last executing test programs: 41.356624356s ago: executing program 2 (id=3308): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x87, @broadcast, 0x4e20, 0x2, 'nq\x00', 0x2, 0xe4, 0x1d}, {@multicast1, 0x4e22, 0x2000, 0x8, 0x3, 0x7}}, 0x44) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) 40.858194043s ago: executing program 2 (id=3313): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffffffffffffff1, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf25460000000e0001006e657464657673696d0000657673696d30000008008e00030000000c008f0051da0000000000000c009000ff0700000000000013a723db836110530e09631c082d6728360588"], 0x54}, 0x1, 0x0, 0x0, 0x8081}, 0x20044000) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="90000000", @ANYRES8, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100"], 0x90}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2, 0x0, @void, @value}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x40, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008810}, 0x40090) 40.62335884s ago: executing program 2 (id=3315): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r5, 0x4}, 0xc) 40.274660271s ago: executing program 2 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "a8"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) 26.493775142s ago: executing program 2 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "a8"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) 14.878921652s ago: executing program 1 (id=3556): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@delchain={0x24, 0x65, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfffc, 0xfff2}, {0xffff, 0xe}}}, 0x24}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b0f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r5}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)) 14.631929433s ago: executing program 1 (id=3560): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @private2}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYBLOB="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", @ANYBLOB="08000400000058"], 0x4c}}, 0x0) 13.074333s ago: executing program 1 (id=3565): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x8, 0x7f02ae, 0x348, 0x200, 0x418, 0x2e8, 0x2e8, 0x418, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'bridge_slave_0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x564) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f00000003c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a9159ba}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7a576142a49c96b3}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) recvmmsg(r4, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f0000001600)=""/103, 0x67}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f00000001c0)=""/126, 0x7e}, {&(0x7f00000007c0)=""/70, 0x46}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{0x0, 0x4b}, {0x0}, {&(0x7f0000002b40)='-', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb17", 0x52}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 12.187686949s ago: executing program 1 (id=3579): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 11.926789523s ago: executing program 1 (id=3582): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@delchain={0x24, 0x65, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfffc, 0xfff2}, {0xffff, 0xe}}}, 0x24}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b0f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r5}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)) 11.761428959s ago: executing program 1 (id=3583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x4, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc00) 11.759760495s ago: executing program 2 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x14, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x90, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "a8"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) 3.534692455s ago: executing program 0 (id=3641): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048005}, 0x44041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x200000000000000) 3.49330492s ago: executing program 4 (id=3642): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x8, 0xfffffffb, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0x8}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80000000, 0x0}, 0x8) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) close(r5) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x19, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5b4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x3, 0x4, 0x0, 0x5, 0x1, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xe, 0x7, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x16, '\x00', r3, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, r1, 0x4, &(0x7f00000003c0)=[r0, r6], &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0x3}, {0x5, 0x1, 0x2, 0x4}, {0x4, 0x1, 0x9, 0x3}, {0x3, 0x3, 0xf, 0xc}], 0x10, 0xf, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x40, r7, 0x60b, 0x2000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3.410376593s ago: executing program 4 (id=3643): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc00}]}]}, @NFTA_SET_DESC_SIZE={0xfffffe45}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0xec}}, 0x4008050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500000000000800124000000000050004000000000012000300686173683a6e65742c706f727400000009eddb9ef2a8e2418529a512b1f60d553ab163c7c1e0382effab79294d26deb61c2c47a332"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048005}, 0x4004851) r6 = socket(0x11, 0x800000003, 0x0) recvfrom$packet(r6, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) r7 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$caif(r0, &(0x7f00000002c0)=@util={0x25, "69355caf76d927106dc8c477bb442643"}, 0x18) bind$ax25(r7, &(0x7f0000000200)={{0x3, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.737676127s ago: executing program 0 (id=3646): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x4c5}]}, 0x44}}, 0x0) 2.678249765s ago: executing program 4 (id=3648): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x800454d2, &(0x7f0000000340)={'veth1\x00'}) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @short}, 0xb) 2.551883818s ago: executing program 0 (id=3649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x98}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) listen(r5, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0xf, 0x0, 0x0, 0xe, 0x40, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/54, 0x2b, 0x36, 0x1, 0x1, 0x10000, @value=r1}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cd6e9709eb0"}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000002c0)="a941f54c5925c8349440a56d23417c038013bf0826db386a2fab4a09d6bc37b7b4b37965c77e4b11b2634459b1ea28ca4571911909bdc352d9abab59eab6426a3d75bcb6261bdd2e5eb1f302b5c7dbed507d00e1d216c7996872f1719a7f9ebc0b9f25ec3cd4fd0757be9921aa3803555b40a1f1455eac5448f825c7ef1ada1fc9ea"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000200)=r9}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r11, &(0x7f0000000a40)=[{&(0x7f00000007c0)='g', 0x1}], 0x1) 2.46150458s ago: executing program 3 (id=3650): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x2, 0x3, {0xa, 0x4e22, 0x4b, @remote, 0x66d6}}}, 0x3a) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x4, 0x2, {0xa, 0x4e22, 0x74e2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}}}, 0x3a) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x75, "e6498d666344b2d1bce0f1239ca85cc1ed20264ccea1abe8c4f3a859e3be43382fd4ea52aa0ec5076ba4b44381e53676e23baaf15a6ae323d5a9d476bcaab1885edfd95b6e57507ad7e5f348a0a47707d7d767edd5d9578f2f83b15c3c1201a6146066922263e16698f9a1cc1ab1b3f93f89c6a453"}, &(0x7f00000001c0)=0x7d) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r4, 0x0, 0x3, [0x1, 0x8, 0x0]}, 0xe) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000002c0)=0x4) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000300)="734cb51d3ed551fea4ebcf98303ed9b835bbee0243449da3434481253de40a8f8f48a0ca9c3e0648ccd35255b9df6e59f9a4b6f20f086d9ad10b88b07c95b7e9ab0f37ee12a3") r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={r4, @in={{0x2, 0x4e21, @private=0xa010102}}}, 0x84) r6 = socket$netlink(0x10, 0x3, 0x1) r7 = openat$cgroup_ro(r3, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001500)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000, 0x1, &(0x7f0000001480)=""/104, 0x68}, &(0x7f0000001540)=0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x82, '\x00', 0x0, r7, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000001600)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r7) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x4c, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random='|Q$aVD'}, @NL80211_ATTR_SSID={0xc, 0x34, @random="813c8d8215cb1709"}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001800), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, r9, 0x500, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20008080) connect$netlink(r7, &(0x7f0000001900)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000001940)={0xa, 0x4e21, 0x80, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), r3) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xa0, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x20}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x101}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x90}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x9a8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff1}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xffff0001}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044080) sendmsg$NFT_BATCH(r6, &(0x7f0000003d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000001b80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x78, 0x8, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8e7b"}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x110, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x160, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x45, 0xc, "042541af130e3faafc2746cabf22869ace75b674abffcc9df4ace46e526d2d2386386f9d804378c44c476cac3d80f917e054975a3527c0966d637042b9b50b346e"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb650}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xdde4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffb}]}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x140, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xce, 0x6, "42bda2189eec16cac6900c9aa0c1eb7e250cf3696d4309d087d0490b0f759b3ea4232f0c0101f9b20cb083dca08222571b37d683acb29b8cfe07bba5c7ba87590a5eb8893249ec91a189d9a45382909e9ca5ce98c2f22a1527482fe9a23cc3040cd139958fc3446b74c656cf726f96fea17c9124053fd095ab86c28649b8c2f43b3049fa53f963817c5209aef9e3ad4919646c1341e49eb2808b55302063dc60472e61653ac83db09d85e343e4de4557caa7fbb1e0f806e632f3cd8fc1e05f4455b7a34c0a68b09fb8ac"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x1c44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c24, 0x3, 0x0, 0x1, [{0x1218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "26f6d100f4f607c8dabb003c1ce8465c0f3996c264c9290183915b5f42f8f92cfd27b5ad2d7b"}]}, @NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "18f5c42ec1c8ce29a59a2d404a9e66e862b51a1f2bf7556074729939f39cd052e91c5dffa9814568a9d6c8389d79688f3519b36e4bed4cfbbd02181df6d192e8c733dac279c7ed35b2de024d39bde885673678316a91adb199912ed9ae1c3becbbf6bf51fab022223d9640a141fec49d307e63a174ce5b610af997ca44a60e12ef203801489e"}, @NFTA_SET_ELEM_KEY={0x1128, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "b86dff0867add0c62e37fe40be854fefbf29d22a8a78da0280a4ac01a0bac6964e3f134018914cb65764292facca1b27b0fe7f41f5c07fff64055e05f28a5430108f2c73f3d90136a9fa384f72fb70cefc703cf1bc620c8e96c8b458e10d2f85568a66dfc1670b6fd99e9cc2357f8e4ef9fb25b03365310a1be52637a9d0fda3b147bfa4f3cce9679088b0fea58cf8d3d1afd5f457a3f8cf4bd7f1130e3e088c5ec27dff43a62e9224822caee3997133092cd4a08d79c41a5fbb91bca394af1bd6d2b95cdf6084ff11a5f7a71932973411e2e8e9b2ca3a198a905fe3aa9245c25d208a6e764ba62bd186ff9ddd6f03a6398ddae01ce885b8b23aa762c33fc6f5860618d6522cced760d0de3993421c37d6211d9ec01348440dcbd6e7af007e9878126004e5f163f370da289d466e0e747993074c20fe5a8406e9d7f6333055396d9531b09a896ff383b1c960d8e0aec4740da314a98bbd0bc076af2c5d1fe279ec0f3f430e9e032edbefa505e375c438f9a79538f14c7e6a96dcd1b1883b55523e8403be136d99f247c08e8b3ed71613d15a20a1fbb0f62ba626b8eecc5bea7dfaf7a6a6f44c9a00982593f14f2b274fe96efc13c2a8705894a713870e25916b5f0653894ebbf5271f40492ae2c299443feec77d8aa1295228b64024e763d1fd1c74980308dec28f7aff03f81c9d2f1515463ce86d20ccec937b5dc7d57ae96c366ea68d4e67d6d1b3703cbf80ba1059de4d3af298cbf3bc0d13aee187cd0004bd3e5795d02ba5f5f6a65c05c15e1cb98434082055dfa28615ad70693f886dd211a9126aed95cdb5e611e36fc177d7634b5cb56ab1e3285f7278ef54d8c3ac673174160ac27951ec43beb66db1ac0ea1a2be39c9bbe8a084d288f045bfa90c13770ce7adca3d02d5cfc00c7e7ba3630650bec5f97f926cfef7a6c58015920826a2fecd147afce79f25df752be93d2ae6ee36e8620800da30c84c7e74fe7eb17ed94f4dbd7bce1749f7306949079c748b6684b687ef7fc6100c4578f3fae0664b8bfe93bb497408b9dbd8b5e6b0e037a2adf168efa601ae0d676b12123725298dd89246808e9cb3f06ebf29406046adf2980a0f34071381368d452cdf542fd6e62b97aa1a531dcb046204bac7141f0111e6a6270a600a452f865589079807207ada0ea27f6bfc0a730d144b4ed9432ea660ec8a2e53724d80ef8e73a6ae876c5e6a6333089680bb883051b28396f4fb83884f13d71e0abe5fb719a6666e304487b403c31fba1fdb105efa2637b4cd1d86a67e5807ac24c209bea7b73fafd1dcd09b826e6082ee86f0afc1069d61c4577d344613769f3807a716d50bd24accb717f52d7af7000c2eb6206d5161eac3b7aa256e873f0af938ae26c8e1f1845deeb30f6a43caf489710dd09bd1b7ca10f338a5aba08e6c3f9fafe093c682429a5d319a54975c3b40014632fa5c613d5e7412fbd5a50828fef4479882473766f2b10df9ec945deffc3ba076d66f0fa2ed7415d5f31434bb7c6ff3bba229a22be51d1d867ea92fe9229abf2e894da6a5c71c35c016f710a038e99eee6adc20c9c2af6515067ad995294301f02c4df461bee04baba556ccd3893cc99bde323a5097f9b8c2e0e5e302c400b405141e67c48be9c9bbbd2319ff5da5f1becf6465c021a02f30b9e8469c79d9a91ba11678b68635272d50ec2043aa4ef9699f16df610e2b89f14a51d5f0f1244b66cd43bd7f596e5ad52ff635dfa190013f11b3100af6d62eb60c1c527d0dce086e32475d94e8633e71d463c25d608769b4961be749d337963773bf1a8b54dfc58f56beb0c06c814b6883b6a05d1671c992b16e5be0eedd4e62499320d63f48eb7801cb4ed4db7d1792b07383ddb50d48e6eeca6aef0839ff1469ae5ea9c4354acc7089da826288cb0eef6e5031972f022a409b84cbcf55f5c7079686ac5329575e18ab3c6777b4476f243b81ed175fd0461c0ba22438a50be355bfaae99f8e9ecd55a6475951a9e05ee9eb45ee48f386098f1cb76ee505c3d85d3c8e150ad0b206091d3da8eec8001cbae73bb9eafac9378f48c40023e49f8b605882a0ff337e4a1b22add35c91b3d9052270e0ae50dc650c33b1edc4e0225e994fb155bbb1effb654867dd287d7dad0f13c97640178cb02572f62f70b8fec1e034e6b1e451362bbb337caba1506cdd4aea5f5292fcf69a9b29097d77837679e27ab7ac8ccd9137e313581f979802bdea899d190fee6eb459f350abc28e8c82d57a680c4fc3dde3b8a5947be240deabb4f71b9d487416de93f3cb74e094231fa64baa9032dd62fc87a2d9e340e250ca6d10bf85a19ac1daa550122e1984ae3404822a7e28b8d5a7b62bad90984e7bfff88a7b2658924a41f7f7d12c766f2f5f0819d467880722105635c17e8b1ac6dacf6edcc7fea8bf1de22ae6005854de0796947d65fdebeaf58583aa83e06f9045e22c2c0cddc8ce5d7d567344cd145494bee82534e06256f18474f83cd78e9cdf81b24e0efaac70be60cb08897d58ad379656b04350ea322ec69e297c6498e54ead007890ffddbad6419a958ad62b42b62e20da5077de62c3dd58a963ebd259a670185a593d8d0ca2eaf41e4ff6c64f0fd93c06abe8185da1fbb787380f01ff60e598d8c994b97774ff9fef67b27977526bcf82707d0e036c9d44b337f62bfda6d647a9c102fc70146be382c7c18e449a5d8ee6ffcd8d13c2a5f424edac31165ea88760e08b719fc471201bb6c99862e4ae56343f5ca35fbbcad17a34b5427e1ecd584a6b978a3263abdb0191d380e2cd71551a30f05606d7c91f915db49fc40242188295c4ce32070128a7e228ec52e6048c15cb9b7b962404c4b0c5edad733d7f03d66d28676be50d3be2dd429b66fa1c10c858dfadb27adb9e74f7517e74681ed20f9a3d1921c2778b9e4c61042445a630a178c37e28d6f9ee6ef11c8a0447d99f0088a054436ff78f466d430e30f3f5216d150b2c8972eb52d147cc74735f22a2b246c274c88213f2e6f8f00dc3df95cb4abc1acbe433a87b4a91b81e56c23cca22156c73a99e95a6c12bbb6ca4e0218ef4358e94345427c4021a60c34b2e23fba8f6ed3b426cb6f5a0e77b38b3ecd91094afa46954586a069bfdf7a84316dcc9f47db37281f2ae95465ac9d861246a77e87d49fa87b90584bf4173244b4fdd30dbbccbb131ab28db4eaae163d4c8856d96ab4e9a75e933afb84030a3eb4a717fb36e5ee6bc8d1cd6f127341d0c7b57536b5f744a77c21bceb96ef708753568f9d7c6009ecb95a4c29ecc4c2f860afc9c370c86270fa745210e7fbbf1490772d33d7e4192dca62c6c333b06701ec22ffed3e1eaf745c7e3f0cc1efce0eeb2a5433068c17bebe93df4db4f9f7aab09b5d2e50230f5a38e213c6e4b91d55b70e00d5c4a9ad5a125cd3d0620bcfad585e3171a99f4ce3787f73e09adfe151314f97be731c29b371f484613f8e0b0d2256b2aa6900e4adc3e243d2dafe97b999885b1d928681cdd53f7596e4e776efaafe55f39718bb7de1e3662cd3c86c67f376c1339eb7ab90ef39c884c80cfb8bea8dec42fa84ade74d6a04cc9fadbf7c17c4fe54e221ced5fe7094e6581d893889aa0a5bf0f11bda1865f960aa669b23bd9d3a1bf03eaa7ad239d1d608cefdad6e78b832ac81d077694b4361f536c1032c8237e32fcdab82f10cfed03366c0ed74e94879ed8f9d7b6e06bdd3120e879ae9dc6066bfc4956dd5202c6cd0eb962da0bc36d9c0f1574f6c687b1ec2dce13e2cadbc56d231c52b71a1abf89cf4fb61b02a1818520c9c2ab9a143b2e23aac041ae24e49fbbed373d2f163eac4dbb2f0808366690f25e4b0d22711a8de06c5310f5c81d706905d6cdf0300b361ebcac5a2e64cf6ef3f34c4f85cf42ea276ccd3137790875a6e5345574c5f78d89a92aa6a0c56049c77fae0d36b79fa2ad431be7e2a386ba1de48c4b2acc403345328ee49a8ce494f28c7145c9eea54c5c291ba964639422728293af4f1ca5f1d37fcad7a651bc1f08fd7261b3a85c5ed3b13a29b317663ff5794eb39e7002e001b640d8b836ba29809750a262bf882d34da585848cd47f6fcbeb665d2b65c04663df4f505f13265df46c018f921bb34c5162f9743049b349caee00a9b89267e385d541ede6612d1f34b2bfafd3b283f45c199bd8dd5de00c6b2a569d80747763594c98371acf8c58ab333fe201fe25ca82ea9e1ae4c67cf526d49354b174c6a2c5a175cc5c8ae20a15fa865ee2c9e56c7f4181d3a3bc01a09c895721cc3d663a7214252144f94a169741cbb4db2cfa48b9ebc3f9f1bac920c62b6cd567ccb97825d1640520c4a16c967c1ca6f68faf01dc0cc27694c660dfd0e6ac43d235df3c3cb24ca8fc49d06ae2961b2e6b2e9e27799fe0143ba8aa799c20c65fe3bf4dd2e8b6fe30878470f89d3ee2553eb3afcbcf977bd289d84dc456ef638abb1250905c762f2f9ee8c5708b9603dc569c1036d1879cec9a7b0364f87f4e4b5168148249fed1623c62e6352a32575bed1a879ea498f1d415d980facac7a3ccaea3f5fab5399e7511573b7fa9e6986d4b539685faf43664a7718f40ee0908501e7ecf1150a08b4a51be877e5c76410bdfd047a38403ce1388b36d13cf417c380aeb56ea67d101bbebcc1e0e3cb74308758f1fa0d6863f177f8ee508fa1b24cd28b5f1d60baa7c57606ac9ef05770d93e7009ac04d56d0c08707db31c9f34b1fa7b9e18acc91bfa8b38bb5a004a5ef0947f0d846091fd5b44973943ece27fd578de3f728ba2409ec6a304522748d0421d9ddda2214a7352878e3364f3161f18f1941e7f2f4add12490c327769b6b4bf2750fd82332171c7568e10ffd99b69b05a6a5a958237ef201f85c7b934c1e8a78c127555f95ec9a02e8a0524dda156c3e5c1b2aa2f2b214854fc8619a6fd4eddfc5218743a03ace1b5980b7076b0043c3d31b99fa653a448577dddf83bcff889a7bd1bb20844a24bb940508525c5d1ff99e37b3cd78d5f1b484b5d291c68ee14ffa8eefa30403a9ef09dbc879389354d37cecf278ed7ecd59e70be7903c29fd26bb5e7074b0a9c5512ddd6fe0c398dbbf08bda36071c3233d5b6901e13c50523de99d1660cc5e656364b52c42296bc7ab36be2b5a5a2e411abd939a3b8099ecc884783cb1148e1e0ba733510b4dd1526bee83560ff388ac55fd1a5fcccb4e18e81eb843c40fc71465eb0192f86d37bf1e38444c14d57ec018bf494bf293a4e5062434dd12f813833dbaa2d617b4027e6e381f0a3e16941d11975998ff7cbc6aaae1fbe6ea3a7e849e5d9d8cc879c35f98e215c1d3b9df6a5d041f0132ad6eec9a5fe3426b820216df008b32c7f2fb3aea028053f51f55bc612e8a4a2294a3b8fd0425c658567aba178e15a09d597a5b9ff3e08994ec9278cb36455b626fd0f090271372ed6d13d364cb664cd5a9348a0b958a6fd1254bf4271fa54bbc5704a4ab8f405137744fd6bbe0b88cd132a8885d2930878e31ce0a512f82c369097c643d2a565f01d09935b0a9929c9446a557158e765e385b80d58e76612266824b65497c89539356c449335dc85c19c0166dc091f0331055bf7fd7f190a1a79e4c31071f108a4524ab33099c53880a1a80fc62ea1b6d8736f20ffd6dffc54a94c834483c12311ed54bcc85f4cda8ca616e4b83ecd9fedb981b93256185042833b5c5c4a8ba3903ead644c33e040c9af948748340093b75ea84041f2b7c1e7ee67d740c1157dff9e1b958950180c8144800e205082ec8c90a7afff"}, @NFTA_DATA_VALUE={0x28, 0x1, "74a10b17b3439dfaabdc25bfd4cb672a394c3abc11dd817a1a95b429aea09c531def5dd5"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "d143cf80c0bfc5e4fe12a2ccf4c709de31cbc9132c8ce43dc0263fefb0ee220e2036bd651e60f5dfa7e072fe9c5568a01a4ac6fb9887a1244475db8510f6ecb22e48d2dd2db1365f767b53a6ae46365c5e09d269f0894075980eb26cc8215550da730cefb132be73422db821234978191b9a0548a74187a565a3c309dfe92bc818e27047d715ff2d3fe08e4cf1e72baef040c89f6a03fde4e98c81d2c23896db1beb20183d28154dbbc2b1b85e69e0ecafffe9a8044d0a2abd40"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x348, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "dcbb3ec6375add01e0ab6e359886a6bdcecee76f49d0a2c605402be730966dc0d485f719cc3c0104ad647f1a8b782a8faa3f989ce58575e053d35f26"}, @NFTA_DATA_VALUE={0x2b, 0x1, "f7d87e54692dd792c42675096ec4777a321be144c4b7da9267f8339cad5bdfb2ce7f7396f2812e"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6c, 0x1, "8e67f8739c44e0d35c5fdf8393299e27dfdf2641713ee4dbc25f4f4494a790c3d29563b4773926cbca6da9a82ad3dd77c313172a5ef34b15d821112d2eb17ec655797af8d7acbdd02e0a64edd0f61b09a48027521ce19af45596d133c0dec3e3cd237a7eb7a526e7"}, @NFTA_DATA_VALUE={0x103, 0x1, "8d6dcbcec2264c40998a7b5b78ca10019756b867b70d87e8a8d694a635c833a9758cd4e7d60bcd960c5e300c602891989fd80d6f2384158f4ee4f5a6a4934cb590f37d095f47bf30a85715f3b84e86cdecd98b0bb8ebfcec0f701a10193cf81a4f8cf1d79779d699fa651a1f69d28288acd2c5f70b7b9b823309bfea99a680fded868a9d080c1fcc4143524481b7d5c097662c94bfe6d4d9068db8f400cd50ea3a7af7db58e09e4a35219bfcc9e28178132aa9b1a25fd84d5ad0fbdb9d7859e26252758bf4cc9464e825b57272f6b355911e86b3a34ba34f88248ba5a3af6a4cb3412f8a685a8c7627dbe602090743c4d66779874a25f504ec385cabc3a183"}, @NFTA_DATA_VALUE={0x83, 0x1, "1e1b3257870fa445cbb6e840b4f864850772c419c09aa165b4a6cb3f5e8d1244b8ed3357dd6e1a4df2970291e5d6a4899c110ec1f48fc77a21fc1690b8a44a7028317a0e696f6ed1343d8c4d2dd9037f409b938fce2aa9027b5daec4c457df74e6c28eb135e5237edeb4724c6a6d369b4f546800f399b6ccc5b134572b455b"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x5f, 0x1, "3f66b39567ae00c42fb2e6b76a5a313483e26598865b39e11966c120416297928d86ea88f2db4be2bf1a85bdb123ebab6ae45fc24d017efd9b9b40405b3de45a25df71f34a401f7b747ef27d81a39d8f9bf5b8ac8f581adebd5491"}, @NFTA_DATA_VALUE={0x2a, 0x1, "48d361290d83b4190fd5c5dbe05377a75456f9791ada74ee0ab1af0b92117a2a639e1eed67c2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, {0x460, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x51, 0x6, 0x1, 0x0, "12634a285e47fdee8b9f352d0d68680c2365df56f4d576834bb06a14209380cbb830a98ee6043d965c0fe91e460104dc11c1af0d8f0d2dcf756224866d86c68a197d0bb3a54a93840a0cead652"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x144, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x74}]}}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc486233bc805b2ab}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0xc4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_TTL={0x5, 0x2, 0xb}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_TTL={0x5, 0x2, 0x4c}, @NFTA_OSF_TTL={0x5, 0x2, 0xe}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0xcc}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9abd5ba0dffd15e}, @NFTA_DUP_SREG_DEV={0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "5bca2356cee533d91fa3762679882d7c1864dbee81ccade260cf346870e5669c5e8103d3a2ceaf9c30949ebc73f39744c20f134e0f9cc5536b220d51c87e95fc6f714c0662ec0ccef038c439aea6162f2480c246a88b121395d032fb897b33b4026555ca44d9af2173420b725684008b80c21a81bded348976adade0aec60e4d4bd2cbbc5f95255659e21b5e08ff8ebb0bc1df1e85151431b2fa00b8c6b5f964437911f5ac574eefed42bf99b7036555c960ec13b9"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2140}, 0x1, 0x0, 0x0, 0x20044800}, 0x48000) 2.350152014s ago: executing program 0 (id=3651): r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='fdb_delete\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) 2.274389591s ago: executing program 3 (id=3652): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 2.165766065s ago: executing program 0 (id=3653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000008000400000000003a435308"], 0x1c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0xc, 0x7}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000700bd00aa"], 0x38}}, 0x0) 2.062570649s ago: executing program 4 (id=3654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0xbbb, 0x2, 0x9}, {0x4, 0x8, 0x2, 0x6}, {0x37, 0x4, 0xff, 0x6}, {0x7, 0x1, 0x5, 0xba}, {0x2, 0x8, 0x40, 0xf}, {0x8, 0x4, 0x5c, 0x4134}, {0x8, 0x1, 0x6, 0x2ab6}, {0x9, 0x2, 0x7, 0x621c8a9}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0xbbb, 0x2, 0x9}, {0x4, 0x8, 0x2, 0x6}, {0x37, 0x4, 0xff, 0x6}, {0x7, 0x1, 0x5, 0xba}, {0x2, 0x8, 0x40, 0xf}, {0x8, 0x4, 0x5c, 0x4134}, {0x8, 0x1, 0x6, 0x2ab6}, {0x9, 0x2, 0x7, 0x621c8a9}]}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5d00e500", @ANYRES16=r8, @ANYBLOB="01000000000000000000090000000c0003800800010000000000"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x38}}, 0x0) 1.349803577s ago: executing program 3 (id=3655): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000045c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000044c0)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/168, 0xa8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000001600)=""/141, 0x8d}], 0x5, &(0x7f0000001740)=""/84, 0x54}, 0x91cd}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000017c0)=""/102, 0x66}, {&(0x7f0000001840)=""/69, 0x45}, {&(0x7f00000018c0)=""/169, 0xa9}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000001980)=""/128, 0x80}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000001a00)=""/193, 0xc1}, {&(0x7f0000001b00)=""/173, 0xad}], 0x8}, 0x3}, {{&(0x7f0000001c40)=@phonet, 0x80, &(0x7f0000004080)=[{&(0x7f0000001cc0)=""/141, 0x8d}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/47, 0x2f}, {&(0x7f0000002dc0)=""/248, 0xf8}, {&(0x7f0000002ec0)=""/136, 0x88}, {&(0x7f0000002f80)=""/46, 0x2e}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/170, 0xaa}], 0x8, &(0x7f0000004100)=""/133, 0x85}, 0x80000001}, {{&(0x7f00000041c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004380)=[{&(0x7f0000004240)=""/8, 0x8}, {&(0x7f0000004280)=""/136, 0x88}, {&(0x7f0000004340)=""/10, 0xa}], 0x3, &(0x7f00000043c0)=""/254, 0xfe}, 0x2}], 0x4, 0x10121, &(0x7f0000004600)={r7, r8+10000000}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xdf48, 0x40, 0x5, 0x0, 0xd01d, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x2e}], 0x1}, 0x0) 486.488293ms ago: executing program 4 (id=3656): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20048005}, 0x44041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x1000000000000000) 430.79756ms ago: executing program 0 (id=3657): r0 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000a00000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100086000000020000000000000000009540000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) socket$packet(0x11, 0xa, 0x300) (async) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000a00000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100086000000020000000000000000009540000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) (async) 330.767346ms ago: executing program 3 (id=3658): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @multicast, 'bridge_slave_1\x00'}}, 0x1e) socket$kcm(0x29, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000001"], 0x26}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @multicast, 'bridge_slave_1\x00'}}, 0x1e) (async) socket$kcm(0x29, 0x0, 0x0) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) (async) sendmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x5ddc, 0xffffffff, 0x2dfe}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000001"], 0x26}}, 0x0) (async) 234.941251ms ago: executing program 3 (id=3659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8dddc851d5920d7f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x800}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x4, 0x0, &(0x7f00000000c0)) 146.828157ms ago: executing program 4 (id=3660): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008480}, 0x80) r3 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet6(r3, &(0x7f0000847fff)="e5", 0xfe9d, 0x8d4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ppoll(&(0x7f0000000040)=[{r7, 0x14c8}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x2000) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x2000) sendmsg$nl_route(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) 0s ago: executing program 3 (id=3661): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000100ff0180000000040000000000b8de00010800080002040000"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): 4711 [ 269.247468][T13298] tipc: Failed to obtain node identity [ 269.253480][T13298] tipc: Enabling of bearer rejected, failed to enable media [ 269.442971][T13312] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 269.461869][T13313] 8021q: VLANs not supported on vcan0 [ 269.603743][T13319] syzkaller0: entered promiscuous mode [ 269.623912][T13319] syzkaller0: entered allmulticast mode [ 269.708576][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.047568][T13352] netlink: 'syz.4.2204': attribute type 4 has an invalid length. [ 270.406915][T13374] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 270.748438][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.780226][T13398] netlink: 'syz.2.2220': attribute type 13 has an invalid length. [ 270.819294][T13398] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 271.180174][T13416] pim6reg: entered allmulticast mode [ 271.230983][T13420] __nla_validate_parse: 9 callbacks suppressed [ 271.231001][T13420] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2226'. [ 271.580743][T13445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2233'. [ 271.689606][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2234'. [ 271.730312][T13453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 271.735399][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2237'. [ 271.788558][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.798534][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2237'. [ 271.917604][T13447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.007229][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 272.330354][T13481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2244'. [ 272.661056][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'. [ 272.828454][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.865022][T13510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2256'. [ 273.066131][T13522] team0: No ports can be present during mode change [ 273.799915][T13574] delete_channel: no stack [ 273.871504][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.988766][T13588] netlink: 'syz.0.2277': attribute type 1 has an invalid length. [ 274.116797][T13596] netlink: 'syz.2.2282': attribute type 10 has an invalid length. [ 274.146464][T13596] team0: Device ipvlan1 failed to register rx_handler [ 274.262890][T13608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.412951][T13616] netlink: 'syz.1.2290': attribute type 12 has an invalid length. [ 274.663329][T13631] dvmrp0: entered allmulticast mode [ 274.840250][T13630] dvmrp0: left allmulticast mode [ 274.908443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.620850][T13668] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 275.650425][ T7706] tipc: Subscription rejected, illegal request [ 275.695354][T13671] veth7: entered promiscuous mode [ 275.703836][ T30] audit: type=1800 audit(1746681696.874:3): pid=13668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2303" name="memory.events" dev="tmpfs" ino=2390 res=0 errno=0 [ 275.757009][ T30] audit: type=1800 audit(1746681696.874:4): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2303" name="memory.events" dev="tmpfs" ino=2390 res=0 errno=0 [ 275.856232][ T30] audit: type=1804 audit(1746681696.874:5): pid=13668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2303" name="/newroot/466/memory.events" dev="tmpfs" ino=2390 res=1 errno=0 [ 275.948477][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.591011][T13720] __nla_validate_parse: 11 callbacks suppressed [ 276.591032][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2318'. [ 276.640182][T13723] delete_channel: no stack [ 276.891785][T13730] sctp: [Deprecated]: syz.2.2323 (pid 13730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.891785][T13730] Use struct sctp_sack_info instead [ 276.988461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.123623][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'. [ 277.543520][T13762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.645543][T13768] netlink: 'syz.3.2331': attribute type 9 has an invalid length. [ 277.713488][T13762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.804431][T13762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.857551][T13762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.028443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.071880][T13784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'. [ 278.075222][T13762] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.103857][T13762] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.135800][T13762] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.153685][T13787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2337'. [ 278.155764][T13762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.393916][T13799] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 278.402120][T13799] netlink: 'syz.4.2338': attribute type 2 has an invalid length. [ 278.407413][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 278.419118][T13799] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.2338'. [ 278.420432][T13799] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2338'. [ 278.555069][T13803] netlink: 'syz.0.2343': attribute type 24 has an invalid length. [ 278.611583][T13806] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.892127][T13815] syzkaller0: entered promiscuous mode [ 278.908811][T13815] syzkaller0: entered allmulticast mode [ 278.966404][T13829] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2352'. [ 279.068450][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.112206][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.536001][T13836] netlink: 'syz.3.2354': attribute type 5 has an invalid length. [ 280.556766][T13840] vlan2: entered allmulticast mode [ 280.577688][T13840] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 280.940885][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2360'. [ 280.986164][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 281.009979][T13865] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 281.037651][T13865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.148431][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.276801][T13887] raw_sendmsg: syz.2.2367 forgot to set AF_INET. Fix it! [ 281.287738][T13887] x_tables: duplicate underflow at hook 2 [ 281.386257][T13889] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 281.398194][T13889] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 281.540544][T13900] tipc: Enabling of bearer rejected, failed to enable media [ 281.717111][T13912] veth0_to_team: left allmulticast mode [ 281.724863][T13913] __nla_validate_parse: 3 callbacks suppressed [ 281.724882][T13913] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2374'. [ 281.744503][T13915] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2374'. [ 281.867865][T13921] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2379'. [ 281.983462][T13930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2381'. [ 281.996335][T13930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2381'. [ 282.036256][T13931] netlink: 'syz.1.2380': attribute type 1 has an invalid length. [ 282.097354][T13934] netlink: 448 bytes leftover after parsing attributes in process `syz.1.2380'. [ 282.127023][T13931] netlink: 'syz.1.2380': attribute type 1 has an invalid length. [ 282.188483][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.337610][T13941] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 282.383441][T13943] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 282.445667][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'. [ 282.837508][T13959] netlink: 'syz.4.2389': attribute type 8 has an invalid length. [ 282.979644][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'. [ 283.130542][T13980] xt_TPROXY: Can be used only with -p tcp or -p udp [ 283.228539][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.351971][T13986] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2394'. [ 283.368222][T13986] gretap3: entered promiscuous mode [ 283.387368][T13986] gretap3: entered allmulticast mode [ 283.562910][T13988] syzkaller0: entered promiscuous mode [ 283.569285][T13988] syzkaller0: entered allmulticast mode [ 283.576675][T13995] veth1_to_team: entered promiscuous mode [ 284.269182][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.421041][T14015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2403'. [ 284.429184][ T5831] Bluetooth: hci0: command tx timeout [ 285.308514][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.957047][T14053] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 286.062935][T14058] netlink: 'syz.2.2417': attribute type 178 has an invalid length. [ 286.348531][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.537434][T14089] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 286.778293][T14095] __nla_validate_parse: 5 callbacks suppressed [ 286.778312][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'. [ 287.388421][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.464105][T14134] netlink: 'syz.3.2443': attribute type 11 has an invalid length. [ 287.902276][T14155] netlink: 'syz.4.2452': attribute type 10 has an invalid length. [ 287.993379][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 288.013778][T14151] macvlan0: left allmulticast mode [ 288.019609][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 288.030217][T14161] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 288.063504][T14165] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2449'. [ 288.085914][T14151] netlink: 'syz.0.2449': attribute type 2 has an invalid length. [ 288.112350][T14159] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 288.122688][T14167] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2454'. [ 288.222425][T14159] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 288.236788][T14159] gretap4: entered promiscuous mode [ 288.246881][T14159] gretap4: entered allmulticast mode [ 288.428588][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.591471][T14183] syzkaller0: entered promiscuous mode [ 288.621140][T14183] syzkaller0: entered allmulticast mode [ 288.763604][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 288.844509][T14206] netlink: 'syz.0.2465': attribute type 10 has an invalid length. [ 288.852047][T14207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2466'. [ 288.858893][T14209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2466'. [ 289.085726][ T59] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,4096B). Runtime 180 seconds [ 289.468481][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.219140][T14206] veth1_macvtap: left allmulticast mode [ 290.235953][T14206] veth1_macvtap: left promiscuous mode [ 290.253619][T14206] team0: Device veth1_macvtap failed to register rx_handler [ 290.388641][T14214] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 290.406740][T14212] ip6gretap0: entered promiscuous mode [ 290.422650][T14214] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2467'. [ 290.438485][T14212] vlan3: entered promiscuous mode [ 290.458168][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 290.508534][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.601558][T14227] netlink: 'syz.4.2469': attribute type 21 has an invalid length. [ 290.797074][T14241] pimreg: entered allmulticast mode [ 290.838783][T14246] IPVS: length: 60 != 8 [ 290.864995][T14245] pim6reg: entered allmulticast mode [ 291.003688][T14249] syzkaller0: entered promiscuous mode [ 291.010925][T14249] syzkaller0: entered allmulticast mode [ 291.369227][ T5198] udevd[5198]: worker [5950] /devices/virtual/block/nbd0 timeout; kill it [ 291.384176][ T5198] udevd[5198]: seq 11540 '/devices/virtual/block/nbd0' killed [ 291.553342][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.588763][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.699463][T14266] __nla_validate_parse: 4 callbacks suppressed [ 292.699483][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 292.715611][T14268] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 292.831645][T14295] netlink: 'syz.0.2492': attribute type 8 has an invalid length. [ 293.130217][T14314] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 293.144846][T14304] netlink: 'syz.3.2493': attribute type 5 has an invalid length. [ 293.313290][T14329] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 293.372823][T14332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2501'. [ 293.518939][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 293.534888][T14342] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2503'. [ 293.549834][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 293.567686][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'. [ 293.628629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.741263][T14348] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 293.754575][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 294.335935][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 294.668519][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.695135][T14405] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2516'. [ 294.725110][T14405] 0ªî{X¹¦: renamed from gretap0 [ 294.775429][T14405] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 294.957064][T14423] netlink: 696 bytes leftover after parsing attributes in process `syz.3.2522'. [ 295.039133][T14423] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 295.199284][T14440] netlink: 'syz.1.2527': attribute type 1 has an invalid length. [ 295.708568][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.861775][T14483] netlink: zone id is out of range [ 295.883909][T14483] netlink: zone id is out of range [ 295.917419][T14483] netlink: zone id is out of range [ 295.939260][T14483] netlink: zone id is out of range [ 296.130900][T14498] x_tables: duplicate underflow at hook 3 [ 296.153635][T14498] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 296.748479][ C0] net_ratelimit: 21 callbacks suppressed [ 296.748500][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.985959][T14556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.146626][T14570] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 297.733267][T14597] delete_channel: no stack [ 297.788419][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.150358][ T30] audit: type=1800 audit(1746681719.324:6): pid=14620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2583" name="memory.events" dev="tmpfs" ino=2559 res=0 errno=0 [ 298.222182][T14624] __nla_validate_parse: 19 callbacks suppressed [ 298.222202][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'. [ 298.250882][T14626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2585'. [ 298.323579][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2586'. [ 298.334952][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2584'. [ 298.568287][T14637] netlink: 'syz.4.2587': attribute type 15 has an invalid length. [ 298.828528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.038866][T14662] netlink: 'syz.3.2596': attribute type 4 has an invalid length. [ 299.065792][T14662] netlink: 'syz.3.2596': attribute type 4 has an invalid length. [ 299.073605][T14663] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2595'. [ 299.097521][T14661] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2595'. [ 299.136785][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 299.202739][T14661] SET target dimension over the limit! [ 299.230448][T14661] ip6t_REJECT: ECHOREPLY is not supported [ 299.304828][T14676] netlink: 'syz.3.2601': attribute type 4 has an invalid length. [ 299.502218][T14690] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2606'. [ 299.748866][T14710] netlink: 'syz.2.2611': attribute type 21 has an invalid length. [ 299.758247][T14710] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2611'. [ 299.767688][T14711] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2613'. [ 299.787500][T14710] netlink: 'syz.2.2611': attribute type 5 has an invalid length. [ 299.868475][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.910749][T14713] netlink: 'syz.4.2614': attribute type 5 has an invalid length. [ 299.924258][T14716] netlink: 'syz.1.2615': attribute type 4 has an invalid length. [ 300.081934][T14726] tipc: Enabling of bearer rejected, media not registered [ 300.185215][T14728] xt_ecn: cannot match TCP bits for non-tcp packets [ 300.497184][T14754] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 300.528667][T14756] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 300.837105][T14771] veth0: entered promiscuous mode [ 300.861578][T14771] veth0: left promiscuous mode [ 300.908463][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.351187][T14794] 8021q: VLANs not supported on ÿ [ 301.397716][T14800] netlink: 'syz.4.2643': attribute type 1 has an invalid length. [ 301.948544][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.233521][T14844] tipc: Failed to remove unknown binding: 66,1,1/0:1729672160/1729672162 [ 302.281673][T14844] tipc: Failed to remove unknown binding: 66,1,1/0:1729672160/1729672162 [ 302.302035][T14844] tipc: Failed to remove unknown binding: 66,1,1/0:1729672160/1729672162 [ 302.877864][T14874] syz_tun: entered allmulticast mode [ 302.884998][T14872] syz_tun: left allmulticast mode [ 302.988570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.219892][T14889] sctp: [Deprecated]: syz.3.2668 (pid 14889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.219892][T14889] Use struct sctp_sack_info instead [ 303.253866][T14893] __nla_validate_parse: 22 callbacks suppressed [ 303.253886][T14893] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2669'. [ 303.463385][T14904] C: left allmulticast mode [ 303.494333][T14904] tunl0: left allmulticast mode [ 303.574239][T14904] gre0: left allmulticast mode [ 303.605091][T14904] 0ªî{X¹¦: left allmulticast mode [ 303.625493][T14904] erspan0: left allmulticast mode [ 303.654353][T14904] ip_vti0: left allmulticast mode [ 303.674227][T14904] ip6_vti0: left allmulticast mode [ 303.696575][T14904] sit0: left allmulticast mode [ 303.734366][T14904] ip6tnl0: left allmulticast mode [ 303.770855][T14904] ip6gre0: left allmulticast mode [ 303.793158][T14904] ip6gretap0: left allmulticast mode [ 303.812131][T14904] vcan0: left allmulticast mode [ 303.825764][T14904] bond0: left allmulticast mode [ 303.841282][T14904] bond_slave_0: left allmulticast mode [ 303.851087][T14904] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 303.861260][T14904] team0: left allmulticast mode [ 303.871636][T14904] dummy0: left allmulticast mode [ 303.884530][T14904] nlmon0: left allmulticast mode [ 303.894442][T14904] caif0: left allmulticast mode [ 303.900056][T14904] batadv0: left allmulticast mode [ 303.907258][T14904] vxcan0: left allmulticast mode [ 303.925864][T14904] wg0: left allmulticast mode [ 303.943163][T14904] wg1: left allmulticast mode [ 303.963325][T14904] wg2: left allmulticast mode [ 303.977908][T14904] veth0_to_bridge: left allmulticast mode [ 303.995634][T14904] bridge_slave_0: left allmulticast mode [ 304.020666][T14904] veth1_to_bridge: left allmulticast mode [ 304.028531][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.036337][T14904] bridge_slave_1: left allmulticast mode [ 304.057323][T14904] veth0_to_bond: left allmulticast mode [ 304.076621][T14904] veth1_to_bond: left allmulticast mode [ 304.092710][T14904] bond_slave_1: left allmulticast mode [ 304.103219][T14904] team_slave_0: left allmulticast mode [ 304.110455][T14904] veth1_to_team: left allmulticast mode [ 304.116383][T14904] team_slave_1: left allmulticast mode [ 304.142154][T14904] veth0_to_batadv: left allmulticast mode [ 304.152606][T14904] batadv_slave_0: left allmulticast mode [ 304.164112][T14904] veth1_to_batadv: left allmulticast mode [ 304.172469][T14904] batadv_slave_1: left allmulticast mode [ 304.182701][T14904] xfrm0: left allmulticast mode [ 304.187825][T14904] veth0_to_hsr: left allmulticast mode [ 304.195122][T14904] ï‰Oܼ: left allmulticast mode [ 304.204735][T14904] hsr_slave_0: left allmulticast mode [ 304.212053][T14904] veth1_virt_wifi: left allmulticast mode [ 304.218120][T14904] veth0_virt_wifi: left allmulticast mode [ 304.228829][T14904] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 304.236819][T14904] veth1_vlan: left allmulticast mode [ 304.246677][T14904] vlan0: left allmulticast mode [ 304.252363][T14904] vlan1: left allmulticast mode [ 304.257566][T14904] macvlan1: left allmulticast mode [ 304.267124][T14904] ipvlan0: left allmulticast mode [ 304.282525][T14904] ipvlan1: left allmulticast mode [ 304.288280][T14904] veth0_vlan: left allmulticast mode [ 304.294900][T14904] veth0_macvtap: left allmulticast mode [ 304.301976][T14904] macvtap0: left allmulticast mode [ 304.307730][T14904] macsec0: left allmulticast mode [ 304.313602][T14904] geneve0: left allmulticast mode [ 304.319856][T14904] geneve1: left allmulticast mode [ 304.325166][T14904] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 304.333304][T14904] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 304.342294][T14904] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 304.353802][T14904] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 304.363792][T14904] geneve2: left allmulticast mode [ 304.371892][T14904] macvtap1: left allmulticast mode [ 304.377428][T14904] bond1: left allmulticast mode [ 304.388115][T14904] bridge1: left allmulticast mode [ 304.397909][T14904] ip6tnl1: left allmulticast mode [ 304.401811][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2679'. [ 304.403382][ T24] IPVS: starting estimator thread 0... [ 304.417617][T14904] vxlan0: left allmulticast mode [ 304.423094][T14904] bond2: left allmulticast mode [ 304.428178][T14904] mac80211_hwsim hwsim6 dvmrp0: left allmulticast mode [ 304.439671][T14904] vlan3: left allmulticast mode [ 304.444606][T14904] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 304.451749][T14945] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 304.462390][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2677'. [ 304.504983][T14946] IPVS: using max 27 ests per chain, 64800 per kthread [ 304.620809][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2682'. [ 304.669176][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 304.887623][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2689'. [ 304.924697][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 305.068551][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.137499][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2695'. [ 305.151057][T14992] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2692'. [ 305.167093][T14987] validate_nla: 5 callbacks suppressed [ 305.167113][T14987] netlink: 'syz.0.2695': attribute type 2 has an invalid length. [ 305.224737][T15000] netlink: 'syz.2.2696': attribute type 12 has an invalid length. [ 305.234213][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2695'. [ 306.024675][T15037] 8021q: adding VLAN 0 to HW filter on device bond9 [ 306.097716][T15037] bridge0: port 1(bond9) entered blocking state [ 306.108527][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.138824][T15037] bridge0: port 1(bond9) entered disabled state [ 306.145386][T15037] bond9: entered allmulticast mode [ 306.211763][T15037] bond9: entered promiscuous mode [ 306.902654][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.067066][T15102] netlink: 'syz.2.2714': attribute type 28 has an invalid length. [ 307.101346][T15102] netlink: 'syz.2.2714': attribute type 3 has an invalid length. [ 307.114948][T15099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.148540][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.291903][T15108] ip6erspan0: mtu less than device minimum [ 307.300030][T15108] netlink: 'syz.0.2719': attribute type 10 has an invalid length. [ 307.330992][T15108] team0: Device ipvlan1 failed to register rx_handler [ 307.337489][T15111] netlink: 'syz.3.2717': attribute type 6 has an invalid length. [ 307.549336][T15123] netlink: 'syz.0.2723': attribute type 13 has an invalid length. [ 307.716941][T15139] bridge0: port 3(gretap0) entered blocking state [ 307.737162][T15139] bridge0: port 3(gretap0) entered disabled state [ 307.767875][T15139] gretap0: entered allmulticast mode [ 307.791910][T15139] gretap0: entered promiscuous mode [ 308.055968][T15162] 0ªÃøÂFNð¡: renamed from bond_slave_0 [ 308.188570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.293510][T15180] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.558630][T15195] openvswitch: netlink: Actions may not be safe on all matching packets [ 308.633782][T15196] can: request_module (can-proto-4) failed. [ 308.642891][T15205] __nla_validate_parse: 17 callbacks suppressed [ 308.642914][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 308.678083][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 308.821771][T15210] netlink: 'syz.2.2745': attribute type 2 has an invalid length. [ 308.838515][T15210] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2745'. [ 308.855996][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2746'. [ 308.866525][T15207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2746'. [ 308.883749][T15210] x_tables: duplicate underflow at hook 1 [ 308.904405][T15215] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 308.928304][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 309.056616][T15221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'. [ 309.104383][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 309.113652][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2753'. [ 309.228516][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.322878][T15240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.441386][T15240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.474322][T15249] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 309.546809][T15240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.597338][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2757'. [ 309.676918][T15255] syzkaller0: entered promiscuous mode [ 309.684868][T15255] syzkaller0: entered allmulticast mode [ 310.135593][T15294] netlink: 'syz.2.2772': attribute type 12 has an invalid length. [ 310.167423][T15296] sit0: entered promiscuous mode [ 310.175539][T15296] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 310.268595][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.414413][T15307] xt_l2tp: unknown flags: 18 [ 310.796038][T15332] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 311.392400][T15378] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 311.789996][T15405] atomic_op ffff88807ec47998 conn xmit_atomic 0000000000000000 [ 312.075769][T15422] IPv6: sit3: Disabled Multicast RS [ 312.082279][T15422] sit3: entered allmulticast mode [ 312.647661][T15464] netlink: 'syz.4.2823': attribute type 12 has an invalid length. [ 313.496386][T15506] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 313.613968][T15513] 0·: renamed from hsr_slave_1 (while UP) [ 313.641129][T15513] 0·: entered allmulticast mode [ 313.653530][T15513] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 314.113726][T15538] xt_l2tp: unknown flags: 18 [ 314.344491][T15557] __nla_validate_parse: 13 callbacks suppressed [ 314.344512][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2850'. [ 314.379684][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2850'. [ 314.401346][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'. [ 314.401356][T15561] netlink: 'syz.1.2852': attribute type 1 has an invalid length. [ 314.471549][T15561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 314.489061][T15571] netlink: 'syz.0.2851': attribute type 1 has an invalid length. [ 314.504950][T15571] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2851'. [ 314.517596][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2851'. [ 314.562877][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'. [ 314.640037][T15570] gretap0: left allmulticast mode [ 314.645185][T15570] gretap0: left promiscuous mode [ 314.651890][T15570] bridge0: port 3(gretap0) entered disabled state [ 314.707253][T15570] batman_adv: batadv0: Removing interface: dummy0 [ 314.744482][T15570] bridge_slave_0: left allmulticast mode [ 314.752495][T15570] bridge_slave_0: left promiscuous mode [ 314.762773][T15570] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.791010][T15570] bridge_slave_1: left allmulticast mode [ 314.800557][T15570] bridge_slave_1: left promiscuous mode [ 314.807303][T15570] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.831824][T15570] .: (slave bond_slave_0): Releasing backup interface [ 314.844717][T15570] .: (slave bond_slave_1): Releasing backup interface [ 314.876813][T15570] bond1: (slave ip6erspan0): Releasing active interface [ 314.905333][T15570] bond5: (slave ip6gretap1): Removing an active aggregator [ 314.916616][T15570] bond5: (slave ip6gretap1): Releasing backup interface [ 314.930953][T15570] bond5: (slave ip6gretap1): the permanent HWaddr of slave - f2:45:44:20:2e:b7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 314.959769][T15570] bond5: (slave veth7): Releasing backup interface [ 314.978070][T15570] bond0: (slave gretap1): Releasing active interface [ 315.009847][T15570] bond6: (slave veth11): Releasing backup interface [ 315.646843][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'. [ 315.656163][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'. [ 315.759459][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2870'. [ 315.968140][T15641] pimreg: left allmulticast mode [ 316.428682][T15664] sctp: [Deprecated]: syz.0.2876 (pid 15664) Use of int in max_burst socket option deprecated. [ 316.428682][T15664] Use struct sctp_assoc_value instead [ 316.491793][T15659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.971866][T15673] syzkaller0: entered promiscuous mode [ 316.982460][T15673] syzkaller0: entered allmulticast mode [ 317.404978][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2886'. [ 317.967083][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.981476][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.994304][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.006256][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.039033][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.169975][ T59] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,4096B). Runtime 210 seconds [ 319.422137][T15688] ip6tnl3: entered promiscuous mode [ 319.427399][T15688] ip6tnl3: entered allmulticast mode [ 319.433642][T15692] ÿ: left allmulticast mode [ 319.441260][T15692] bridge0: port 3(ÿ) entered disabled state [ 319.450759][T15692] bridge_slave_1: left allmulticast mode [ 319.456481][T15692] bridge_slave_1: left promiscuous mode [ 319.463388][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.476127][T15692] bridge_slave_0: left allmulticast mode [ 319.485336][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.523844][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2889'. [ 319.533824][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2889'. [ 319.707484][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 319.770720][T15714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2891'. [ 319.780705][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 319.808652][T15718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2893'. [ 319.828892][T15718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2893'. [ 319.882202][ T8531] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.955336][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 319.963884][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 320.001639][T15721] vlan3: entered promiscuous mode [ 320.006883][T15721] bridge0: entered promiscuous mode [ 320.026610][T15726] netlink: 'syz.1.2894': attribute type 2 has an invalid length. [ 320.084245][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 320.118856][ T5831] Bluetooth: hci4: command tx timeout [ 320.195016][ T8531] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.320180][ T8531] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.461227][ T8531] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.545142][T15734] syzkaller0: entered promiscuous mode [ 320.551679][T15734] syzkaller0: entered allmulticast mode [ 321.349986][T15767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.202047][ T5831] Bluetooth: hci4: command tx timeout [ 322.374352][T15774] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 322.397306][T15784] netlink: 'syz.3.2912': attribute type 1 has an invalid length. [ 322.880198][T15703] chnl_net:caif_netlink_parms(): no params data found [ 323.123213][T15820] netlink: 'syz.3.2922': attribute type 21 has an invalid length. [ 323.684466][ T8531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.694139][ T8531] bond_slave_0: left allmulticast mode [ 323.702100][ T8531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.712417][ T8531] bond_slave_1: left allmulticast mode [ 323.722664][ T8531] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 323.733285][ T8531] macvlan0: left allmulticast mode [ 323.740217][ T8531] bond0 (unregistering): Released all slaves [ 323.755720][ T8531] bond1 (unregistering): Released all slaves [ 323.770790][ T8531] bond2 (unregistering): Released all slaves [ 323.794505][ T8531] bond3 (unregistering): Released all slaves [ 323.814969][ T8531] bond4 (unregistering): Released all slaves [ 323.874575][T15820] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 324.005262][ T8531] : left promiscuous mode [ 324.268505][ T5831] Bluetooth: hci4: command tx timeout [ 324.489005][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.496246][T15703] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.526244][T15703] bridge_slave_0: entered allmulticast mode [ 324.540789][T15703] bridge_slave_0: entered promiscuous mode [ 324.550944][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.562380][T15703] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.569907][T15703] bridge_slave_1: entered allmulticast mode [ 324.583837][T15703] bridge_slave_1: entered promiscuous mode [ 324.603919][T15866] xt_socket: unknown flags 0x3c [ 324.652071][T15866] netlink: 'syz.1.2934': attribute type 2 has an invalid length. [ 324.887604][T15703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.932172][T15703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.213360][T15703] team0: Port device team_slave_0 added [ 325.306277][T15703] team0: Port device team_slave_1 added [ 325.485468][T15897] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 325.516328][T15900] netlink: 'syz.4.2945': attribute type 12 has an invalid length. [ 325.614160][T15878] __nla_validate_parse: 3 callbacks suppressed [ 325.614181][T15878] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2937'. [ 325.699429][ T8531] hsr_slave_0: left promiscuous mode [ 325.705457][T15908] tipc: Can't bind to reserved service type 0 [ 325.712021][ T8531] 1·: left promiscuous mode [ 325.720360][ T8531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.766540][ T8531] pim6reg (unregistering): left allmulticast mode [ 325.835320][T15916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2946'. [ 325.880746][T15916] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2946'. [ 326.348626][ T5831] Bluetooth: hci4: command tx timeout [ 326.413362][ T8531] team0 (unregistering): Port device team_slave_1 removed [ 326.461624][ T8531] team0 (unregistering): Port device team_slave_0 removed [ 326.793240][T15703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.804208][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.831392][T15703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.846574][T15703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.854118][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.880510][T15703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.907526][T15931] netlink: 888 bytes leftover after parsing attributes in process `syz.4.2951'. [ 326.921751][T15931] netlink: 137 bytes leftover after parsing attributes in process `syz.4.2951'. [ 326.934386][T15931] sch_tbf: burst 720 is lower than device lo mtu (11337746) ! [ 327.157731][T15703] hsr_slave_0: entered promiscuous mode [ 327.165029][T15703] hsr_slave_1: entered promiscuous mode [ 327.173928][T15703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.185157][T15703] Cannot create hsr debugfs directory [ 327.195821][T15941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2954'. [ 327.642961][T15954] 8021q: adding VLAN 0 to HW filter on device bond10 [ 327.672045][T15954] bond0: (slave bond10): Enslaving as an active interface with an up link [ 327.747597][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 327.805883][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2961'. [ 328.395152][T15990] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2967'. [ 328.909752][T16019] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2974'. [ 328.953561][T15703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.986371][T15703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.059903][T15703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.107654][T15703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.226266][T16032] bond5 (unregistering): Released all slaves [ 329.258038][T16041] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 329.321809][T16041] 8021q: adding VLAN 0 to HW filter on device bond11 [ 329.435613][T15703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.477086][T15703] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.506797][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.514152][ T8522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.589870][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.597077][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.756687][ T8420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.807128][ T8420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.967784][T16072] team0: No ports can be present during mode change [ 330.036650][T16077] xt_CT: No such helper "snmp_trap" [ 330.252742][T15703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.451980][T15703] veth0_vlan: entered promiscuous mode [ 330.471780][T15703] veth1_vlan: entered promiscuous mode [ 330.564828][T15703] veth0_macvtap: entered promiscuous mode [ 330.610557][T15703] veth1_macvtap: entered promiscuous mode [ 330.652735][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.669595][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.712464][T15703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.763769][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.781217][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.793162][T15703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.821387][T15703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.832546][T15703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.841915][T15703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.845170][T16110] __nla_validate_parse: 5 callbacks suppressed [ 330.845189][T16110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3000'. [ 330.852515][T15703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.899089][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3000'. [ 331.053338][T16123] netlink: 'syz.0.3006': attribute type 10 has an invalid length. [ 331.115266][T16123] team0: Cannot enslave team device to itself [ 331.169731][ T8530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.177619][ T8530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.198893][T16127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.271354][ T8531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.290266][ T8531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.367644][T16138] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3011'. [ 331.395886][T16139] x_tables: duplicate underflow at hook 2 [ 331.470148][T16140] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20000 [ 331.829096][T16161] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3018'. [ 331.993995][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'. [ 332.332712][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 332.350836][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'. [ 332.379289][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.391701][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.402240][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.410386][T16161] bond0 (unregistering): (slave 00ªÃøÂFNð¡): Releasing backup interface [ 332.424663][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.435103][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.443481][T16161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.493088][T16161] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 332.522409][T16161] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 332.539481][T16161] batadv0: left allmulticast mode [ 332.554036][T16161] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 332.567851][T16161] bridge0: left allmulticast mode [ 332.585074][T16161] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 332.597250][T16161] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 332.617583][T16161] bond0 (unregistering): Released all slaves [ 332.764169][T16181] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 332.784430][T16183] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 332.873455][T16183] sock: sock_set_timeout: `syz.3.3025' (pid 16183) tries to set negative timeout [ 333.119201][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3028'. [ 333.657465][T16210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.665799][T16222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3037'. [ 333.860717][T16227] bridge0: port 2(batadv1) entered blocking state [ 333.867928][T16227] bridge0: port 2(batadv1) entered disabled state [ 333.893261][T16227] batadv1: entered allmulticast mode [ 333.901994][T16227] batadv1: entered promiscuous mode [ 334.298827][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 334.362666][ T8522] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 334.373216][ T8522] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 334.411764][T16177] chnl_net:caif_netlink_parms(): no params data found [ 334.519863][ T5842] Bluetooth: hci2: command tx timeout [ 334.761180][T16177] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.773132][T16177] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.800310][T16177] bridge_slave_0: entered allmulticast mode [ 334.820867][T16177] bridge_slave_0: entered promiscuous mode [ 334.852320][T16177] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.880930][T16177] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.904956][T16177] bridge_slave_1: entered allmulticast mode [ 334.931271][T16177] bridge_slave_1: entered promiscuous mode [ 335.030904][T16177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.044713][T16177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.142275][T16177] team0: Port device team_slave_0 added [ 335.178295][T16177] team0: Port device team_slave_1 added [ 335.242682][T16177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.250088][T16177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.277625][T16177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.295357][T16177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.305095][T16177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.335702][T16177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.396388][T16177] hsr_slave_0: entered promiscuous mode [ 335.403628][T16177] hsr_slave_1: entered promiscuous mode [ 335.410297][T16177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.417915][T16177] Cannot create hsr debugfs directory [ 335.560636][T16177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.627215][T16177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.683745][T16177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.752548][T16177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.885610][T16177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.897575][T16177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.909943][T16177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.920891][T16177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.996942][T16177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.021872][T16177] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.034852][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.042103][ T8531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.059083][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.066221][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.270984][T16177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.522825][T16177] veth0_vlan: entered promiscuous mode [ 336.535637][T16177] veth1_vlan: entered promiscuous mode [ 336.566336][T16177] veth0_macvtap: entered promiscuous mode [ 336.580926][T16177] veth1_macvtap: entered promiscuous mode [ 336.589576][ T5842] Bluetooth: hci2: command tx timeout [ 336.607141][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.617707][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.629277][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.641255][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.652479][T16177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.671389][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.682388][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.692305][T16177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.703369][T16177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.714676][T16177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.729921][T16177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.739024][T16177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.747738][T16177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.757114][T16177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.844176][ T8420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.862550][ T8420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.893967][ T8522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.902626][ T8522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.670349][ T5842] Bluetooth: hci2: command tx timeout [ 340.749334][ T5842] Bluetooth: hci2: command tx timeout [ 349.238687][ T59] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,4096B). Runtime 240 seconds [ 379.310563][ T59] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,4096B). Runtime 270 seconds [ 385.768471][ T30] audit: type=1804 audit(1746681806.934:7): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3052" name="/newroot/586/cgroup.controllers" dev="tmpfs" ino=3001 res=1 errno=0 [ 385.868535][ T30] audit: type=1800 audit(1746681806.964:8): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3052" name="cgroup.controllers" dev="tmpfs" ino=3001 res=0 errno=0 [ 386.364310][T16316] __nla_validate_parse: 4 callbacks suppressed [ 386.364329][T16316] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3063'. [ 386.427482][T16316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.437175][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3063'. [ 386.574288][T16322] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3064'. [ 386.602636][T16325] sch_fq: defrate 0 ignored. [ 386.647591][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.666628][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.678833][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.693494][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.703371][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.786698][T16331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 386.808850][T16331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3067'. [ 386.997707][T16337] pimreg: entered allmulticast mode [ 387.253250][T16355] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 387.736508][T16380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3081'. [ 387.754503][T16385] xt_hashlimit: size too large, truncated to 1048576 [ 387.866417][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 387.970414][T16393] netlink: 'syz.3.3085': attribute type 1 has an invalid length. [ 387.989027][T16393] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3085'. [ 388.014937][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3085'. [ 388.043740][T16320] chnl_net:caif_netlink_parms(): no params data found [ 388.092758][T16397] bridge1: entered promiscuous mode [ 388.105376][T16397] bridge1: entered allmulticast mode [ 388.163754][T16401] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3087'. [ 388.374456][T16412] netlink: 'syz.1.3090': attribute type 1 has an invalid length. [ 388.526123][T16412] bond4: entered promiscuous mode [ 388.547621][T16412] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.709519][T16419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.725459][T16419] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 388.738161][T16419] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 388.748862][ T5842] Bluetooth: hci3: command tx timeout [ 388.768725][T16419] bond4: (slave wireguard0): making interface the new active one [ 388.776626][T16419] wireguard0: entered promiscuous mode [ 388.784635][T16419] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 388.801864][T16320] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.821129][T16320] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.836405][T16320] bridge_slave_0: entered allmulticast mode [ 388.861827][T16320] bridge_slave_0: entered promiscuous mode [ 388.935458][T16440] netlink: 'syz.3.3099': attribute type 3 has an invalid length. [ 388.958981][T16320] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.966203][T16320] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.015552][T16320] bridge_slave_1: entered allmulticast mode [ 389.046133][T16320] bridge_slave_1: entered promiscuous mode [ 389.132878][T16320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.162959][T16320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.373968][T16320] team0: Port device team_slave_0 added [ 389.410205][T16320] team0: Port device team_slave_1 added [ 389.533770][T16473] netlink: 'syz.2.3108': attribute type 39 has an invalid length. [ 389.623925][T16473] veth0_macvtap: left promiscuous mode [ 389.693755][T16320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.714559][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.786717][T16320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.807099][T16320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.814749][T16320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.867437][T16320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.083118][T16499] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 390.201484][T16320] hsr_slave_0: entered promiscuous mode [ 390.208878][T16320] hsr_slave_1: entered promiscuous mode [ 390.226932][T16320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.251606][T16320] Cannot create hsr debugfs directory [ 390.565015][T16527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.642203][T16527] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 390.796986][T16539] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.829385][ T5842] Bluetooth: hci3: command tx timeout [ 391.192855][T16554] bridge0: port 4(gretap0) entered blocking state [ 391.207205][T16554] bridge0: port 4(gretap0) entered disabled state [ 391.217259][T16554] gretap0: entered promiscuous mode [ 391.546704][T16320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.629479][T16320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.682833][T16320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.763454][T16320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.810669][T16550] x_tables: duplicate underflow at hook 1 [ 391.818875][T16550] __nla_validate_parse: 11 callbacks suppressed [ 391.818896][T16550] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3130'. [ 391.913361][T16567] x_tables: duplicate underflow at hook 1 [ 392.111456][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.145956][T16320] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.186445][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.193722][ T8519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.242846][ T8519] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.250149][ T8519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.341766][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3138'. [ 392.859995][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.911343][ T5842] Bluetooth: hci3: command tx timeout [ 393.083577][T16320] veth0_vlan: entered promiscuous mode [ 393.105247][T16320] veth1_vlan: entered promiscuous mode [ 393.127051][T16597] veth0: entered promiscuous mode [ 393.155278][T16598] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3143'. [ 393.202092][T16596] veth0: left promiscuous mode [ 393.210208][T16320] veth0_macvtap: entered promiscuous mode [ 393.215502][T16598] netlink: 'syz.2.3143': attribute type 10 has an invalid length. [ 393.242743][T16320] veth1_macvtap: entered promiscuous mode [ 393.366247][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.402790][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.424773][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.435989][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.485620][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.507700][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.537356][T16320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.555870][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3149'. [ 393.621722][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.658906][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.678895][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.719354][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.748520][T16320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.768341][T16320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.781598][T16626] netlink: 'syz.2.3152': attribute type 21 has an invalid length. [ 393.790295][T16626] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3152'. [ 393.794795][T16320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.861753][T16320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.907411][T16320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.918033][T16320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.928773][T16320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.960099][T16630] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3154'. [ 394.234395][ T5908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.259630][ T5908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.368406][ T2857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.378010][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 394.404945][ T2857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.439768][T16640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3157'. [ 394.449682][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3157'. [ 394.775225][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3163'. [ 394.861701][T16668] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 394.988894][ T5842] Bluetooth: hci3: command tx timeout [ 395.526947][T16690] ÿ: renamed from dummy0 (while UP) [ 395.715050][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.728217][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.736919][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.746195][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.759053][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.104384][T16715] bridge_slave_0: left allmulticast mode [ 396.122603][T16715] bridge_slave_0: left promiscuous mode [ 396.138713][T16715] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.162251][T16715] bridge_slave_1: left allmulticast mode [ 396.170057][T16715] bridge_slave_1: left promiscuous mode [ 396.175989][T16715] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.212480][T16715] bond0: (slave bond_slave_0): Releasing backup interface [ 396.269169][T16725] netlink: 'syz.0.3180': attribute type 32 has an invalid length. [ 396.286916][T16715] bond0: (slave bond_slave_1): Releasing backup interface [ 396.334399][T16715] team0: Port device team_slave_0 removed [ 396.350127][T16715] team0: Port device team_slave_1 removed [ 396.357632][T16715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.365881][T16715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.377117][T16715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.385598][T16715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.655504][T16734] No such timeout policy "syz0" [ 396.926347][T16757] __nla_validate_parse: 4 callbacks suppressed [ 396.926368][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3190'. [ 397.106740][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'. [ 397.204359][T16702] chnl_net:caif_netlink_parms(): no params data found [ 397.619368][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3201'. [ 397.644311][T16794] ip6t_srh: unknown srh match flags 536B [ 397.673659][T16702] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.701805][T16702] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.724442][T16702] bridge_slave_0: entered allmulticast mode [ 397.739621][T16777] delete_channel: no stack [ 397.761788][T16702] bridge_slave_0: entered promiscuous mode [ 397.783919][T16702] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.794363][ T5842] Bluetooth: hci1: command tx timeout [ 397.806467][T16702] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.814341][T16702] bridge_slave_1: entered allmulticast mode [ 397.822482][T16702] bridge_slave_1: entered promiscuous mode [ 397.892496][T16801] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 397.901432][T16801] gretap1: entered promiscuous mode [ 397.915951][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 397.921042][T16801] gretap1: entered allmulticast mode [ 397.962678][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3203'. [ 397.979975][T16702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.989748][T16800] C: renamed from lo [ 398.044400][T16702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.087772][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3204'. [ 398.152744][T16702] team0: Port device team_slave_0 added [ 398.177069][T16811] netlink: 'syz.4.3205': attribute type 4 has an invalid length. [ 398.185222][T16702] team0: Port device team_slave_1 added [ 398.196899][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 398.224173][T16811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3205'. [ 398.234309][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3205'. [ 398.281794][T16702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.292067][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.320440][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3206'. [ 398.331902][T16702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.371957][T16702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.388243][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.444529][T16702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.094852][T16702] hsr_slave_0: entered promiscuous mode [ 399.110555][T16702] hsr_slave_1: entered promiscuous mode [ 399.122242][T16702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.136592][T16840] netlink: 'syz.2.3216': attribute type 24 has an invalid length. [ 399.145110][T16702] Cannot create hsr debugfs directory [ 399.230440][T16841] tipc: Started in network mode [ 399.235403][T16841] tipc: Node identity 0a6c69e56129, cluster identity 4711 [ 399.248936][T16841] tipc: Enabled bearer , priority 0 [ 399.492512][T16841] syzkaller0: entered promiscuous mode [ 399.503618][T16841] syzkaller0: entered allmulticast mode [ 399.512910][T16841] tipc: Resetting bearer [ 399.569341][T16838] tipc: Resetting bearer [ 399.849089][T16863] netlink: 'syz.2.3221': attribute type 23 has an invalid length. [ 399.869055][ T5842] Bluetooth: hci1: command tx timeout [ 400.281019][ T7883] tipc: Node number set to 1799711205 [ 401.489440][T16838] tipc: Disabling bearer [ 401.665424][T16874] bond0: entered allmulticast mode [ 401.678699][T16874] bond_slave_0: entered allmulticast mode [ 401.684510][T16874] bond_slave_1: entered allmulticast mode [ 401.940318][T16884] __nla_validate_parse: 6 callbacks suppressed [ 401.940341][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3229'. [ 401.956709][ T5842] Bluetooth: hci1: command tx timeout [ 401.994212][T16702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 402.088137][T16702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 402.110746][T16895] team0: No ports can be present during mode change [ 402.134576][T16895] macvlan2: entered promiscuous mode [ 402.169821][T16895] macvlan2: entered allmulticast mode [ 402.175709][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3233'. [ 402.217763][T16702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 402.412139][T16702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 402.721267][T16702] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.758003][T16702] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.815584][T16702] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.856914][T16702] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 403.212314][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 403.235127][T16702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.249046][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3241'. [ 403.292107][T16702] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.347523][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.354836][ T8519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.435855][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'. [ 403.450491][T16950] netlink: 'syz.1.3241': attribute type 33 has an invalid length. [ 403.461813][T16950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3241'. [ 403.532134][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.539630][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.570610][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 403.757942][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 403.797134][T16972] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 403.857524][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3245'. [ 403.896682][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'. [ 404.028910][ T5842] Bluetooth: hci1: command tx timeout [ 404.203273][T16991] syzkaller0: entered allmulticast mode [ 404.247346][T16991] syzkaller0 (unregistering): left allmulticast mode [ 405.376321][T17003] : entered promiscuous mode [ 405.408113][T16702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.574085][T16702] veth0_vlan: entered promiscuous mode [ 405.605298][T16702] veth1_vlan: entered promiscuous mode [ 405.722197][T16702] veth0_macvtap: entered promiscuous mode [ 405.733533][T16702] veth1_macvtap: entered promiscuous mode [ 405.756098][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.767836][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.781006][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.808145][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.834070][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.854743][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.893168][T16702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.937338][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.968640][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.992541][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.014144][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.034856][T16702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.049823][T16702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.065699][T16702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.111782][T16702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.155375][T16702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.195178][T16702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.218562][T16702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.261572][T17055] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 406.338265][T17055] netlink: 'syz.4.3273': attribute type 4 has an invalid length. [ 406.606809][ T7706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.658631][ T7706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.804042][ T8420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.846550][ T8420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.741459][T17119] netlink: 'syz.2.3286': attribute type 1 has an invalid length. [ 407.765680][T17119] __nla_validate_parse: 3 callbacks suppressed [ 407.765700][T17119] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3286'. [ 408.073182][ T5824] batman_adv: batadv0: Removing interface: syz_tun [ 408.113812][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.124043][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.139103][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.147377][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.155632][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.402319][ T59] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,4096B). Runtime 300 seconds [ 410.194788][ T5842] Bluetooth: hci0: command tx timeout [ 410.463965][T17171] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 410.497424][T17171] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3302'. [ 410.514813][T17175] sctp: [Deprecated]: syz.2.3303 (pid 17175) Use of int in max_burst socket option deprecated. [ 410.514813][T17175] Use struct sctp_assoc_value instead [ 410.756389][T17184] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 410.954665][T17133] chnl_net:caif_netlink_parms(): no params data found [ 411.090893][T17202] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20000 [ 411.361351][T17204] syzkaller1: entered promiscuous mode [ 411.375690][T17204] syzkaller1: entered allmulticast mode [ 411.397095][T17222] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3313'. [ 411.430065][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 411.488062][T17226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.491362][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.520214][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.537551][T17133] bridge_slave_0: entered allmulticast mode [ 411.554987][T17133] bridge_slave_0: entered promiscuous mode [ 411.587789][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.592611][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 411.618157][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.635869][T17133] bridge_slave_1: entered allmulticast mode [ 411.651312][T17133] bridge_slave_1: entered promiscuous mode [ 411.776269][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.892331][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.140312][T17133] team0: Port device team_slave_0 added [ 412.180457][T17133] team0: Port device team_slave_1 added [ 412.268881][ T5842] Bluetooth: hci0: command tx timeout [ 412.320447][ T5908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.515129][ T7890] IPVS: starting estimator thread 0... [ 412.625220][T17256] IPVS: using max 28 ests per chain, 67200 per kthread [ 412.654088][ T5908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.688875][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.695888][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.768373][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.791584][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.808763][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.886660][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.952242][ T5908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.031542][T17274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3329'. [ 413.109156][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.122647][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.131784][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.142091][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.150459][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.182157][ T5908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.309892][T17133] hsr_slave_0: entered promiscuous mode [ 413.316716][T17133] hsr_slave_1: entered promiscuous mode [ 413.348914][T17133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.356548][T17133] Cannot create hsr debugfs directory [ 413.695287][T17296] xt_CT: No such helper "pptp" [ 413.897962][ T5908] bridge_slave_1: left allmulticast mode [ 413.915899][ T5908] bridge_slave_1: left promiscuous mode [ 413.929133][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.936637][T17305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3338'. [ 413.962243][ T5908] bridge_slave_0: left allmulticast mode [ 413.974596][ T5908] bridge_slave_0: left promiscuous mode [ 413.987441][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.359530][ T5831] Bluetooth: hci0: command tx timeout [ 414.567556][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.577912][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.589843][ T5908] bond0 (unregistering): Released all slaves [ 414.713098][ T5908] bond1 (unregistering): Released all slaves [ 414.822775][T17133] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.957174][T17325] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3343'. [ 414.977054][T17327] netlink: 'syz.3.3344': attribute type 29 has an invalid length. [ 415.037147][T17133] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.075986][T17327] netlink: 'syz.3.3344': attribute type 29 has an invalid length. [ 415.102059][T17330] netlink: 'syz.3.3344': attribute type 29 has an invalid length. [ 415.154835][T17133] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.224620][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3345'. [ 415.238528][ T5831] Bluetooth: hci4: command tx timeout [ 415.260952][T17133] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.364802][T17338] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3346'. [ 415.643331][T17350] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 415.724119][T17350] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 415.814032][T17276] chnl_net:caif_netlink_parms(): no params data found [ 416.080894][ T5908] hsr_slave_0: left promiscuous mode [ 416.104719][ T5908] hsr_slave_1: left promiscuous mode [ 416.119119][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.126775][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.138545][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.146041][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.199797][ T5908] veth1_macvtap: left promiscuous mode [ 416.346994][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 416.373850][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3358'. [ 416.385810][T17373] netlink: 'syz.0.3358': attribute type 13 has an invalid length. [ 416.431422][ T5831] Bluetooth: hci0: command tx timeout [ 416.694214][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 416.798151][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 417.114372][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3361'. [ 417.313227][ T5831] Bluetooth: hci4: command tx timeout [ 417.572286][T17383] syzkaller0: entered promiscuous mode [ 417.598061][T17383] syzkaller0: entered allmulticast mode [ 417.754678][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 419.392425][ T5831] Bluetooth: hci4: command tx timeout [ 419.495081][T17276] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.502986][T17276] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.510677][T17276] bridge_slave_0: entered allmulticast mode [ 419.518154][T17276] bridge_slave_0: entered promiscuous mode [ 419.538125][T17133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.610001][T17276] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.641323][T17276] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.662902][T17276] bridge_slave_1: entered allmulticast mode [ 419.672643][T17276] bridge_slave_1: entered promiscuous mode [ 419.699028][T17133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.806703][T17133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.826182][T17276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.841637][T17133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.873496][T17276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.931837][T17276] team0: Port device team_slave_0 added [ 419.939860][T17417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3371'. [ 419.973573][T17276] team0: Port device team_slave_1 added [ 420.052592][T17276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.060726][T17276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.097943][T17276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.121127][T17276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.137198][T17276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.248587][T17276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.465255][T17276] hsr_slave_0: entered promiscuous mode [ 420.473441][T17276] hsr_slave_1: entered promiscuous mode [ 420.480712][T17276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.496697][T17276] Cannot create hsr debugfs directory [ 420.906582][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.976870][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.084580][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.091967][ T8420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.151683][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.158974][ T8420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.468429][ T5831] Bluetooth: hci4: command tx timeout [ 421.746291][T17276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 421.833303][T17276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 421.850997][T17276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 421.902104][T17276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 421.966827][T17477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3389'. [ 422.198130][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3392'. [ 422.216917][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.231682][T17276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.318252][T17276] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.393965][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.401244][ T8522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.453459][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.460718][ T8522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.483806][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3394'. [ 422.628729][T17133] veth0_vlan: entered promiscuous mode [ 422.745031][T17133] veth1_vlan: entered promiscuous mode [ 422.905661][T17133] veth0_macvtap: entered promiscuous mode [ 422.930619][T17515] unknown channel width for channel at 909000KHz? [ 422.939217][T17133] veth1_macvtap: entered promiscuous mode [ 422.953740][T17515] unknown channel width for channel at 909000KHz? [ 422.999347][T17519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.006675][T17519] IPv6: NLM_F_CREATE should be set when creating new route [ 423.036570][T17515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.093129][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.128330][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.133354][T17525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3400'. [ 423.158209][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.180012][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.201407][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.219024][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.238045][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.273432][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.286843][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.297963][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.321254][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.339519][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.352025][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.365333][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.417782][T17531] xt_socket: unknown flags 0x3c [ 423.420901][T17276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.435802][T17133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.446752][T17133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.457248][T17133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.471318][T17133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.482689][T17533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3403'. [ 423.760524][ T7706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.761795][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 423.778965][ T7706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.818821][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 423.835835][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 423.845266][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 423.877380][T17543] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 423.884511][T17543] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 423.906404][T17276] veth0_vlan: entered promiscuous mode [ 424.042707][T17276] veth1_vlan: entered promiscuous mode [ 424.052626][ T8519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.099282][ T8519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.146479][T17276] veth0_macvtap: entered promiscuous mode [ 424.185695][T17276] veth1_macvtap: entered promiscuous mode [ 424.216356][T17557] netlink: 'syz.0.3409': attribute type 6 has an invalid length. [ 424.248482][T17557] netlink: 'syz.0.3409': attribute type 5 has an invalid length. [ 424.271443][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.283675][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.296035][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.307282][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.317815][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.338674][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.349098][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 424.365299][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.380457][T17276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.436332][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.462613][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.484764][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.502805][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.523560][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.535486][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.545787][T17276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 424.557580][T17276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 424.571657][T17276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.602014][T17276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.621670][T17276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.647311][T17276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.665403][T17276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.012339][ T7706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.042148][ T7706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.080918][T17593] __nla_validate_parse: 53 callbacks suppressed [ 425.080940][T17593] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3419'. [ 425.112074][T17593] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3419'. [ 425.266633][ T8531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.292114][ T8531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.385234][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3422'. [ 425.416959][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3422'. [ 425.420749][T17607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3424'. [ 425.672667][T17619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.734121][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3430'. [ 425.924159][ T7706] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.063123][ T7706] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.367663][ T7706] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.474479][T17643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3437'. [ 426.542533][ T7706] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.857241][T17654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3439'. [ 426.891806][ T7706] bridge_slave_1: left allmulticast mode [ 426.909490][ T7706] bridge_slave_1: left promiscuous mode [ 426.910208][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.915472][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.944618][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 426.954583][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 426.965639][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 426.975375][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 426.987672][ T7706] bridge_slave_0: left allmulticast mode [ 427.030306][ T7706] bridge_slave_0: left promiscuous mode [ 427.037969][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.368088][T17674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.586080][ T7706] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.606385][ T7706] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.617475][T17679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.630350][ T7706] bond0 (unregistering): Released all slaves [ 427.846008][T17684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3449'. [ 428.521661][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 428.886050][T17725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3461'. [ 429.070093][ T5842] Bluetooth: hci4: command tx timeout [ 429.083106][ T7706] hsr_slave_0: left promiscuous mode [ 429.127880][ T7706] hsr_slave_1: left promiscuous mode [ 429.149363][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.174349][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.183093][ T7706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.194464][ T7706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.253591][ T7706] veth1_macvtap: left promiscuous mode [ 429.262740][ T7706] veth0_macvtap: left promiscuous mode [ 429.268646][ T7706] veth1_vlan: left promiscuous mode [ 429.274319][ T7706] veth0_vlan: left promiscuous mode [ 430.108635][ T7706] team0 (unregistering): Port device team_slave_1 removed [ 430.167198][ T7706] team0 (unregistering): Port device team_slave_0 removed [ 430.643170][T17740] __nla_validate_parse: 2 callbacks suppressed [ 430.643189][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3465'. [ 430.733859][T17760] 8021q: VLANs not supported on tunl0 [ 430.849342][T17775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3473'. [ 430.944627][T17777] netlink: 'syz.1.3474': attribute type 4 has an invalid length. [ 431.013315][T17781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3475'. [ 431.047928][T17655] chnl_net:caif_netlink_parms(): no params data found [ 431.159352][ T5842] Bluetooth: hci4: command tx timeout [ 432.109646][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.147380][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.188958][T17655] bridge_slave_0: entered allmulticast mode [ 432.241615][T17655] bridge_slave_0: entered promiscuous mode [ 432.290363][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.297579][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.324498][T17655] bridge_slave_1: entered allmulticast mode [ 432.380470][T17655] bridge_slave_1: entered promiscuous mode [ 432.641513][T17826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3489'. [ 432.657918][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.695319][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.847019][T17655] team0: Port device team_slave_0 added [ 432.873569][T17655] team0: Port device team_slave_1 added [ 433.084021][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.107256][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.161565][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.220714][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.227734][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.259215][ T5842] Bluetooth: hci4: command tx timeout [ 433.266062][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.295344][T17834] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 433.305851][T17834] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 433.316726][T17834] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 433.326549][T17834] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 433.336082][T17834] geneve2: entered promiscuous mode [ 433.341810][T17834] geneve2: entered allmulticast mode [ 433.364080][T17835] tipc: Started in network mode [ 433.375436][T17835] tipc: Node identity , cluster identity 4711 [ 433.381639][T17835] tipc: Failed to obtain node identity [ 433.387138][T17835] tipc: Enabling of bearer rejected, failed to enable media [ 433.400585][T17842] bridge0: port 3(syz_tun) entered blocking state [ 433.409641][T17842] bridge0: port 3(syz_tun) entered disabled state [ 433.410991][T17850] xt_HMARK: spi-set and port-set can't be combined [ 433.422405][T17842] syz_tun: entered allmulticast mode [ 433.434608][T17842] syz_tun: entered promiscuous mode [ 433.441223][T17842] bridge0: port 3(syz_tun) entered blocking state [ 433.448118][T17842] bridge0: port 3(syz_tun) entered forwarding state [ 433.457905][T17847] xfrm0: entered promiscuous mode [ 433.463493][T17847] xfrm0: entered allmulticast mode [ 433.598205][T17655] hsr_slave_0: entered promiscuous mode [ 433.606358][T17655] hsr_slave_1: entered promiscuous mode [ 433.613490][T17655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.621686][T17655] Cannot create hsr debugfs directory [ 433.652608][T17854] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3496'. [ 433.684444][T17854] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3496'. [ 433.717455][T17854] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3496'. [ 433.800195][T17865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3500'. [ 433.920410][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 433.933462][T17870] nbd: must specify a size in bytes for the device [ 434.154635][T17885] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 434.170853][T17882] veth0: entered promiscuous mode [ 434.235583][T17882] veth0: entered allmulticast mode [ 434.254965][T17890] delete_channel: no stack [ 434.295668][T17889] vxcan2: entered allmulticast mode [ 434.317258][T17887] vxcan2: entered allmulticast mode [ 434.341005][T17879] veth0: left promiscuous mode [ 434.558489][T17908] netlink: 'syz.0.3511': attribute type 1 has an invalid length. [ 434.680323][T17915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3514'. [ 434.710793][T17917] netlink: 'syz.1.3515': attribute type 2 has an invalid length. [ 434.759779][ T7706] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.772518][ T7706] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 434.789237][ T5828] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.001405][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.117043][T17936] bond1: entered promiscuous mode [ 435.122387][T17936] bond1: entered allmulticast mode [ 435.128030][T17936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.319190][ T5842] Bluetooth: hci4: command tx timeout [ 435.353555][T17936] bond1 (unregistering): Released all slaves [ 435.430734][T17655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 435.485389][T17655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 435.530996][T17655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 435.548965][ T5828] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 435.585445][T17655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 435.628191][T17963] C: renamed from team_slave_0 (while UP) [ 435.638142][T17959] Cannot find set identified by id 752 to match [ 435.647099][T17963] netlink: 'syz.1.3529': attribute type 1 has an invalid length. [ 435.655523][T17963] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 435.674154][T17960] __nla_validate_parse: 1 callbacks suppressed [ 435.674172][T17960] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3528'. [ 435.823987][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3531'. [ 435.867757][T17969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3531'. [ 435.982614][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.048802][T17979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3535'. [ 436.053892][T17655] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.087995][ T2857] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.095291][ T2857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.156333][ T2857] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.163593][ T2857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.180102][T17985] netlink: 'syz.4.3538': attribute type 7 has an invalid length. [ 436.621187][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3545'. [ 436.856944][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.011646][T17655] veth0_vlan: entered promiscuous mode [ 437.042527][T17655] veth1_vlan: entered promiscuous mode [ 437.173619][T17655] veth0_macvtap: entered promiscuous mode [ 437.202236][T17655] veth1_macvtap: entered promiscuous mode [ 437.253743][T18032] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3553'. [ 437.306057][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.343632][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3555'. [ 437.348349][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.356258][T18037] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3551'. [ 437.394049][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.421329][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.435800][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.455547][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.466595][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.485119][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.498124][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.603616][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.637929][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.661162][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.671968][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.682654][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.695136][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.705472][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.717791][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'. [ 437.727190][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.746016][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.117589][T18049] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.125305][T18049] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.653874][T18049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.675456][T18049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.693350][T18049] xfrm0: left promiscuous mode [ 438.748540][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 438.851944][T18049] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.862064][T18049] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.871919][T18049] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.887075][T18049] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.002836][T18049] bridge1: left promiscuous mode [ 439.011687][T18049] macvlan2: left promiscuous mode [ 439.040636][T18051] netlink: 'syz.3.3559': attribute type 5 has an invalid length. [ 439.097257][T17655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.124669][T17655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.143033][T17655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.178526][T17655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.223678][T18067] syzkaller1: entered promiscuous mode [ 439.239492][T18077] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 439.470797][ T59] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,4096B). Runtime 330 seconds [ 439.556979][T18092] netlink: 'syz.3.3569': attribute type 3 has an invalid length. [ 439.579401][ T8531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.587381][ T8531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.599864][T18092] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3569'. [ 439.683691][ T8521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.703965][T18097] IPVS: length: 8 != 1152 [ 439.714088][ T8521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.572353][ T8519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.663624][T18101] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 440.687528][T18101] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 440.944719][ T8519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.090379][ T8519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.237660][T18135] __nla_validate_parse: 3 callbacks suppressed [ 441.237679][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3586'. [ 441.270623][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3586'. [ 441.272548][ T8519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.460255][T18139] netlink: 'syz.4.3587': attribute type 23 has an invalid length. [ 441.549163][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.561288][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.574274][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.583744][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.591771][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.638153][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 441.648711][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 441.657876][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 441.666600][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 441.676725][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.676974][ T8519] bridge_slave_1: left allmulticast mode [ 441.718392][ T8519] bridge_slave_1: left promiscuous mode [ 441.724395][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.735311][ T8519] bridge_slave_0: left allmulticast mode [ 441.741470][ T8519] bridge_slave_0: left promiscuous mode [ 441.747243][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.215450][T18153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'. [ 442.237754][ T8519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.253690][ T8519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.267464][ T8519] bond0 (unregistering): Released all slaves [ 442.305026][T18153] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3591'. [ 442.873674][T18158] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3593'. [ 443.316281][T18173] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3599'. [ 443.436895][T18170] netlink: 'syz.3.3598': attribute type 5 has an invalid length. [ 443.577540][T18180] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3601'. [ 443.631076][ T5842] Bluetooth: hci0: command tx timeout [ 443.690219][T18140] chnl_net:caif_netlink_parms(): no params data found [ 443.708832][ T5842] Bluetooth: hci4: command tx timeout [ 443.816584][ T8519] hsr_slave_0: left promiscuous mode [ 443.848592][ T8519] hsr_slave_1: left promiscuous mode [ 443.854829][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.868105][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.884183][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.892107][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.933194][ T8519] veth1_macvtap: left promiscuous mode [ 443.947543][ T8519] veth0_macvtap: left promiscuous mode [ 443.957104][ T8519] veth1_vlan: left promiscuous mode [ 443.971069][ T8519] veth0_vlan: left promiscuous mode [ 444.653460][ T8519] team0 (unregistering): Port device team_slave_1 removed [ 444.705164][ T8519] team0 (unregistering): Port device team_slave_0 removed [ 445.447182][T18203] veth0_to_hsr: entered promiscuous mode [ 445.495768][T18209] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 445.542288][T18200] veth0_to_hsr: left promiscuous mode [ 445.548090][T18140] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.578945][T18140] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.586297][T18140] bridge_slave_0: entered allmulticast mode [ 445.606681][T18140] bridge_slave_0: entered promiscuous mode [ 445.650837][T18140] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.668488][T18140] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.675988][T18140] bridge_slave_1: entered allmulticast mode [ 445.695142][T18140] bridge_slave_1: entered promiscuous mode [ 445.716915][ T5842] Bluetooth: hci0: command tx timeout [ 445.722201][T18217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.788578][ T5842] Bluetooth: hci4: command tx timeout [ 445.854983][T18140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.912464][T18140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.943426][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3612'. [ 445.953823][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3612'. [ 445.995589][T18224] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3611'. [ 446.040113][T18140] team0: Port device team_slave_0 added [ 446.112032][T18140] team0: Port device team_slave_1 added [ 446.172782][T18142] chnl_net:caif_netlink_parms(): no params data found [ 446.246674][T18240] netlink: 'syz.4.3616': attribute type 6 has an invalid length. [ 446.261231][T18140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.268815][T18140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.296000][T18140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.313412][T18242] netlink: 'syz.4.3616': attribute type 6 has an invalid length. [ 446.347694][T18140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.359688][T18140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.395985][T18140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.655178][T18140] hsr_slave_0: entered promiscuous mode [ 446.668176][T18140] hsr_slave_1: entered promiscuous mode [ 446.686516][T18140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.697303][T18140] Cannot create hsr debugfs directory [ 446.764899][T18253] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.779019][T18254] xt_limit: Overflow, try lower: 0/0 [ 446.857512][ T8519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.876714][ T8519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 446.913067][T18142] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.927567][T18142] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.939919][T18142] bridge_slave_0: entered allmulticast mode [ 446.948187][T18142] bridge_slave_0: entered promiscuous mode [ 446.965809][T18142] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.976284][T18142] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.997019][T18142] bridge_slave_1: entered allmulticast mode [ 447.015397][T18142] bridge_slave_1: entered promiscuous mode [ 447.096960][ T8519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.126651][ T8519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 447.252077][T18265] __nla_validate_parse: 1 callbacks suppressed [ 447.252097][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'. [ 447.287879][T18142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.330196][T18274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'. [ 447.398809][ T8519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.412083][ T8519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 447.455402][T18142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.477259][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3627'. [ 447.693811][ T8519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.716092][ T8519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 447.787544][T18142] team0: Port device team_slave_0 added [ 447.796013][ T5842] Bluetooth: hci0: command tx timeout [ 447.808758][T18286] netlink: 'syz.4.3628': attribute type 5 has an invalid length. [ 447.841348][T18142] team0: Port device team_slave_1 added [ 447.868547][ T5842] Bluetooth: hci4: command tx timeout [ 447.921473][T18298] xt_l2tp: missing protocol rule (udp|l2tpip) [ 448.110594][T18142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.117902][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.161806][T18142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.192586][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'. [ 448.224015][T18302] syzkaller1: entered promiscuous mode [ 448.230250][T18302] syzkaller1: entered allmulticast mode [ 448.250775][T18142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.262572][T18142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.290356][T18142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.488857][T18320] netlink: 'syz.0.3638': attribute type 2 has an invalid length. [ 448.593284][T18324] netlink: 'syz.4.3639': attribute type 10 has an invalid length. [ 448.637075][T18324] bridge0: port 3(team0) entered blocking state [ 448.644058][T18324] bridge0: port 3(team0) entered disabled state [ 448.653819][T18324] team0: entered allmulticast mode [ 448.659593][T18324] team_slave_0: entered allmulticast mode [ 448.665445][T18324] team_slave_1: entered allmulticast mode [ 448.675026][T18324] team0: entered promiscuous mode [ 448.680875][T18324] team_slave_0: entered promiscuous mode [ 448.686916][T18324] team_slave_1: entered promiscuous mode [ 448.717524][ T8519] bridge_slave_1: left allmulticast mode [ 448.727884][ T8519] bridge_slave_1: left promiscuous mode [ 448.736927][ T8519] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.767668][ T8519] bridge_slave_0: left allmulticast mode [ 448.786039][ T8519] bridge_slave_0: left promiscuous mode [ 448.800453][ T8519] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.936077][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3643'. [ 449.358137][ T8519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.372034][ T8519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.382485][ T8519] bond0 (unregistering): Released all slaves [ 449.415598][T18142] hsr_slave_0: entered promiscuous mode [ 449.424079][T18142] hsr_slave_1: entered promiscuous mode [ 449.431041][T18142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.453101][T18142] Cannot create hsr debugfs directory [ 449.459404][T18334] netlink: 'syz.4.3643': attribute type 5 has an invalid length. [ 449.743446][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3649'. [ 449.868432][ T5842] Bluetooth: hci0: command tx timeout [ 449.950549][ T5842] Bluetooth: hci4: command tx timeout [ 450.461398][ T8519] hsr_slave_0: left promiscuous mode [ 450.470694][ T8519] hsr_slave_1: left promiscuous mode [ 450.476810][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.485301][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.496293][ T8519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.503973][ T8519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.531955][ T8519] veth1_macvtap: left promiscuous mode [ 450.537566][ T8519] veth0_macvtap: left promiscuous mode [ 450.544404][ T8519] veth1_vlan: left promiscuous mode [ 450.550558][ T8519] veth0_vlan: left promiscuous mode [ 451.135016][ T8519] team0 (unregistering): Port device team_slave_1 removed [ 451.191381][ T8519] team0 (unregistering): Port device C removed [ 451.861058][T18140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.882051][T18140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.972597][T18379] netlink: 'syz.4.3656': attribute type 5 has an invalid length. [ 451.988814][T18140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.080635][T18140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.270178][ T31] INFO: task udevd:5950 blocked for more than 143 seconds. [ 452.286731][ T31] Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 [ 452.300185][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.315972][ T31] task:udevd state:D stack:22184 pid:5950 tgid:5950 ppid:5198 task_flags:0x400140 flags:0x00004006 [ 452.323516][T18140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.329070][ T31] Call Trace: [ 452.343747][ T31] [ 452.347043][ T31] __schedule+0x16e2/0x4cd0 [ 452.352235][ T31] ? schedule+0x165/0x360 [ 452.356810][ T31] ? __lock_acquire+0xaac/0xd20 [ 452.362582][ T31] ? __pfx___schedule+0x10/0x10 [ 452.367682][ T31] ? schedule+0x91/0x360 [ 452.376928][T18140] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.388742][ T31] schedule+0x165/0x360 [ 452.398101][ T31] io_schedule+0x81/0xe0 [ 452.398367][ T8519] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.403021][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 452.409619][ T8519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.428945][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 452.430213][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.435546][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 452.442026][ T8420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.447669][ T31] ? __filemap_get_folio+0x750/0xaf0 [ 452.504607][ T31] ? do_read_cache_folio+0x4ed/0x590 [ 452.513892][ T31] do_read_cache_folio+0x1ae/0x590 [ 452.519510][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 452.525045][ T31] read_part_sector+0xb6/0x270 [ 452.531429][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 452.539179][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 452.544801][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 452.551219][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 452.556493][ T31] bdev_disk_changed+0x75c/0x14b0 [ 452.561727][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 452.567232][ T31] ? wait_on_inode+0xc0/0x230 [ 452.572224][ T31] blkdev_get_whole+0x380/0x510 [ 452.577145][ T31] bdev_open+0x31e/0xd30 [ 452.581911][ T31] blkdev_open+0x3a8/0x510 [ 452.586414][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 452.596060][ T31] do_dentry_open+0xdf0/0x1970 [ 452.606619][ T31] vfs_open+0x3b/0x340 [ 452.614351][ T31] ? path_openat+0x2ecd/0x3830 [ 452.623966][ T31] path_openat+0x2ee5/0x3830 [ 452.632226][ T31] ? arch_stack_walk+0xfc/0x150 [ 452.637316][ T31] ? __pfx_path_openat+0x10/0x10 [ 452.651773][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.657954][ T31] do_filp_open+0x1fa/0x410 [ 452.665951][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 452.675482][ T31] ? _raw_spin_unlock+0x28/0x50 [ 452.680734][ T31] ? alloc_fd+0x64c/0x6c0 [ 452.685134][ T31] do_sys_openat2+0x121/0x1c0 [ 452.690123][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.695438][ T31] __x64_sys_openat+0x138/0x170 [ 452.701076][ T31] do_syscall_64+0xf6/0x210 [ 452.705646][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 452.714962][ T31] ? clear_bhb_loop+0x45/0xa0 [ 452.723503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.735937][ T31] RIP: 0033:0x7f424f2a7407 [ 452.745257][ T31] RSP: 002b:00007ffcb6c233e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 452.764720][ T31] RAX: ffffffffffffffda RBX: 00007f424f9e0880 RCX: 00007f424f2a7407 [ 452.772987][ T31] RDX: 00000000000a0800 RSI: 0000557740600900 RDI: ffffffffffffff9c [ 452.781315][ T31] RBP: 00005577405ec910 R08: 0000000000000000 R09: 0000000000000000 [ 452.789875][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557740609ee0 [ 452.798360][ T31] R13: 00005577406043e0 R14: 0000000000000000 R15: 0000557740609ee0 [ 452.806395][ T31] [ 452.819664][ T31] [ 452.819664][ T31] Showing all locks held in the system: [ 452.827457][ T31] 1 lock held by khungtaskd/31: [ 452.874039][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 452.879828][T18140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.913765][ T31] 2 locks held by kworker/u8:5/2857: [ 452.920482][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 452.930804][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 452.942905][ T31] 2 locks held by getty/5592: [ 452.948580][ T31] #0: ffff88814d8510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 452.958705][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 452.969852][ T31] 1 lock held by udevd/5950: [ 452.974585][ T31] #0: ffff888024e82358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 452.984802][ T31] 3 locks held by kworker/0:14/7881: [ 452.990691][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 453.008562][ T31] #1: ffffc900038e7c60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 453.024823][ T31] #2: ffff88802458b240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 453.036427][ T31] 3 locks held by kworker/1:11/7889: [ 453.042637][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 453.055938][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 453.071822][ T31] #2: ffffffff8df3b8c0 (rcu_read_lock_bh){....}-{1:3}, at: wg_packet_tx_worker+0x24a/0x7c0 [ 453.082325][ T31] 1 lock held by syz-executor/18140: [ 453.087769][ T31] #0: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 453.108311][ T31] 1 lock held by syz-executor/18142: [ 453.109324][T18142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 453.113768][ T31] 3 locks held by syz.4.3660/18392: [ 453.126331][ T31] #0: ffff88807905e208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 453.136964][ T31] #1: ffff8880786c0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_release+0x798/0xce0 [ 453.146934][ T31] #2: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 453.160483][ T31] [ 453.162932][ T31] ============================================= [ 453.162932][ T31] [ 453.172002][ T31] NMI backtrace for cpu 0 [ 453.172031][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 453.172055][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 453.172067][ T31] Call Trace: [ 453.172075][ T31] [ 453.172084][ T31] dump_stack_lvl+0x189/0x250 [ 453.172116][ T31] ? __wake_up_klogd+0xd9/0x110 [ 453.172141][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.172179][ T31] ? __pfx__printk+0x10/0x10 [ 453.172212][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 453.172246][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 453.172274][ T31] ? _printk+0xcf/0x120 [ 453.172297][ T31] ? __pfx__printk+0x10/0x10 [ 453.172320][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 453.172342][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 453.172375][ T31] watchdog+0xfee/0x1030 [ 453.172402][ T31] ? watchdog+0x1de/0x1030 [ 453.172435][ T31] kthread+0x70e/0x8a0 [ 453.172462][ T31] ? __pfx_watchdog+0x10/0x10 [ 453.172485][ T31] ? __pfx_kthread+0x10/0x10 [ 453.172508][ T31] ? __pfx_kthread+0x10/0x10 [ 453.172530][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.172549][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.172571][ T31] ? __pfx_kthread+0x10/0x10 [ 453.172593][ T31] ret_from_fork+0x4b/0x80 [ 453.172612][ T31] ? __pfx_kthread+0x10/0x10 [ 453.172634][ T31] ret_from_fork_asm+0x1a/0x30 [ 453.172669][ T31] [ 453.172676][ T31] Sending NMI from CPU 0 to CPUs 1: [ 453.327768][ C1] NMI backtrace for cpu 1 [ 453.327785][ C1] CPU: 1 UID: 0 PID: 8521 Comm: kworker/u8:19 Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 453.327805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 453.327817][ C1] Workqueue: bat_events batadv_nc_worker [ 453.327838][ C1] RIP: 0010:kasan_byte_accessible+0x0/0x30 [ 453.327863][ C1] Code: d6 f1 ff ff 34 01 e9 1c ff ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 [ 453.327878][ C1] RSP: 0018:ffffc9001bb1fa00 EFLAGS: 00000202 [ 453.327892][ C1] RAX: 0000000000000001 RBX: ffffffff8b23f1cf RCX: 1599fd0029c50800 [ 453.327904][ C1] RDX: 0000000000000000 RSI: ffffffff8b23f1cf RDI: ffffffff8df3b860 [ 453.327916][ C1] RBP: ffffffff8b23f1b2 R08: 0000000000000000 R09: 0000000000000000 [ 453.327926][ C1] R10: 0000000000000000 R11: ffffffff8b23f1b2 R12: 0000000000000002 [ 453.327936][ C1] R13: ffffffff8df3b860 R14: ffffffff8df3b860 R15: 0000000000000000 [ 453.327948][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 453.327961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 453.327976][ C1] CR2: 00007ff7f6380178 CR3: 0000000030866000 CR4: 00000000003526f0 [ 453.327991][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 453.328001][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 453.328011][ C1] Call Trace: [ 453.328017][ C1] [ 453.328025][ C1] __kasan_check_byte+0x12/0x40 [ 453.328047][ C1] lock_acquire+0x8d/0x360 [ 453.328073][ C1] ? batadv_nc_worker+0xd2/0x610 [ 453.328088][ C1] ? batadv_nc_worker+0xd2/0x610 [ 453.328103][ C1] batadv_nc_worker+0xef/0x610 [ 453.328117][ C1] ? batadv_nc_worker+0xd2/0x610 [ 453.328133][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 453.328167][ C1] process_scheduled_works+0xadb/0x17a0 [ 453.328208][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 453.328242][ C1] worker_thread+0x8a0/0xda0 [ 453.328273][ C1] kthread+0x70e/0x8a0 [ 453.328296][ C1] ? __pfx_worker_thread+0x10/0x10 [ 453.328313][ C1] ? __pfx_kthread+0x10/0x10 [ 453.328334][ C1] ? __pfx_kthread+0x10/0x10 [ 453.328354][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.328373][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.328400][ C1] ? __pfx_kthread+0x10/0x10 [ 453.328420][ C1] ret_from_fork+0x4b/0x80 [ 453.328439][ C1] ? __pfx_kthread+0x10/0x10 [ 453.328459][ C1] ret_from_fork_asm+0x1a/0x30 [ 453.328487][ C1] [ 453.332205][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 453.332229][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00178-g9540984da649 #0 PREEMPT(full) [ 453.332256][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 453.332271][ T31] Call Trace: [ 453.332280][ T31] [ 453.332291][ T31] dump_stack_lvl+0x99/0x250 [ 453.332327][ T31] ? __asan_memcpy+0x40/0x70 [ 453.332350][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.332381][ T31] ? __pfx__printk+0x10/0x10 [ 453.332417][ T31] panic+0x2db/0x790 [ 453.332454][ T31] ? __pfx_panic+0x10/0x10 [ 453.332482][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 453.332508][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 453.332535][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 453.332577][ T31] watchdog+0x102d/0x1030 [ 453.332607][ T31] ? watchdog+0x1de/0x1030 [ 453.332644][ T31] kthread+0x70e/0x8a0 [ 453.332675][ T31] ? __pfx_watchdog+0x10/0x10 [ 453.332700][ T31] ? __pfx_kthread+0x10/0x10 [ 453.332727][ T31] ? __pfx_kthread+0x10/0x10 [ 453.332751][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.332774][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.332798][ T31] ? __pfx_kthread+0x10/0x10 [ 453.332822][ T31] ret_from_fork+0x4b/0x80 [ 453.332843][ T31] ? __pfx_kthread+0x10/0x10 [ 453.707534][ T31] ret_from_fork_asm+0x1a/0x30 [ 453.712325][ T31] [ 453.715690][ T31] Kernel Offset: disabled [ 453.720044][ T31] Rebooting in 86400 seconds..