabdac678a7a17a4be94eea5211d39b7d36d601adebc6a33cbbe2df3a533900b796f78578e7caab2bc54e24da8f9e7e16c3947c9fc9b611999a3b6a665ec95eebd5164cc764c0aba3a0ea2b04f6de0081305e63e75bbc53872a6834d17ebaac2db4e2b66dd1b30976ee3ababd3fac618a82e5ced171edb031c0bc6f7118b87fcc253f5408972827b968eaaef814fdce73598ae73475a91f36f27f1004a638633c07a9bca2e9eb73619db4e800eaa"}, {0x18, 0x116, 0x2, "197360b9d2460a"}], 0x110}, 0x20000040) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.0.4032'. [ 349.054410][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.064908][ T9] lo speed is unknown, defaulting to 1000 [ 349.178793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.188972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.224486][T20602] sctp: [Deprecated]: syz.4.4034 (pid 20602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.224486][T20602] Use struct sctp_sack_info instead [ 349.243121][T20600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4037'. [ 349.268908][T20602] sctp: [Deprecated]: syz.4.4034 (pid 20602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.268908][T20602] Use struct sctp_sack_info instead [ 349.321091][T20600] macvtap1: entered promiscuous mode [ 349.327140][T20600] vlan0: entered promiscuous mode [ 349.333481][T20600] macvtap1: entered allmulticast mode [ 349.339605][T20600] vlan0: entered allmulticast mode [ 349.344872][T20600] veth0_vlan: entered allmulticast mode [ 349.421980][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.533197][T20603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.566990][T20603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.689185][T20632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4047'. [ 349.697190][T20629] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 349.710001][T20629] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 349.721338][T20629] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 349.740955][T20635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4045'. [ 349.877418][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'. [ 349.887647][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'. [ 351.725890][T20603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.737813][T20603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.912519][T20651] x_tables: unsorted entry at hook 2 [ 351.926966][T20603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.938704][T20603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.043348][T20655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4051'. [ 352.954703][ T7318] net_ratelimit: 33030 callbacks suppressed [ 352.954723][ T7318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.063889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a3c5000: rx timeout, send abort [ 353.073830][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a3c5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 353.287771][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4054'. [ 353.349786][T20663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4054'. [ 353.891861][T20663] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.899484][T20663] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.923986][T20665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4055'. [ 353.942021][T20603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.968547][T20603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.990745][ T7318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.020424][T20669] netlink: 'syz.3.4056': attribute type 62 has an invalid length. [ 354.050693][T20671] netlink: 'syz.0.4058': attribute type 12 has an invalid length. [ 354.068311][T20668] netlink: 'syz.2.4057': attribute type 1 has an invalid length. [ 354.190625][ T58] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.195946][T20682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4060'. [ 354.205999][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.210745][T20682] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4060'. [ 354.237394][ T58] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.250317][ T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.293092][ T1144] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.307187][ T1144] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.371383][ T1144] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.396195][ T1144] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.439263][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4065'. [ 354.496764][T20707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4067'. [ 354.511610][T20708] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.559722][T20710] lo: entered promiscuous mode [ 354.572822][T20710] netlink: 'syz.0.4068': attribute type 2 has an invalid length. [ 354.602065][T20710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.873545][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.907403][T20729] syzkaller0: entered promiscuous mode [ 354.913972][T20729] syzkaller0: entered allmulticast mode [ 354.943189][ T11] block nbd3: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 30 seconds [ 354.954492][ T11] block nbd3: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 30 seconds [ 354.966742][ T11] block nbd3: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 30 seconds [ 354.978901][ T11] block nbd3: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 30 seconds [ 355.019682][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.169640][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4080'. [ 355.225345][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4080'. [ 356.059874][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.102302][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.171487][T20792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.334404][T20805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4093'. [ 357.380262][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 357.825414][T20833] syzkaller0: entered promiscuous mode [ 357.826206][T20836] netlink: 'syz.2.4099': attribute type 83 has an invalid length. [ 357.849467][T20833] syzkaller0: entered allmulticast mode [ 357.863745][T20833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4098'. [ 357.906357][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.941935][T20839] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.951241][T20839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4100'. [ 358.024562][T20817] lo speed is unknown, defaulting to 1000 [ 358.064322][T20841] ip6t_srh: unknown srh match flags 4000 [ 358.088994][T20841] nbd: couldn't find a device at index 2 [ 358.142363][ T7317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.177897][T20844] tipc: Enabled bearer , priority 0 [ 358.183263][T20846] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4103'. [ 358.324964][T20844] syzkaller0: entered promiscuous mode [ 358.337622][T20844] syzkaller0: entered allmulticast mode [ 358.353568][T20844] tipc: Resetting bearer [ 359.181499][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.644500][T20846] vlan1: entered allmulticast mode [ 359.658843][T20846] erspan0: entered allmulticast mode [ 359.665622][T20826] lo speed is unknown, defaulting to 1000 [ 359.695916][T20842] tipc: Resetting bearer [ 360.219381][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.938867][ T7327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.263965][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.351497][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.507893][T20842] tipc: Disabling bearer [ 361.516773][ T5930] tipc: Node number set to 3578791581 [ 362.304703][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.570352][T20892] syzkaller0: entered promiscuous mode [ 362.576764][T20892] syzkaller0: entered allmulticast mode [ 362.611033][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'. [ 362.715713][T20904] netlink: 'syz.2.4119': attribute type 10 has an invalid length. [ 363.348828][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.980094][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.381457][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.601516][T20904] veth0_macvtap: left promiscuous mode [ 364.782975][ T58] tipc: Subscription rejected, illegal request [ 364.787686][T20930] tipc: Enabling of bearer rejected, failed to enable media [ 364.864436][T20930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.871848][T20930] IPv6: NLM_F_CREATE should be set when creating new route [ 364.879153][T20930] IPv6: NLM_F_CREATE should be set when creating new route [ 364.886386][T20930] IPv6: NLM_F_CREATE should be set when creating new route [ 364.930936][T20943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.202399][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4135'. [ 365.354023][T20969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4137'. [ 365.420370][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.550135][T20988] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4140'. [ 365.561415][T20991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4139'. [ 365.595140][T20993] syzkaller0: entered promiscuous mode [ 365.607144][T20993] syzkaller0: entered allmulticast mode [ 365.856560][T21007] tipc: Enabling of bearer rejected, failed to enable media [ 365.886486][T21011] TCP: TCP_TX_DELAY enabled [ 366.045066][T21021] team0 (unregistering): Port device team_slave_0 removed [ 366.067121][ T5146] block nbd0: Receive control failed (result -107) [ 366.076091][T21029] netlink: 'syz.4.4153': attribute type 13 has an invalid length. [ 366.076850][T21027] block nbd0: reconnected socket [ 366.092775][T21021] team0 (unregistering): Port device team_slave_1 removed [ 366.132647][T21032] netlink: 'syz.4.4153': attribute type 16 has an invalid length. [ 366.206033][T21032] netlink: 'syz.4.4153': attribute type 17 has an invalid length. [ 366.325631][T21036] lo: Caught tx_queue_len zero misconfig [ 366.428157][T21032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.461132][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.622592][T21061] xt_hashlimit: invalid interval [ 366.637865][T21061] ipt_REJECT: TCP_RESET invalid for non-tcp [ 366.701582][ T35] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 366.851787][T21071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4162'. [ 366.930626][ T35] gretap0 (unregistering): left promiscuous mode [ 367.005765][ T35] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 367.014431][ T35] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - 92:e5:a5:57:44:50 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 367.018981][ T7334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.107498][ T35] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 367.425017][ T35] bond0 (unregistering): left promiscuous mode [ 367.431385][ T35] bond_slave_0: left promiscuous mode [ 367.437080][ T35] bond_slave_1: left promiscuous mode [ 367.442957][ T35] bridge_slave_1: left promiscuous mode [ 367.455114][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.466330][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.476632][ T35] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 367.490539][ T35] bond0 (unregistering): Released all slaves [ 367.503620][ T35] bond1 (unregistering): Released all slaves [ 367.510743][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.525699][ T35] bond2 (unregistering): Released all slaves [ 367.540629][ T35] bond3 (unregistering): Released all slaves [ 367.555108][ T35] bond4 (unregistering): Released all slaves [ 367.567670][ T35] bond5 (unregistering): Released all slaves [ 367.585266][ T35] bond6 (unregistering): (slave veth17): Releasing active interface [ 367.598713][ T35] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 367.612620][ T35] bond6 (unregistering): Released all slaves [ 367.625803][ T35] bond7 (unregistering): Released all slaves [ 367.674442][T21074] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 367.899544][T21095] netlink: 'syz.3.4170': attribute type 25 has an invalid length. [ 367.970941][T21095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4170'. [ 367.992489][ T35] : left promiscuous mode [ 368.030725][T21105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4170'. [ 368.147136][T21105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4170'. [ 368.187006][T21115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.201730][ T35] 9: left promiscuous mode [ 368.335179][ T35] tipc: Left network mode [ 368.461365][T21134] syzkaller1: entered promiscuous mode [ 368.466880][T21134] syzkaller1: entered allmulticast mode [ 368.539915][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.700186][T21151] xt_policy: output policy not valid in PREROUTING and INPUT [ 368.719876][T21152] xt_policy: output policy not valid in PREROUTING and INPUT [ 368.777800][T21156] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4185'. [ 368.950401][T21176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4189'. [ 369.221685][T21189] syzkaller1: entered promiscuous mode [ 369.235609][T21189] syzkaller1: entered allmulticast mode [ 369.350883][T21199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4196'. [ 369.356750][T21198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.368523][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.370313][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4196'. [ 369.386763][T21196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.396834][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.427427][T21196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.575478][T21211] netlink: 'syz.1.4200': attribute type 16 has an invalid length. [ 369.589202][T21211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4200'. [ 369.634621][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.649628][T21211] netlink: 'syz.1.4200': attribute type 39 has an invalid length. [ 370.058709][T21169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.185678][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4211'. [ 370.209495][T21247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4211'. [ 370.232740][ T35] hsr_slave_0: left promiscuous mode [ 370.250893][ T35] 0·: left promiscuous mode [ 370.269635][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.280083][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.296741][ T35] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 370.311494][ T35] batman_adv: batadv0: Removing interface: ipvlan0 [ 370.423469][ T35] pimreg3 (unregistering): left allmulticast mode [ 370.441976][T21262] netlink: 'syz.1.4214': attribute type 1 has an invalid length. [ 370.704521][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.897428][ T35] team0 (unregistering): Port device team_slave_1 removed [ 370.914525][ T35] team0 (unregistering): Port device team_slave_0 removed [ 370.939799][ T7333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.089362][T21270] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 371.100680][T21270] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 371.113101][T21270] bond4: (slave vcan1): making interface the new active one [ 371.121526][T21270] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 371.450103][T21296] xt_hashlimit: size too large, truncated to 1048576 [ 371.466329][T21300] netlink: 'syz.0.4220': attribute type 1 has an invalid length. [ 373.529418][T21316] __nla_validate_parse: 3 callbacks suppressed [ 373.529457][T21316] netlink: 788 bytes leftover after parsing attributes in process `syz.2.4223'. [ 373.597842][T21169] net_ratelimit: 3 callbacks suppressed [ 373.597862][T21169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.732213][T21334] batadv_slave_1: entered promiscuous mode [ 373.754636][T21333] batadv_slave_1: left promiscuous mode [ 373.819396][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.946843][ T35] IPVS: stop unused estimator thread 0... [ 373.977796][T21342] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4233'. [ 374.035385][T21344] geneve2: entered promiscuous mode [ 374.091705][T21344] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4235'. [ 374.219903][T21355] SET target dimension over the limit! [ 374.259262][T21358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4238'. [ 374.301738][T21364] netlink: 'syz.0.4239': attribute type 39 has an invalid length. [ 374.612227][T21375] tipc: Invalid UDP bearer configuration [ 374.612283][T21375] tipc: Enabling of bearer rejected, failed to enable media [ 374.680203][T21384] tipc: Enabling of bearer rejected, failed to enable media [ 374.859950][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.933036][T21403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4252'. [ 375.052037][ T5146] block nbd5: Receive control failed (result -32) [ 375.062147][T21402] delete_channel: no stack [ 375.103891][T21413] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4257'. [ 375.249469][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4260'. [ 375.313990][T21422] bond4: Invalid ad_actor_system MAC address. [ 375.328268][T21422] bond4: option ad_actor_system: invalid value (1) [ 375.345248][T21422] bond4 (unregistering): Released all slaves [ 375.443246][T21436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4265'. [ 375.493769][T21434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4261'. [ 375.509474][T21436] vxcan2: entered allmulticast mode [ 375.514919][T21434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4261'. [ 375.679262][T21447] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 375.898696][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.138732][ T7333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.204123][T21471] syzkaller0: entered promiscuous mode [ 376.209858][T21471] syzkaller0: entered allmulticast mode [ 376.954607][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.985143][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.052002][T21512] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.059604][T21512] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.228607][T21528] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 378.238045][T21527] netlink: 'syz.2.4288': attribute type 1 has an invalid length. [ 378.375851][T21527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.397871][T21531] vlan1: entered promiscuous mode [ 378.422629][T21531] bond2: entered promiscuous mode [ 378.438134][T21531] vlan1: entered allmulticast mode [ 378.451268][T21531] bond2: entered allmulticast mode [ 378.517767][T21536] bond2: (slave bridge3): making interface the new active one [ 378.546932][T21536] bridge3: entered promiscuous mode [ 378.561094][T21536] bridge3: entered allmulticast mode [ 378.570294][T21536] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 378.627432][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 378.657926][T21169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.696088][T21557] __nla_validate_parse: 3 callbacks suppressed [ 378.696107][T21557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4297'. [ 378.721522][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4297'. [ 378.853915][T21565] netlink: 'syz.0.4299': attribute type 64 has an invalid length. [ 378.916113][T21569] xt_TPROXY: Can be used only with -p tcp or -p udp [ 378.955864][T21574] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.4302'. [ 378.965832][T21572] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4300'. [ 379.019753][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.024868][T21574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4302'. [ 379.179745][T21169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.231505][T21597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.241820][T21598] netlink: 'syz.1.4304': attribute type 5 has an invalid length. [ 379.242537][T21597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.261131][T21597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.270334][T21597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.280820][T21597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.289863][T21597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.334400][T21597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4306'. [ 379.347166][T21591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4304'. [ 379.358880][T21591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4304'. [ 379.367879][T21591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4304'. [ 379.381817][T21597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4306'. [ 379.416424][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.749190][T21629] syzkaller0: entered promiscuous mode [ 379.755000][T21629] syzkaller0: entered allmulticast mode [ 380.086063][T21650] bond3: option fail_over_mac: invalid value (16) [ 380.103619][T21650] bond3 (unregistering): Released all slaves [ 380.452557][T21693] xt_connbytes: Forcing CT accounting to be enabled [ 380.543143][T21678] delete_channel: no stack [ 380.647257][T21703] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 380.849251][T21717] netlink: 'syz.1.4341': attribute type 1 has an invalid length. [ 381.089784][T21725] 8021q: adding VLAN 0 to HW filter on device bond6 [ 381.152961][T21725] bond5: (slave bond6): making interface the new active one [ 381.180578][T21725] bond5: (slave bond6): Enslaving as an active interface with an up link [ 381.195851][T21740] netlink: 'syz.4.4346': attribute type 1 has an invalid length. [ 381.214571][T21740] netlink: 'syz.4.4346': attribute type 2 has an invalid length. [ 381.214870][T21717] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 381.256151][T21711] 8021q: adding VLAN 0 to HW filter on device bond5 [ 381.510748][T21745] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.624436][T21761] tipc: Started in network mode [ 381.643269][T21761] tipc: Node identity ae54e280fdce, cluster identity 4711 [ 381.663436][T21761] tipc: Enabled bearer , priority 0 [ 381.723604][T21761] tipc: Disabling bearer [ 382.934924][T21844] pim6reg1: entered promiscuous mode [ 382.969262][T21844] pim6reg1: entered allmulticast mode [ 383.587789][T21876] x_tables: duplicate underflow at hook 3 [ 383.734586][T21883] __nla_validate_parse: 70 callbacks suppressed [ 383.734606][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 383.744596][ T7333] net_ratelimit: 10 callbacks suppressed [ 383.744612][ T7333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.841567][T21887] IPVS: ip_vs_edit_dest(): server weight less than zero [ 383.861213][ T7333] IPVS: starting estimator thread 0... [ 383.898421][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 383.906514][ C1] lec:lec_tx_timeout: lec0 [ 383.960363][T21889] IPVS: using max 30 ests per chain, 72000 per kthread [ 384.095865][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 384.096628][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4391'. [ 384.149469][T21905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'. [ 384.168860][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4390'. [ 384.220768][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.279953][T21924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4397'. [ 384.397292][T21940] netlink: 'syz.1.4401': attribute type 64 has an invalid length. [ 384.419694][T21940] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4401'. [ 384.429113][T21936] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4400'. [ 384.579686][T21951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4406'. [ 384.609785][T21951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4406'. [ 384.823413][T21975] sctp: [Deprecated]: syz.3.4413 (pid 21975) Use of int in maxseg socket option. [ 384.823413][T21975] Use struct sctp_assoc_value instead [ 385.006279][T21994] Cannot find add_set index 65532 as target [ 385.025091][ T11] block nbd3: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 60 seconds [ 385.036246][ T11] block nbd3: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 60 seconds [ 385.036782][T21998] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 385.048165][ T11] block nbd3: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 60 seconds [ 385.067574][ T11] block nbd3: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 60 seconds [ 385.149835][T22006] netlink: 'syz.3.4423': attribute type 7 has an invalid length. [ 385.252524][T22014] netlink: 'syz.0.4426': attribute type 14 has an invalid length. [ 385.261307][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.279737][T22014] netlink: 'syz.0.4426': attribute type 14 has an invalid length. [ 385.279852][ T1155] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.307805][ T1155] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.330909][ T1155] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.348813][ T1155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.471886][T22029] ip6t_rpfilter: unknown options [ 385.481927][T22037] ip6t_rpfilter: unknown options [ 385.522025][T22033] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 385.736858][T22051] sctp: [Deprecated]: syz.1.4437 (pid 22051) Use of int in max_burst socket option. [ 385.736858][T22051] Use struct sctp_assoc_value instead [ 385.849615][T22056] gretap0: entered promiscuous mode [ 385.882025][T22056] gretap0: left promiscuous mode [ 386.311758][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.779226][ T7333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.857269][T22132] netlink: 'syz.2.4466': attribute type 1 has an invalid length. [ 386.999058][T22137] netlink: 'syz.0.4467': attribute type 1 has an invalid length. [ 387.073918][T22137] bond2: entered promiscuous mode [ 387.079604][T22137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.152830][T22147] netlink: 'syz.2.4471': attribute type 8 has an invalid length. [ 387.343361][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.907515][T22210] netlink: 'syz.4.4487': attribute type 1 has an invalid length. [ 388.052646][T22222] bridge0: entered allmulticast mode [ 388.096864][T22227] xt_TCPMSS: Only works on TCP SYN packets [ 388.206603][T22223] syzkaller0: entered promiscuous mode [ 388.225102][ T7333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.232532][T22223] syzkaller0: entered allmulticast mode [ 388.389138][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.540655][T22257] netlink: 'syz.0.4502': attribute type 1 has an invalid length. [ 388.578290][T22257] bond3: entered promiscuous mode [ 388.583604][T22257] bond3: entered allmulticast mode [ 388.589742][T22257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.655369][T22262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 388.666200][T22264] netlink: 'syz.1.4505': attribute type 10 has an invalid length. [ 388.738224][T22264] team0: Device veth1_macvtap failed to register rx_handler [ 389.049269][T22284] __nla_validate_parse: 23 callbacks suppressed [ 389.049290][T22284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4511'. [ 389.161785][T22292] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 389.178585][T22292] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 389.196992][T22292] netlink: 'syz.2.4513': attribute type 1 has an invalid length. [ 389.217902][T22292] netlink: 'syz.2.4513': attribute type 2 has an invalid length. [ 389.247448][T22292] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4513'. [ 389.539750][T22312] netlink: 6044 bytes leftover after parsing attributes in process `syz.2.4518'. [ 389.550242][T22281] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4510'. [ 389.580102][T22312] net_ratelimit: 3 callbacks suppressed [ 389.580119][T22312] openvswitch: netlink: Flow key attr not present in new flow. [ 389.984605][T22335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4524'. [ 390.014159][T22335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4524'. [ 390.044447][T22335] geneve3: entered promiscuous mode [ 390.050635][T22335] geneve3: entered allmulticast mode [ 390.125628][T22341] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4527'. [ 390.176321][T22341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 390.500709][T22371] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4536'. [ 390.525105][T22364] bond3: entered promiscuous mode [ 390.533082][T22371] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4536'. [ 390.548601][T22364] bond3: entered allmulticast mode [ 390.559263][T22364] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.938269][T22405] syzkaller1: entered promiscuous mode [ 390.970838][T22405] syzkaller1: entered allmulticast mode [ 391.193577][ T5195] udevd[5195]: worker [19422] /devices/virtual/block/nbd3 is taking a long time [ 391.213217][T22425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.228769][T22423] tipc: Enabled bearer , priority 0 [ 391.348587][T22423] syzkaller0: entered promiscuous mode [ 391.354239][T22423] syzkaller0: entered allmulticast mode [ 391.368165][T22423] tipc: Resetting bearer [ 391.390223][T22422] tipc: Resetting bearer [ 393.096810][T22422] tipc: Disabling bearer [ 393.134678][T22452] validate_nla: 4 callbacks suppressed [ 393.134699][T22452] netlink: 'syz.1.4560': attribute type 15 has an invalid length. [ 393.140808][ T270] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.179378][ T270] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.188151][ T270] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.238780][ T270] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 393.389393][T22468] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 393.413233][T22470] netlink: 'syz.3.4567': attribute type 4 has an invalid length. [ 393.581481][T22486] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.113241][T22525] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 394.130953][T22525] __nla_validate_parse: 13 callbacks suppressed [ 394.130970][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4581'. [ 394.445917][T22540] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.453203][T22540] bridge0: port 1(bridge_slave_0) entered listening state [ 394.497377][T22540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 394.762777][T22561] netlink: 'syz.4.4588': attribute type 29 has an invalid length. [ 394.927768][T22579] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4595'. [ 395.029542][T22582] dvmrp6: entered allmulticast mode [ 395.296226][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'. [ 395.380740][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4603'. [ 395.466695][T22624] x_tables: duplicate underflow at hook 3 [ 395.663115][T22635] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4609'. [ 396.228142][T22672] bridge0: port 3(veth0_to_bridge) entered blocking state [ 396.242797][T22672] bridge0: port 3(veth0_to_bridge) entered disabled state [ 396.258692][T22672] veth0_to_bridge: entered allmulticast mode [ 396.319927][T22672] veth0_to_bridge: entered promiscuous mode [ 396.340387][T22672] bridge0: port 3(veth0_to_bridge) entered blocking state [ 396.348246][T22672] bridge0: port 3(veth0_to_bridge) entered listening state [ 396.460979][ C0] bridge0: port 3(veth0_to_bridge) entered blocking state [ 396.510030][T22692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 396.766191][T22709] x_tables: unsorted entry at hook 2 [ 396.851044][T22714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4633'. [ 396.885730][T22714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.081321][T22730] netlink: 'syz.3.4639': attribute type 1 has an invalid length. [ 397.204530][T22738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4641'. [ 397.216433][T22738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4641'. [ 397.311911][T22749] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 397.337493][T22749] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 397.382574][T22749] netlink: 'syz.0.4643': attribute type 11 has an invalid length. [ 397.400755][T22749] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.4643'. [ 397.586311][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 397.620185][T22768] netlink: 'syz.3.4649': attribute type 1 has an invalid length. [ 397.714810][T22765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.866688][T22788] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 397.974105][T22796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.033418][T22804] netlink: 'syz.2.4656': attribute type 1 has an invalid length. [ 398.106335][T22811] netlink: 'syz.0.4657': attribute type 2 has an invalid length. [ 398.374219][T22835] veth0: entered promiscuous mode [ 398.492833][T22845] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 398.617039][T22856] netlink: 'syz.4.4672': attribute type 21 has an invalid length. [ 398.667705][T22856] netlink: 'syz.4.4672': attribute type 22 has an invalid length. [ 398.720946][T22856] netlink: 'syz.4.4672': attribute type 23 has an invalid length. [ 398.741751][T22856] netlink: 'syz.4.4672': attribute type 25 has an invalid length. [ 399.046976][T22882] ip6t_srh: unknown srh invflags 4000 [ 399.111679][T22891] openvswitch: netlink: Missing key (keys=40, expected=80) [ 399.121156][T22858] lo speed is unknown, defaulting to 1000 [ 399.142047][T22882] __nla_validate_parse: 12 callbacks suppressed [ 399.142067][T22882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4679'. [ 399.243644][T22890] veth3: entered promiscuous mode [ 399.575085][T22911] netlink: 'syz.0.4690': attribute type 5 has an invalid length. [ 399.584844][T22921] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4692'. [ 399.668242][T22927] ±ÿ: renamed from team_slave_1 (while UP) [ 399.782089][T22933] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4695'. [ 400.008825][T22941] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4698'. [ 400.141358][T22948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4699'. [ 400.214838][T22930] gre0: entered promiscuous mode [ 400.225749][T22930] gre0: entered allmulticast mode [ 400.357547][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4701'. [ 400.445593][T22958] netlink: 211920 bytes leftover after parsing attributes in process `syz.3.4700'. [ 400.606593][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4702'. [ 400.706131][ T6226] lec:lec_start_xmit: lec0:No lecd attached [ 400.944442][T22993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4713'. [ 401.005828][T23003] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4715'. [ 401.007228][T22993] syzkaller0: entered promiscuous mode [ 401.051828][T22993] syzkaller0: entered allmulticast mode [ 401.193304][T23019] xt_hashlimit: size too large, truncated to 1048576 [ 401.634343][T23049] netlink: 'syz.4.4730': attribute type 2 has an invalid length. [ 401.705774][T23054] netlink: 'syz.3.4731': attribute type 30 has an invalid length. [ 401.821684][T23068] netlink: 'syz.1.4734': attribute type 83 has an invalid length. [ 401.861803][T23066] mac80211_hwsim hwsim55 wlan1: Caught tx_queue_len zero misconfig [ 401.955967][T23080] netlink: Conntrack attr has 3 unknown bytes [ 402.018217][T23080] xt_TPROXY: Can be used only with -p tcp or -p udp [ 402.106464][T23098] netlink: 'syz.0.4744': attribute type 1 has an invalid length. [ 402.289132][T23112] syzkaller0: entered promiscuous mode [ 402.294862][T23112] syzkaller0: entered allmulticast mode [ 403.091526][T23177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.115028][T23180] tipc: Started in network mode [ 403.127221][T23180] tipc: Node identity ac1414aa, cluster identity 4711 [ 403.146717][T23180] tipc: Enabled bearer , priority 10 [ 403.415468][T23199] netlink: 'syz.4.4780': attribute type 21 has an invalid length. [ 403.771050][T23232] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 403.787836][T23232] bond5 (unregistering): Released all slaves [ 404.120219][T23256] pimreg: entered allmulticast mode [ 404.156509][T23260] sch_fq: defrate 0 ignored. [ 404.258769][T21166] tipc: Node number set to 2886997162 [ 404.288006][T23259] delete_channel: no stack [ 404.406953][T23278] IPVS: set_ctl: invalid protocol: 98 172.30.1.1:20000 [ 404.417878][T23279] __nla_validate_parse: 10 callbacks suppressed [ 404.417960][T23279] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4799'. [ 404.461305][T23278] validate_nla: 6 callbacks suppressed [ 404.461322][T23278] netlink: 'syz.0.4798': attribute type 1 has an invalid length. [ 405.898712][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 405.906838][ C1] lec:lec_tx_timeout: lec0 [ 406.310145][T23296] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 406.351257][T23296] bond5 (unregistering): Released all slaves [ 406.646748][T23324] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4813'. [ 406.679831][T23327] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 406.754203][T23324] netlink: 'syz.3.4813': attribute type 6 has an invalid length. [ 406.763812][T23324] netlink: 54 bytes leftover after parsing attributes in process `syz.3.4813'. [ 406.773596][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4813'. [ 406.845481][T23345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4818'. [ 406.968019][T23352] netlink: zone id is out of range [ 406.974563][T23352] netlink: zone id is out of range [ 406.991535][T23352] netlink: zone id is out of range [ 406.996779][T23352] netlink: zone id is out of range [ 407.002349][T23352] netlink: zone id is out of range [ 407.007915][T23352] netlink: zone id is out of range [ 407.013463][T23352] netlink: zone id is out of range [ 407.020615][T23352] netlink: set zone limit has 4 unknown bytes [ 407.042142][T23355] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 407.230985][T23367] netlink: 'syz.2.4825': attribute type 1 has an invalid length. [ 407.283087][T23367] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4825'. [ 408.237606][T23389] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 408.263855][T23389] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 408.289690][T23389] gretap2: entered promiscuous mode [ 408.296009][T23389] gretap2: entered allmulticast mode [ 408.944116][T23433] netlink: 'syz.3.4846': attribute type 1 has an invalid length. [ 409.124467][T23428] bond5: (slave gretap3): making interface the new active one [ 409.182810][T23428] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 409.402280][T23454] netlink: zone id is out of range [ 409.794462][T23482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4857'. [ 409.871735][T23489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4861'. [ 409.894046][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4861'. [ 409.916713][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4861'. [ 410.069204][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4865'. [ 410.272048][T23520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4870'. [ 410.680357][T23545] netlink: 'syz.3.4875': attribute type 13 has an invalid length. [ 410.932815][T23550] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 411.026119][T23553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4879'. [ 411.054486][T23553] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 411.080679][T23553] syzkaller0: entered promiscuous mode [ 411.082507][T23561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4881'. [ 411.086709][T23553] syzkaller0: entered allmulticast mode [ 411.269688][T23566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4883'. [ 411.332324][T23572] syzkaller0: entered promiscuous mode [ 411.341257][T23572] syzkaller0: entered allmulticast mode [ 411.413798][T23580] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4887'. [ 411.635532][T23585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.667942][T23585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.853267][T23585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.864929][T23585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.975054][T23585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.025073][T23585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.162542][T23585] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 412.180114][T23585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.188996][T23633] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 412.192401][T23585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.221935][T23626] net_ratelimit: 55 callbacks suppressed [ 412.221954][T23626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.299870][T23633] bond5: entered promiscuous mode [ 412.305469][T23633] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.382447][T23633] bond5: (slave bridge5): making interface the new active one [ 412.391109][T23633] bridge5: entered promiscuous mode [ 412.400712][T23633] bridge5: left promiscuous mode [ 412.452775][T23646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.514727][ T270] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.533659][ T270] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.600549][ T270] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.618918][ T270] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.636646][ T270] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.655376][ T270] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.677692][ T270] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.689345][ T270] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.717629][T23661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.727285][T23660] 8021q: VLANs not supported on lo [ 412.735456][T23661] netlink: 'syz.2.4908': attribute type 1 has an invalid length. [ 413.024372][T23678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.376282][T23709] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 413.635019][T23726] netlink: 'syz.2.4933': attribute type 13 has an invalid length. [ 413.686507][T23731] netlink: 'syz.2.4933': attribute type 16 has an invalid length. [ 413.702334][T23731] netlink: 'syz.2.4933': attribute type 17 has an invalid length. [ 413.719881][T23731] netlink: 'syz.2.4933': attribute type 27 has an invalid length. [ 414.504299][T23797] veth0: entered promiscuous mode [ 414.865853][T23825] __nla_validate_parse: 11 callbacks suppressed [ 414.865872][T23825] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4956'. [ 415.098128][T23840] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 415.109999][ T11] block nbd3: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 90 seconds [ 415.120941][ T11] block nbd3: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 90 seconds [ 415.132909][ T11] block nbd3: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 90 seconds [ 415.138749][T23841] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 415.144078][ T11] block nbd3: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 90 seconds [ 415.171839][T23843] netlink: 'syz.4.4961': attribute type 10 has an invalid length. [ 415.186297][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4961'. [ 415.368137][T23845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4962'. [ 415.423874][T23848] xt_l2tp: v2 tid > 0xffff: 1114244 [ 415.766225][T23870] bond7: invalid ARP target 0.0.0.0 specified for addition [ 415.774238][T23870] bond7: option arp_ip_target: invalid value (0) [ 415.794142][T23870] bond7 (unregistering): Released all slaves [ 416.086011][T23898] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4976'. [ 416.182863][T23908] netlink: 'syz.1.4980': attribute type 1 has an invalid length. [ 416.231469][T23908] bond7: entered promiscuous mode [ 416.236951][T23908] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.311206][T23908] bond7: (slave bridge6): making interface the new active one [ 416.327997][T23908] bridge6: entered promiscuous mode [ 416.342959][T23908] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 416.495236][T23925] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4985'. [ 416.532485][T23925] bridge_slave_1: default FDB implementation only supports local addresses [ 416.629322][T23936] xt_ecn: cannot match TCP bits for non-tcp packets [ 416.636784][T23939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4990'. [ 416.823519][T23951] bridge5: entered promiscuous mode [ 416.829485][T23951] bridge5: entered allmulticast mode [ 416.865313][T23950] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.4993'. [ 416.877281][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4993'. [ 416.894697][T23950] : entered promiscuous mode [ 417.091221][T23970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4998'. [ 417.224820][T23973] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 417.249383][T23973] nbd: must specify at least one socket [ 417.524226][T24002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5007'. [ 417.524867][T24004] netlink: 'syz.2.5008': attribute type 1 has an invalid length. [ 417.592356][T24004] bond6: (slave gretap1): making interface the new active one [ 417.610461][T24004] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 417.751834][T24016] sit3: entered promiscuous mode [ 417.756881][T24016] sit3: entered allmulticast mode [ 417.766459][T24018] netlink: 'syz.2.5013': attribute type 29 has an invalid length. [ 417.780447][T24016] netlink: 'syz.1.5012': attribute type 4 has an invalid length. [ 417.803258][T24018] netlink: 'syz.2.5013': attribute type 29 has an invalid length. [ 417.814253][T24016] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 417.977288][T24029] lo: Caught tx_queue_len zero misconfig [ 418.025821][T24032] nbd: nbd3 already in use [ 418.281528][T24054] lo: Caught tx_queue_len zero misconfig [ 418.310209][T24055] syzkaller0: entered promiscuous mode [ 418.315710][T24055] syzkaller0: entered allmulticast mode [ 418.775737][T24102] netlink: 'syz.0.5035': attribute type 1 has an invalid length. [ 418.846471][T24106] netlink: 'syz.0.5036': attribute type 15 has an invalid length. [ 418.875618][T24108] bond6: entered promiscuous mode [ 418.891360][T24108] macvlan3: entered promiscuous mode [ 418.896911][T24108] macvlan3: entered allmulticast mode [ 418.903818][T24108] bond6: (slave macvlan3): Opening slave failed [ 419.093126][T24121] macsec1: entered promiscuous mode [ 419.099253][T24121] bridge0: entered promiscuous mode [ 419.104843][T24121] macsec1: entered allmulticast mode [ 419.110970][T24121] bridge0: entered allmulticast mode [ 419.121123][T24121] bridge0: port 3(macsec1) entered blocking state [ 419.128194][T24121] bridge0: port 3(macsec1) entered disabled state [ 419.148580][T24121] bridge0: left allmulticast mode [ 419.156573][T24121] bridge0: left promiscuous mode [ 419.576044][T24149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 419.610344][T24149] openvswitch: netlink: Flow key attr not present in new flow. [ 419.627649][T24132] lo speed is unknown, defaulting to 1000 [ 420.026349][T24167] __nla_validate_parse: 20 callbacks suppressed [ 420.026368][T24167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5056'. [ 420.249376][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5061'. [ 420.264000][T24181] netlink: 'syz.1.5060': attribute type 10 has an invalid length. [ 420.872244][T24211] lo: entered allmulticast mode [ 420.953134][T24217] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5073'. [ 420.976065][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5074'. [ 421.133324][T24233] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5078'. [ 421.162916][T24233] netlink: 'syz.0.5078': attribute type 2 has an invalid length. [ 421.342899][T24244] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20001 [ 421.343330][T24252] netlink: 'syz.4.5085': attribute type 1 has an invalid length. [ 421.409128][T24252] 8021q: adding VLAN 0 to HW filter on device bond7 [ 421.454106][T24253] bond7: (slave geneve2): making interface the new active one [ 421.464406][T24253] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 421.711462][T24288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5092'. [ 421.833283][T24297] netlink: 'syz.0.5097': attribute type 10 has an invalid length. [ 421.857706][T24298] netlink: 'syz.4.5096': attribute type 21 has an invalid length. [ 421.890632][T24298] IPv6: NLM_F_CREATE should be specified when creating new route [ 422.034003][T24307] bond6 (unregistering): Released all slaves [ 422.301555][T24328] bridge0: port 3(ipvlan2) entered blocking state [ 422.308138][T24328] bridge0: port 3(ipvlan2) entered disabled state [ 422.322260][T24328] ipvlan2: entered allmulticast mode [ 422.330256][T24328] bridge0: entered allmulticast mode [ 422.338319][T24328] ipvlan2: left allmulticast mode [ 422.345446][T24328] bridge0: left allmulticast mode [ 422.391485][T24336] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5110'. [ 422.408318][T24336] erspan0: entered promiscuous mode [ 422.416655][T24338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5111'. [ 422.458876][T24338] team1: entered promiscuous mode [ 422.464531][T24338] team1: entered allmulticast mode [ 422.475309][T24338] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5111'. [ 422.487514][T24338] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 422.505854][T24340] netlink: 'syz.2.5112': attribute type 11 has an invalid length. [ 422.527321][T24340] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5112'. [ 422.555624][T24343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.564409][T24343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.573619][T24343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.581893][T24343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.818136][T24349] syz_tun: entered allmulticast mode [ 423.309664][ T29] audit: type=1804 audit(1771780811.405:7): pid=24384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5129" name="/newroot/357/memory.events" dev="tmpfs" ino=1832 res=1 errno=0 [ 423.336155][ T29] audit: type=1800 audit(1771780811.445:8): pid=24384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5129" name="memory.events" dev="tmpfs" ino=1832 res=0 errno=0 [ 423.538805][T24348] syz_tun: left allmulticast mode [ 423.631671][T24407] sctp: [Deprecated]: syz.4.5136 (pid 24407) Use of int in maxseg socket option. [ 423.631671][T24407] Use struct sctp_assoc_value instead [ 424.115858][T24432] tipc: Enabled bearer , priority 0 [ 424.160199][T24430] tipc: Disabling bearer [ 424.522581][T24463] netlink: 'syz.2.5155': attribute type 1 has an invalid length. [ 424.699771][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 424.722705][T24479] bridge6: entered promiscuous mode [ 424.746001][T24479] bridge6: entered allmulticast mode [ 424.793535][T24479] team0: Port device bridge6 added [ 424.813852][T24481] bridge0: port 1(team0) entered blocking state [ 424.832130][T24481] bridge0: port 1(team0) entered disabled state [ 424.840026][T24481] team0: entered allmulticast mode [ 424.845175][T24481] team_slave_0: entered allmulticast mode [ 424.884801][T24481] team_slave_1: entered allmulticast mode [ 424.905131][T24481] team0: entered promiscuous mode [ 424.928711][T24481] team_slave_0: entered promiscuous mode [ 424.934598][T24481] team_slave_1: entered promiscuous mode [ 425.094967][T24503] __nla_validate_parse: 10 callbacks suppressed [ 425.094984][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5165'. [ 425.151093][T24503] xt_hashlimit: max too large, truncated to 1048576 [ 425.161501][T24508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5168'. [ 425.180063][T24510] openvswitch: netlink: Key type 67 is out of range max 32 [ 425.246574][T24516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5169'. [ 425.284996][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5169'. [ 425.295650][T24519] syzkaller1: entered promiscuous mode [ 425.305523][T24519] syzkaller1: entered allmulticast mode [ 425.621516][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5177'. [ 425.651633][T24550] netlink: 'syz.4.5178': attribute type 1 has an invalid length. [ 425.734033][T24553] bond8: option all_slaves_active: invalid value (222) [ 425.743033][T24553] bond8 (unregistering): Released all slaves [ 425.877619][T24562] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 426.016750][T24574] tipc: Enabled bearer , priority 0 [ 426.028947][T24569] syzkaller0: entered promiscuous mode [ 426.035515][T24569] syzkaller0: entered allmulticast mode [ 426.052263][T24569] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5183'. [ 426.067075][T24566] tipc: Resetting bearer [ 426.102575][T24566] tipc: Disabling bearer [ 426.113177][T24578] netlink: 'syz.0.5187': attribute type 5 has an invalid length. [ 426.124008][T24578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5187'. [ 426.162770][T24583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5189'. [ 426.210409][T24583] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5189'. [ 426.238046][T24583] syzkaller0: entered promiscuous mode [ 426.243801][T24583] syzkaller0: entered allmulticast mode [ 426.506048][T24604] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.5195'. [ 426.516290][T24604] openvswitch: netlink: Message has 6 unknown bytes. [ 426.615673][T24612] netlink: 'syz.4.5198': attribute type 1 has an invalid length. [ 426.664503][T24613] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 426.687969][T24612] bond8: entered promiscuous mode [ 426.701341][T24612] bond8: entered allmulticast mode [ 426.707819][T24612] 8021q: adding VLAN 0 to HW filter on device bond8 [ 426.802699][T24621] bridge7: entered promiscuous mode [ 426.808108][T24621] bridge7: entered allmulticast mode [ 426.816829][T24621] bond8: (slave bridge7): Enslaving as a backup interface with an up link [ 426.902611][ T1155] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 426.973918][T24631] netlink: 'syz.4.5203': attribute type 7 has an invalid length. [ 427.039010][ T1144] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 427.161511][T24650] netlink: 'syz.3.5208': attribute type 1 has an invalid length. [ 427.225532][T24650] bond6: entered promiscuous mode [ 427.231958][T24650] bond6: entered allmulticast mode [ 427.237944][T24650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 427.242869][T24657] netlink: 'syz.3.5208': attribute type 2 has an invalid length. [ 427.361395][T24650] syzkaller0: entered promiscuous mode [ 427.366922][T24650] syzkaller0: entered allmulticast mode [ 427.575134][T24671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.927678][T24685] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 428.227604][T24701] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 428.236903][T24707] Cannot find add_set index 0 as target [ 429.104902][T24716] lo speed is unknown, defaulting to 1000 [ 429.240297][T24766] delete_channel: no stack [ 429.430666][T24784] netlink: 'syz.2.5245': attribute type 1 has an invalid length. [ 429.458944][T24783] netlink: 'syz.2.5245': attribute type 1 has an invalid length. [ 429.486787][T24783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.010366][T24811] netlink: 'syz.3.5251': attribute type 4 has an invalid length. [ 430.147404][T24809] __nla_validate_parse: 19 callbacks suppressed [ 430.147425][T24809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5250'. [ 431.509689][T24833] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5258'. [ 431.583927][T24833] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5258'. [ 431.648623][T24833] xt_policy: neither incoming nor outgoing policy selected [ 431.830285][T24853] netlink: 'syz.2.5262': attribute type 12 has an invalid length. [ 431.845986][T24853] netlink: 'syz.2.5262': attribute type 29 has an invalid length. [ 431.860813][T24853] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5262'. [ 432.036378][T24875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5267'. [ 432.119969][T24876] nbd6: detected capacity change from 0 to 127 [ 432.141901][T24877] netlink: 'syz.2.5269': attribute type 1 has an invalid length. [ 432.149858][T24877] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5269'. [ 432.185668][ T5146] block nbd6: Receive control failed (result -104) [ 432.256670][T24887] x_tables: duplicate entry at hook 2 [ 432.361522][ T29] audit: type=1804 audit(1771780820.465:9): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5275" name="/newroot/468/cgroup.controllers" dev="tmpfs" ino=2408 res=1 errno=0 [ 432.422913][ T29] audit: type=1800 audit(1771780820.465:10): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5275" name="cgroup.controllers" dev="tmpfs" ino=2408 res=0 errno=0 [ 432.502267][T24909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5278'. [ 432.522701][T24911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5277'. [ 432.523332][T24901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5276'. [ 432.533065][T24911] netlink: 'syz.3.5277': attribute type 7 has an invalid length. [ 432.551047][T24911] netlink: 'syz.3.5277': attribute type 8 has an invalid length. [ 432.558576][T24901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5276'. [ 432.691121][T24914] netlink: 'syz.3.5280': attribute type 1 has an invalid length. [ 432.741568][T24914] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.850515][T24929] IPVS: persistence engine module ip_vs_pe_À not found [ 432.923226][T24924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.924755][T24914] bond7: (slave gretap5): making interface the new active one [ 432.954489][T24914] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 433.296370][T24961] syzkaller0: entered promiscuous mode [ 433.315921][T24961] syzkaller0: entered allmulticast mode [ 433.338981][T24958] syzkaller0: entered promiscuous mode [ 433.344787][T24958] syzkaller0: entered allmulticast mode [ 433.371185][T24958] tipc: Enabled bearer , priority 0 [ 433.411447][T24958] tunl0: Caught tx_queue_len zero misconfig [ 433.421149][T24957] tipc: Resetting bearer [ 433.450829][T24957] tipc: Disabling bearer [ 433.563067][T24978] netlink: 'syz.0.5294': attribute type 12 has an invalid length. [ 433.763378][T24988] IPVS: persistence engine module ip_vs_pe_À not found [ 433.921840][T25004] bond7: option fail_over_mac: invalid value (16) [ 433.931838][T25004] bond7 (unregistering): Released all slaves [ 434.204311][T25019] netlink: 'syz.2.5304': attribute type 4 has an invalid length. [ 434.279323][T25019] sctp: [Deprecated]: syz.2.5304 (pid 25019) Use of int in max_burst socket option deprecated. [ 434.279323][T25019] Use struct sctp_assoc_value instead [ 434.457134][T25033] syzkaller0: entered promiscuous mode [ 434.471258][T25033] syzkaller0: entered allmulticast mode [ 434.736588][T25046] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 434.753993][T25055] netlink: 'syz.4.5314': attribute type 13 has an invalid length. [ 434.861118][ T35] bond8: (slave bridge7): link status up again after 0 ms [ 434.862385][T25059] ip6tnl0: Caught tx_queue_len zero misconfig [ 434.884843][T25064] block nbd0: reconnected socket [ 434.891983][ T1155] bond8: (slave bridge7): link status up again after 0 ms [ 434.919700][ T1155] bond8: (slave bridge7): link status up again after 0 ms [ 434.928158][ T5146] block nbd0: Receive control failed (result -32) [ 434.959762][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 435.069067][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 435.196755][T25080] __nla_validate_parse: 18 callbacks suppressed [ 435.196776][T25080] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5325'. [ 435.218006][T25080] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 435.218631][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 435.239329][T25091] nbd: must specify at least one socket [ 435.358499][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 435.380065][T25098] sctp: [Deprecated]: syz.1.5331 (pid 25098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.380065][T25098] Use struct sctp_sack_info instead [ 435.431210][T25102] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5332'. [ 435.487199][T25104] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 435.511374][T25104] bond7 (unregistering): Released all slaves [ 435.531498][T25111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5335'. [ 435.541245][T25111] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5335'. [ 435.543037][T25106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.550485][T25111] netlink: 'syz.3.5335': attribute type 6 has an invalid length. [ 435.559833][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 435.567065][T25111] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5335'. [ 435.637088][T25114] Bluetooth: MGMT ver 1.23 [ 435.644376][T25111] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5335'. [ 435.713818][T25120] nbd: couldn't find a device at index 2 [ 435.773223][T25116] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 435.916270][T25129] 8021q: adding VLAN 0 to HW filter on device bond8 [ 435.937270][T25134] bond8: (slave geneve4): making interface the new active one [ 435.949307][T25134] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 435.958697][T25133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5342'. [ 435.968255][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 435.996535][T25133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5342'. [ 436.043036][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 436.070392][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 436.092185][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 436.124435][T25133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5342'. [ 436.203678][T25148] lo: Caught tx_queue_len zero misconfig [ 436.245725][T25151] xt_limit: Overflow, try lower: 604147548/4200216962 [ 436.285998][T25151] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 436.314344][T25151] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 436.334024][T25151] gretap1: entered promiscuous mode [ 436.341393][T25151] gretap1: entered allmulticast mode [ 436.349265][T25154] bridge_slave_1: left allmulticast mode [ 436.355419][T25154] bridge_slave_1: left promiscuous mode [ 436.362084][T25154] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.376391][T25154] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 436.443609][T25165] sctp: [Deprecated]: syz.4.5353 (pid 25165) Use of int in max_burst socket option. [ 436.443609][T25165] Use struct sctp_assoc_value instead [ 436.776848][T25188] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 436.805518][T25188] bond8 (unregistering): Released all slaves [ 436.946794][T25173] lo speed is unknown, defaulting to 1000 [ 437.094265][T25199] tunl0: entered promiscuous mode [ 437.112884][T25199] validate_nla: 6 callbacks suppressed [ 437.112905][T25199] netlink: 'syz.1.5363': attribute type 3 has an invalid length. [ 437.129230][T25199] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5363'. [ 437.380143][T25211] netlink: 'syz.4.5368': attribute type 4 has an invalid length. [ 437.681133][T25232] netlink: 'syz.0.5375': attribute type 1 has an invalid length. [ 437.901713][T25232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.025152][T25238] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.041018][T25238] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 438.078073][T25238] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 438.246771][T25244] veth15: entered promiscuous mode [ 438.259716][T25244] bond5: (slave veth15): Enslaving as an active interface with a down link [ 438.302922][T25247] vlan2: entered allmulticast mode [ 438.313973][T25247] bond5: entered allmulticast mode [ 439.223328][T25320] netlink: 'syz.4.5393': attribute type 2 has an invalid length. [ 439.231572][T25316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.265737][T25320] 9: entered promiscuous mode [ 439.481626][T25336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.503372][T25336] team0: Port device batadv0 added [ 439.793995][T25358] pim6reg: entered allmulticast mode [ 439.869187][ T35] net_ratelimit: 29 callbacks suppressed [ 439.869207][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 440.030734][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 440.068027][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 440.152146][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 440.200222][T25393] __nla_validate_parse: 7 callbacks suppressed [ 440.200242][T25393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5412'. [ 440.294346][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 440.339470][T25402] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5414'. [ 440.415262][T25407] netlink: 'syz.0.5417': attribute type 1 has an invalid length. [ 440.423888][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 440.444680][T25409] team0: Cannot enslave team device to itself [ 440.538930][ T270] bond8: (slave bridge7): failed to get link speed/duplex [ 440.600682][T25422] netlink: 'syz.0.5421': attribute type 1 has an invalid length. [ 440.623395][T25422] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.5421'. [ 440.653137][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 440.783284][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 440.919807][T25442] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 440.960542][T25432] ip6tnl0: Caught tx_queue_len zero misconfig [ 441.047595][T25450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5427'. [ 441.158527][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 441.357178][T25474] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 441.413424][T25477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.447830][T25476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.460969][T25479] syzkaller0: entered promiscuous mode [ 441.469136][T25479] syzkaller0: entered allmulticast mode [ 441.485856][T25479] tipc: Enabled bearer , priority 0 [ 441.511299][T25478] tipc: Resetting bearer [ 441.543576][T25478] tipc: Disabling bearer [ 441.719462][T25493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5443'. [ 442.077316][T25511] netlink: 'syz.3.5451': attribute type 2 has an invalid length. [ 442.214359][T25527] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 442.222913][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5454'. [ 442.260594][T25525] netlink: 'syz.0.5454': attribute type 7 has an invalid length. [ 442.271150][T25525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5454'. [ 442.282191][T25525] netlink: 'syz.0.5454': attribute type 7 has an invalid length. [ 442.671035][T25562] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5467'. [ 442.694659][T25562] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5467'. [ 442.704906][T25562] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5467'. [ 443.094885][T25598] netlink: 'syz.4.5479': attribute type 33 has an invalid length. [ 443.123526][T25597] netlink: 'syz.4.5479': attribute type 33 has an invalid length. [ 443.576817][T25639] tipc: Enabling of bearer rejected, already enabled [ 444.188710][T25675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.253536][T25674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.436380][T25699] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 444.968536][ T1037] net_ratelimit: 33 callbacks suppressed [ 444.968557][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 445.078435][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.086514][ C1] lec:lec_tx_timeout: lec0 [ 445.131694][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 445.179346][ T11] block nbd3: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 120 seconds [ 445.190409][ T11] block nbd3: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 120 seconds [ 445.201720][ T11] block nbd3: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 120 seconds [ 445.213605][ T11] block nbd3: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 120 seconds [ 445.243913][T25764] pim6reg1: entered promiscuous mode [ 445.254471][T25764] pim6reg1: entered allmulticast mode [ 445.298570][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 445.401427][T25774] __nla_validate_parse: 15 callbacks suppressed [ 445.401444][T25774] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5531'. [ 445.417476][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 445.452705][T25780] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5531'. [ 445.490578][T25781] netlink: 'syz.0.5533': attribute type 2 has an invalid length. [ 445.523508][T25781] vþ: entered promiscuous mode [ 445.558715][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 445.601494][T25790] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 445.669156][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 445.732109][T25800] netlink: 'syz.2.5542': attribute type 1 has an invalid length. [ 445.764871][T25800] netlink: 'syz.2.5542': attribute type 1 has an invalid length. [ 445.778659][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 445.790339][T25800] tipc: Enabled bearer , priority 0 [ 445.828056][T25811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5546'. [ 445.899368][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 445.929651][T25818] syzkaller0: entered promiscuous mode [ 445.935171][T25818] syzkaller0: entered allmulticast mode [ 446.005349][T25820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5549'. [ 446.109393][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 446.215580][T25830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5552'. [ 446.239644][T25832] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5553'. [ 446.246784][T25830] netlink: 'syz.0.5552': attribute type 26 has an invalid length. [ 446.271210][T25832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5553'. [ 446.278418][T25830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5552'. [ 446.287209][T25832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5553'. [ 446.299760][T25834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5554'. [ 446.429687][T25844] netlink: 'syz.1.5556': attribute type 39 has an invalid length. [ 446.438012][T25846] netlink: 'syz.1.5556': attribute type 39 has an invalid length. [ 446.444146][T25843] : entered promiscuous mode [ 447.357171][T25904] validate_nla: 4 callbacks suppressed [ 447.357190][T25904] netlink: 'syz.0.5574': attribute type 10 has an invalid length. [ 447.590430][T25919] veth5: entered allmulticast mode [ 447.603701][T25923] netlink: 'syz.2.5580': attribute type 1 has an invalid length. [ 447.636549][T25931] netlink: 'syz.0.5579': attribute type 16 has an invalid length. [ 447.647333][T25931] netlink: 'syz.0.5579': attribute type 17 has an invalid length. [ 447.753803][T25931] lo: left promiscuous mode [ 447.783994][T25931] gre0: left promiscuous mode [ 447.798199][T25931] gre0: left allmulticast mode [ 447.823723][T25931] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.830936][T25931] bridge0: port 2(bridge_slave_1) entered listening state [ 447.936130][T25938] 8021q: adding VLAN 0 to HW filter on device bond8 [ 447.950429][T25941] macvlan2: entered promiscuous mode [ 447.955767][T25941] macvlan2: entered allmulticast mode [ 447.965470][T25941] bond8: entered allmulticast mode [ 447.971773][T25941] bond8: entered promiscuous mode [ 447.978256][T25941] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 447.992213][T25941] team0: Port device macvlan2 added [ 448.020859][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.028050][ T1037] bridge0: port 1(bridge_slave_0) entered listening state [ 448.424891][T25987] netlink: 'syz.3.5597': attribute type 10 has an invalid length. [ 448.471834][T25987] team0: Port device dummy0 added [ 448.488222][T25991] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.495542][T25991] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.995494][T26023] netlink: 'syz.0.5606': attribute type 4 has an invalid length. [ 449.207420][T26032] IPVS: set_ctl: invalid protocol: 46 10.1.1.0:20000 [ 449.322959][T26045] netlink: 'syz.2.5611': attribute type 4 has an invalid length. [ 449.913709][T26092] syzkaller0: entered promiscuous mode [ 449.936495][T26092] syzkaller0: entered allmulticast mode [ 450.255935][T26108] netlink: 'syz.0.5625': attribute type 1 has an invalid length. [ 450.472848][T26116] __nla_validate_parse: 65 callbacks suppressed [ 450.472891][T26116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5628'. [ 450.500639][T26118] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5629'. [ 450.516380][T26116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5628'. [ 450.519669][T26118] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5629'. [ 451.498994][ C1] net_ratelimit: 86 callbacks suppressed [ 451.499026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.638775][T26128] netlink: 'syz.1.5632': attribute type 1 has an invalid length. [ 451.646933][T26128] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5632'. [ 452.095149][T26136] netlink: 'syz.1.5634': attribute type 13 has an invalid length. [ 452.105581][T26136] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5634'. [ 452.220969][T26113] bridge9: port 1(gretap2) entered blocking state [ 452.227634][T26113] bridge9: port 1(gretap2) entered disabled state [ 452.240897][T26113] gretap2: entered allmulticast mode [ 452.248199][T26113] gretap2: entered promiscuous mode [ 452.291945][T26136] syz_tun: refused to change device tx_queue_len [ 452.340252][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 452.431181][T26152] netlink: 'syz.4.5639': attribute type 11 has an invalid length. [ 452.461589][T26155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5638'. [ 452.481085][ T270] bond8: (slave bridge7): failed to get link speed/duplex [ 452.535027][T26163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5640'. [ 452.794897][T26178] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 452.829197][T26171] dvmrp1: left allmulticast mode [ 452.898841][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 452.977057][T26179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5640'. [ 453.056654][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 453.113815][T26193] team_slave_0: Caught tx_queue_len zero misconfig [ 453.131237][T26195] sit0: entered promiscuous mode [ 453.162309][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5647'. [ 453.291384][T26201] dvmrp1: entered allmulticast mode [ 453.319940][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 453.473659][T26221] tipc: Enabled bearer , priority 0 [ 453.487526][T26221] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 453.566645][T26221] tipc: Resetting bearer [ 453.598811][ T1144] bond8: (slave bridge7): failed to get link speed/duplex [ 453.624826][T26232] xt_policy: too many policy elements [ 453.713106][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 453.811751][T26249] tipc: Resetting bearer [ 453.873681][T26249] tipc: Disabling bearer [ 453.918744][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 453.927829][T26253] delete_channel: no stack [ 453.948952][T26253] netlink: 'syz.4.5661': attribute type 1 has an invalid length. [ 453.985744][T26255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.020891][T26253] 8021q: adding VLAN 0 to HW filter on device bond9 [ 454.046114][T26261] bond9: entered promiscuous mode [ 454.062233][T26261] bond9: entered allmulticast mode [ 454.355089][T26275] gretap2: entered promiscuous mode [ 454.364255][T26275] gretap2: entered allmulticast mode [ 454.454415][T26289] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 454.717480][T26309] syzkaller1: entered promiscuous mode [ 454.723868][T26309] syzkaller1: entered allmulticast mode [ 454.732633][T26309] veth0: entered promiscuous mode [ 454.741740][T26307] syzkaller0: entered promiscuous mode [ 454.747925][T26307] syzkaller0: entered allmulticast mode [ 454.760107][T26308] veth0: left promiscuous mode [ 454.778633][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.785874][ C0] bridge0: topology change detected, propagating [ 454.859741][T26311] netlink: 'syz.4.5676': attribute type 8 has an invalid length. [ 455.052901][T26323] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.092818][T26332] netlink: 'syz.3.5682': attribute type 14 has an invalid length. [ 455.105022][T26332] netlink: 'syz.3.5682': attribute type 13 has an invalid length. [ 455.115831][T26323] bond6: (slave lo): Enslaving as an active interface with an up link [ 455.136616][T26327] tipc: New replicast peer: 255.255.255.255 [ 455.150889][T26327] tipc: Enabled bearer , priority 10 [ 455.261885][T26327] bond10: entered promiscuous mode [ 455.281692][T26327] bond10: entered allmulticast mode [ 455.297899][T26327] 8021q: adding VLAN 0 to HW filter on device bond10 [ 455.330914][T26357] netlink: 'syz.2.5686': attribute type 83 has an invalid length. [ 455.377762][T26334] bond11: entered promiscuous mode [ 455.384040][T26334] bond11: entered allmulticast mode [ 455.393455][T26334] 8021q: adding VLAN 0 to HW filter on device bond11 [ 455.483985][T26359] __nla_validate_parse: 14 callbacks suppressed [ 455.484052][T26359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5689'. [ 455.600005][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5692'. [ 455.696382][T26376] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 455.714270][T26376] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.913827][T26382] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5694'. [ 455.962210][T26390] netlink: 'syz.4.5697': attribute type 9 has an invalid length. [ 456.040741][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5694'. [ 456.315370][ T5875] tipc: Node number set to 1402659456 [ 456.491462][T26426] netem: incorrect ge model size [ 456.498514][T26426] netem: change failed [ 456.531726][T26430] netlink: 'syz.1.5707': attribute type 6 has an invalid length. [ 456.708646][ T1155] net_ratelimit: 20 callbacks suppressed [ 456.708666][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 456.851331][ T1144] bond8: (slave bridge7): failed to get link speed/duplex [ 456.854754][T26447] netlink: 'syz.3.5714': attribute type 3 has an invalid length. [ 456.870743][T26447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5714'. [ 456.979163][ T1144] bond8: (slave bridge7): failed to get link speed/duplex [ 457.100536][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 457.149964][T26472] netlink: 'syz.0.5721': attribute type 83 has an invalid length. [ 457.158241][T26471] syzkaller0: entered promiscuous mode [ 457.167518][T26471] syzkaller0: entered allmulticast mode [ 457.239053][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 457.311529][T26482] netlink: 580 bytes leftover after parsing attributes in process `syz.3.5722'. [ 457.379953][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 457.407892][T26486] geneve3: entered promiscuous mode [ 457.420904][T26486] geneve3: entered allmulticast mode [ 457.436016][ T1155] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 457.445091][ T1155] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 457.466363][ T1155] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 457.490636][ T1155] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 457.508753][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 457.706460][T26503] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5731'. [ 457.708948][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 457.838969][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 457.924916][T26516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.936236][T26517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5738'. [ 457.955940][T26515] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.5737'. [ 457.972573][T26515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5737'. [ 458.576992][T26561] Cannot find set identified by id 1 to match [ 459.312321][T26564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.343080][T26564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.647473][T26564] bond1: left promiscuous mode [ 459.655574][T26564] bridge2: left promiscuous mode [ 459.675222][T26564] geneve2: left promiscuous mode [ 459.706161][T26564] veth3: left promiscuous mode [ 459.792621][T26564] veth5: left allmulticast mode [ 459.801532][T26564] gretap2: left promiscuous mode [ 459.806518][T26564] gretap2: left allmulticast mode [ 459.822528][T21166] lo speed is unknown, defaulting to 1000 [ 459.828318][T21166] syz0: Port: 1 Link DOWN [ 459.976354][ T270] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.005525][ T270] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.019475][ T270] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 49489 - 0 [ 460.039265][ T270] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.056294][ T270] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.087152][ T270] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 49489 - 0 [ 460.097337][T21166] lo speed is unknown, defaulting to 1000 [ 460.097331][ T270] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.115110][ T270] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.125240][ T270] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 49489 - 0 [ 460.163811][T26594] ip6gre1: entered allmulticast mode [ 460.198027][T26597] bridge4: entered promiscuous mode [ 460.203904][T26597] bridge4: entered allmulticast mode [ 460.229061][ T1092] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.237987][ T1092] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.273872][ T1092] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 49489 - 0 [ 460.855748][T26647] validate_nla: 2 callbacks suppressed [ 460.855766][T26647] netlink: 'syz.1.5778': attribute type 1 has an invalid length. [ 461.145799][T26667] vxcan1: Caught tx_queue_len zero misconfig [ 461.162783][T26673] __nla_validate_parse: 5 callbacks suppressed [ 461.162802][T26673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5788'. [ 461.233178][T26676] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5787'. [ 461.306392][T26683] Cannot find set identified by id 65534 to match [ 461.424806][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5794'. [ 461.449659][T26693] ip6tnl0: Caught tx_queue_len zero misconfig [ 461.483867][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5793'. [ 461.515577][T26696] bond0: entered allmulticast mode [ 461.522302][T26696] bond_slave_0: entered allmulticast mode [ 461.532641][T26696] bond_slave_1: entered allmulticast mode [ 461.542016][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5793'. [ 461.551653][T26702] netlink: 'syz.2.5796': attribute type 1 has an invalid length. [ 461.561632][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5793'. [ 461.591011][T26702] bond7: entered promiscuous mode [ 461.596634][T26702] 8021q: adding VLAN 0 to HW filter on device bond7 [ 461.629892][T26703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5796'. [ 461.630330][T26702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5796'. [ 461.656164][T26702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5796'. [ 461.665891][T26703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5796'. [ 461.729068][ T1037] net_ratelimit: 18 callbacks suppressed [ 461.729089][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 461.745829][T26711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.883821][T26717] sctp: [Deprecated]: syz.2.5800 (pid 26717) Use of int in maxseg socket option. [ 461.883821][T26717] Use struct sctp_assoc_value instead [ 461.981724][T26717] netlink: 'syz.2.5800': attribute type 23 has an invalid length. [ 462.029582][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 462.181878][T26728] IPVS: Unknown mcast interface: vcan0 [ 462.321553][T26745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.336933][T26745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.380011][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 462.391439][T26745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.459636][ T11] block nbd6: Possible stuck request ffff888026d38000: control (read@0,1024B). Runtime 30 seconds [ 462.473304][ T11] block nbd6: Possible stuck request ffff888026d38200: control (read@1024,1024B). Runtime 30 seconds [ 462.488571][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 462.496047][ T11] block nbd6: Possible stuck request ffff888026d38400: control (read@2048,1024B). Runtime 30 seconds [ 462.508247][ T11] block nbd6: Possible stuck request ffff888026d38600: control (read@3072,1024B). Runtime 30 seconds [ 462.544196][T26754] bond0: Caught tx_queue_len zero misconfig [ 462.631089][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 462.748978][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 462.868650][ T1144] bond8: (slave bridge7): failed to get link speed/duplex [ 463.058604][ T270] bond8: (slave bridge7): failed to get link speed/duplex [ 463.117673][T26763] lo speed is unknown, defaulting to 1000 [ 463.169288][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 463.320869][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 464.199686][T26861] bond6: option mode: unable to set because the bond device has slaves [ 464.296660][T26864] netlink: 'syz.3.5844': attribute type 4 has an invalid length. [ 464.335369][T26864] netlink: 'syz.3.5844': attribute type 4 has an invalid length. [ 464.374326][ T6226] lec:lec_start_xmit: lec0:No lecd attached [ 464.404040][T26870] tipc: Enabling of bearer rejected, already enabled [ 464.444239][T26864] netlink: 'syz.3.5844': attribute type 7 has an invalid length. [ 464.461422][T26864] netlink: 'syz.3.5844': attribute type 7 has an invalid length. [ 464.463359][T26873] sctp: [Deprecated]: syz.4.5846 (pid 26873) Use of int in maxseg socket option. [ 464.463359][T26873] Use struct sctp_assoc_value instead [ 465.276153][T26918] netlink: 'syz.0.5862': attribute type 3 has an invalid length. [ 465.284371][T26923] IPVS: length: 8 != 1152 [ 465.290397][T26918] netlink: 'syz.0.5862': attribute type 1 has an invalid length. [ 465.771244][T26948] bond12: Unable to set up delay as MII monitoring is disabled [ 465.786734][T26958] netlink: 'syz.0.5874': attribute type 5 has an invalid length. [ 465.802048][T26948] bond12 (unregistering): Released all slaves [ 465.859210][ T1037] team0: left allmulticast mode [ 465.864388][ T1037] team_slave_0: left allmulticast mode [ 465.870681][ T1037] macvlan3: left allmulticast mode [ 465.875945][ T1037] bond2: left allmulticast mode [ 465.882401][ T1037] team0: left promiscuous mode [ 465.889566][ T1037] bridge0: port 3(team0) entered disabled state [ 465.904463][ T1037] bridge_slave_1: left allmulticast mode [ 465.910665][ T1037] bridge_slave_1: left promiscuous mode [ 465.917835][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.950846][ T1037] bridge_slave_0: left allmulticast mode [ 465.961498][ T1037] bridge_slave_0: left promiscuous mode [ 465.977241][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.125662][ T1037] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 466.237250][T26986] __nla_validate_parse: 21 callbacks suppressed [ 466.237271][T26986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5879'. [ 466.250569][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5882'. [ 466.350196][ T1037] erspan0 (unregistering): left allmulticast mode [ 466.388517][T26985] netlink: 'syz.2.5882': attribute type 15 has an invalid length. [ 466.406701][ T1037] gretap0 (unregistering): left promiscuous mode [ 466.443983][ T1037] bond4 (unregistering): (slave gretap2): Releasing active interface [ 466.466439][ T1037] dvmrp0 (unregistering): left allmulticast mode [ 466.932655][ T1037] bond0 (unregistering): left promiscuous mode [ 466.940388][ T1037] bond0 (unregistering): Released all slaves [ 466.954457][ T1037] bond1 (unregistering): Released all slaves [ 466.966528][ T1037] bond2 (unregistering): left promiscuous mode [ 466.979897][ T1037] team0: Port device macvlan3 removed [ 466.990144][ T1037] bond2 (unregistering): Released all slaves [ 467.004085][ T1037] bond3 (unregistering): Released all slaves [ 467.016949][ T1037] bond4 (unregistering): Released all slaves [ 467.032003][ T1037] bond5 (unregistering): (slave lo): Releasing backup interface [ 467.041144][ T1037] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 467.058468][ T1037] bond5 (unregistering): Released all slaves [ 467.094890][T26966] gtp0: entered promiscuous mode [ 467.100967][T26966] gtp0: entered allmulticast mode [ 469.007592][ T1037] vþ: left promiscuous mode [ 469.061224][ T1155] net_ratelimit: 17 callbacks suppressed [ 469.061245][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 469.150703][ T1037] tipc: Disabling bearer [ 469.160403][ T1037] tipc: Disabling bearer [ 469.167043][ T1037] tipc: Left network mode [ 469.209729][ T3555] bond8: (slave bridge7): failed to get link speed/duplex [ 469.314855][T27035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5892'. [ 469.345477][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 469.363279][T27040] netlink: 'syz.3.5894': attribute type 1 has an invalid length. [ 469.386763][T27041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5891'. [ 469.476290][ T1092] bond8: (slave bridge7): failed to get link speed/duplex [ 469.608813][ T3555] bond8: (slave bridge7): failed to get link speed/duplex [ 469.647895][T27051] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5892'. [ 469.703300][T27062] team0: Port device dummy0 removed [ 469.725279][T27062] batman_adv: batadv0: Adding interface: dummy0 [ 469.742286][T27062] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 469.823173][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 469.903778][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 469.911842][ C1] lec:lec_tx_timeout: lec0 [ 470.047054][T27084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.056497][ T270] bond8: (slave bridge7): failed to get link speed/duplex [ 470.085688][T27081] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5904'. [ 470.160775][T27045] lo speed is unknown, defaulting to 1000 [ 470.252833][T27094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5906'. [ 470.270731][ T270] bond8: (slave bridge7): failed to get link speed/duplex [ 470.324005][T27100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.427993][T27108] netlink: 'syz.2.5911': attribute type 9 has an invalid length. [ 470.675874][T27113] bond0: Device is already in use. [ 470.790745][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5916'. [ 470.812278][T27122] netlink: 'syz.2.5915': attribute type 1 has an invalid length. [ 471.102222][ T1037] bond_slave_0: left promiscuous mode [ 471.196658][ T1037] hsr_slave_0: left promiscuous mode [ 471.231055][ T1037] hsr_slave_1: left promiscuous mode [ 471.256264][ T1037] veth1_macvtap: left promiscuous mode [ 471.265928][ T1037] veth0_macvtap: left promiscuous mode [ 471.272411][ T1037] veth1_vlan: left promiscuous mode [ 471.444621][T27149] nbd: must specify an index to disconnect [ 471.562957][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5925'. [ 471.748985][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 471.853321][T27135] xfrm1: entered allmulticast mode [ 471.872305][T27138] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 472.115429][ T1037] IPVS: stop unused estimator thread 0... [ 472.156233][T27161] x_tables: duplicate underflow at hook 1 [ 472.243044][T27161] macvtap1: left allmulticast mode [ 472.248311][T27161] vlan0: left allmulticast mode [ 472.254182][T27161] veth0_vlan: left allmulticast mode [ 472.269326][T27161] geneve3: left allmulticast mode [ 472.279002][T27161] bond3: left allmulticast mode [ 472.285465][T27161] gretap2: left allmulticast mode [ 472.294298][T27161] bond6: left allmulticast mode [ 472.303757][T27161] bridge4: left allmulticast mode [ 472.667547][T27191] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.678188][T27191] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.686890][T27191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.696142][T27191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.705298][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.776512][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.785114][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.794200][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.804567][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.813051][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.114722][T27210] netlink: 'syz.1.5939': attribute type 2 has an invalid length. [ 473.210800][T27213] netlink: 'syz.1.5941': attribute type 1 has an invalid length. [ 473.396658][T27188] lo speed is unknown, defaulting to 1000 [ 473.512258][T27216] sctp: [Deprecated]: syz.4.5942 (pid 27216) Use of int in max_burst socket option. [ 473.512258][T27216] Use struct sctp_assoc_value instead [ 473.691677][T27230] netlink: 'syz.3.5947': attribute type 12 has an invalid length. [ 473.767445][T27230] bond10: option primary_reselect: invalid value (255) [ 473.777307][T27230] bond10 (unregistering): Released all slaves [ 473.847512][T27237] macsec3: entered promiscuous mode [ 473.992549][T27247] netlink: 'syz.3.5953': attribute type 1 has an invalid length. [ 474.061939][T27247] 8021q: adding VLAN 0 to HW filter on device bond10 [ 474.100633][T27253] bond10: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 474.159648][ T1037] net_ratelimit: 21 callbacks suppressed [ 474.159668][ T1037] bond8: (slave bridge7): failed to get link speed/duplex [ 474.176580][T27252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'. [ 474.225173][T27247] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 474.308767][T27270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5960'. [ 474.328469][ T1155] bond8: (slave bridge7): failed to get link speed/duplex [ 474.361669][ T1037] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 474.474366][T27188] chnl_net:caif_netlink_parms(): no params data found [ 474.488662][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.529235][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.553344][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.578830][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.603297][ T49] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.648524][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.678972][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 474.748256][T27294] netlink: 'syz.4.5966': attribute type 3 has an invalid length. [ 474.805325][T27188] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.812983][T27188] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.813657][T27281] xt_CT: No such helper "netbios-ns" [ 474.820870][T27188] bridge_slave_0: entered allmulticast mode [ 474.833737][T27188] bridge_slave_0: entered promiscuous mode [ 474.843125][T27188] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.850449][T27188] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.851854][T27305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5966'. [ 474.857773][T27188] bridge_slave_1: entered allmulticast mode [ 474.873362][ T5828] Bluetooth: hci3: command tx timeout [ 474.875013][T27188] bridge_slave_1: entered promiscuous mode [ 474.889301][T27306] netlink: 'syz.2.5967': attribute type 10 has an invalid length. [ 474.926093][T27188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.932508][T27301] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 474.945397][T27306] bridge_slave_1: left allmulticast mode [ 474.953030][T27306] bridge_slave_1: left promiscuous mode [ 474.961860][T27301] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 474.973271][T27301] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 474.982882][T27306] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.001197][T27306] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 475.017493][T27188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.060258][T27188] team0: Port device team_slave_0 added [ 475.069432][T27188] team0: Port device team_slave_1 added [ 475.108920][T27188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.115901][T27188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.153078][T27188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.166941][T27188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.175648][T27188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.208729][T27188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.279283][ T11] block nbd3: Possible stuck request ffff888026bc8000: control (read@0,1024B). Runtime 150 seconds [ 475.291161][ T11] block nbd3: Possible stuck request ffff888026bc8200: control (read@1024,1024B). Runtime 150 seconds [ 475.303159][ T11] block nbd3: Possible stuck request ffff888026bc8400: control (read@2048,1024B). Runtime 150 seconds [ 475.311825][T27320] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 475.320542][ T11] block nbd3: Possible stuck request ffff888026bc8600: control (read@3072,1024B). Runtime 150 seconds [ 475.341765][T27320] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 475.421092][T27188] hsr_slave_0: entered promiscuous mode [ 475.427990][T27188] hsr_slave_1: entered promiscuous mode [ 475.440229][T27188] debugfs: 'hsr0' already exists in 'hsr' [ 475.446217][T27188] Cannot create hsr debugfs directory [ 475.605377][T27341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5976'. [ 476.062557][T27188] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.076936][T27188] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.109676][T27369] xt_hashlimit: size too large, truncated to 1048576 [ 476.165050][T27371] netlink: 'syz.4.5983': attribute type 4 has an invalid length. [ 476.195265][T27188] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.226239][T27188] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.251158][T27375] netlink: 'syz.2.5985': attribute type 29 has an invalid length. [ 476.262487][T27375] netlink: 'syz.2.5985': attribute type 29 has an invalid length. [ 476.289437][T27188] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.300488][T27188] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.383942][T27188] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.409680][T27188] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.487818][T27391] netlink: 'syz.1.5989': attribute type 17 has an invalid length. [ 476.523652][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5989'. [ 476.553840][T27391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5989'. [ 476.587198][T27391] gretap0: entered promiscuous mode [ 476.595285][T27391] gretap0: left promiscuous mode [ 476.768081][T27188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.817297][T27188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.835067][T27403] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 476.864586][T27188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.914254][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5992'. [ 476.942849][T27188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.950283][ T5828] Bluetooth: hci3: command tx timeout [ 477.044958][T27413] bond10: entered promiscuous mode [ 477.052812][T27413] bond10: entered allmulticast mode [ 477.060647][T27413] 8021q: adding VLAN 0 to HW filter on device bond10 [ 477.160583][T27428] set match dimension is over the limit! [ 477.181242][T27188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.202148][T27188] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.233448][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.240666][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.300108][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.307289][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.419503][T27440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5999'. [ 477.460892][T27440] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 477.460990][T27443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6001'. [ 477.531745][T27445] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6002'. [ 477.635716][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6003'. [ 477.640287][T27451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6004'. [ 477.733132][T27188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.790817][T27460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6006'. [ 477.825304][T27464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6005'. [ 477.860748][T27188] veth0_vlan: entered promiscuous mode [ 477.877730][T27188] veth1_vlan: entered promiscuous mode [ 477.952474][T27188] veth0_macvtap: entered promiscuous mode [ 477.965653][T27188] veth1_macvtap: entered promiscuous mode [ 478.005168][T27188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.053443][T27188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.095390][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.107794][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.148084][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.197326][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.202517][T27484] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6015'. [ 478.265533][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.276474][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.322174][T27486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.334935][T27486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.353294][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.374797][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.392914][T27494] validate_nla: 4 callbacks suppressed [ 478.393085][T27494] netlink: 'syz.3.6018': attribute type 1 has an invalid length. [ 478.441907][T27494] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6018'. [ 478.905298][T27520] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 479.029181][ T5828] Bluetooth: hci3: command tx timeout [ 479.143759][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.155672][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.165393][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.173933][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.182189][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.222705][ T35] net_ratelimit: 171 callbacks suppressed [ 479.222726][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 479.237060][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.297049][T27538] sctp: [Deprecated]: syz.3.6028 (pid 27538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.297049][T27538] Use struct sctp_sack_info instead [ 479.319359][T27538] IPVS: length: 187 != 8 [ 479.320817][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.361660][T27533] tipc: Enabled bearer , priority 0 [ 479.400549][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.451319][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.478483][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.516361][T27533] syzkaller0: entered promiscuous mode [ 479.522774][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.550212][T27533] syzkaller0: entered allmulticast mode [ 479.556675][T27533] tipc: Resetting bearer [ 479.562848][ T49] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.572224][ T49] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 479.698903][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.707860][T27532] tipc: Resetting bearer [ 479.861000][T27562] netlink: 'syz.2.6033': attribute type 3 has an invalid length. [ 481.103004][ T5146] Bluetooth: hci3: command tx timeout [ 481.263450][ T5146] Bluetooth: hci2: command tx timeout [ 481.540546][T27532] tipc: Disabling bearer [ 481.669150][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 481.683202][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.772217][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 481.789195][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.836472][T27568] syzkaller0: entered promiscuous mode [ 481.842465][T27568] syzkaller0: entered allmulticast mode [ 481.891340][T27528] lo speed is unknown, defaulting to 1000 [ 482.042493][T27586] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 482.056075][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 482.075698][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.103906][T27586] __nla_validate_parse: 2 callbacks suppressed [ 482.103929][T27586] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6040'. [ 482.129248][T27586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6040'. [ 482.252457][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 482.285478][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.350036][T27592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6042'. [ 482.518754][ T35] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.587403][ T270] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.622226][T27605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6045'. [ 482.643976][T27610] netlink: 'syz.0.6047': attribute type 1 has an invalid length. [ 482.661159][T27605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6045'. [ 482.672103][T27610] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6047'. [ 482.727263][ T1092] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.799814][T27619] syzkaller0: entered promiscuous mode [ 482.812730][T27619] syzkaller0: entered allmulticast mode [ 482.827961][T27618] tipc: Enabled bearer , priority 0 [ 483.014962][T27641] netlink: 'syz.0.6051': attribute type 1 has an invalid length. [ 483.019428][T27643] netlink: 'syz.0.6051': attribute type 1 has an invalid length. [ 483.033291][ T3555] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.063347][T27611] tipc: Resetting bearer [ 483.114408][T27649] netlink: 'syz.4.6053': attribute type 1 has an invalid length. [ 483.124035][T27611] tipc: Disabling bearer [ 483.156674][ T49] bridge_slave_0: left allmulticast mode [ 483.173376][ T49] bridge_slave_0: left promiscuous mode [ 483.188793][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.212702][T27651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6054'. [ 483.292448][T27659] netlink: 'syz.0.6056': attribute type 3 has an invalid length. [ 483.330320][T27666] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6057'. [ 483.351798][ T5146] Bluetooth: hci2: command tx timeout [ 483.497551][T27673] sctp: [Deprecated]: syz.2.6058 (pid 27673) Use of int in maxseg socket option. [ 483.497551][T27673] Use struct sctp_assoc_value instead [ 483.601834][T27678] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6059'. [ 483.815899][ T49] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 483.855890][ T49] bridge0 (unregistering): left allmulticast mode [ 484.013076][ T49] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 484.021695][ T49] bond3 (unregistering): (slave bridge3): the permanent HWaddr of slave - 7e:0c:a2:0b:cc:37 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 484.063209][ T49] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 484.163015][ T49] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 484.171631][ T49] bridge6 (unregistering): left promiscuous mode [ 484.228835][ T1092] net_ratelimit: 207 callbacks suppressed [ 484.228857][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.268831][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.282173][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.288759][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.301507][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.314106][ T49] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 484.318819][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.333075][ T49] bond0 (unregistering): Released all slaves [ 484.346111][ T49] bond1 (unregistering): Released all slaves [ 484.352260][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.367418][ T49] bond2 (unregistering): Released all slaves [ 484.379194][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.382213][ T49] bond3 (unregistering): Released all slaves [ 484.398491][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.414735][ T49] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 484.422788][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.434526][ T49] bond4 (unregistering): Released all slaves [ 484.447847][ T49] bond5 (unregistering): (slave bond6): Releasing backup interface [ 484.448875][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.465641][ T49] bond5 (unregistering): Released all slaves [ 484.479009][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.480435][ T49] bond6 (unregistering): Released all slaves [ 484.504089][ T49] bond7 (unregistering): Released all slaves [ 484.516358][ T49] bond8 (unregistering): left allmulticast mode [ 484.522766][ T49] bond8 (unregistering): left promiscuous mode [ 484.532464][ T49] team0: Port device macvlan2 removed [ 484.543517][ T49] bond8 (unregistering): Released all slaves [ 484.555678][ T49] bond9 (unregistering): Released all slaves [ 484.568268][ T49] bond10 (unregistering): Released all slaves [ 484.587089][T27674] 8021q: VLANs not supported on ip6gre0 [ 484.621547][T27528] chnl_net:caif_netlink_parms(): no params data found [ 484.786478][ T49] tipc: Left network mode [ 484.895558][T27688] vlan2: entered allmulticast mode [ 484.962608][T27695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6064'. [ 484.989717][T27528] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.007741][T27528] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.034311][T27528] bridge_slave_0: entered allmulticast mode [ 485.071305][T27528] bridge_slave_0: entered promiscuous mode [ 485.193412][T27528] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.212238][T27528] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.245479][T27528] bridge_slave_1: entered allmulticast mode [ 485.272550][T27528] bridge_slave_1: entered promiscuous mode [ 485.429312][ T5146] Bluetooth: hci2: command tx timeout [ 485.555134][T27717] netlink: 'syz.4.6069': attribute type 4 has an invalid length. [ 485.608914][T27528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.650924][T27528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.966437][T27528] team0: Port device team_slave_0 added [ 485.996504][T27528] team0: Port device team_slave_1 added [ 486.115281][T27528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.142629][T27757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.149321][T27528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.209329][T27528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.443370][T27528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.474079][T27528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.502222][T27528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.534402][T27734] lo speed is unknown, defaulting to 1000 [ 486.637426][T27528] hsr_slave_0: entered promiscuous mode [ 486.667625][T27528] hsr_slave_1: entered promiscuous mode [ 486.692718][T27528] debugfs: 'hsr0' already exists in 'hsr' [ 486.720187][T27528] Cannot create hsr debugfs directory [ 486.852951][T27774] netlink: 'syz.2.6085': attribute type 4 has an invalid length. [ 487.103210][T27784] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 487.206136][T27797] netlink: 'syz.0.6090': attribute type 13 has an invalid length. [ 487.269648][T27797] gretap0: refused to change device tx_queue_len [ 487.372357][T27783] [ 487.374718][T27783] ====================================================== [ 487.381759][T27783] WARNING: possible circular locking dependency detected [ 487.388775][T27783] syzkaller #0 Not tainted [ 487.393174][T27783] ------------------------------------------------------ [ 487.400173][T27783] syz.2.6087/27783 is trying to acquire lock: [ 487.406220][T27783] ffff888026a485a0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 487.415607][T27783] [ 487.415607][T27783] but task is already holding lock: [ 487.422955][T27783] ffff888026a48060 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 487.433142][T27783] [ 487.433142][T27783] which lock already depends on the new lock. [ 487.433142][T27783] [ 487.443532][T27783] [ 487.443532][T27783] the existing dependency chain (in reverse order) is: [ 487.452538][T27783] [ 487.452538][T27783] -> #6 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 487.461135][T27783] blk_alloc_queue+0x546/0x680 [ 487.466413][T27783] __blk_mq_alloc_disk+0x197/0x390 [ 487.472040][T27783] nbd_dev_add+0x499/0xb50 [ 487.476966][T27783] nbd_init+0x168/0x1f0 [ 487.481631][T27783] do_one_initcall+0x250/0x8d0 [ 487.487001][T27783] do_initcall_level+0x104/0x190 [ 487.492451][T27783] do_initcalls+0x59/0xa0 [ 487.497297][T27783] kernel_init_freeable+0x2a6/0x3e0 [ 487.503007][T27783] kernel_init+0x1d/0x1d0 [ 487.507848][T27783] ret_from_fork+0x51e/0xb90 [ 487.512949][T27783] ret_from_fork_asm+0x1a/0x30 [ 487.518315][T27783] [ 487.518315][T27783] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 487.525515][T27783] fs_reclaim_acquire+0x71/0x100 [ 487.530964][T27783] __kmalloc_cache_node_noprof+0x46/0x6b0 [ 487.537188][T27783] create_worker+0x113/0x7e0 [ 487.542288][T27783] workqueue_prepare_cpu+0xe4/0x170 [ 487.547995][T27783] cpuhp_invoke_callback+0x445/0x860 [ 487.553791][T27783] _cpu_up+0x2ce/0x5b0 [ 487.558375][T27783] cpu_up+0x1d2/0x220 [ 487.562867][T27783] cpuhp_bringup_mask+0xb2/0x1a0 [ 487.568309][T27783] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 487.574619][T27783] bringup_nonboot_cpus+0x17/0x30 [ 487.580419][T27783] smp_init+0x32/0x110 [ 487.585007][T27783] kernel_init_freeable+0x288/0x3e0 [ 487.590722][T27783] kernel_init+0x1d/0x1d0 [ 487.595569][T27783] ret_from_fork+0x51e/0xb90 [ 487.600678][T27783] ret_from_fork_asm+0x1a/0x30 [ 487.606039][T27783] [ 487.606039][T27783] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 487.613765][T27783] cpus_read_lock+0x42/0x160 [ 487.618869][T27783] static_key_slow_inc+0x12/0x30 [ 487.624327][T27783] nbd_genl_reconfigure+0x132f/0x1ea0 [ 487.630300][T27783] genl_family_rcv_msg_doit+0x22a/0x330 [ 487.636359][T27783] genl_rcv_msg+0x61c/0x7a0 [ 487.641374][T27783] netlink_rcv_skb+0x232/0x4b0 [ 487.646651][T27783] genl_rcv+0x28/0x40 [ 487.651156][T27783] netlink_unicast+0x80f/0x9b0 [ 487.656429][T27783] netlink_sendmsg+0x813/0xb40 [ 487.661818][T27783] ____sys_sendmsg+0xa68/0xad0 [ 487.667095][T27783] ___sys_sendmsg+0x2a5/0x360 [ 487.672371][T27783] __x64_sys_sendmsg+0x1bd/0x2a0 [ 487.677910][T27783] do_syscall_64+0x14d/0xf80 [ 487.683021][T27783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.689421][T27783] [ 487.689421][T27783] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 487.697130][T27783] __mutex_lock+0x19f/0x1300 [ 487.702238][T27783] nbd_queue_rq+0x37b/0x1100 [ 487.707347][T27783] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 487.713429][T27783] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 487.720356][T27783] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 487.726865][T27783] blk_mq_run_hw_queue+0x348/0x4f0 [ 487.732493][T27783] blk_mq_dispatch_list+0xd16/0xe10 [ 487.738209][T27783] blk_mq_flush_plug_list+0x48d/0x570 [ 487.744270][T27783] __blk_flush_plug+0x3ed/0x4d0 [ 487.749636][T27783] __submit_bio+0x28d/0x580 [ 487.754649][T27783] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 487.760889][T27783] block_read_full_folio+0x599/0x830 [ 487.766770][T27783] filemap_read_folio+0x137/0x3b0 [ 487.772303][T27783] do_read_cache_folio+0x358/0x590 [ 487.777924][T27783] read_part_sector+0xb6/0x2b0 [ 487.783289][T27783] adfspart_check_ICS+0xa5/0xa40 [ 487.788741][T27783] bdev_disk_changed+0x7ba/0x1550 [ 487.794285][T27783] blkdev_get_whole+0x380/0x510 [ 487.799650][T27783] bdev_open+0x31e/0xd30 [ 487.804408][T27783] blkdev_open+0x470/0x610 [ 487.809329][T27783] do_dentry_open+0x785/0x14e0 [ 487.814618][T27783] vfs_open+0x3b/0x340 [ 487.819197][T27783] path_openat+0x2e08/0x3860 [ 487.824468][T27783] do_file_open+0x23e/0x4a0 [ 487.829477][T27783] do_sys_openat2+0x113/0x200 [ 487.834661][T27783] __x64_sys_openat+0x138/0x170 [ 487.840027][T27783] do_syscall_64+0x14d/0xf80 [ 487.845215][T27783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.851622][T27783] [ 487.851622][T27783] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 487.858822][T27783] __mutex_lock+0x19f/0x1300 [ 487.864011][T27783] nbd_queue_rq+0xc6/0x1100 [ 487.869135][T27783] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 487.875195][T27783] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 487.882058][T27783] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 487.888649][T27783] blk_mq_run_hw_queue+0x348/0x4f0 [ 487.894358][T27783] blk_mq_dispatch_list+0xd16/0xe10 [ 487.900067][T27783] blk_mq_flush_plug_list+0x48d/0x570 [ 487.905997][T27783] __blk_flush_plug+0x3ed/0x4d0 [ 487.911393][T27783] __submit_bio+0x28d/0x580 [ 487.916406][T27783] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 487.922560][T27783] block_read_full_folio+0x599/0x830 [ 487.928360][T27783] filemap_read_folio+0x137/0x3b0 [ 487.933900][T27783] do_read_cache_folio+0x358/0x590 [ 487.939554][T27783] read_part_sector+0xb6/0x2b0 [ 487.944846][T27783] adfspart_check_ICS+0xa5/0xa40 [ 487.950299][T27783] bdev_disk_changed+0x7ba/0x1550 [ 487.955956][T27783] blkdev_get_whole+0x380/0x510 [ 487.961317][T27783] bdev_open+0x31e/0xd30 [ 487.966158][T27783] blkdev_open+0x470/0x610 [ 487.971081][T27783] do_dentry_open+0x785/0x14e0 [ 487.976364][T27783] vfs_open+0x3b/0x340 [ 487.980941][T27783] path_openat+0x2e08/0x3860 [ 487.986036][T27783] do_file_open+0x23e/0x4a0 [ 487.991046][T27783] do_sys_openat2+0x113/0x200 [ 487.996232][T27783] __x64_sys_openat+0x138/0x170 [ 488.001588][T27783] do_syscall_64+0x14d/0xf80 [ 488.006699][T27783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.013099][T27783] [ 488.013099][T27783] -> #1 (set->srcu){.+.+}-{0:0}: [ 488.020206][T27783] __synchronize_srcu+0xca/0x3e0 [ 488.025653][T27783] elevator_switch+0x1e8/0x7a0 [ 488.030926][T27783] elevator_change+0x2cc/0x450 [ 488.036203][T27783] elevator_set_default+0x36c/0x430 [ 488.041913][T27783] blk_register_queue+0x366/0x430 [ 488.047440][T27783] __add_disk+0x677/0xd50 [ 488.052277][T27783] add_disk_fwnode+0xfb/0x480 [ 488.057462][T27783] nbd_dev_add+0x72c/0xb50 [ 488.062390][T27783] nbd_init+0x168/0x1f0 [ 488.067320][T27783] do_one_initcall+0x250/0x8d0 [ 488.072596][T27783] do_initcall_level+0x104/0x190 [ 488.078046][T27783] do_initcalls+0x59/0xa0 [ 488.082881][T27783] kernel_init_freeable+0x2a6/0x3e0 [ 488.088596][T27783] kernel_init+0x1d/0x1d0 [ 488.093439][T27783] ret_from_fork+0x51e/0xb90 [ 488.098537][T27783] ret_from_fork_asm+0x1a/0x30 [ 488.103811][T27783] [ 488.103811][T27783] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 488.111614][T27783] __lock_acquire+0x15a5/0x2cf0 [ 488.116981][T27783] lock_acquire+0xf0/0x2e0 [ 488.121946][T27783] __mutex_lock+0x19f/0x1300 [ 488.127305][T27783] elevator_change+0x1b3/0x450 [ 488.132579][T27783] elevator_set_none+0xb5/0x140 [ 488.137948][T27783] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 488.144349][T27783] nbd_start_device+0x17f/0xb10 [ 488.149754][T27783] nbd_genl_connect+0x165b/0x1cf0 [ 488.155287][T27783] genl_family_rcv_msg_doit+0x22a/0x330 [ 488.161354][T27783] genl_rcv_msg+0x61c/0x7a0 [ 488.166541][T27783] netlink_rcv_skb+0x232/0x4b0 [ 488.171906][T27783] genl_rcv+0x28/0x40 [ 488.176398][T27783] netlink_unicast+0x80f/0x9b0 [ 488.181669][T27783] netlink_sendmsg+0x813/0xb40 [ 488.186993][T27783] ____sys_sendmsg+0xa68/0xad0 [ 488.192284][T27783] ___sys_sendmsg+0x2a5/0x360 [ 488.197483][T27783] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.202936][T27783] do_syscall_64+0x14d/0xf80 [ 488.208213][T27783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.214664][T27783] [ 488.214664][T27783] other info that might help us debug this: [ 488.214664][T27783] [ 488.224888][T27783] Chain exists of: [ 488.224888][T27783] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#56 [ 488.224888][T27783] [ 488.238796][T27783] Possible unsafe locking scenario: [ 488.238796][T27783] [ 488.246241][T27783] CPU0 CPU1 [ 488.251597][T27783] ---- ---- [ 488.256956][T27783] lock(&q->q_usage_counter(io)#56); [ 488.262334][T27783] lock(fs_reclaim); [ 488.268828][T27783] lock(&q->q_usage_counter(io)#56); [ 488.276719][T27783] lock(&q->elevator_lock); [ 488.281297][T27783] [ 488.281297][T27783] *** DEADLOCK *** [ 488.281297][T27783] [ 488.289439][T27783] 6 locks held by syz.2.6087/27783: [ 488.294621][T27783] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 488.302806][T27783] #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 488.311764][T27783] #2: ffff888026cbb9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 488.323147][T27783] #3: ffff888026cbb8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 488.334184][T27783] #4: ffff888026a48060 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 488.344885][T27783] #5: ffff888026a48098 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 488.355756][T27783] [ 488.355756][T27783] stack backtrace: [ 488.361655][T27783] CPU: 1 UID: 0 PID: 27783 Comm: syz.2.6087 Not tainted syzkaller #0 PREEMPT(full) [ 488.361672][T27783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.361687][T27783] Call Trace: [ 488.361694][T27783] [ 488.361701][T27783] dump_stack_lvl+0xe8/0x150 [ 488.361722][T27783] print_circular_bug+0x2e1/0x300 [ 488.361742][T27783] check_noncircular+0x12e/0x150 [ 488.361762][T27783] __lock_acquire+0x15a5/0x2cf0 [ 488.361785][T27783] lock_acquire+0xf0/0x2e0 [ 488.361800][T27783] ? elevator_change+0x1b3/0x450 [ 488.361821][T27783] __mutex_lock+0x19f/0x1300 [ 488.361833][T27783] ? elevator_change+0x1b3/0x450 [ 488.361851][T27783] ? rcu_is_watching+0x15/0xb0 [ 488.361869][T27783] ? elevator_change+0x1b3/0x450 [ 488.361887][T27783] ? __pfx___mutex_lock+0x10/0x10 [ 488.361897][T27783] ? enable_work+0x17f/0x230 [ 488.361916][T27783] ? lockdep_hardirqs_on+0x7a/0x110 [ 488.361935][T27783] ? __cancel_work_sync+0xf7/0x110 [ 488.361953][T27783] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 488.361967][T27783] elevator_change+0x1b3/0x450 [ 488.361987][T27783] elevator_set_none+0xb5/0x140 [ 488.362003][T27783] ? __pfx_elevator_set_none+0x10/0x10 [ 488.362022][T27783] ? xa_load+0x1db/0x210 [ 488.362035][T27783] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 488.362053][T27783] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 488.362071][T27783] ? kernfs_add_one+0x477/0x5c0 [ 488.362088][T27783] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 488.362104][T27783] ? sysfs_add_file_mode_ns+0x259/0x300 [ 488.362121][T27783] nbd_start_device+0x17f/0xb10 [ 488.362140][T27783] ? device_create_file+0xf4/0x1b0 [ 488.362159][T27783] nbd_genl_connect+0x165b/0x1cf0 [ 488.362179][T27783] ? __pfx_nbd_genl_connect+0x10/0x10 [ 488.362196][T27783] ? rcu_is_watching+0x15/0xb0 [ 488.362215][T27783] ? __nla_parse+0x40/0x60 [ 488.362231][T27783] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 488.362253][T27783] genl_family_rcv_msg_doit+0x22a/0x330 [ 488.362273][T27783] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.362294][T27783] ? __lock_acquire+0x6b5/0x2cf0 [ 488.362311][T27783] genl_rcv_msg+0x61c/0x7a0 [ 488.362329][T27783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.362346][T27783] ? __pfx_nbd_genl_connect+0x10/0x10 [ 488.362361][T27783] ? __lock_acquire+0x6b5/0x2cf0 [ 488.362379][T27783] netlink_rcv_skb+0x232/0x4b0 [ 488.362393][T27783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.362410][T27783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.362429][T27783] ? down_read+0x272/0x2e0 [ 488.362441][T27783] ? genl_rcv+0xd/0x40 [ 488.362457][T27783] genl_rcv+0x28/0x40 [ 488.362472][T27783] netlink_unicast+0x80f/0x9b0 [ 488.362487][T27783] ? __pfx_netlink_unicast+0x10/0x10 [ 488.362500][T27783] ? netlink_sendmsg+0x650/0xb40 [ 488.362513][T27783] ? skb_put+0x11b/0x210 [ 488.362531][T27783] netlink_sendmsg+0x813/0xb40 [ 488.362548][T27783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.362563][T27783] ? aa_sock_msg_perm+0xf1/0x1b0 [ 488.362579][T27783] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 488.362592][T27783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.362612][T27783] ____sys_sendmsg+0xa68/0xad0 [ 488.362629][T27783] ? futex_unqueue+0x211/0x240 [ 488.362646][T27783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.362666][T27783] ? import_iovec+0x73/0xa0 [ 488.362683][T27783] ___sys_sendmsg+0x2a5/0x360 [ 488.362701][T27783] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.362720][T27783] ? futex_wait+0x29a/0x380 [ 488.362744][T27783] ? __fget_files+0x2a/0x420 [ 488.362761][T27783] ? __fget_files+0x3a0/0x420 [ 488.362780][T27783] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.362798][T27783] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.362818][T27783] ? rcu_is_watching+0x15/0xb0 [ 488.362838][T27783] do_syscall_64+0x14d/0xf80 [ 488.362856][T27783] ? trace_irq_disable+0x3b/0x150 [ 488.362874][T27783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.362886][T27783] ? clear_bhb_loop+0x40/0x90 [ 488.362900][T27783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.362916][T27783] RIP: 0033:0x7f0b4719c629 [ 488.362930][T27783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.362941][T27783] RSP: 002b:00007f0b4805b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.362955][T27783] RAX: ffffffffffffffda RBX: 00007f0b47415fa0 RCX: 00007f0b4719c629 [ 488.362965][T27783] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 488.362973][T27783] RBP: 00007f0b47232b39 R08: 0000000000000000 R09: 0000000000000000 [ 488.362981][T27783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.362989][T27783] R13: 00007f0b47416038 R14: 00007f0b47415fa0 R15: 00007fff50d835e8 [ 488.363004][T27783] [ 488.821379][ T5146] Bluetooth: hci2: command tx timeout [ 488.953852][T27528] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.008236][ T49] hsr_slave_0: left promiscuous mode [ 489.037408][ T49] veth0_macvtap: left promiscuous mode [ 489.038455][T27783] nbd7: detected capacity change from 0 to 63 [ 489.043218][ T49] veth1_vlan: left promiscuous mode [ 489.055045][ T49] veth0_vlan: left promiscuous mode [ 489.062732][ T5828] block nbd7: Receive control failed (result -32) [ 489.069357][T27191] block nbd7: Receive control failed (result -32) [ 489.075974][ T5828] block nbd7: Receive control failed (result -32) [ 489.083101][T27191] block nbd7: Receive control failed (result -32) [ 489.091025][ T5146] block nbd7: Receive control failed (result -32) [ 489.091158][T20373] block nbd7: Send control failed (result -32) [ 489.104487][T20373] block nbd7: Request send failed, requeueing [ 489.111006][ T1169] block nbd7: Dead connection, failed to find a fallback [ 489.118050][ T1169] block nbd7: shutting down sockets [ 489.124656][ T1169] blk_print_req_error: 138 callbacks suppressed [ 489.124671][ T1169] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.141794][ T1169] buffer_io_error: 138 callbacks suppressed [ 489.141810][ T1169] Buffer I/O error on dev nbd7, logical block 0, async page read [ 489.158785][T20373] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.168324][T20373] Buffer I/O error on dev nbd7, logical block 1, async page read [ 489.176433][T20373] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.186040][T20373] Buffer I/O error on dev nbd7, logical block 2, async page read [ 489.187592][ T49] pimreg3 (unregistering): left allmulticast mode [ 489.193922][T20373] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.193947][T20373] Buffer I/O error on dev nbd7, logical block 3, async page read [ 489.193991][T20373] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.194009][T20373] Buffer I/O error on dev nbd7, logical block 0, async page read [ 489.238512][ T1037] net_ratelimit: 904 callbacks suppressed [ 489.238533][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.239549][T20373] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.259238][ T1037] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.269585][T20373] Buffer I/O error on dev nbd7, logical block 1, async page read [ 489.286329][T20373] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.296111][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.304102][T20373] Buffer I/O error on dev nbd7, logical block 2, async page read [ 489.312118][T20373] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.321790][T20373] Buffer I/O error on dev nbd7, logical block 3, async page read [ 489.329705][T20373] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.331248][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.339347][T20373] Buffer I/O error on dev nbd7, logical block 0, async page read [ 489.339421][T20373] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.339443][T20373] Buffer I/O error on dev nbd7, logical block 1, async page read [ 489.339884][T20373] ldm_validate_partition_table(): Disk read failed. [ 489.379126][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.381191][T20373] Dev nbd7: unable to read RDB block 0 [ 489.394314][T20373] nbd7: unable to read partition table [ 489.404640][T20373] ldm_validate_partition_table(): Disk read failed. [ 489.409084][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.411944][T20373] Dev nbd7: unable to read RDB block 0 [ 489.425322][T20373] nbd7: unable to read partition table [ 489.438673][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.469049][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.488587][ T3555] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.497730][ T49] team0 (unregistering): Port device team_slave_1 removed [ 489.508557][ T49] team0 (unregistering): Port device team_slave_0 removed [ 489.518539][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.543657][ T49] smc: removing net device team0 with user defined pnetid SYZ2 [ 489.563423][ T49] lo (unregistering): left allmulticast mode [ 489.587025][T27528] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.730826][T27528] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.808490][T27528] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.854692][ T49] IPVS: stop unused estimator thread 0... [ 489.936392][T27528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.963669][T27528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.984094][T27528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 490.000729][T27528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.065428][T27528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.084697][T27528] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.097210][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.104372][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.117153][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.124296][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.293186][T27528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.332171][T27528] veth0_vlan: entered promiscuous mode [ 490.344594][T27528] veth1_vlan: entered promiscuous mode [ 490.370594][T27528] veth0_macvtap: entered promiscuous mode [ 490.380966][T27528] veth1_macvtap: entered promiscuous mode [ 490.399839][T27528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.414311][T27528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.429528][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.440448][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.451878][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.483498][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.495644][T27528] ieee80211 phy85: Selected rate control algorithm 'minstrel_ht' [ 490.522115][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.533924][T27528] ieee80211 phy86: Selected rate control algorithm 'minstrel_ht' [ 490.542797][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.571483][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.580196][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.539469][ T11] block nbd6: Possible stuck request ffff888026d38000: control (read@0,1024B). Runtime 60 seconds [ 492.550323][ T11] block nbd6: Possible stuck request ffff888026d38200: control (read@1024,1024B). Runtime 60 seconds [ 492.562769][ T11] block nbd6: Possible stuck request ffff888026d38400: control (read@2048,1024B). Runtime 60 seconds [ 492.574071][ T11] block nbd6: Possible stuck request ffff888026d38600: control (read@3072,1024B). Runtime 60 seconds [ 493.562569][ T5195] udevd[5195]: worker [19594] /devices/virtual/block/nbd6 is taking a long time [ 494.268510][ T35] net_ratelimit: 132 callbacks suppressed [ 494.268531][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 494.281719][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.289621][ T35] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 494.388514][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 494.398710][ T35] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.406592][ T35] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 494.498565][ T35] bond8: (slave bridge7): failed to get link speed/duplex [ 494.519126][ T1092] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.526979][ T1092] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 494.608736][ T35] bond8: (slave bridge7): failed to get link speed/duplex