last executing test programs: 7.371832206s ago: executing program 0 (id=9416): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xe5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xd0, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x37df2056, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xca93}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e24, 0x5ff, @loopback, 0x8}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0xdb27, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e20, 0xe6b, @mcast2, 0x8e4}}, [0x5, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7, 0xfab7, 0xfffffffffffffff8, 0x10000, 0x0, 0x8, 0xffffffffffffffc8, 0x5, 0x3]}, &(0x7f0000000380)=0x100) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d1255b1768325299a3bd75639b"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x2c}}, 0x4800) r5 = accept(r0, 0x0, &(0x7f0000000500)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000540)=0x3, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000580)={0x0, 0x9}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f00000005c0)=0x8, 0x4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, r7, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb784}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}}, 0x40010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000008c0)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x5, @local}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e22, @loopback}], 0x6c) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000980)={r6, r9, 0x0, 0xb, &(0x7f0000000940)="f8ff9217d79c50e51c751e", 0x10, 0x2, 0x7f, 0x1, 0xfffd, 0x0, 0x401, 'syz0\x00'}) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000000f80)=[{&(0x7f0000000a40)=@in={0x2, 0x9, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a80)="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", 0xfb}, {&(0x7f0000000b80)="65e3ac997cab74ead21e53c372ed360c15b94bcbe679c21ff8a2e0a4b341d71ca851edb3c4e715ad8940870064bbe096601fcd5d886cabc2e5ffb61add2a8241", 0x40}, {&(0x7f0000000bc0)="5d143bddeff8dc461c676ade9b7ad306e65ffc5993674ffc7ce1d6ccd84c07d399dbcfdbdb298eaa8a57a100204531707307a1dcb56d085b03929c4bb66ed74bf0ea4d69cb39b9a8c4d74a696315800dc5731b30a10649e609ae016407a3645da74e6531e72b0795c74b25aaedae380f7edbd298941f11029145e316c415dbb78f7fa7dbe9e7d0539ecd91bd6aaf8ffb6b411aad2b00eb7494cdf20020120d37f0883886b4", 0xa5}, {&(0x7f0000000c80)="3a1601e6f3326fa34a1fe45cbd091f22835f1d435efeef265576d4f33177452986e1d8afb8d37dba48ea61c7e90802abd1f14cf796d9b5777477cbfd486c6385afebf6565391649995d68438cfda280a73d7e93812e5c947be95c18edb44748957b2f677f06ea9c656eb90d84f0c458a44ea48e6a39666ac4ce8183a34323f3de55424efc47b6d256eab6933eee9757b10", 0x91}, {&(0x7f0000000d40)="6c1126a835a76364a5d9726cda38cb822f5c0b4a665bdbd126eeb30f2385586cf0b7a69b11bc6bd29bffb1f391759cf6493966466adf937780935c3b15d4748d1eadee9e91500b28e3415bb760bf84d8195272872d69a3f1cca758c3d52d5e18fc5f80edb01a2d6dc029fea1566ca36a94166b87ccaa5918d2b64634f7426acad0e7106db93cc33c2cfddc1e546068", 0x8f}], 0x5, &(0x7f0000000e80)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x7, 0x63, 0x7ff, 0xfffe}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x8001, 0x2, 0x5, 0x3, 0x7, 0xffffffff, 0x7fff, r3}}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x201, 0x1, 0x3, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7ff}}, @sndrcv={0x30, 0x84, 0x1, {0x61, 0x2, 0x18005, 0x1ff5, 0x9, 0xc00c, 0x7, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x100, 0x5}], 0x1, 0x44800) ioctl$int_out(r10, 0x0, &(0x7f0000000fc0)) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000001000)=0x7, 0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x34, r11, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001180)={r2, 0x7c, "ab7be9ea5854ef7a88d70f8d79b9bf73078a4d6f097514494a317928e083f95606f1b0767bab8b6da858158b4e66914741a6f9f753090997d29b07587797157f3a97523b03bd4d4df95dde9573a2f48c8779d3187e03cc9ee5cd26fda17deb4f1ae4743fdff269a95cd4a01561e3f3ab0b0467a888df54b4b998b7f5"}, &(0x7f0000001240)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000001280)={r13, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x6, 0x2, 0x6, 0xb986, 0x43, 0x80000000, 0x4}, 0x9c) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r5) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x28, r14, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x2f}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x54}, 0x2cafa49259ab6481) 7.241478895s ago: executing program 0 (id=9419): socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x3}]}, @volatile={0x1, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000280)=""/56, 0x3c, 0x38, 0x1, 0x8}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) r2 = socket$kcm(0x10, 0x0, 0x4) r3 = socket(0x1a, 0x80000, 0xda) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000200)) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0xc8, &(0x7f0000000040)=""/200, 0x0, 0x4, '\x00', 0x0, @fallback=0x25}, 0x94) 7.103975993s ago: executing program 0 (id=9420): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b40500000900000061108d00000000000700200000000000950000000000000057399ac7bbf14fd5072a19b34d059b82095c10c57e841dcccc35b451c175022a66e6de158780bd50b1d87d78c44b23e5ab0c7c66ac75481ee7dab0701ff57bd8891da47f9a4124f4da83ec9dcd3abd5cea92d58f347ae09b2b419961c47f3ce4b4b7d8308f454a4c5d518718f6d1a99b2b5ad4f194dc56eb202fd118faced037430d8ff5efedd5c76ffd79f8e6e2e37836e736b7778f7d6891f8a22b77dc0898db43d040fc350037d75d047b0402fee2eb4b42539e69922dfd677d9565102eedd3b05bc8bf36f2a84fb40cd1bb02f5d81ace17e60fa3935c002236223b80f0be2dde29013ccd83a35696d88c150300dd534a78ddbe6b52609f5929f6aa0cbd9ef79fe50fc195f22d79eb0ec945ca59eca9e3a37ac549b8a0dec9872d02604bb6b190c4a34836b20dbecef2ffbd0d59e020b9ee5f9c9fb57bb6bcbbff72430bda"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x12c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0xc}, @generic="0bdab8e40bb2cc70c3b110471372ae7a003c5cb1ab849fdd0df1b20649d4a008faa649712237cc8c83a39badfeaa65e92cb0b7d844f5cb0e9b525d84332c5058fc0f216adb72b6d473fd1dde93b2587c9fc4aa3ca4e37ed8c4847643bad824eb0b7d548050d76fefd2fd7e96e3e611a0ffb0ebf0cd108b0d6185235857288810225277077fcd2e4b9ed69c790b1e904d1c4804ae0afbb887e14d2bd623df9f7d7dc61e7911bb204a0c429bb22f715c59884afd7c32541dc3e82691fb99ac7ae6ed1730566a36197dc440f59451553939a2ba9aef55819a9b8a7e01", @generic="95c3e087693de123597de2c63d45c71ca8c416d0d7"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x125060, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x24, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x200080c2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r6, 0x0, 0x0, 0x40, 0x0, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)="fbffffffffffffff3885bce4a812109765ebcf54a44104", 0x17}, {&(0x7f0000000440)='o', 0x1}], 0x3) 3.987241526s ago: executing program 0 (id=9436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040065580000ffff"}}}}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000580)='freezer.parent_freezing\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000540)={'macvlan1\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "0ee8a808941c4da72524f794b5edc67608616d924ca70d8235ff19fd43cfbbdc", "bfe519402c358b35d3605adfd271a54806ff5004e7186adc2cccd48265ef3a4b", "49b2f2e05ac6b34d7b93d55fbea1d36c5a838fdd6f7c536af96335affbcf4c27", "89e6f349fd75d21b00d5f3c79164081b1202fe3586b20c1750be1146bcf001ec", "64fde8cc0b51858d4bbed89b789057adf7894f4b1c8bbeb0e1850144997bf967", "ae010cd12d01e1bbf73405af", 0x4, 0x7f, 0x1, 0x8a, 0xaa}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x13c, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @empty, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7dd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x404c001}, 0x40084) shutdown(r8, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0xfe, 0x3, 0xe8, 0xa0, 0x7, 0xff, 0x3, 0x2, 0x86, 0x24}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}}, 0xc010) 3.789184425s ago: executing program 0 (id=9442): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)={0x12b4, 0x0, 0x5, 0x201, 0x0, 0x0, {0x5d73ab2ce918d657, 0x0, 0x2}, [{{0x254, 0x1, {{}, 0x2, 0x2, 0x2, 0x1, 0xd, 'syz1\x00', "e6ce20f45be94234d9f34e59e6e3999252bd5d429d30dd3f0c4d0defb1e7f7a1", "0c9bbc3270bc9b2a30947a57df5ac5715516364533201d8d821a59ab5c4ac478", [{0x80, 0x1ff, {0x0, 0x1}}, {0x6, 0x5, {0x2}}, {0x8, 0x0, {0x0, 0x6}}, {0x8, 0x8, {0x3, 0x4}}, {0x81, 0x3, {0x2, 0x7}}, {0xf, 0x8001, {0x0, 0x3ff}}, {0x8, 0x9, {0x2, 0x39}}, {0x800, 0x800, {0x3, 0x9}}, {0x5, 0x8, {0x1, 0x42}}, {0x7, 0x9, {0x1, 0x400}}, {0x7, 0x34b, {0x2, 0x4}}, {0xb, 0x6, {0x1, 0x6}}, {0x0, 0x3, {0x2, 0x50}}, {0xfff5, 0x9, {0x2, 0x8741}}, {0x0, 0x5, {0x3, 0x6}}, {0x6, 0x4ee, {0x0, 0x3}}, {0x8a, 0x10, {0x1, 0xfffffffb}}, {0x71, 0x4, {0x2, 0x10}}, {0x3, 0x80, {0x1, 0x7}}, {0x93c6, 0x1, {0x3, 0xfffff01e}}, {0x6, 0x3, {0x0, 0x4}}, {0x86, 0x10, {0x2, 0x26}}, {0x5d01, 0x3, {0x0, 0x3}}, {0x4, 0x5, {0x0, 0x400}}, {0x5, 0xd, {0x2, 0x8}}, {0x7, 0xb, {0x1, 0x7}}, {0xfff9, 0x2, {0x2, 0x5}}, {0x81, 0x8, {0x2, 0x6}}, {0x8a, 0x8f9, {0x3, 0x7}}, {0x0, 0xffff, {0x3, 0x5}}, {0x3, 0x35, {0x0, 0x4}}, {0x1, 0x1000, {0x0, 0x9}}, {0xff, 0x200, {0x3, 0x7}}, {0x4d, 0x9, {0x0, 0x3}}, {0x9, 0xbc2, {0x2, 0xffffffff}}, {0x8, 0x3, {0x2, 0xf681}}, {0x7, 0xd52, {0x1, 0x4}}, {0x5, 0x1, {0x0, 0x9}}, {0xcf85, 0x5, {0x3, 0x6}}, {0x1, 0x5, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x9}, 0x9, 0x50, 0x37, 0x6, 0x15, 'syz1\x00', "17050dae26298021641ce184d1b1132f1c83f688b6b77c2e53bbb4a147fea51b", "7c8c642d1a8d6074ddfcb804e73fd358271cd136d6f910c4af0fa18e9bc3d603", [{0xb5, 0x6, {0x2, 0x1}}, {0x7, 0xf9c2, {0x3, 0x9}}, {0x7f, 0xb, {0x0, 0x10001}}, {0x2, 0xda0, {0x0, 0xffff}}, {0x800, 0x5, {0x3, 0x9}}, {0x5, 0xfffd, {0x2, 0xbbd9}}, {0x9, 0xe, {0x0, 0x6}}, {0x5, 0x0, {0x2}}, {0x7, 0x1, {0x0, 0x3}}, {0x2, 0x1000, {0x3, 0x3}}, {0x8, 0x456, {0x3, 0x81}}, {0x1, 0xffb7, {0x3, 0x2}}, {0xc, 0x5, {0x1, 0x5}}, {0x1ff, 0x4, {0x0, 0x9}}, {0x3, 0x800, {0x2, 0x2}}, {0xfff1, 0x6, {0x2, 0xfff}}, {0x3ff, 0x98, {0x2, 0xfffffffb}}, {0x6, 0x5, {0x1, 0x4}}, {0x65c, 0x8, {0x0, 0x5}}, {0xffff, 0x5d, {0x2, 0x1}}, {0x4, 0x1, {0x2, 0xfff}}, {0x3, 0x2, {0x3, 0x9da}}, {0x3, 0x6000, {0x2, 0x5}}, {0x840, 0x4, {0x2, 0x9b38}}, {0x2, 0x40, {0x3, 0xff}}, {0x8, 0xb, {0x1}}, {0x5, 0x2, {0x2, 0x6}}, {0x0, 0x2, {0x0, 0x6}}, {0x401, 0x5, {0x1, 0x80}}, {0xb3, 0x8947, {0x2, 0x5}}, {0x6800, 0xf1ed, {0x1, 0xa3}}, {0x3, 0x0, {0x2, 0x9}}, {0xd, 0xa, {0x3, 0xecdb}}, {0x4, 0x2, {0x3, 0xffffffff}}, {0x3ff, 0x7ff, {0x0, 0x4}}, {0x7, 0x8, {0x1, 0x8}}, {0x7ff, 0x3, {0x2, 0x8}}, {0x4, 0x6, {0x2, 0xc}}, {0x5, 0x4, {0x3, 0x53}}, {0x9, 0x7, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0xe5}, 0xc, 0x0, 0xd2b, 0x4, 0x5, 'syz0\x00', "ac77f296c58668a2d86f098784d392859a4c773ab66b114d6e92c674b4d2627b", "5d748594e88d315f77db65f2b71a22dea465f959750cc5daaf5cc0f0cf032602", [{0x8, 0x3, {0x0, 0x10001}}, {0x3, 0x7, {0x2, 0x4}}, {0x0, 0x5, {0x0, 0x76f6}}, {0x1, 0x0, {0x1, 0x3}}, {0xff, 0x6, {0x2, 0x1}}, {0xee1a, 0xf3, {0x0, 0x1}}, {0x8, 0x8, {0x3, 0x8}}, {0x57af, 0x7fff, {0x2, 0x9f0}}, {0x9, 0x8000, {0x2, 0x9}}, {0x10, 0x4, {0x1, 0xcf9}}, {0x4, 0x9, {0x2, 0x1000}}, {0x9, 0x0, {0x0, 0x31}}, {0xb9, 0x7f, {0x3, 0x5}}, {0x7, 0xd, {0x2, 0x7ff}}, {0xff82, 0x7, {0x3}}, {0xcc8, 0x5, {0x2, 0x7fff}}, {0x82dc, 0x8601, {0x3, 0x401}}, {0x8, 0x1, {0x2, 0x2}}, {0xfffe, 0x1, {0x0, 0x3}}, {0x9b9, 0x7, {0x0, 0x5}}, {0x4, 0x7, {0x0, 0x4}}, {0x1198, 0x4, {0x0, 0x5}}, {0xe, 0xf, {0x3, 0x8}}, {0x49, 0x4, {0x2, 0x8}}, {0xf001, 0x6, {0x3, 0x100}}, {0x9, 0x40, {0x0, 0x4c}}, {0x8, 0x5}, {0x3, 0x4}, {0xd, 0x9, {0x1, 0x800}}, {0x8935, 0xa, {0x1, 0xa53}}, {0x401, 0x7, {0x2, 0x7}}, {0xc2c, 0x1800, {0x0, 0x400}}, {0x4, 0x2676, {0x1, 0x3}}, {0x7, 0x7d86, {0x3}}, {0x8, 0x1, {0x0, 0x8000}}, {0x4, 0x70, {0x1, 0x4}}, {0x6, 0x8, {0x3, 0x9}}, {0x95ad, 0x0, {0x1, 0x49c9}}, {0xb5, 0x1, {0x1, 0x100}}, {0x7fff, 0xef, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0xf7, 0x7, 0xb, 0xc9, 0xe, 'syz0\x00', "0e6fd2e2db8005a7f51475920187ec9a5738fd284318f9c4edadc3a4b05c045c", "ccacfc2d46f480e9e3a28a7364ed384f1db9261428341703ededb8f32bc164f8", [{0x2, 0x7, {0x0, 0x400}}, {0x4, 0xc, {0x0, 0x8e8f}}, {0x4, 0x0, {0x2, 0x2}}, {0x2, 0x10, {0x2, 0x7}}, {0x4, 0x3, {0x2, 0x76e4d585}}, {0x827, 0x7, {0x0, 0x2}}, {0x3, 0x0, {0x2, 0xfffffff4}}, {0x7, 0x55, {0x3, 0x8}}, {0x2, 0x8, {0x0, 0x3ff}}, {0x9a5a, 0xfff8, {0x0, 0x8}}, {0x148, 0x0, {0x1, 0x80000000}}, {0x2, 0x5, {0x0, 0x4}}, {0x7, 0x2, {0x3, 0x10001}}, {0x7, 0x8, {0x3, 0x4}}, {0x4, 0x1ff, {0x2, 0x8001}}, {0x4, 0x1, {0x2, 0x9}}, {0x5, 0x8, {0x2, 0x83}}, {0x9, 0xff, {0x3, 0x1ff}}, {0x5, 0x5, {0x0, 0x4}}, {0x200, 0x9, {0x0, 0x4}}, {0x7f34, 0x1, {0x1, 0x2}}, {0x7, 0x5, {0x2, 0x1}}, {0x1, 0x200, {0x1, 0xf185}}, {0xfffe, 0x7, {0x3, 0xfffffffa}}, {0x100, 0x7, {0x2781d37a30e82ff8, 0x6}}, {0x7, 0xaad, {0x2, 0x7ff}}, {0x29, 0x8000, {0x3, 0x8}}, {0x7fff, 0xfffd, {0x3, 0x2}}, {0x0, 0x3f9, {0x2, 0x9}}, {0x8, 0xfff9, {0x3, 0x7}}, {0x5, 0x6, {0x3, 0xd}}, {0x100, 0x0, {0x3, 0x10001}}, {0x9, 0x7, {0x3, 0xffffffff}}, {0x3, 0x2, {0x2, 0xfff}}, {0x636, 0x1}, {0x2, 0x6, {0x1, 0x7}}, {0x2, 0xfffa, {0x3, 0xfff}}, {0x9, 0xa4, {0x1, 0xfffffffb}}, {0xe32, 0x5, {0x3, 0x10000}}, {0x5, 0x80, {0x1, 0xf}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x0, 0x9, 0x7ad5, 0xfffc, 0x4, 'syz1\x00', "01d0a03ed5a7e6a19f687fdded7b40f1c1f7bc8fe82f8702a62ac9125c5999b8", "bed59a778a83e0660307c132cf6555e052851855bc3eae00d261481f108fe904", [{0x9, 0x9, {0x2}}, {0x0, 0xfe, {0x3, 0xfffff001}}, {0xa1a1, 0x7ff, {0x0, 0x8790}}, {0x2, 0xe3d, {0x2}}, {0xfffb, 0x0, {0x0, 0x4}}, {0x3, 0x2, {0x0, 0xe}}, {0x1ff, 0x3, {0x1, 0x1000}}, {0x3, 0xa9bc, {0x0, 0x3}}, {0x9, 0x4, {0x2, 0x1}}, {0x8001, 0x1, {0x1, 0x10000}}, {0x5, 0xe901, {0x3, 0x303}}, {0xf, 0x7f, {0x3, 0x9}}, {0x7, 0x7, {0x2, 0x7fffffff}}, {0xfff, 0x7, {0x2, 0x8}}, {0x3, 0x4, {0x0, 0x6}}, {0x4, 0x7, {0x1, 0xffffffff}}, {0x1, 0x2, {0x3, 0x7}}, {0x100, 0x2963, {0x3, 0x9d}}, {0x5, 0x93c6, {0x2, 0x2}}, {0x0, 0x3, {0x0, 0x7ff}}, {0x800, 0x0, {0x3, 0x3}}, {0x4, 0x7, {0x3, 0x2}}, {0x6, 0x89b, {0x1, 0xfff}}, {0x6, 0xff80, {0x0, 0x8}}, {0x7, 0x6, {0x2, 0x4}}, {0x5, 0x1000, {0x2, 0x7fffffff}}, {0x3, 0x93, {0x3}}, {0x2, 0xb, {0x0, 0x3}}, {0x6, 0x4, {0x3, 0x7ff}}, {0x93cd, 0x6, {0x2, 0x4}}, {0xfff, 0x100, {0x1, 0x4}}, {0x72b3, 0x21, {0x2, 0x2db}}, {0x400, 0x9, {0x1}}, {0x100, 0x3, {0x2, 0x36}}, {0x4, 0x0, {0x3, 0x3}}, {0x5, 0x4, {0x0, 0x5}}, {0x2, 0x6, {0x2, 0x3}}, {0xffff, 0xa, {0x3, 0x13}}, {0x9eb6, 0x8, {0x0, 0xfffff001}}, {0x8001, 0x401, {0x0, 0x296}}]}}}, {{0x254, 0x1, {{0x1, 0xff}, 0x80, 0x0, 0x3, 0x1, 0x16, 'syz0\x00', "b48dacad5eae5b1e22af31f7e017297483d5e3b26a43b1998e1c978438969c61", "ce13c3cdfd6e9367c267e7c7b954c5076e66425cd7cb4372ce59dfeb06a5d23b", [{0x5, 0x3, {0x0, 0x2}}, {0x8, 0x3, {0x2, 0x9}}, {0x61, 0x800, {0x3, 0x1}}, {0x4, 0x6, {0x3}}, {0x8, 0x99, {0x1, 0x6}}, {0x400, 0xa, {0x2, 0x6}}, {0x46, 0x40, {0x2, 0x5}}, {0x400, 0x9, {0x0, 0x2}}, {0x9, 0x2, {0x0, 0x8}}, {0x7, 0x7, {0x1, 0xfff}}, {0x3ff, 0x40, {0x1, 0x4}}, {0x10, 0x126e, {0x3, 0xb671}}, {0x7, 0x3ff, {0x0, 0x2}}, {0x7, 0x5, {0x1, 0x8}}, {0x3ff, 0x5, {0x1, 0x101}}, {0x8, 0x0, {0x1, 0x9}}, {0x8, 0x4, {0x2, 0x7}}, {0x40, 0x9, {0x1, 0x2}}, {0x7, 0x6, {0x1, 0xaf9}}, {0x9, 0xa, {0x3, 0x5}}, {0x101, 0x401, {0x818eaae83e37f66c, 0x8}}, {0x9, 0xe771}, {0x101, 0x4, {0x2, 0x1}}, {0x1, 0x27, {0x0, 0x7}}, {0x0, 0x4, {0x0, 0x103157db}}, {0x6, 0xd, {0x3, 0xfffffffa}}, {0x4, 0x5, {0x2, 0x1}}, {0xa, 0x6d63, {0x3, 0x1}}, {0x8, 0x0, {0x2, 0x81}}, {0x5, 0x0, {0x3, 0x94}}, {0x4, 0x8, {0x3, 0xfffffff6}}, {0x8, 0xb, {0x2, 0x4}}, {0xfffe, 0x2, {0x2, 0xac24}}, {0xa1f3, 0x691, {0x2, 0xffffffff}}, {0x1, 0x0, {0x2, 0x3ff}}, {0x8e, 0x888, {0x3, 0xcf}}, {0x5, 0x5, {0x0, 0x40}}, {0xfffe, 0x9, {0x0, 0x6}}, {0x7, 0x1, {0x3, 0x2}}, {0xe9b, 0x3, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0xe3, 0xff, 0x400, 0x3, 0x1, 'syz0\x00', "7ce8591c2cdb3c05ebb21bc28b51c377660945d5fea0069e4b1b1e55e3c85b0c", "e8a14986c60719f91bf2f999ccd72ebed61368dac8b9cea4c28506d572a5984f", [{0x7, 0x7, {0x0, 0xffffff01}}, {0x9, 0x7ff, {0x2, 0xa2}}, {0x2c0, 0x10, {0x0, 0x4}}, {0x9, 0x0, {0x3, 0x7}}, {0x8ea, 0x7, {0x2, 0x4}}, {0x0, 0xdf, {0x2, 0x80}}, {0xb6f6, 0x9, {0x0, 0xffffffff}}, {0x9, 0x5, {0x0, 0xfff}}, {0x5, 0x2, {0x1, 0x1000}}, {0x5, 0x5, {0x3, 0x2}}, {0x100, 0xaccd, {0x0, 0x8}}, {0xc18, 0x7, {0x2, 0x6}}, {0x5, 0x7f, {0x0, 0x37}}, {0x2, 0x9, {0x2, 0x1010000}}, {0x0, 0x5, {0x3, 0xffff}}, {0x400, 0xff, {0x1, 0xa}}, {0x6, 0x0, {0x3, 0xc0000000}}, {0x9, 0x803f, {0x3, 0x9}}, {0xb, 0x9, {0x0, 0xc64}}, {0xff, 0xe85, {0x0, 0x9}}, {0x8, 0x5, {0x2, 0x7}}, {0x0, 0x7, {0x2, 0x6}}, {0xda, 0x5, {0x2, 0x4d3f}}, {0x7, 0xf7, {0x3, 0x6}}, {0x8, 0x9, {0x3, 0xffffffff}}, {0xa, 0x5, {0x3, 0x2}}, {0x1, 0x2, {0x2, 0x5}}, {0xfffb, 0x6, {0x1, 0x47f}}, {0x3ff, 0x3, {0x0, 0x4615}}, {0x40, 0x5, {0x1, 0x5ae1}}, {0x6, 0x5, {0x1, 0x1ff}}, {0x5, 0x9, {0x1, 0x5}}, {0xece9, 0x7, {0x3, 0x40a3}}, {0xa5c, 0x9, {0x3, 0xfffff880}}, {0x40, 0x1ff, {0x2, 0x7fffffff}}, {0x2f, 0x4, {0x1, 0x78}}, {0x5, 0x9, {0x1, 0x7fff}}, {0xc5, 0x5, {0x1, 0x8}}, {0x7, 0x6, {0x1}}, {0x9, 0xfff, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x0, 0x1, 0xffff, 0x6, 0x21, 'syz1\x00', "d795c83245c79efb73bf4a7dd7119679debdefc2a72c62344af6e372252cadc7", "3d19eb7537ee2d92d9fec46211fad5376d0bcd7b559b72420ab00d282765792a", [{0x5, 0x4, {0x2, 0x3}}, {0x4, 0xfffd, {0x1, 0x8}}, {0x3, 0x10, {0x3, 0x9}}, {0x3, 0x2, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x6}}, {0xff, 0x6, {0x0, 0x2}}, {0xfff8, 0x7, {0x2, 0x80000000}}, {0x6, 0xdcf, {0x2, 0x101}}, {0x3, 0x7, {0x2, 0x5}}, {0x2, 0x1, {0x2, 0x7}}, {0x0, 0xc, {0x1, 0x3}}, {0x5, 0x4, {0x4, 0x100}}, {0x1000, 0x323, {0x3, 0x53fc}}, {0x0, 0x6ef, {0x1, 0xeb}}, {0xffff, 0x3, {0x0, 0x1}}, {0xfff9, 0x71a, {0x0, 0x1}}, {0x248, 0x5, {0x2}}, {0x3, 0x1, {0x3, 0x200}}, {0x4, 0x7, {0x3, 0x3191}}, {0x9, 0xffff, {0x1, 0x400}}, {0x280, 0x2, {0x2, 0x8001}}, {0xe2c, 0x101, {0x3, 0x40}}, {0xa, 0xb6, {0x0, 0x8}}, {0x4, 0x40, {0x0, 0x4}}, {0x6, 0x1, {0x1, 0x10001}}, {0x5, 0x7, {0x8b19ed0a2fe146ea, 0x972}}, {0x3, 0x2, {0x0, 0xfff}}, {0x8, 0x7, {0x1, 0x7ff}}, {0xa9, 0x8, {0x0, 0x9}}, {0x5, 0x3ff, {0x3, 0x1c}}, {0x1ff, 0x8001, {0xf60533c36a0a9e31, 0x3}}, {0x40, 0x40, {0x1, 0xfffff7f4}}, {0x5, 0xef6d, {0x1, 0x9}}, {0x101, 0x9, {0x2}}, {0x18, 0x40, {0x2, 0x6}}, {0x9, 0x3000, {0x0, 0x5}}, {0x6, 0x6, {0x0, 0xff}}, {0x2, 0x5}, {0x4, 0x8, {0x1, 0x7ba0}}, {0x0, 0x72, {0x0, 0xfffffffc}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000850}, 0xb77b77520a37df19) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) 3.602067946s ago: executing program 2 (id=9446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000005100)={@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x1}, {&(0x7f0000005080)=""/37, 0x25}, &(0x7f00000050c0), 0x20}, 0xa0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @broadcast}, &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000005000)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x0, 0x4, {0xa, 0x4e22, 0x7, @mcast2}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000300)="74d095342ff25874a50a0701534d777f1a390dc4f966e24fbc9ed524cbddf19c59ff3cf3da92611d5b4ba0229bc10e4d7ca703fd2b0eadd0006cc3e924bb8d18b5c1a6592752ee4f1ff5d30ad0b2c633ca1f08038ab65a054e38c8ce8eace84f9d634a6c32a6560226f6e9d3b53b7fde95134dcde333303d06f1ef75094fe018ddb61a4909454416bdbc9eac5fc01351a8f0100c3b702711266a88405302bb605c79553812f00d065e1455da996d042fb18973cba63ea53270d2beedcb38998609257f7244a5b4c1e2c7459757cd3da8ca70ed9fe6d14dd2c00ca16f8e2ac5c9e28aad62ccdecb", 0xe7}, {&(0x7f0000000440)="ef7c6fac470a25e97d55e6136865632bd7cf3797392c6d538fc83f5244d2f67750fb29a2d67a08d47be7b4e536d868f75434f5c584ef122a78d6e2ba9cea6f023a0d8028e57af0dfe0edc78eca6b4283becd5ecbc9549a047f5658928b08c0abb3486c29e0", 0x65}, {&(0x7f00000005c0)="4b34348f8e331110952037561ca222d4ce00a36c48f7626630e5fc21aa5f10ff1f6fbca7907be4c91e1bfc604923114b731674f4cc983fe036692e9ce3b1149668a02f1ea6fc70318581a128550588e7b1c0ff0628983dd9703c1f7486dc15857d7cb6843c0defc57be96cb1f0dbf91e560409f2abd1db94b4f20ac444582f80aba96ee38917445bb4239d1cbb5c01b68e2bad1e7db49a02950f23b962541debcf857abb1bbd28bb44ffb25e7b60d2453bb221a6a656e7233b1ca432c3c6504f2bb64bc23faea10e4d5ff5f497", 0xcd}, {&(0x7f00000004c0)="2d80dc5c8bb9fd415a7321ad277848991faf2879c9c430489988690824adddf05634e7c3372191e2a49af96593119c64f8cc7299a48b9750249453ae1155eca8017a268c04343d1812e96dafd536db3099c76685bc0595378afcc2eebe035e4df3f9011ec5ecc784ebb9dd0aadc5cb15489f2521c5cd0403c95a24bcb59873baf090f21d6dc6f1443c", 0x89}, {&(0x7f0000000700)="5b202490eb3c76590b76d106a8ffe808c424405ff2b0230c876304d9983025ec8f85ee46ec3a373930b2c2ca0abd42ebdd210f4acab5efb3fa46d3e30813e3b16d644c12c2ca9cd52fa31e2343e811df1abfce7223e27687c179d17e96dd6db78d2dea4510e2f0", 0x67}, {&(0x7f0000000000)="29a61006553db9ccebcfc2705cff832275e7a6a42c339c", 0x17}, {&(0x7f0000000780)="2913512a2f4bc69fb0e89de6770902f6fbeb8df3a0b02a20c50935b1134a965b453c4850299b4c68b2dc31329200642b2c381eb66c9b03e8", 0x38}, {&(0x7f00000007c0)="2a29192a6790b5605d646d2c924d07aef29ee76154067c8203702c07d0440b24a868aee33f3aba87cc89077085524985a65f48ca4b6c", 0x36}], 0x8, &(0x7f0000000900)=[{0x1010, 0x119, 0x3db0, "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"}, {0x68, 0x0, 0x10001, "70b5d43fcff35198a31e8588406095590d8354920c3e60036d758f11537594963016a99ae9af25b7b46a3084eed89ad3c957df0c93edf827f7de7688ad16613446566c2ce6817bcabb8a6cc2fe845a182780"}, {0x60, 0x1, 0x100, "5f3b52735f9adca2e56baba56e2038beeee395feaed371c3c610b510e6413df392a8a8fd84cb60813c791fab7fbb71cdfbc367649e49e62a54cfebe57c0988a74871a5438a05487a5d12a8bfdb37e1"}, {0xf8, 0x10b, 0x7ff, "1018571bac660e4558e2c4f0b2c18b5c30b068771d832d7871754db085a3d18fe8c395df1a23fa4b60ba640ae2cb6e2ef80989b48470d60c266b6edec6d1b7f69978ee0d61806cb99f6254e791bf7cd969e64d02cc41ae94dcabef06dfa17b5e6515b0fd0ddb54b376dba8edf7fa714ec58c434086459258395a7406bb0f5af91bfdaf69ba8f5d2231a211cbf919c31fc45325187746c8bd363930f46d0855fbb9c71094061f5d5464d14fb2c324fbfec4bb9f5d587951bc3525718f33bb9e41cadb74eb641f0e6ba57b58c334adf6e9361aedc1883c9f92224b14b27b9d91e88b30e75a26a0"}], 0x11d0}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="2b35d09033372d6b842e04ed715c9ed0f87bb24f8f74a169116067df4a1cd1a438f5fe0316fcac5672c4880d091b2c09e71f9e", 0x33}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="bd6c7027b2a7060564dd598d2bbe024e14171a17388dca159a8c2a3554ec26dca556f1588e174cd1f881c1ce96cd9702f13384c72d81024984fce70c6acaa0641ed670fd176a5ad541029e26bcf14d9ca78c232e032872b64efa345e081f2ab5bfb11dfac9c2d249791c3a365469", 0x6e}, {&(0x7f0000003bc0)="a69f87a00e7e5dddad0af9016df41e84e568e45a10bfa551600665526404ddd0331be1c78b7f92e6a88dd508b9947fc5cc8b8371fbe1cbcc896125d2be9485e4b3e7d1b5dbee12dd00447f4ca015aa328e70b8d3b4fd588f882e40f8e5a940dec76e871575e19f2771e4d4d0b2de9c8ff7a34d4394fd6e", 0x77}, {&(0x7f0000003c40)="aee3033d9dc8d197b0e7c8418e1a3379bd16aecc27fc3ee75fd5d45c19f45c26a98adfa576a818f1043320365d4f9d67d4125bf7c98b7ae5fba07f1567b9b1d820815bc84c57937051e73c4b7a8cadfbf13ff72137b2ce80ca5ab32dc65658584e81978f81d5abbc42bef7087a60b0bac2e12b4210f2713f2c02374d470619ce12f470a051216e72d587b4effe4f28c8275e16ce", 0x94}, {&(0x7f0000003d00)="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", 0x1000}, {&(0x7f0000004d00)="6f58708e4f9f8eda", 0x8}, {&(0x7f0000004d40)="82c9d9615f2b79715391c01d0b7568fa445db5fe0dade5924292f8f01c896281e36e41305468d0b33e6ecb37dd15ab5230452f3c110cb30eefd77830fffb9d3ec16710d2ca39b97dc17994d377e3756bac6a9a8a4a7d91a077dbf2564eadcd54d5f2d31dcaa6692e0e04989f77b274346a310f2fb6f537", 0x77}], 0x9, &(0x7f0000004e80)=ANY=[@ANYBLOB="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"], 0x170}}], 0x2, 0x20000800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bind$rds(r1, &(0x7f0000000800)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r7, 0x6, 0x100}, 0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000005200)={r7, 0x101}, &(0x7f0000005240)=0x8) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f00000002c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f00000006c0)=0x40, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001540)={0x28, r10, 0x801, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x80}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4091}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000051c0)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000840)={0x1d, r13}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@RTM_DELMDB={0x78, 0x55, 0x8, 0x70bd2b, 0x25dfdbfb, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@multicast1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x5, 0x0, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0xc00}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x0, 0x3, 0x1, {@ip4=@broadcast}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.597261093s ago: executing program 0 (id=9447): pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dvmrp0\x00', 0x0}) connect$packet(r0, &(0x7f0000000080)={0x11, 0x15, r1, 0x1, 0xe0, 0x6, @broadcast}, 0x14) 2.955972409s ago: executing program 2 (id=9453): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x14}, {0xfff3}, {0xb, 0xd}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x2000c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x98, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x6, "a9b8e8b2e881"}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x130, 0x36, 0x400, 0x70bd2c, 0x25dfdbfb, {0x12}, [@typed={0x4, 0x135}, @nested={0x1a, 0x64, 0x0, 0x1, [@generic="5cdd321c6e89659351ae5cdb35e87eee02690995a371"]}, @nested={0xfc, 0x100, 0x0, 0x1, [@generic="6fb481390309f04ff7c34fe3689d37d7787a9dc46ed00b11a6a1485132e509f7a7b314d35598ee28fb9cfe0d54f0849c6cfa316c7657720e6fd3312cb92cfdaeef6d8a90b91a109ab41b9d65b346c85016391f4993f8a197ae1accaf7b318a476e887d691c1c26a67154e448c6aa75fe00174b8c5a054ee9832334c1c26ed801540b45ae69b0f3e05ae6f706562ad988e12578801a1a354e8507dfef1648b91de09e237894e869002c6c9fe887f0dae7add7a827fffe587f31c72e05a556905657392f4663d80f9dc22ee225ab0af2ee24794ff7124485fe3badeca6a6b9f9b7afcae11b72195df7", @typed={0xc, 0x14, 0x0, 0x0, @u64=0xaa1}, @nested={0x4, 0x125}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x24001824}, 0x10) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) close(r4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2.552663023s ago: executing program 2 (id=9459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x3c}}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0)="b4", 0x1) splice(r5, 0x0, r6, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x12001}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08000140000001"], 0x80}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 1.579461886s ago: executing program 4 (id=9473): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff97, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x20}}, 0x0) 1.561634861s ago: executing program 2 (id=9475): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYBLOB, @ANYBLOB="080003"], 0x78}}, 0x0) 1.439766618s ago: executing program 4 (id=9477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='macvlan1\x00') r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)="f78d9ca38fff48f3be52163448412ba8ea2945e56c9d0c07b90e0aa06445cf2b74c2278ad7ad8633cd51dd7acf4536bac8c4635ff529b680a56b712e3cb5af7936e279fe07ba2f20334a4fdaec8c909e48d219b0e7e978166e29f691adec0e5526148adbaad390b4bd6b7e1050abf68515280ca2189a069539aacd9840e7c5b133180a836a9c7dc456448eafb217def1d6ca3e62338caebb4ed33a7c9eabec21a6f247d02a244e0cefaaf4386e99396a5afe2c34149995de08a45d3f2177579a01e0a2ea114a7e0e23cc5c260ed375faa4b119b2c8a8942a2f089cf952b6e4b21ba713", 0xe3}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4dbc3ae079f5fee8f28051926aae1efd7e0054a863f425cfe6cb54e7cb51726b360fbb37b4fe035bbb095873048", 0x48}, {&(0x7f0000000d00)="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", 0x1d5}], 0x3, 0x0, 0x0, 0x80}], 0x1, 0x20000801) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b554000400fcea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000480)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, r6}, 0x94) 1.319431702s ago: executing program 1 (id=9478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 1.30076944s ago: executing program 2 (id=9479): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x10}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000100}, 0x24000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe8, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4005081}, 0x8800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 1.038385971s ago: executing program 4 (id=9481): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000003c0)={0x14ae4701}, 0xc) ioctl$sock_rose_SIOCADDRT(r0, 0x891b, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0xfa73]}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x9, 0x0, 0x0, {[@sack={0x5, 0x12, [0x2, 0x7f, 0x7, 0xfa73]}]}}}}}}}}, 0x0) 962.151551ms ago: executing program 1 (id=9482): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x92e3, 0x1, 0xff80000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000004800600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001000"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000201e702500001c971abb723100feff2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x8, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r6], 0x20) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r4, 0xffffffffffffffff, 0x37, 0x2000, 0x0, @value=r7, @void, @void, @void, r6}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r8, r3, 0x24, 0x2000, r3, @value, @void, @void, @void, r6}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x88dd895beaa99965, 0x12, r9, 0xe352a000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r10, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676ce0df3f9800000200000000c0973003587bbb6500"/36], &(0x7f0000000100)=0x24) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) 959.423058ms ago: executing program 3 (id=9483): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x18, 0x810}, 0x4000000) 806.523753ms ago: executing program 4 (id=9484): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x7, 0xfffffffb, @private1, 0xc}, 0x20) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/222, 0xde, 0x100, 0x0, 0x0) 772.072113ms ago: executing program 2 (id=9485): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r2, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x18, {0x6fd9, @bearer=@l2={'ib', 0x3a, 'veth1_vlan\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24, 0x65, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x10200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001100085fcffffff0500000003302e000000000000000000000000f53f84c320c1a48a6286d609d91250921b6acff04fc0e38f459c109791ebb710b95c239d4595faba1530ef90eaa92f0fd970e4cc3fc0b77f5cb72025c8eaf902bfd2bea990d1ada97d2522e80efb2598b56217d71752f348ec4b25407aa73cd33144"], 0x0, 0x37, 0x0, 0x8, 0xbf81}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x5}}, 0x27c0, 0xced}, 0x90) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x40000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000140)={0x23, 0xa, 0x7f, 0xfe}, 0x10) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 639.911068ms ago: executing program 3 (id=9486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}]}, 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x4000880) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 638.547476ms ago: executing program 1 (id=9487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x38}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa, 0x16}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24540120}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048092}, 0x0) 617.566273ms ago: executing program 4 (id=9488): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x1, 0x401, 0x8ee, 0x7ff]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0x34}}, 0x1) 521.084131ms ago: executing program 3 (id=9489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002700), 0x0, 0x24004c41) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) r4 = accept(r2, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000080)=0x80) getpeername$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) connect$unix(r2, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) 431.332798ms ago: executing program 4 (id=9490): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9, 0xffff, 0x4, 0x1, 0x10, 0xde84, 0x4}, 0x9c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 408.135548ms ago: executing program 1 (id=9491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r1 = accept(r0, &(0x7f0000000240)=@rc={0x1f, @none}, &(0x7f00000001c0)=0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xb1, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bind$xdp(r1, &(0x7f00000005c0)={0x2c, 0x2, r2, 0x8}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup, 0x14, 0x1, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000008f00000095"], &(0x7f0000000300)='GPL\x00'}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r5, r3, 0x1a, 0x0, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 335.164554ms ago: executing program 3 (id=9492): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x668, 0x2e0, 0x440, 0x440, 0x2e0, 0x2e0, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ipv6={@empty, @local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bridge_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x5, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xee5f356c6f495b18, 0x100fffe00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x1d, 0x6, 0x4, 0x19}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @common=@ipv6header={{0x28}, {0x22, 0x2, 0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 262.466987ms ago: executing program 1 (id=9493): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@xdp={0x2c, 0x4, r3, 0x30}, 0x80}, 0x4004084) 207.986782ms ago: executing program 3 (id=9494): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)=0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff400000000cf4ffffff00000095000000cad0074cd897f3320080ffff2550f8ff00000000959a937d72bd664135a2e32f79e9000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 101.822151ms ago: executing program 3 (id=9495): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) socket(0x10, 0x80002, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x21, 0x1ff, 0xffff38ce, 0x5, 0x6, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb6, 0x3, 0xa, [0x9, 0x1]}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000000000000000008001000000ccfe9ad3f8cd57109e8d5c3cf54af2ab8c82aa3ab47fcf8a27be978824c3690420cf8b767f7280c47a150be911a0b7803fcfa88aebb62ad8d6108eabafc03bec01f20895cc07a9ec6990456afe4125eff112ecf3d31f257b8f0836f948067ca789c4995135338805d7f991e6961de329d667c17cd44bdedde94a462b58b04bf7c8aa", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r5, r5, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r5, 0x2f, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x30, 0x68, 0x10, 0x0, 0x80000000, {0x2, 0x0, 0x4}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_FDB={0x4}]}, 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) r7 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x200, 0x0, 0xa, 0x547b31180522e14c, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d2}, 0x0, @in6=@private1, 0xfffffffd, 0x0, 0x0, 0x0, 0x7fffffff}}, 0xe8) recvmsg$can_raw(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x60) 0s ago: executing program 1 (id=9496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0xa45f, 0x4) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev}, {@in6=@mcast2, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @proto={0x5}, @mark={0xc}]}, 0x27c}}, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): d length. [ 936.739608][ T3010] netlink: 'syz.2.7857': attribute type 3 has an invalid length. [ 936.747901][ T3010] __nla_validate_parse: 5 callbacks suppressed [ 936.747922][ T3010] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7857'. [ 936.847440][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 936.859977][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 936.880235][ T3012] netlink: 'syz.3.7858': attribute type 1 has an invalid length. [ 936.888053][ T3012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7858'. [ 936.955075][ T3017] netlink: 412 bytes leftover after parsing attributes in process `syz.2.7859'. [ 937.133993][ T3023] netlink: 'syz.3.7860': attribute type 39 has an invalid length. [ 937.152503][ T3022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7861'. [ 937.169890][ T3022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7861'. [ 937.667132][ T3047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7868'. [ 937.864756][ T3059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7870'. [ 937.880830][ T3062] netlink: 'syz.3.7871': attribute type 1 has an invalid length. [ 937.899686][ T3059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7870'. [ 938.024383][ T3062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 938.055213][ T3066] vlan2: entered promiscuous mode [ 938.060582][ T3066] bond4: entered promiscuous mode [ 938.066020][ T3066] vlan2: entered allmulticast mode [ 938.071739][ T3066] bond4: entered allmulticast mode [ 938.078322][ T3064] vxcan1: entered allmulticast mode [ 938.087439][ T3047] netlink: 'syz.4.7868': attribute type 3 has an invalid length. [ 939.282912][ T3154] tipc: Failed to remove unknown binding: 66,0,0/8:583642116/583642117 [ 939.297910][ T3154] tipc: Failed to remove unknown binding: 66,0,0/8:583642116/583642117 [ 939.306842][ T3154] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 939.363287][ T3156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7892'. [ 939.414095][ T3156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7892'. [ 939.515078][ T3163] x_tables: duplicate underflow at hook 1 [ 939.856796][ T3172] tipc: Enabled bearer , priority 0 [ 940.021540][ T3180] syzkaller0: entered promiscuous mode [ 940.030011][ T3180] syzkaller0: entered allmulticast mode [ 940.078846][ T3170] tipc: Resetting bearer [ 940.127062][ T3170] tipc: Disabling bearer [ 940.326073][ T3207] netlink: 'syz.2.7906': attribute type 30 has an invalid length. [ 940.477526][ T3224] sctp: [Deprecated]: syz.3.7911 (pid 3224) Use of int in max_burst socket option. [ 940.477526][ T3224] Use struct sctp_assoc_value instead [ 940.512633][ T3219] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.661969][ T3219] bridge_slave_0 (unregistering): left allmulticast mode [ 940.670933][ T3219] bridge_slave_0 (unregistering): left promiscuous mode [ 940.678050][ T3219] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.383039][ T3280] syzkaller0: entered promiscuous mode [ 941.388874][ T3280] syzkaller0: entered allmulticast mode [ 941.417267][ T3282] netlink: 'syz.1.7930': attribute type 33 has an invalid length. [ 941.758725][ T3306] __nla_validate_parse: 17 callbacks suppressed [ 941.758746][ T3306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7936'. [ 941.810894][ T3305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7936'. [ 942.032655][ T3331] ipt_ECN: cannot use operation on non-tcp rule [ 942.039523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 942.047612][ C0] lec:lec_tx_timeout: lec0 [ 942.052707][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 942.250511][ T3339] nbd5: detected capacity change from 0 to 127 [ 942.272731][ T52] block nbd5: Receive control failed (result -32) [ 942.288328][ T3218] block nbd5: Dead connection, failed to find a fallback [ 942.302757][ T3218] block nbd5: shutting down sockets [ 942.310552][ T3218] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.322337][ T3218] Buffer I/O error on dev nbd5, logical block 0, async page read [ 942.333852][ T3218] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.354837][ T3218] Buffer I/O error on dev nbd5, logical block 1, async page read [ 942.380176][ T3218] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.410472][ T3218] Buffer I/O error on dev nbd5, logical block 2, async page read [ 942.447996][ T3218] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.488165][ T3218] Buffer I/O error on dev nbd5, logical block 3, async page read [ 942.508313][ T3218] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.530202][ T3218] Buffer I/O error on dev nbd5, logical block 0, async page read [ 942.538278][ T3218] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.566035][ T3218] Buffer I/O error on dev nbd5, logical block 1, async page read [ 942.576592][ T3354] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7954'. [ 942.587558][ T3218] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.638033][ T3354] netlink: 'syz.0.7954': attribute type 21 has an invalid length. [ 942.653814][ T3218] Buffer I/O error on dev nbd5, logical block 2, async page read [ 942.672536][ T3354] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7954'. [ 942.700571][ T3218] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.732365][ T3218] Buffer I/O error on dev nbd5, logical block 3, async page read [ 942.740939][ T3354] netlink: 'syz.0.7954': attribute type 5 has an invalid length. [ 942.772622][ T3218] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.784555][ T3218] Buffer I/O error on dev nbd5, logical block 0, async page read [ 942.792704][T23517] IPVS: starting estimator thread 0... [ 942.799004][ T3218] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.811380][ T3354] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7954'. [ 942.848919][ T3218] Buffer I/O error on dev nbd5, logical block 1, async page read [ 942.892125][ T3362] IPVS: using max 33 ests per chain, 79200 per kthread [ 942.910409][ T3218] ldm_validate_partition_table(): Disk read failed. [ 942.918013][ T3218] Dev nbd5: unable to read RDB block 0 [ 942.940756][ T3218] nbd5: unable to read partition table [ 942.979066][ T3218] ldm_validate_partition_table(): Disk read failed. [ 942.999206][ T3218] Dev nbd5: unable to read RDB block 0 [ 943.019893][ T3218] nbd5: unable to read partition table [ 943.043958][ T3370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7957'. [ 943.083477][ T3370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7957'. [ 943.371825][ T3400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'. [ 943.468235][ T3411] SET target dimension over the limit! [ 943.476937][ T3411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7966'. [ 946.164093][ T3377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 946.427249][ T3459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7979'. [ 946.515518][ T3459] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 946.666451][ T3465] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 946.697532][ T3465] bond6 (unregistering): Released all slaves [ 946.806504][ T3477] __nla_validate_parse: 1 callbacks suppressed [ 946.806601][ T3477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7984'. [ 946.896923][ T3477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7984'. [ 946.922806][ T3477] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7984'. [ 946.928208][ T3468] syzkaller0: entered promiscuous mode [ 946.938071][ T3468] syzkaller0: entered allmulticast mode [ 947.081701][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 947.090021][ C0] lec:lec_tx_timeout: lec0 [ 947.371716][ T3502] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7989'. [ 949.207092][ T3502] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7989'. [ 949.357023][ T3515] syzkaller1: entered promiscuous mode [ 949.363323][ T3515] syzkaller1: entered allmulticast mode [ 949.909049][ T3553] gtp1: entered promiscuous mode [ 949.917367][ T3553] gtp1: entered allmulticast mode [ 949.994978][ T3562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8005'. [ 950.042592][ T3565] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.8006'. [ 950.062132][ T3565] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 950.095134][ T3565] x_tables: duplicate underflow at hook 1 [ 950.352314][ T3581] netlink: 'syz.1.8011': attribute type 21 has an invalid length. [ 950.426970][ T3581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8011'. [ 950.579364][ T3594] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8020'. [ 950.588794][ T3594] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8020'. [ 951.037550][ T3618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 951.089272][ T3621] netlink: 'syz.0.8027': attribute type 1 has an invalid length. [ 951.097806][ T3621] netlink: 'syz.0.8027': attribute type 3 has an invalid length. [ 951.168558][ T3628] xt_l2tp: missing protocol rule (udp|l2tpip) [ 952.091134][ T3668] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 952.170996][ T3673] netlink: 'syz.0.8044': attribute type 4 has an invalid length. [ 952.416003][ T3689] netlink: 'syz.1.8047': attribute type 4 has an invalid length. [ 952.467896][ T3691] netlink: 'syz.1.8047': attribute type 4 has an invalid length. [ 952.541872][ T3689] __nla_validate_parse: 4 callbacks suppressed [ 952.541892][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8047'. [ 953.067123][ T3715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.107511][ T3723] netlink: 'syz.1.8054': attribute type 17 has an invalid length. [ 953.136232][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8054'. [ 953.150966][ T3723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8054'. [ 953.169148][ T3722] netlink: 'syz.4.8057': attribute type 4 has an invalid length. [ 953.279023][ T3715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.347853][ T3727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8058'. [ 953.370309][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8060'. [ 953.430542][ T3715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.540275][ T3743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 953.592112][ T3746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8062'. [ 953.607880][ T3751] netlink: 'syz.4.8063': attribute type 33 has an invalid length. [ 953.617901][ T3751] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8063'. [ 953.672691][ T3715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.788869][ T3759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8066'. [ 953.968414][ T1164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.012991][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8067'. [ 954.031092][T24268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.064411][ T3768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8067'. [ 954.111249][ T6362] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.155794][T24268] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.254306][ T3778] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 954.713487][ T3807] netlink: 'syz.0.8082': attribute type 18 has an invalid length. [ 954.727404][ T3799] x_tables: duplicate entry at hook 2 [ 954.954598][ T3823] bridge_slave_0: invalid flags given to default FDB implementation [ 955.350494][ T3839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.526003][ T3844] validate_nla: 3 callbacks suppressed [ 955.526023][ T3844] netlink: 'syz.2.8095': attribute type 21 has an invalid length. [ 956.007396][ T3866] netlink: 'syz.4.8100': attribute type 3 has an invalid length. [ 956.025344][ T3866] netlink: 'syz.4.8100': attribute type 1 has an invalid length. [ 956.045588][ T3866] NCSI netlink: No device for ifindex 813332851 [ 956.798564][ T3911] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 957.456482][ T3938] wg1: entered promiscuous mode [ 957.509707][ T3938] wg1: entered allmulticast mode [ 957.832837][ T3962] netlink: 'syz.0.8126': attribute type 1 has an invalid length. [ 957.848519][ T3962] netlink: 'syz.0.8126': attribute type 3 has an invalid length. [ 957.873690][ T3962] __nla_validate_parse: 14 callbacks suppressed [ 957.873709][ T3962] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8126'. [ 957.890867][ T3962] NCSI netlink: No device for ifindex 813332851 [ 957.952309][ T3968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8127'. [ 957.966418][T24268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.975288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.170657][T24268] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.187668][ T3977] netlink: 'syz.3.8130': attribute type 7 has an invalid length. [ 958.216362][ T3979] netlink: 'syz.0.8131': attribute type 21 has an invalid length. [ 958.233247][T24268] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.250219][ T3979] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8131'. [ 958.263116][ T3947] netlink: zone id is out of range [ 958.268305][ T3947] netlink: get zone limit has 4 unknown bytes [ 958.275014][T24268] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.318173][ T3985] netlink: 'syz.0.8131': attribute type 21 has an invalid length. [ 958.329809][T24268] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.361503][ T3985] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8131'. [ 958.374939][ T3988] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8134'. [ 958.389660][ T3979] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8131'. [ 958.409716][ T3985] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8131'. [ 958.509908][ T3991] netlink: 'syz.2.8136': attribute type 3 has an invalid length. [ 958.525685][T23517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.534572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.590258][ T3995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8137'. [ 958.776819][ T4014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8140'. [ 958.985354][ T4026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8146'. [ 959.061604][ T4033] netlink: 'syz.4.8150': attribute type 1 has an invalid length. [ 959.122892][ T4033] bond10: entered promiscuous mode [ 959.135348][ T4033] 8021q: adding VLAN 0 to HW filter on device bond10 [ 959.197885][ T4037] bond10: (slave bridge4): making interface the new active one [ 959.214409][ T4045] x_tables: duplicate underflow at hook 2 [ 959.227818][ T4044] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 959.232255][ T4037] bridge4: entered promiscuous mode [ 959.254357][ T4037] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 959.267207][ T4035] vlan1: entered allmulticast mode [ 959.273886][ T4035] veth0_vlan: entered allmulticast mode [ 959.563111][ T4072] veth0: Caught tx_queue_len zero misconfig [ 959.565503][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.577507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.881933][T24273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.096835][ T4102] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 960.153733][ T4102] block nbd6: Unsupported socket: should be TCP or UNIX. [ 960.926710][ T4148] syzkaller1: entered promiscuous mode [ 960.932712][ T4148] syzkaller1: entered allmulticast mode [ 961.287055][ T4169] netlink: 'syz.3.8192': attribute type 7 has an invalid length. [ 961.835649][ T4205] xt_HMARK: spi-set and port-set can't be combined [ 962.685243][T23509] net_ratelimit: 11 callbacks suppressed [ 962.685264][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.699339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.056363][ T4232] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 963.090670][ T4240] __nla_validate_parse: 14 callbacks suppressed [ 963.090689][ T4240] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8212'. [ 963.106948][ T4232] bond4 (unregistering): Released all slaves [ 963.124364][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8213'. [ 963.154355][ T4242] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8212'. [ 963.178645][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8213'. [ 963.192538][ T4237] syzkaller0: entered promiscuous mode [ 963.198652][ T4247] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8212'. [ 963.222098][ T4237] syzkaller0: entered allmulticast mode [ 963.330962][ T4244] netlink: 'syz.0.8211': attribute type 3 has an invalid length. [ 963.738731][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.747203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.758619][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.767247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.880923][ T983] page_pool_release_retry() stalled pool shutdown: id 150, 1 inflight 241 sec [ 964.028422][ T4285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 964.035812][ T4285] IPv6: NLM_F_CREATE should be set when creating new route [ 964.043132][ T4285] IPv6: NLM_F_CREATE should be set when creating new route [ 964.050577][ T4285] IPv6: NLM_F_CREATE should be set when creating new route [ 964.332335][ T4300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8222'. [ 964.379729][ T4302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8223'. [ 964.781990][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.790511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.883496][ T4330] wg1 speed is unknown, defaulting to 1000 [ 964.904327][ T4330] wg1 speed is unknown, defaulting to 1000 [ 964.920818][ T4330] wg1 speed is unknown, defaulting to 1000 [ 964.922398][ T4337] ipt_REJECT: TCP_RESET invalid for non-tcp [ 964.995443][ T4330] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 965.056648][ T4346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8233'. [ 965.131673][ T4330] wg1 speed is unknown, defaulting to 1000 [ 965.164073][ T4330] wg1 speed is unknown, defaulting to 1000 [ 965.196140][ T4330] wg1 speed is unknown, defaulting to 1000 [ 965.224223][ T4330] wg1 speed is unknown, defaulting to 1000 [ 965.302311][ T4358] syzkaller0: create flow: hash 2733049982 index 1 [ 965.477262][T24268] syzkaller0: tun_net_xmit 76 [ 965.484476][ T4330] wg1 speed is unknown, defaulting to 1000 [ 965.491112][T24268] syzkaller0: tun_net_xmit 48 [ 965.500302][ T4349] syzkaller0: delete flow: hash 2733049982 index 1 [ 965.576273][ T4372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8242'. [ 965.618149][ T4374] netlink: 'syz.3.8243': attribute type 1 has an invalid length. [ 965.626916][ T4374] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8243'. [ 965.643263][T24268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.651704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.350806][ T4330] wg1 speed is unknown, defaulting to 1000 [ 967.885254][T23513] net_ratelimit: 8 callbacks suppressed [ 967.885276][T23513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.899293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.174512][ T4428] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 968.323297][ T4435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 968.640070][ T4453] __nla_validate_parse: 3 callbacks suppressed [ 968.640094][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8267'. [ 968.763121][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8268'. [ 968.901546][ T4468] netlink: 'syz.4.8272': attribute type 10 has an invalid length. [ 968.925129][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.933614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.968369][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8273'. [ 968.977543][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8273'. [ 969.069345][ T4476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8276'. [ 969.309324][ T4490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8280'. [ 969.378711][ T4478] netlink: 'syz.1.8275': attribute type 1 has an invalid length. [ 969.420935][ T4478] netlink: 'syz.1.8275': attribute type 3 has an invalid length. [ 969.428736][ T4478] netlink: 'syz.1.8275': attribute type 7 has an invalid length. [ 969.459751][ T4478] netlink: 'syz.1.8275': attribute type 8 has an invalid length. [ 969.467560][ T4478] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8275'. [ 969.480315][T24269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.488680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.515957][ T4478] NCSI netlink: No device for ifindex 131092 [ 969.571285][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8285'. [ 969.804940][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8289'. [ 969.830307][ T4521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8289'. [ 969.969815][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.978168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.007717][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.023377][ T4581] netlink: 'syz.4.8305': attribute type 1 has an invalid length. [ 971.365006][ T4585] syzkaller0: entered promiscuous mode [ 971.402823][ T4585] syzkaller0: entered allmulticast mode [ 971.424154][ T4579] wg1 speed is unknown, defaulting to 1000 [ 973.087989][T23509] net_ratelimit: 9 callbacks suppressed [ 973.088007][T23509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.102190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.547497][ T4610] bridge0: Caught tx_queue_len zero misconfig [ 973.707113][ T4635] __nla_validate_parse: 6 callbacks suppressed [ 973.707134][ T4635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8319'. [ 973.895703][ T4645] netlink: 'syz.3.8323': attribute type 1 has an invalid length. [ 973.940445][ T4645] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8323'. [ 973.950278][ T4645] netlink: 658 bytes leftover after parsing attributes in process `syz.3.8323'. [ 973.991834][ T4645] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8323'. [ 974.125529][T23513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.134068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.145549][ T4659] syz_tun: entered allmulticast mode [ 974.194162][ T4651] dvmrp8: entered allmulticast mode [ 974.238883][ T4659] dvmrp8: left allmulticast mode [ 974.246190][ T4655] x_tables: duplicate underflow at hook 3 [ 974.533134][ T4650] syz_tun: left allmulticast mode [ 974.583628][ T4674] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8331'. [ 974.606566][ T4684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8331'. [ 974.640810][ T4674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8331'. [ 974.691307][ T4690] netlink: 'syz.0.8336': attribute type 1 has an invalid length. [ 974.764628][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8335'. [ 974.775311][ T4695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8337'. [ 974.835591][ T4690] bond3: entered promiscuous mode [ 974.857352][ T4690] bond3: entered allmulticast mode [ 974.863717][ T4690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 975.073353][ T4713] ip6gre2: entered allmulticast mode [ 975.135230][ T4715] netlink: 'syz.4.8340': attribute type 9 has an invalid length. [ 975.165255][ T4720] pim6reg: entered allmulticast mode [ 975.176575][T23513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.184999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.210670][ T4722] pim6reg: left allmulticast mode [ 975.240388][ T1164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.248825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.339801][ T4731] netlink: 'syz.0.8347': attribute type 83 has an invalid length. [ 975.401677][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8348'. [ 975.555606][ T4744] tipc: Trying to set illegal importance in message [ 975.989054][ T4771] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 976.010162][ T4767] syzkaller0: entered promiscuous mode [ 976.015705][ T4767] syzkaller0: entered allmulticast mode [ 976.066348][ T4767] tipc: Enabled bearer , priority 0 [ 976.124923][ T4766] tipc: Resetting bearer [ 976.175954][ T4766] tipc: Disabling bearer [ 976.206902][ T4753] wg1 speed is unknown, defaulting to 1000 [ 976.525898][ T4795] netlink: 'syz.3.8364': attribute type 3 has an invalid length. [ 976.730625][ T4806] nbd: must specify a size in bytes for the device [ 977.301036][ T4835] syzkaller0: entered promiscuous mode [ 977.306583][ T4835] syzkaller0: entered allmulticast mode [ 977.541720][ T4836] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 977.710448][ T4862] gtp2: entered promiscuous mode [ 977.715472][ T4862] gtp2: entered allmulticast mode [ 978.069966][ T4881] syzkaller0: entered promiscuous mode [ 978.075605][ T4881] syzkaller0: entered allmulticast mode [ 978.257816][ T4889] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 978.307264][ T4889] team1: entered promiscuous mode [ 978.318556][ T4889] team1: entered allmulticast mode [ 978.715842][ T4921] syzkaller0: entered promiscuous mode [ 978.734025][ T4921] syzkaller0: entered allmulticast mode [ 979.052089][ T4944] netlink: 'syz.1.8402': attribute type 10 has an invalid length. [ 979.177099][ T4956] __nla_validate_parse: 8 callbacks suppressed [ 979.177119][ T4956] netlink: 892 bytes leftover after parsing attributes in process `syz.0.8406'. [ 979.377445][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8408'. [ 979.395356][ T4969] IPVS: set_ctl: invalid protocol: 212 127.0.0.1:20003 [ 979.409617][ T4965] bridge_slave_1: left allmulticast mode [ 979.415346][ T4965] bridge_slave_1: left promiscuous mode [ 979.453507][ T4965] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.478681][ T4965] bridge_slave_0: left allmulticast mode [ 979.501668][ T4965] bridge_slave_0: left promiscuous mode [ 979.516110][ T4965] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.563489][ T4965] bridge0 (unregistering): left allmulticast mode [ 979.852184][ T4996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8418'. [ 979.965927][ T4999] geneve4: entered promiscuous mode [ 979.978788][ T4999] geneve4: entered allmulticast mode [ 979.995682][T24268] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [1, 2] type 2 family 0 port 19999 - 0 [ 980.007217][T24268] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 980.041340][T24268] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 980.070316][T24268] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 980.301865][ T5017] netlink: 'syz.3.8426': attribute type 1 has an invalid length. [ 980.313142][ T5017] nbd: error processing sock list [ 980.318522][ T5017] block nbd6: shutting down sockets [ 982.359938][T27394] Bluetooth: hci1: command 0x0405 tx timeout [ 983.443622][ T5029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 984.053002][ T5106] netlink: 'syz.1.8449': attribute type 13 has an invalid length. [ 984.072219][ T5105] syzkaller1: entered promiscuous mode [ 984.100893][ T5105] syzkaller1: entered allmulticast mode [ 984.278039][ T5080] delete_channel: no stack [ 984.438435][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8452'. [ 984.463683][ T5129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8453'. [ 984.466238][ T5120] netlink: 'syz.3.8452': attribute type 30 has an invalid length. [ 984.473092][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8453'. [ 984.646758][ T5134] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8455'. [ 984.681025][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8455'. [ 985.084741][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8464'. [ 985.127175][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8464'. [ 985.269046][ T5173] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8467'. [ 985.346363][ T5185] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 985.372504][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8469'. [ 985.409361][ T5189] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8470'. [ 985.476348][ T5192] xt_ecn: cannot match TCP bits for non-tcp packets [ 985.548648][ T5196] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 985.592988][ T5198] pimreg: entered allmulticast mode [ 985.729168][ T5203] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 985.831478][ T5208] bridge0: entered allmulticast mode [ 985.848324][ T5196] netlink: 'syz.2.8471': attribute type 3 has an invalid length. [ 986.046145][ T5222] lo: Caught tx_queue_len zero misconfig [ 986.098408][ T5229] netlink: 'syz.4.8482': attribute type 10 has an invalid length. [ 986.766925][ T5279] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 986.879914][ T5283] team_slave_1: Caught tx_queue_len zero misconfig [ 986.928888][ T5289] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 987.007002][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880334bfc00: rx timeout, send abort [ 987.017199][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880334bfc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 987.189294][ T5302] macvtap1: entered promiscuous mode [ 987.196819][ T5302] vlan0: entered promiscuous mode [ 987.203242][ T5302] macvtap1: entered allmulticast mode [ 987.208967][ T5302] vlan0: entered allmulticast mode [ 987.215347][ T5302] veth0_vlan: entered allmulticast mode [ 987.686768][ T5336] netlink: 'syz.4.8509': attribute type 14 has an invalid length. [ 987.742511][ T5339] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 987.848389][ T5343] netlink: 'syz.1.8512': attribute type 1 has an invalid length. [ 988.183773][ T5371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 988.245692][ T5381] netlink: 'syz.4.8522': attribute type 3 has an invalid length. [ 988.464262][ T5395] dvmrp0: entered allmulticast mode [ 988.597159][ T5397] syzkaller0: entered promiscuous mode [ 988.603146][ T5397] syzkaller0: entered allmulticast mode [ 990.464284][ T5418] 8021q: VLANs not supported on ip_vti0 [ 990.491136][ T5432] __nla_validate_parse: 12 callbacks suppressed [ 990.491169][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8535'. [ 990.523870][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8534'. [ 990.561757][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8535'. [ 990.573705][ T5432] sctp: [Deprecated]: syz.4.8535 (pid 5432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 990.573705][ T5432] Use struct sctp_sack_info instead [ 990.662137][ T5438] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 990.681097][ T5438] veth0: entered promiscuous mode [ 990.692759][ T5437] veth0: left promiscuous mode [ 990.751999][ T5446] netlink: 'syz.4.8538': attribute type 12 has an invalid length. [ 990.784944][ T5449] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8539'. [ 990.855385][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8539'. [ 991.207785][ T5481] syzkaller0: entered promiscuous mode [ 991.226862][ T5481] syzkaller0: entered allmulticast mode [ 991.433043][ T5499] netlink: 'syz.4.8549': attribute type 39 has an invalid length. [ 991.998806][ T5528] netlink: 'syz.2.8561': attribute type 1 has an invalid length. [ 992.028122][ T5526] syzkaller0: entered promiscuous mode [ 992.037546][ T5526] syzkaller0: entered allmulticast mode [ 994.108912][ T5545] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 994.237530][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8566'. [ 994.537371][ T5578] ip6tnl0: Caught tx_queue_len zero misconfig [ 994.581295][ T5581] netlink: 'syz.3.8574': attribute type 1 has an invalid length. [ 994.617926][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8573'. [ 994.734320][ T5591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8576'. [ 994.836303][ T5597] sctp: [Deprecated]: syz.0.8579 (pid 5597) Use of int in maxseg socket option. [ 994.836303][ T5597] Use struct sctp_assoc_value instead [ 994.892219][ T5602] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8578'. [ 994.914248][ T5602] nbd: couldn't find a device at index 0 [ 995.043490][ T5611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8580'. [ 995.355062][ T5627] x_tables: duplicate entry at hook 1 [ 995.525042][ T5645] syzkaller0: entered promiscuous mode [ 995.535299][ T5645] syzkaller0: entered allmulticast mode [ 995.678254][ T5656] tipc: Enabled bearer , priority 10 [ 995.880317][ T5669] syzkaller0: entered promiscuous mode [ 995.892003][ T5669] syzkaller0: entered allmulticast mode [ 997.977500][T19846] tipc: Node number set to 714160045 [ 998.147241][ T5707] __nla_validate_parse: 1 callbacks suppressed [ 998.147262][ T5707] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8603'. [ 998.165610][ T5707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8603'. [ 998.185836][ T5710] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 998.291665][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 998.305166][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 998.367685][ T5725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8606'. [ 998.474113][ T5727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.882951][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8618'. [ 998.928260][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8619'. [ 998.963146][ T5764] bond11: Invalid ad_actor_system MAC address. [ 998.970954][ T5764] bond11: option ad_actor_system: invalid value (1) [ 998.975390][ T5766] netlink: 'syz.2.8619': attribute type 5 has an invalid length. [ 998.987073][ T5766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8619'. [ 998.994272][ T5764] bond11 (unregistering): Released all slaves [ 999.267123][ T5782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.315055][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8624'. [ 999.484556][ T5793] nbd3: detected capacity change from 0 to 127 [ 999.495484][ T52] block nbd3: Receive control failed (result -32) [ 999.509373][ T5719] block nbd3: Dead connection, failed to find a fallback [ 999.516631][ T5719] block nbd3: shutting down sockets [ 999.522131][ T5719] blk_print_req_error: 138 callbacks suppressed [ 999.522151][ T5719] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.538141][ T5719] buffer_io_error: 138 callbacks suppressed [ 999.538162][ T5719] Buffer I/O error on dev nbd3, logical block 0, async page read [ 999.552651][ T5719] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.563124][ T5719] Buffer I/O error on dev nbd3, logical block 1, async page read [ 999.571063][ T5719] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.580740][ T5719] Buffer I/O error on dev nbd3, logical block 2, async page read [ 999.588583][ T5719] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.627862][ T5719] Buffer I/O error on dev nbd3, logical block 3, async page read [ 999.643764][ T5798] openvswitch: netlink: Flow key attribute not present in set flow. [ 999.659668][ T5719] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.669300][ T5719] Buffer I/O error on dev nbd3, logical block 0, async page read [ 999.691510][ T5797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 999.708196][ T5719] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.737421][ T5719] Buffer I/O error on dev nbd3, logical block 1, async page read [ 999.780004][ T5719] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.809996][ T5719] Buffer I/O error on dev nbd3, logical block 2, async page read [ 999.817857][ T5719] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.849571][ T5719] Buffer I/O error on dev nbd3, logical block 3, async page read [ 999.880634][ T5719] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.896947][ T5719] Buffer I/O error on dev nbd3, logical block 0, async page read [ 999.929767][ T5719] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.939326][ T5719] Buffer I/O error on dev nbd3, logical block 1, async page read [ 999.986914][ T5719] ldm_validate_partition_table(): Disk read failed. [ 1000.003654][ T5719] Dev nbd3: unable to read RDB block 0 [ 1000.020317][ T5719] nbd3: unable to read partition table [ 1000.043704][ T5719] ldm_validate_partition_table(): Disk read failed. [ 1000.065093][ T5719] Dev nbd3: unable to read RDB block 0 [ 1000.082483][ T5719] nbd3: unable to read partition table [ 1000.205993][ T5833] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1000.241467][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8640'. [ 1000.341739][ T5844] xt_policy: output policy not valid in PREROUTING and INPUT [ 1000.536701][ T5856] bond0: Caught tx_queue_len zero misconfig [ 1000.594822][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8649'. [ 1003.423111][ T5868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1003.668099][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8657'. [ 1003.703555][ T5912] netlink: 'syz.2.8659': attribute type 1 has an invalid length. [ 1003.756681][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8660'. [ 1003.769740][ T5912] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1003.787069][ T5912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8659'. [ 1004.026455][ T5932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1004.041899][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 1004.041934][ C0] lec:lec_tx_timeout: lec0 [ 1004.068495][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8664'. [ 1004.792584][ T5976] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8681'. [ 1004.985164][T25635] lec:lec_start_xmit: lec0:No lecd attached [ 1004.997801][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8684'. [ 1005.403762][ T6005] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 1005.425724][ T6006] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1005.453248][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8693'. [ 1005.490970][ T6012] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8692'. [ 1005.717600][ T6027] xt_hashlimit: size too large, truncated to 1048576 [ 1005.757207][ T6027] xt_hashlimit: size too large, truncated to 1048576 [ 1005.785643][ T6029] netlink: 'syz.0.8697': attribute type 3 has an invalid length. [ 1006.093880][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8707'. [ 1006.122843][ T6048] vlan3: entered allmulticast mode [ 1006.128044][ T6048] geneve1: entered allmulticast mode [ 1006.206768][ T6059] netlink: 'syz.1.8709': attribute type 12 has an invalid length. [ 1006.232991][ T6059] netlink: 'syz.1.8709': attribute type 29 has an invalid length. [ 1006.246178][ T6059] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8709'. [ 1006.260531][ T6057] netlink: 'syz.4.8708': attribute type 1 has an invalid length. [ 1006.439152][ T6067] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1006.450616][ T6067] bond12: (slave bond13): making interface the new active one [ 1006.462096][ T6067] bond12: (slave bond13): Enslaving as an active interface with an up link [ 1006.480683][ T6057] Cannot find del_set index 4 as target [ 1006.490552][ T6066] erspan0: entered promiscuous mode [ 1006.533493][ T6072] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1006.580372][ T6072] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1006.745763][ T6089] openvswitch: netlink: IP tunnel dst address not specified [ 1006.937537][ T6109] netlink: 'syz.0.8721': attribute type 11 has an invalid length. [ 1007.353164][ T6127] netlink: 'syz.0.8727': attribute type 1 has an invalid length. [ 1007.369555][ T6127] netlink: 'syz.0.8727': attribute type 1 has an invalid length. [ 1007.380968][ T6134] bond0: (slave gre0): Error: Device type is different from other slaves [ 1007.683108][ T6152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.698369][ T6147] syzkaller0: entered promiscuous mode [ 1007.717181][ T6147] syzkaller0: entered allmulticast mode [ 1008.324704][ T6175] xt_CT: No such helper "pptp" [ 1009.996850][ T6168] veth1_macvtap: left promiscuous mode [ 1010.004462][ T6168] macsec0: entered promiscuous mode [ 1010.010833][ T6168] macsec0: entered allmulticast mode [ 1010.028495][ T6170] veth1_macvtap: entered promiscuous mode [ 1010.039516][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 1010.045964][ T6170] veth1_macvtap: entered allmulticast mode [ 1010.047569][ C0] lec:lec_tx_timeout: lec0 [ 1010.058598][ T6170] macsec0: left promiscuous mode [ 1010.060903][ T6184] netlink: 'syz.0.8743': attribute type 13 has an invalid length. [ 1010.066444][ T6170] macsec0: left allmulticast mode [ 1010.083527][ T6170] veth1_macvtap: left allmulticast mode [ 1010.091629][ T6169] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1010.278069][ T6196] __nla_validate_parse: 21 callbacks suppressed [ 1010.278090][ T6196] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8747'. [ 1010.506937][ T6205] lo: Caught tx_queue_len zero misconfig [ 1010.622396][ T6212] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1010.847587][ T6221] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8758'. [ 1011.045474][ T6236] netlink: 'syz.4.8760': attribute type 5 has an invalid length. [ 1011.155891][ T6246] netlink: 'syz.4.8760': attribute type 5 has an invalid length. [ 1011.197958][ T6240] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1011.293152][ T6257] sctp: [Deprecated]: syz.2.8768 (pid 6257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1011.293152][ T6257] Use struct sctp_sack_info instead [ 1011.558384][ T6262] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8768'. [ 1011.658383][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8772'. [ 1011.855498][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8775'. [ 1011.876442][ T6296] sctp: [Deprecated]: syz.4.8777 (pid 6296) Use of int in max_burst socket option. [ 1011.876442][ T6296] Use struct sctp_assoc_value instead [ 1011.915277][ T6296] netlink: 'syz.4.8777': attribute type 9 has an invalid length. [ 1011.941496][ T6292] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 1012.081978][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8779'. [ 1012.150144][ T6308] netlink: 'syz.1.8782': attribute type 1 has an invalid length. [ 1012.181576][ T6313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8783'. [ 1012.276500][ T6308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8782'. [ 1012.291686][ T6318] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1012.310088][ T6317] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1012.325253][ T6317] bond6: (slave bond7): making interface the new active one [ 1012.334538][ T6317] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1012.357320][ T6308] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1012.408889][ T6313] x_tables: duplicate underflow at hook 1 [ 1012.666559][ T6346] tipc: Enabled bearer , priority 0 [ 1012.748742][ T6355] "syz.0.8792" (6355) uses obsolete ecb(arc4) skcipher [ 1012.891700][ T6363] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8795'. [ 1013.071071][ T6381] netlink: 'syz.1.8798': attribute type 29 has an invalid length. [ 1013.285032][ T6397] sctp: [Deprecated]: syz.3.8801 (pid 6397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1013.285032][ T6397] Use struct sctp_sack_info instead [ 1013.361996][ T6399] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1013.422095][ T6397] dvmrp0: entered allmulticast mode [ 1014.148436][ T6445] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 1014.165818][T27394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1014.183229][T27394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1014.193331][T27394] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1014.219703][T27394] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1014.241665][T27394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1014.311466][ T6451] netlink: 'syz.2.8820': attribute type 178 has an invalid length. [ 1014.372010][ T6464] x_tables: duplicate underflow at hook 1 [ 1014.513405][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8823'. [ 1014.596387][ T6449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 1014.607401][ T6475] nft_compat: unsupported protocol 0 [ 1015.065636][ T6390] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.124430][ T6447] wg1 speed is unknown, defaulting to 1000 [ 1015.166129][ T6494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1015.271524][ T6390] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.298785][ T6498] __nla_validate_parse: 1 callbacks suppressed [ 1015.298807][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8833'. [ 1015.341078][ T6503] netlink: 'syz.0.8834': attribute type 1 has an invalid length. [ 1015.375309][ T6504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8829'. [ 1015.446747][ T6504] erspan0: left promiscuous mode [ 1015.535286][ T6507] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1015.546696][ T6507] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1015.561063][ T6507] bond4: (slave vxcan3): making interface the new active one [ 1015.571016][ T6507] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 1015.595993][ T6390] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.716692][ T6390] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.731851][ T6522] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1015.936067][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.067017][ T6447] chnl_net:caif_netlink_parms(): no params data found [ 1016.172462][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8844'. [ 1016.263189][ T6390] bridge_slave_1: left allmulticast mode [ 1016.269205][ T6390] bridge_slave_1: left promiscuous mode [ 1016.279952][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.287577][T27394] Bluetooth: hci2: command tx timeout [ 1016.295369][ T6390] bridge_slave_0: left allmulticast mode [ 1016.303930][ T6390] bridge_slave_0: left promiscuous mode [ 1016.310209][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.331349][ T6545] ipt_rpfilter: unknown options [ 1016.880167][ T6390] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1017.533426][ T6390] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1017.543984][ T6390] bond1 (unregistering): Released all slaves [ 1017.673869][ T6390] bond2 (unregistering): Released all slaves [ 1017.805746][ T6390] bond3 (unregistering): Released all slaves [ 1017.819986][ T6390] bond0 (unregistering): Released all slaves [ 1017.834231][ T6390] bond4 (unregistering): Released all slaves [ 1017.848059][ T6390] bond5 (unregistering): Released all slaves [ 1017.982509][ T6390] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1017.992701][ T6390] bond6 (unregistering): Released all slaves [ 1018.125729][ T6390] bond7 (unregistering): Released all slaves [ 1018.155931][ T6549] mac80211_hwsim hwsim67 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1018.336303][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8849'. [ 1018.336472][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.359666][T27394] Bluetooth: hci2: command tx timeout [ 1018.388778][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.410072][ T6447] bridge_slave_0: entered allmulticast mode [ 1018.419332][ T6447] bridge_slave_0: entered promiscuous mode [ 1018.436164][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.445984][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.458140][ T6447] bridge_slave_1: entered allmulticast mode [ 1018.466796][ T6447] bridge_slave_1: entered promiscuous mode [ 1018.475835][ T6390] tipc: Disabling bearer [ 1018.493613][ T6390] tipc: Left network mode [ 1018.706919][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1018.821223][ T6447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.873822][ T6591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8854'. [ 1018.885378][ T6447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.992802][ T6594] openvswitch: netlink: Message has 203 unknown bytes. [ 1019.155846][ T6447] team0: Port device team_slave_0 added [ 1019.194141][ T6447] team0: Port device team_slave_1 added [ 1019.314418][ T6607] netlink: 220 bytes leftover after parsing attributes in process `syz.2.8858'. [ 1019.334542][ T6611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8860'. [ 1019.344247][ T6610] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1019.415046][ T6612] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.8859'. [ 1019.424856][ T6612] netlink: ct family unspecified [ 1019.616515][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.644665][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.702306][ T6447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.766944][ T6630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8862'. [ 1019.777865][ T6447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.796823][ T6447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.870620][ T6447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.180785][ T6654] netlink: 'syz.3.8869': attribute type 1 has an invalid length. [ 1020.267748][ T6447] hsr_slave_0: entered promiscuous mode [ 1020.294014][ T6447] hsr_slave_1: entered promiscuous mode [ 1020.329165][ T6447] debugfs: 'hsr0' already exists in 'hsr' [ 1020.335710][ T6447] Cannot create hsr debugfs directory [ 1020.439964][T27394] Bluetooth: hci2: command tx timeout [ 1020.512447][ T6668] __nla_validate_parse: 3 callbacks suppressed [ 1020.512469][ T6668] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1020.544585][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1020.556287][ T6668] netlink: 31 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1020.569813][ T6668] netlink: 'syz.2.8873': attribute type 2 has an invalid length. [ 1020.577695][ T6668] netlink: 31 bytes leftover after parsing attributes in process `syz.2.8873'. [ 1020.620111][ T6663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1020.859037][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8874'. [ 1020.868554][ T6679] openvswitch: netlink: Flow actions attr not present in new flow. [ 1020.878197][ T6390] hsr_slave_1: left promiscuous mode [ 1020.895917][ T6390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.906291][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.924148][ T6390] veth1_macvtap: left promiscuous mode [ 1020.936110][ T6390] veth0_macvtap: left promiscuous mode [ 1020.942961][ T6390] veth1_vlan: left promiscuous mode [ 1020.948542][ T6390] veth0_vlan: left promiscuous mode [ 1021.110465][ T6691] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1021.606195][ T6390] vlan1 (unregistering): left allmulticast mode [ 1021.613393][ T6390] veth0_vlan (unregistering): left allmulticast mode [ 1021.864628][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 1021.909333][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 1022.371124][ T6706] netlink: 'syz.3.8880': attribute type 25 has an invalid length. [ 1022.523066][T27394] Bluetooth: hci2: command tx timeout [ 1022.832555][ T6732] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1022.840651][ T6732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8886'. [ 1023.015236][ T6390] IPVS: stop unused estimator thread 0... [ 1023.102187][ T6747] netlink: 'syz.3.8890': attribute type 32 has an invalid length. [ 1023.122757][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8891'. [ 1023.122967][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8890'. [ 1023.180753][ T6746] syzkaller0: entered promiscuous mode [ 1023.186307][ T6746] syzkaller0: entered allmulticast mode [ 1023.351545][ T6747] bond7: Setting coupled_control to off (0) [ 1023.363317][ T6767] tipc: Enabled bearer , priority 0 [ 1023.415216][ T6741] tipc: Resetting bearer [ 1023.551242][ T6741] tipc: Disabling bearer [ 1023.917219][ T6789] macvlan0: entered promiscuous mode [ 1023.966062][ T6447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1024.005169][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8896'. [ 1024.021643][ T6447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1024.063482][ T6447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1024.071191][ T6793] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8896'. [ 1024.099269][ T6447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1024.243510][ T6803] syzkaller0: entered promiscuous mode [ 1024.249053][ T6803] syzkaller0: entered allmulticast mode [ 1024.278734][ T6815] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1024.281380][ T983] page_pool_release_retry() stalled pool shutdown: id 150, 1 inflight 302 sec [ 1024.392198][ T6818] netlink: 'syz.3.8902': attribute type 8 has an invalid length. [ 1024.613886][ T6447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.615672][ T6830] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1024.670808][ T6447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.686425][T24268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.693721][T24268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.724232][T24268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.731488][T24268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.846342][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.027956][ T6848] ip6t_rpfilter: unknown options [ 1025.139723][ T6855] SET target dimension over the limit! [ 1025.394594][ T6447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.599681][ T6447] veth0_vlan: entered promiscuous mode [ 1025.643989][ T6447] veth1_vlan: entered promiscuous mode [ 1025.705138][ T6447] veth0_macvtap: entered promiscuous mode [ 1025.718565][ T6447] veth1_macvtap: entered promiscuous mode [ 1025.737184][ T6865] infiniband : set down [ 1025.741734][ T6865] infiniband : added ipvlan0 [ 1025.802526][ T6865] RDS/IB: : added [ 1025.807796][ T6865] smc: adding ib device  with port count 1 [ 1025.817536][ T6865] smc: ib device  port 1 has no pnetid [ 1025.850841][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.924669][ T6447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.963013][ T6885] bridge_slave_0: entered promiscuous mode [ 1025.997324][T24268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.053737][ T6884] veth15: entered allmulticast mode [ 1026.123596][ T6886] veth17: entered allmulticast mode [ 1026.142594][T24268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.165474][ T6888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.176800][T24268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.207229][T24268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.437122][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.468847][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.505646][ T6895] netlink: 'syz.4.8921': attribute type 1 has an invalid length. [ 1026.520799][T24273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.528679][T24273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.540676][ T6895] __nla_validate_parse: 2 callbacks suppressed [ 1026.540696][ T6895] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8921'. [ 1026.566223][ T6895] netlink: 'syz.4.8921': attribute type 1 has an invalid length. [ 1026.574379][ T6895] netlink: 'syz.4.8921': attribute type 8 has an invalid length. [ 1026.588900][ T6895] netlink: 606 bytes leftover after parsing attributes in process `syz.4.8921'. [ 1026.913879][ T6913] syzkaller0: entered promiscuous mode [ 1026.935083][ T6913] syzkaller0: entered allmulticast mode [ 1027.298721][ T6932] netlink: 'syz.1.8930': attribute type 1 has an invalid length. [ 1027.313211][ T6934] netlink: 'syz.1.8930': attribute type 1 has an invalid length. [ 1027.322799][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8930'. [ 1027.355199][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8930'. [ 1027.391165][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8930'. [ 1027.664555][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8935'. [ 1027.899123][ T6961] tipc: Enabled bearer , priority 10 [ 1028.064233][ T6970] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1028.123350][ T6975] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1028.136862][ T6977] netlink: 'syz.3.8941': attribute type 4 has an invalid length. [ 1028.164938][ T6977] netlink: 193176 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1028.182766][ T6978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1028.578769][ T6992] netlink: 'syz.2.8946': attribute type 1 has an invalid length. [ 1028.871414][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1028.885231][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1028.900637][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1028.918847][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1028.950836][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1029.780174][ T7002] wg1 speed is unknown, defaulting to 1000 [ 1030.291786][ T7055] netlink: 'syz.1.8960': attribute type 1 has an invalid length. [ 1030.373676][ T7045] siw: device registration error -23 [ 1030.615100][ T7065] tipc: Started in network mode [ 1030.620601][ T7065] tipc: Node identity 8, cluster identity 4711 [ 1030.626848][ T7065] tipc: Node number set to 8 [ 1030.768152][ T7073] netlink: 'syz.1.8968': attribute type 4 has an invalid length. [ 1030.832004][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 1030.920685][ T7079] tipc: Enabled bearer , priority 0 [ 1030.940818][ T7079] syzkaller0: entered promiscuous mode [ 1030.946440][ T7079] syzkaller0: entered allmulticast mode [ 1031.014722][ T7081] netlink: 'syz.1.8970': attribute type 1 has an invalid length. [ 1031.080460][T27394] Bluetooth: hci5: command tx timeout [ 1031.161766][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.169056][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.176835][ T7002] bridge_slave_0: entered allmulticast mode [ 1031.184466][ T7002] bridge_slave_0: entered promiscuous mode [ 1031.194570][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.203241][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.211239][ T7002] bridge_slave_1: entered allmulticast mode [ 1031.221327][ T7002] bridge_slave_1: entered promiscuous mode [ 1031.229151][ T7078] tipc: Resetting bearer [ 1031.288747][ T7078] tipc: Disabling bearer [ 1031.363266][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.385756][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.397861][ T7093] "syz.2.8972" (7093) uses obsolete ecb(arc4) skcipher [ 1031.524075][ T7002] team0: Port device team_slave_0 added [ 1031.535013][ T7002] team0: Port device team_slave_1 added [ 1031.596579][ T7100] __nla_validate_parse: 9 callbacks suppressed [ 1031.596598][ T7100] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8975'. [ 1031.609391][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.634384][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.674333][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.718139][ T7102] bond8 (unregistering): Released all slaves [ 1031.750597][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.757604][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.784672][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.853000][ T7002] hsr_slave_0: entered promiscuous mode [ 1031.860580][ T7002] hsr_slave_1: entered promiscuous mode [ 1031.867071][ T7002] debugfs: 'hsr0' already exists in 'hsr' [ 1031.874019][ T7002] Cannot create hsr debugfs directory [ 1031.939953][ T7112] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8978'. [ 1031.949132][ T7112] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8978'. [ 1031.964134][ T7112] netlink: 'syz.2.8978': attribute type 5 has an invalid length. [ 1031.977267][ T7112] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8978'. [ 1032.269643][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1032.297334][ T7134] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1032.309208][ T7134] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1032.339725][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1032.463721][ T7002] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.477608][ T7143] netlink: 'syz.2.8989': attribute type 16 has an invalid length. [ 1032.487723][ T7002] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1032.499052][ T7002] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1032.503662][ T7143] netlink: 'syz.2.8989': attribute type 17 has an invalid length. [ 1032.547565][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8991'. [ 1032.559035][ T7147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8991'. [ 1032.579150][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8990'. [ 1032.666470][ T7143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.685027][ T7143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1032.718357][ T7002] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1032.749257][ T7002] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1032.773320][ T7002] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1032.898098][ T7164] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 1032.988931][ T7166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.055783][ T7002] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.075660][ T7002] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1033.096449][ T7002] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1033.153782][ T7173] sctp: [Deprecated]: syz.1.8998 (pid 7173) Use of int in max_burst socket option. [ 1033.153782][ T7173] Use struct sctp_assoc_value instead [ 1033.164490][T27394] Bluetooth: hci5: command tx timeout [ 1033.226830][ T7002] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.251873][ T7002] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1033.280792][ T7002] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1033.729873][ T7194] netlink: 'syz.2.9004': attribute type 3 has an invalid length. [ 1033.766528][ T7002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1033.827277][ T7199] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1033.841618][ T7199] bond8: entered promiscuous mode [ 1033.846722][ T7199] bond8: entered allmulticast mode [ 1033.855493][ T7199] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1033.863557][ T7002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1033.916942][ T7002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1033.931865][ T7002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1034.124749][ T7221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1034.132082][ T7221] IPv6: NLM_F_CREATE should be set when creating new route [ 1034.183875][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.273309][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.299123][T24273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.306454][T24273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.346544][T24268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.353790][T24268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.407902][ T7235] lo: entered promiscuous mode [ 1034.451359][ T7235] tunl0: entered promiscuous mode [ 1034.475217][ T7235] gre0: entered promiscuous mode [ 1034.502536][ T7235] gretap0: entered promiscuous mode [ 1034.528751][ T7235] erspan0: entered promiscuous mode [ 1034.552898][ T7235] ip_vti0: entered promiscuous mode [ 1035.239822][T27394] Bluetooth: hci5: command tx timeout [ 1036.841729][ T7273] __nla_validate_parse: 6 callbacks suppressed [ 1036.841752][ T7273] netlink: 81 bytes leftover after parsing attributes in process `syz.3.9021'. [ 1037.041681][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.110999][ T7286] tipc: Enabled bearer , priority 10 [ 1037.141640][ T7286] netlink: 'syz.0.9024': attribute type 1 has an invalid length. [ 1037.241250][ T7294] netlink: 'syz.2.9026': attribute type 11 has an invalid length. [ 1037.324784][T27394] Bluetooth: hci5: command tx timeout [ 1037.351037][ T7296] netlink: 'syz.1.9025': attribute type 2 has an invalid length. [ 1037.617516][ T7002] veth0_vlan: entered promiscuous mode [ 1037.639257][ T7002] veth1_vlan: entered promiscuous mode [ 1037.713570][ T7002] veth0_macvtap: entered promiscuous mode [ 1037.764222][ T7002] veth1_macvtap: entered promiscuous mode [ 1037.850379][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.893976][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.917757][T24271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.928947][T24271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.958818][T24271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.980962][ T6377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.379364][ T6377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.400365][ T6377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.425052][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9042'. [ 1038.442783][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9042'. [ 1038.468265][ T7366] netlink: 'syz.0.9042': attribute type 9 has an invalid length. [ 1038.468265][ T7361] netlink: 'syz.0.9042': attribute type 9 has an invalid length. [ 1038.558910][ T7368] netlink: 'syz.2.9043': attribute type 1 has an invalid length. [ 1038.568800][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.577245][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.619054][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9044'. [ 1038.787410][ T7376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9046'. [ 1038.818573][ T7381] syzkaller0: entered promiscuous mode [ 1038.833253][ T7381] syzkaller0: entered allmulticast mode [ 1038.984235][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9051'. [ 1039.341159][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9055'. [ 1039.556408][ T7421] syzkaller1: entered promiscuous mode [ 1039.591104][ T7421] syzkaller1: entered allmulticast mode [ 1039.694053][ T7429] netlink: 348 bytes leftover after parsing attributes in process `syz.0.9064'. [ 1039.969234][ T7451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9071'. [ 1040.417355][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1040.427605][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1040.442416][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1040.460733][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1040.468439][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1040.720008][ T7468] wg1 speed is unknown, defaulting to 1000 [ 1041.028745][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 1041.178363][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.186154][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.195405][ T7468] bridge_slave_0: entered allmulticast mode [ 1041.205256][ T7468] bridge_slave_0: entered promiscuous mode [ 1041.214068][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.221712][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.228964][ T7468] bridge_slave_1: entered allmulticast mode [ 1041.237107][ T7468] bridge_slave_1: entered promiscuous mode [ 1041.284883][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.014276][ T6390] bond1 (unregistering): Released all slaves [ 1042.144844][ T6390] bond2 (unregistering): Released all slaves [ 1042.158783][ T6390] bond0 (unregistering): Released all slaves [ 1042.173316][ T6390] bond3 (unregistering): Released all slaves [ 1042.188796][ T6390] bond4 (unregistering): Released all slaves [ 1042.211380][ T6390] bond5 (unregistering): Released all slaves [ 1042.342975][ T6390] bond6 (unregistering): Released all slaves [ 1042.358913][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.403830][ T7468] team0: Port device team_slave_0 added [ 1042.423092][ T7468] team0: Port device team_slave_1 added [ 1042.458081][ T6390] 9: left promiscuous mode [ 1042.525104][T27394] Bluetooth: hci0: command tx timeout [ 1042.542514][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.564358][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.592871][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.607463][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.616589][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.645387][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.658186][ T6390] tipc: Left network mode [ 1042.746990][ T7468] hsr_slave_0: entered promiscuous mode [ 1042.755132][ T7468] hsr_slave_1: entered promiscuous mode [ 1042.771277][ T7468] debugfs: 'hsr0' already exists in 'hsr' [ 1042.777070][ T7468] Cannot create hsr debugfs directory [ 1043.592426][ T6390] hsr_slave_0: left promiscuous mode [ 1043.598985][ T6390] hsr_slave_1: left promiscuous mode [ 1043.611147][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.619197][ T6390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.636699][ T6390] vlan0: left allmulticast mode [ 1043.643600][ T6390] veth0_vlan: left allmulticast mode [ 1043.648949][ T6390] vlan0: left promiscuous mode [ 1044.599810][T27394] Bluetooth: hci0: command tx timeout [ 1044.635885][ T6390] team0 (unregistering): Port device team_slave_1 removed [ 1044.679199][ T6390] team0 (unregistering): Port device team_slave_0 removed [ 1045.093227][ T7468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1045.104848][ T7468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1045.116952][ T7468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1045.128641][ T7468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1045.253166][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.297477][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.317345][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.324593][ T6377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.341094][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.348308][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.467217][ T6390] IPVS: stop unused estimator thread 0... [ 1045.586104][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.632936][ T7468] veth0_vlan: entered promiscuous mode [ 1045.646643][ T7468] veth1_vlan: entered promiscuous mode [ 1045.676958][ T7468] veth0_macvtap: entered promiscuous mode [ 1045.687842][ T7468] veth1_macvtap: entered promiscuous mode [ 1045.708330][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.728011][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.743346][T24271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.752899][T24271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.766145][ T6377] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.776342][ T6377] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.855244][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.871745][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.907253][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.916405][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.975572][ T7518] netlink: 'syz.2.9074': attribute type 21 has an invalid length. [ 1045.983890][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9074'. [ 1046.002508][T24269] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.002879][ T7518] netlink: 'syz.2.9074': attribute type 21 has an invalid length. [ 1046.019620][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9074'. [ 1046.023506][T24269] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.037587][T24269] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.047749][T24269] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.679725][T27394] Bluetooth: hci0: command tx timeout [ 1048.760390][T27394] Bluetooth: hci0: command tx timeout [ 1059.729150][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1059.742587][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1065.079757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 1065.087818][ C0] lec:lec_tx_timeout: lec0 [ 1069.789909][T25635] lec:lec_start_xmit: lec0:No lecd attached [ 1075.083000][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5290 ms [ 1075.091087][ C0] lec:lec_tx_timeout: lec0 [ 1080.226711][ T983] wg1 speed is unknown, defaulting to 1000 [ 1080.233177][ T983] syz2: Port: 1 Link DOWN [ 1080.253517][ T1164] bridge_slave_1: left promiscuous mode [ 1080.259264][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.296372][ T1164] bond_slave_0: left promiscuous mode [ 1080.302332][ T1164] bond_slave_1: left promiscuous mode [ 1080.551380][ T1164] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1080.573599][ T1164] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1080.743034][ T1164] bond6 (unregistering): (slave bridge2): Releasing active interface [ 1080.862614][ T1164] bond10 (unregistering): (slave bridge4): Releasing backup interface [ 1080.871001][ T1164] bridge4 (unregistering): left promiscuous mode [ 1081.058735][ T1164] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1081.076457][T24269] smc: removing ib device syz0 [ 1081.088664][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.101557][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.111929][ T1164] bond0 (unregistering): Released all slaves [ 1081.228053][ T1164] bond1 (unregistering): Released all slaves [ 1081.353195][ T1164] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1081.362353][ T1164] veth0_to_bond: left promiscuous mode [ 1081.368130][ T1164] veth0_to_bond: left allmulticast mode [ 1081.376544][ T1164] bond2 (unregistering): Released all slaves [ 1081.390822][ T1164] bond3 (unregistering): Released all slaves [ 1081.516632][ T1164] bond4 (unregistering): Released all slaves [ 1081.634182][ T1164] bond5 (unregistering): Released all slaves [ 1081.648613][ T1164] bond6 (unregistering): Released all slaves [ 1081.663730][ T1164] bond7 (unregistering): Released all slaves [ 1081.788210][ T1164] bond8 (unregistering): Released all slaves [ 1081.911407][ T1164] bond9 (unregistering): (slave veth7): Releasing active interface [ 1081.921555][ T1164] bond9 (unregistering): Released all slaves [ 1082.051978][ T1164] bond10 (unregistering): Released all slaves [ 1082.065987][ T1164] bond11 (unregistering): Released all slaves [ 1082.081407][ T1164] bond12 (unregistering): (slave bond13): Releasing backup interface [ 1082.090477][ T1164] bond12 (unregistering): Released all slaves [ 1082.224920][ T1164] bond13 (unregistering): Released all slaves [ 1083.272349][ T1164] : left promiscuous mode [ 1083.331738][ T1164] tipc: Disabling bearer [ 1083.338292][ T1164] tipc: Disabling bearer [ 1083.357384][ T1164] tipc: Left network mode [ 1083.957686][ T1164] hsr_slave_0: left promiscuous mode [ 1083.970442][ T1164] hsr_slave_1: left promiscuous mode [ 1083.976649][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.984531][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.995950][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.003821][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.018648][ T1164] veth0_macvtap: left allmulticast mode [ 1084.024855][ T1164] veth0_macvtap: left promiscuous mode [ 1084.030799][ T1164] veth1_macvtap: left promiscuous mode [ 1084.036513][ T1164] veth1_vlan: left promiscuous mode [ 1084.146078][ T1164] pimreg (unregistering): left allmulticast mode [ 1084.599792][ T983] page_pool_release_retry() stalled pool shutdown: id 150, 1 inflight 362 sec [ 1085.561468][ T1164] IPVS: stop unused estimator thread 0... [ 1097.343521][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9078'. [ 1097.354994][ T7642] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1097.389346][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9079'. [ 1097.803758][ T7677] pim6reg: entered allmulticast mode [ 1097.829165][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1097.843414][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9088'. [ 1098.797132][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9092'. [ 1100.504191][ T7652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1100.521915][ T7663] netlink: 'syz.2.9087': attribute type 1 has an invalid length. [ 1100.533057][ T7663] netlink: 'syz.2.9087': attribute type 3 has an invalid length. [ 1100.541747][ T7663] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9087'. [ 1100.554930][ T7663] NCSI netlink: No device for ifindex 813332851 [ 1100.802013][ T7697] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9097'. [ 1100.833757][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9097'. [ 1100.891182][ T7697] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9097'. [ 1100.941814][ T7701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1100.985254][ T7701] bridge2: entered allmulticast mode [ 1101.442863][ T7742] bond0: Error: Cannot enslave bond to itself. [ 1101.734015][ T7763] netlink: 'syz.3.9116': attribute type 1 has an invalid length. [ 1101.835851][ T7763] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1101.870790][ T7780] netlink: 'syz.1.9120': attribute type 1 has an invalid length. [ 1101.933516][ T7775] bond10: Unable to set up delay as MII monitoring is disabled [ 1101.943760][ T7775] bond10 (unregistering): Released all slaves [ 1102.005198][ T7791] tipc: Enabled bearer , priority 0 [ 1102.055513][ T7791] tipc: Resetting bearer [ 1102.111738][ T7784] syzkaller0: entered promiscuous mode [ 1102.117513][ T7784] syzkaller0: entered allmulticast mode [ 1102.136100][ T7783] tipc: Resetting bearer [ 1102.218607][ T7783] tipc: Disabling bearer [ 1102.344307][ T7813] veth1_to_bond: entered promiscuous mode [ 1102.362868][ T7815] syzkaller1: entered promiscuous mode [ 1102.368619][ T7815] syzkaller1: entered allmulticast mode [ 1102.426630][ T7822] __nla_validate_parse: 1 callbacks suppressed [ 1102.426652][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9128'. [ 1121.163541][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1121.176017][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1126.189632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1126.197660][ C0] lec:lec_tx_timeout: lec0 [ 1133.705625][T25635] lec:lec_start_xmit: lec0:No lecd attached [ 1138.599681][ T7835] Bluetooth: hci2: command 0x0406 tx timeout [ 1138.605807][ T7835] Bluetooth: hci1: command 0x0405 tx timeout [ 1139.080116][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 1139.088176][ C0] lec:lec_tx_timeout: lec0 [ 1144.919785][ T983] page_pool_release_retry() stalled pool shutdown: id 150, 1 inflight 422 sec [ 1164.199762][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 1165.530345][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9136'. [ 1165.560881][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9138'. [ 1165.593172][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9134'. [ 1165.649106][ T7859] vlan3: entered allmulticast mode [ 1165.683180][ T7859] bridge3: entered allmulticast mode [ 1165.721767][ T7868] syzkaller0: entered promiscuous mode [ 1165.740544][ T7868] syzkaller0: entered allmulticast mode [ 1165.914718][ T7870] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9141'. [ 1165.925136][ T7879] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9143'. [ 1166.023967][ T7870] veth3: entered allmulticast mode [ 1166.364022][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1166.376185][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1166.388393][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1166.407993][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1166.416056][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1166.842289][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1166.926319][ T7920] netlink: 'syz.1.9154': attribute type 1 has an invalid length. [ 1166.939668][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9154'. [ 1167.048211][T24271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.063093][T24271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.074631][T24271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1167.096257][T24271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1167.162113][ T7923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1167.171606][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9156'. [ 1167.235786][T24271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.274621][T24271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.291158][T24271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1167.329461][T24271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1167.498770][T24271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.534001][T24271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.551147][ T7952] netlink: 'syz.0.9164': attribute type 6 has an invalid length. [ 1167.579616][T24271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1167.610793][T24271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1167.746941][T24271] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1167.766333][T24271] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.797685][T24271] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1167.823008][T24271] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 1168.159295][ T7989] netlink: 'syz.4.9175': attribute type 1 has an invalid length. [ 1168.333694][ T7989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1168.370549][ T7991] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1168.391473][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 1168.464347][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9179'. [ 1168.475257][ T8006] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1168.500168][ T7989] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1168.509904][ T8006] netlink: 'syz.2.9179': attribute type 3 has an invalid length. [ 1168.521880][T27394] Bluetooth: hci3: command tx timeout [ 1168.809652][ T8018] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1168.816360][ T8018] syzkaller1: Refused to change device type [ 1168.834328][T24271] bridge_slave_1: left promiscuous mode [ 1168.848439][T24271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.877608][T24271] bridge_slave_0: left allmulticast mode [ 1168.895095][T24271] bridge_slave_0: left promiscuous mode [ 1168.921907][T24271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.998664][T24271] tipc: Resetting bearer [ 1169.445634][T24271] tipc: Disabling bearer [ 1169.567146][T24271] dvmrp0 (unregistering): left allmulticast mode [ 1169.895948][T24271]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.908410][T24271]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.918923][T24271]  (unregistering): Released all slaves [ 1169.929929][T24271] bond1 (unregistering): Released all slaves [ 1169.944924][T24271] bond2 (unregistering): Released all slaves [ 1170.074961][T24271] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1170.084082][T24271] veth0_to_bond: left promiscuous mode [ 1170.089931][T24271] veth0_to_bond: left allmulticast mode [ 1170.098410][T24271] bond0 (unregistering): Released all slaves [ 1170.112723][T24271] bond3 (unregistering): Released all slaves [ 1170.248087][T24271] bond4 (unregistering): Released all slaves [ 1170.262397][T24271] bond5 (unregistering): Released all slaves [ 1170.276601][T24271] bond6 (unregistering): Released all slaves [ 1170.297864][T24271] bond7 (unregistering): Released all slaves [ 1170.430464][T24271] bond8 (unregistering): Released all slaves [ 1170.553633][T24271] bond9 (unregistering): Released all slaves [ 1170.604753][T27394] Bluetooth: hci3: command tx timeout [ 1170.630515][ T6390] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1170.764758][ T8054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1170.774158][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.816141][ T8054] netlink: 89 bytes leftover after parsing attributes in process `syz.2.9188'. [ 1170.826942][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.850496][T24261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.865417][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.879687][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.887011][ T7892] bridge_slave_0: entered allmulticast mode [ 1170.899858][ T1164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.906309][ T7892] bridge_slave_0: entered promiscuous mode [ 1170.937921][T24271] tipc: Disabling bearer [ 1170.949827][T24273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1170.960835][T24271] tipc: Left network mode [ 1171.003358][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.010201][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.018469][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.058969][ T7892] bridge_slave_1: entered allmulticast mode [ 1171.080495][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.103611][ T7892] bridge_slave_1: entered promiscuous mode [ 1171.129521][T24268] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.160423][T24268] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1171.252327][ T8061] netlink: 'syz.4.9190': attribute type 33 has an invalid length. [ 1171.297219][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.368327][ T8061] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1171.405939][ T8061] bond2 (unregistering): Released all slaves [ 1171.473719][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.603503][ T7892] team0: Port device team_slave_0 added [ 1171.645424][ T7892] team0: Port device team_slave_1 added [ 1171.830357][ T8089] netlink: 'syz.1.9194': attribute type 13 has an invalid length. [ 1171.856723][ T8088] syzkaller0: entered promiscuous mode [ 1171.872617][ T8088] syzkaller0: entered allmulticast mode [ 1171.891356][ T8103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1172.156635][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.162203][ T8106] nbd0: detected capacity change from 0 to 63 [ 1172.174877][ T7898] block nbd0: Send control failed (result -32) [ 1172.185756][T27394] block nbd0: Receive control failed (result -32) [ 1172.194349][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.221576][ T7898] block nbd0: Request send failed, requeueing [ 1172.236637][ T7898] block nbd0: Dead connection, failed to find a fallback [ 1172.249288][ T96] block nbd0: Dead connection, failed to find a fallback [ 1172.256736][ T96] block nbd0: shutting down sockets [ 1172.263599][ T96] blk_print_req_error: 138 callbacks suppressed [ 1172.263621][ T96] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.281741][ T96] buffer_io_error: 138 callbacks suppressed [ 1172.281761][ T96] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1172.297136][ T7898] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.307233][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.318043][ T7898] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1172.329035][ T7898] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.338760][ T7898] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1172.346988][ T7898] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.357469][ T7898] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1172.376798][ T7898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.386455][ T7898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1172.391946][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.395199][ T7898] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.411969][ T7898] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1172.419890][ T7898] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.430920][ T7898] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1172.439889][ T7898] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.450124][ T7898] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1172.457992][ T7898] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.467786][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1172.495278][ T7898] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1172.507047][ T7898] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1172.517319][ T7898] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1172.526270][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1172.540332][ T7898] ldm_validate_partition_table(): Disk read failed. [ 1172.547454][ T7898] Dev nbd0: unable to read RDB block 0 [ 1172.557850][ T7898] nbd0: unable to read partition table [ 1172.626453][ T7898] ldm_validate_partition_table(): Disk read failed. [ 1172.652500][ T7898] Dev nbd0: unable to read RDB block 0 [ 1172.658698][ T7898] nbd0: unable to read partition table [ 1172.670891][ T8121] netlink: 'syz.0.9200': attribute type 2 has an invalid length. [ 1172.682011][T27394] Bluetooth: hci3: command tx timeout [ 1172.723678][ T8125] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9200'. [ 1172.814502][ T8121] : entered promiscuous mode [ 1172.989943][T24271] hsr_slave_0: left promiscuous mode [ 1173.003136][T24271] hsr_slave_1: left promiscuous mode [ 1173.007521][ T8140] netlink: 'syz.0.9204': attribute type 11 has an invalid length. [ 1173.017493][ T8140] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9204'. [ 1173.043566][T24271] veth1_vlan: left allmulticast mode [ 1173.049757][T24271] veth0_macvtap: left promiscuous mode [ 1173.055913][T24271] veth1_vlan: left promiscuous mode [ 1173.061736][T24271] veth0_vlan: left promiscuous mode [ 1173.840502][T24271] team0 (unregistering): Port device team_slave_1 removed [ 1174.247000][ T8126] tipc: Started in network mode [ 1174.253195][ T8126] tipc: Node identity ac14140f, cluster identity 4711 [ 1174.261458][ T8126] tipc: New replicast peer: 255.255.255.255 [ 1174.267873][ T8126] tipc: Enabled bearer , priority 10 [ 1174.393886][ T7892] hsr_slave_0: entered promiscuous mode [ 1174.413045][ T7892] hsr_slave_1: entered promiscuous mode [ 1174.760865][T27394] Bluetooth: hci3: command tx timeout [ 1174.867286][ T799] IPVS: starting estimator thread 0... [ 1174.887092][ T8176] netlink: 'syz.1.9212': attribute type 64 has an invalid length. [ 1174.960911][ T8181] IPVS: using max 30 ests per chain, 72000 per kthread [ 1175.061211][ T8189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9215'. [ 1175.081301][ T8191] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9216'. [ 1175.105427][ T8191] xt_policy: neither incoming nor outgoing policy selected [ 1175.412506][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9217'. [ 1175.478321][T23509] tipc: Node number set to 2886997007 [ 1175.496252][T24271] IPVS: stop unused estimator thread 0... [ 1175.640103][T24261] net_ratelimit: 169 callbacks suppressed [ 1175.640125][T24261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.702064][T24261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.713773][ T8217] netlink: 'syz.2.9219': attribute type 7 has an invalid length. [ 1175.727855][ T8217] netlink: 'syz.2.9219': attribute type 7 has an invalid length. [ 1175.794335][T24261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.813956][T24261] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1175.867416][ T8225] netlink: 'syz.4.9221': attribute type 83 has an invalid length. [ 1175.896134][ T8227] netlink: 'syz.2.9222': attribute type 1 has an invalid length. [ 1175.930005][T24261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.960519][T24261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1175.977730][T24261] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.111738][T24261] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.134548][ T8234] sctp: [Deprecated]: syz.0.9223 (pid 8234) Use of int in max_burst socket option. [ 1176.134548][ T8234] Use struct sctp_assoc_value instead [ 1176.205374][ T1164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1176.220061][ T1164] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.248533][ T7892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1176.311143][ T7892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1176.358379][ T7892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1176.409205][ T7892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1176.744632][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1176.804878][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.834911][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.842271][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.902319][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.909583][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.935375][ T8279] mac80211_hwsim hwsim96 wlan0: Caught tx_queue_len zero misconfig [ 1177.331663][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9239'. [ 1177.561380][ T8311] smc: net device team0 applied user defined pnetid SYZ2 [ 1177.562311][ T8318] ip6tnl0: Caught tx_queue_len zero misconfig [ 1177.649323][ T8319] smc: net device caif0 applied user defined pnetid SYZ2 [ 1177.923500][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.018254][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.036592][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.068109][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.096969][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.122513][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.131196][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.144437][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.169923][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.179176][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.207484][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.222157][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.233127][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.299285][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.312332][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.328631][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.337937][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.409927][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.417972][ T8354] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9249'. [ 1178.460409][ T8354] netlink: 'syz.1.9249': attribute type 1 has an invalid length. [ 1178.482163][ T7892] veth0_vlan: entered promiscuous mode [ 1178.532350][ T7892] veth1_vlan: entered promiscuous mode [ 1178.633090][ T8375] xt_l2tp: wrong L2TP version: 0 [ 1178.657941][ T7892] veth0_macvtap: entered promiscuous mode [ 1178.711118][ T7892] veth1_macvtap: entered promiscuous mode [ 1178.771090][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.919348][ T8387] gretap0: entered promiscuous mode [ 1178.949233][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.004954][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.038762][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.136529][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.162337][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.522334][T23513] IPVS: starting estimator thread 0... [ 1179.558701][T24271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.592507][T24271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.640378][ T8413] IPVS: using max 26 ests per chain, 62400 per kthread [ 1179.738348][ T6390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.764076][ T6390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.373743][ T8464] tls_set_device_offload: netdev not found [ 1180.651897][ T6377] net_ratelimit: 140 callbacks suppressed [ 1180.651919][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1180.690006][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1180.705812][ T6390] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1180.829552][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1180.852247][ T6377] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1180.956430][ T8499] macvlan2: entered promiscuous mode [ 1180.973908][ T8499] macvlan2: entered allmulticast mode [ 1180.979944][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.003660][ T8499] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1181.039596][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.069907][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.109602][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.130465][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1181.420112][ T8521] tipc: MTU too low for tipc bearer [ 1182.607272][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1184.502492][ T8530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1184.514281][ T8540] validate_nla: 29 callbacks suppressed [ 1184.514302][ T8540] netlink: 'syz.3.9292': attribute type 23 has an invalid length. [ 1184.858816][ T8598] netlink: 'syz.4.9305': attribute type 1 has an invalid length. [ 1185.030069][ T8609] netlink: 'syz.2.9308': attribute type 13 has an invalid length. [ 1185.047491][ T8593] __nla_validate_parse: 90 callbacks suppressed [ 1185.047513][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9305'. [ 1185.096057][ T8609] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9308'. [ 1185.192993][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9310'. [ 1185.224206][ T8609] syz_tun: refused to change device tx_queue_len [ 1185.314078][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9312'. [ 1185.368134][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9312'. [ 1185.405813][ T8620] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9312'. [ 1185.420377][ T8624] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9311'. [ 1185.467787][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9314'. [ 1185.490118][ T8628] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9315'. [ 1185.706758][ T8638] netlink: 'syz.0.9318': attribute type 1 has an invalid length. [ 1185.760904][T24269] net_ratelimit: 243 callbacks suppressed [ 1185.760929][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1185.811251][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1185.829800][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1185.860081][T24268] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1185.876692][ T8638] bond6: entered promiscuous mode [ 1185.890101][ T8638] bond6: entered allmulticast mode [ 1185.895660][ T8638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1185.919555][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1185.940124][T24269] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1185.952012][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9320'. [ 1185.979653][T24268] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1185.991350][T24268] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1186.033896][ T8645] macvlan4: entered promiscuous mode [ 1186.039228][ T8645] macvlan4: entered allmulticast mode [ 1186.056773][ T8645] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1186.067857][ T8653] IPv6: NLM_F_CREATE should be specified when creating new route [ 1186.084990][ T8653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1186.092306][ T8653] IPv6: NLM_F_CREATE should be set when creating new route [ 1186.099618][ T8653] IPv6: NLM_F_CREATE should be set when creating new route [ 1186.108050][ T1164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.139851][ T1164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1186.162614][ T8655] macvlan0: entered promiscuous mode [ 1186.307063][T23509] IPVS: starting estimator thread 0... [ 1186.380960][ T8668] netlink: 'syz.1.9327': attribute type 5 has an invalid length. [ 1186.392848][ T8662] netlink: 'syz.2.9324': attribute type 83 has an invalid length. [ 1186.424170][ T8668] ip6t_srh: unknown srh invflags 4000 [ 1186.441146][ T8664] IPVS: using max 27 ests per chain, 64800 per kthread [ 1186.622495][ T1164] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.636415][ T1164] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.667283][ T1164] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.699649][ T1164] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1186.726546][ T8692] netlink: 'syz.0.9332': attribute type 1 has an invalid length. [ 1186.787274][ T8692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1187.288704][ T8732] : entered promiscuous mode [ 1187.374890][ T8737] syzkaller0: entered promiscuous mode [ 1187.399630][ T8737] syzkaller0: entered allmulticast mode [ 1187.452927][ T8737] tipc: Started in network mode [ 1187.457869][ T8737] tipc: Node identity 7631fce45fc, cluster identity 4711 [ 1187.492678][ T8737] tipc: Enabled bearer , priority 0 [ 1187.504125][ T8737] netlink: 'syz.3.9344': attribute type 3 has an invalid length. [ 1187.512296][ T8737] netlink: 'syz.3.9344': attribute type 2 has an invalid length. [ 1187.524121][ T8737] tipc: Resetting bearer [ 1187.538396][ T8736] tipc: Resetting bearer [ 1187.594142][ T8736] tipc: Disabling bearer [ 1187.613144][ T8745] vlan2: entered promiscuous mode [ 1187.624759][ T8745] geneve1: entered promiscuous mode [ 1187.630962][ T8745] vlan2: entered allmulticast mode [ 1187.636242][ T8745] geneve1: entered allmulticast mode [ 1187.803007][ T8756] sctp: [Deprecated]: syz.0.9350 (pid 8756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1187.803007][ T8756] Use struct sctp_sack_info instead [ 1187.838679][ T8760] netlink: 'syz.1.9351': attribute type 21 has an invalid length. [ 1188.039443][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1188.047529][ C0] lec:lec_tx_timeout: lec0 [ 1188.382334][ T8799] netlink: 'syz.2.9361': attribute type 11 has an invalid length. [ 1188.560998][ T8817] tunl0: Caught tx_queue_len zero misconfig [ 1189.844230][ T8846] syzkaller1: entered promiscuous mode [ 1189.850390][ T8846] syzkaller1: entered allmulticast mode [ 1190.839777][ T6377] net_ratelimit: 98 callbacks suppressed [ 1190.839799][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1190.854597][ T6377] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1190.971510][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1190.980378][ T6377] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.089553][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.097615][ T6377] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.209591][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.217713][ T6377] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1191.295691][ T8799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1191.329678][ T1164] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.399954][T24268] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1191.486420][ T8853] validate_nla: 1 callbacks suppressed [ 1191.486439][ T8853] netlink: 'syz.4.9379': attribute type 1 has an invalid length. [ 1191.510829][ T8852] netlink: 'syz.1.9377': attribute type 1 has an invalid length. [ 1191.566878][ T8853] bond3: entered promiscuous mode [ 1191.587886][ T8853] bond3: entered allmulticast mode [ 1191.598186][ T8853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1191.619565][ T8860] __nla_validate_parse: 15 callbacks suppressed [ 1191.619584][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9380'. [ 1191.670513][ T8852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1191.701758][ T8854] bond2: (slave geneve2): making interface the new active one [ 1191.721571][ T8854] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1191.836033][ T8867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9382'. [ 1191.878469][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1191.967034][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9384'. [ 1191.991964][ T8876] veth1: Caught tx_queue_len zero misconfig [ 1192.278133][ T8896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9389'. [ 1192.700764][ T8927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1192.794209][ T8937] netlink: 'syz.0.9401': attribute type 9 has an invalid length. [ 1193.171990][ T8947] syzkaller0: entered promiscuous mode [ 1193.177532][ T8947] syzkaller0: entered allmulticast mode [ 1193.227833][ T8947] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1193.244583][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9405'. [ 1193.392478][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9408'. [ 1193.776466][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1193.873310][ T8993] veth1_to_bridge: entered promiscuous mode [ 1193.902643][T24261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.308955][ T9012] syzkaller0: entered promiscuous mode [ 1194.342862][ T9012] syzkaller0: entered allmulticast mode [ 1194.810748][ T9045] netlink: 'syz.1.9429': attribute type 2 has an invalid length. [ 1194.943808][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9430'. [ 1194.987238][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9432'. [ 1195.851631][ T6377] net_ratelimit: 129 callbacks suppressed [ 1195.851655][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1195.894160][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1195.921878][ T6377] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1195.949622][T24268] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1195.969703][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1195.989592][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.009595][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.029609][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.049984][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.074636][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1196.895127][ T9048] netlink: 'syz.2.9430': attribute type 1 has an invalid length. [ 1196.915931][ T9048] netlink: 'syz.2.9430': attribute type 2 has an invalid length. [ 1197.117546][ T9064] syzkaller0: entered allmulticast mode [ 1197.333461][ T9076] IPv6: NLM_F_CREATE should be specified when creating new route [ 1197.567232][ T9096] vlan2: entered promiscuous mode [ 1197.572468][ T9096] bridge0: entered promiscuous mode [ 1197.590357][ T9096] netlink: 'syz.1.9448': attribute type 11 has an invalid length. [ 1197.598583][ T9096] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9448'. [ 1197.630247][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9448'. [ 1197.684346][ T9090] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1197.820383][ T9101] bond1: entered promiscuous mode [ 1197.927784][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1197.939356][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1197.948830][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1197.963495][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1197.976838][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1198.179874][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1198.193269][ T9115] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1198.205151][T25635] lec:lec_start_xmit: lec0:No lecd attached [ 1198.240874][ T9115] gretap0: entered promiscuous mode [ 1198.432714][ T9115] gretap0: left promiscuous mode [ 1198.542147][ T9131] netlink: 'syz.4.9457': attribute type 4 has an invalid length. [ 1198.573048][ T9132] lo: Caught tx_queue_len zero misconfig [ 1198.785498][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1198.823047][ T9142] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1198.877088][ T9147] netlink: 'syz.3.9464': attribute type 29 has an invalid length. [ 1198.927134][ T9155] netlink: 'syz.3.9464': attribute type 29 has an invalid length. [ 1198.954517][ T9147] netlink: 'syz.3.9464': attribute type 29 has an invalid length. [ 1198.991556][ T9147] netlink: 'syz.3.9464': attribute type 29 has an invalid length. [ 1199.018433][ T9147] netlink: 'syz.3.9464': attribute type 29 has an invalid length. [ 1199.046126][ T9147] netlink: 'syz.3.9464': attribute type 29 has an invalid length. [ 1199.088992][ T9147] netlink: 'syz.3.9464': attribute type 29 has an invalid length. [ 1199.175322][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 1199.324642][ T9180] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9471'. [ 1199.334346][ T9174] xt_l2tp: wrong L2TP version: 0 [ 1199.371272][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.378631][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.405161][ T9105] bridge_slave_0: entered allmulticast mode [ 1199.463643][ T9105] bridge_slave_0: entered promiscuous mode [ 1199.511392][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.518692][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.549294][ T9190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9475'. [ 1199.553754][ T9105] bridge_slave_1: entered allmulticast mode [ 1199.584748][ T9105] bridge_slave_1: entered promiscuous mode [ 1199.648930][ T9194] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001 [ 1199.661183][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.715512][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.794903][ T9202] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9478'. [ 1199.848375][ T9105] team0: Port device team_slave_0 added [ 1199.887803][ T9202] vlan3: entered allmulticast mode [ 1199.893199][ T9202] gretap0: entered allmulticast mode [ 1199.938588][ T9105] team0: Port device team_slave_1 added [ 1200.039838][T27394] Bluetooth: hci4: command tx timeout [ 1200.062574][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.073177][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.101997][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.116054][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.124872][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.169092][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.206798][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9482'. [ 1200.333659][ T9105] hsr_slave_0: entered promiscuous mode [ 1200.348420][ T9105] hsr_slave_1: entered promiscuous mode [ 1200.358604][ T9105] debugfs: 'hsr0' already exists in 'hsr' [ 1200.392218][ T9105] Cannot create hsr debugfs directory [ 1200.515302][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9487'. [ 1200.776165][ T9105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.790108][ T9105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.827297][ T9249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1200.859755][ T6390] net_ratelimit: 170 callbacks suppressed [ 1200.859776][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1200.892561][ T6390] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1200.926487][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1200.949843][ T6388] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1200.966946][ T9105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.978150][ T9105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.980112][ T6388] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.039979][ T6388] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1201.048118][ T6388] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.090881][ T9105] ================================================================== [ 1201.099006][ T9105] BUG: KASAN: slab-use-after-free in mini_qdisc_pair_swap+0x68/0x190 [ 1201.107117][ T9105] Read of size 8 at addr ffff88807a7ca000 by task syz-executor/9105 [ 1201.115107][ T9105] [ 1201.117455][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1201.117474][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1201.117486][ T9105] Call Trace: [ 1201.117506][ T9105] [ 1201.117513][ T9105] dump_stack_lvl+0xe8/0x150 [ 1201.117539][ T9105] print_report+0xba/0x230 [ 1201.117556][ T9105] ? mini_qdisc_pair_swap+0x68/0x190 [ 1201.117594][ T9105] kasan_report+0x117/0x150 [ 1201.117615][ T9105] ? mini_qdisc_pair_swap+0x68/0x190 [ 1201.117640][ T9105] mini_qdisc_pair_swap+0x68/0x190 [ 1201.117662][ T9105] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 1201.117682][ T9105] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 1201.117705][ T9105] tcf_block_put_ext+0x129/0x390 [ 1201.117726][ T9105] clsact_destroy+0x25e/0x820 [ 1201.117747][ T9105] ? __pfx_clsact_destroy+0x10/0x10 [ 1201.117766][ T9105] __qdisc_destroy+0x153/0x3f0 [ 1201.117786][ T9105] dev_shutdown+0x233/0x440 [ 1201.117808][ T9105] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1201.117834][ T9105] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1201.117857][ T9105] ? do_raw_spin_lock+0x12b/0x2f0 [ 1201.117880][ T9105] unregister_netdevice_queue+0x31f/0x360 [ 1201.117908][ T9105] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1201.117940][ T9105] nsim_destroy+0x1e5/0x680 [ 1201.117963][ T9105] __nsim_dev_port_del+0x14d/0x1b0 [ 1201.117988][ T9105] nsim_dev_reload_destroy+0x288/0x490 [ 1201.118013][ T9105] nsim_drv_remove+0x58/0x170 [ 1201.118034][ T9105] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1201.118053][ T9105] device_release_driver_internal+0x46f/0x860 [ 1201.118077][ T9105] bus_remove_device+0x34d/0x440 [ 1201.118104][ T9105] device_del+0x527/0x8f0 [ 1201.118120][ T9105] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1201.118141][ T9105] ? __pfx_device_del+0x10/0x10 [ 1201.118158][ T9105] ? sysfs_file_kobj+0x1a/0x230 [ 1201.118182][ T9105] device_unregister+0x21/0xf0 [ 1201.118200][ T9105] del_device_store+0x2b0/0x370 [ 1201.118220][ T9105] ? __pfx_del_device_store+0x10/0x10 [ 1201.118239][ T9105] ? sysfs_file_kobj+0x1e4/0x230 [ 1201.118261][ T9105] ? sysfs_kf_write+0x166/0x260 [ 1201.118285][ T9105] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1201.118307][ T9105] kernfs_fop_write_iter+0x3af/0x540 [ 1201.118330][ T9105] vfs_write+0x61d/0xb90 [ 1201.118360][ T9105] ? __pfx_vfs_write+0x10/0x10 [ 1201.118387][ T9105] ? kmem_cache_free+0x195/0x610 [ 1201.118404][ T9105] ? do_sys_openat2+0x168/0x220 [ 1201.118431][ T9105] ksys_write+0x150/0x270 [ 1201.118457][ T9105] ? __pfx_ksys_write+0x10/0x10 [ 1201.118487][ T9105] do_syscall_64+0xe2/0xf80 [ 1201.118512][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.118529][ T9105] ? trace_irq_disable+0x37/0x100 [ 1201.118546][ T9105] ? clear_bhb_loop+0x60/0xb0 [ 1201.118565][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.118583][ T9105] RIP: 0033:0x7f0305b5b84e [ 1201.118600][ T9105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1201.118616][ T9105] RSP: 002b:00007ffe943e9468 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1201.118634][ T9105] RAX: ffffffffffffffda RBX: 000055555a43f500 RCX: 00007f0305b5b84e [ 1201.118648][ T9105] RDX: 0000000000000001 RSI: 00007ffe943e94f0 RDI: 0000000000000005 [ 1201.118659][ T9105] RBP: 00007f0305c31fe6 R08: 0000000000000000 R09: 0000000000000000 [ 1201.118670][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.118681][ T9105] R13: 00007ffe943e94f0 R14: 00007f0306944620 R15: 0000000000000003 [ 1201.118702][ T9105] [ 1201.118708][ T9105] [ 1201.462787][ T9105] Allocated by task 9012: [ 1201.467134][ T9105] kasan_save_track+0x3e/0x80 [ 1201.471831][ T9105] __kasan_kmalloc+0x93/0xb0 [ 1201.476443][ T9105] __kmalloc_node_noprof+0x55d/0x7f0 [ 1201.481741][ T9105] qdisc_alloc+0x92/0x900 [ 1201.486090][ T9105] qdisc_create_dflt+0x8e/0x4c0 [ 1201.490961][ T9105] mq_init+0x2db/0x690 [ 1201.495047][ T9105] qdisc_create_dflt+0x13b/0x4c0 [ 1201.500001][ T9105] dev_activate+0x1ce/0x1150 [ 1201.504606][ T9105] __dev_open+0x67a/0x830 [ 1201.508952][ T9105] __dev_change_flags+0x1f7/0x690 [ 1201.514004][ T9105] netif_change_flags+0x88/0x1a0 [ 1201.518967][ T9105] dev_change_flags+0x130/0x260 [ 1201.523840][ T9105] dev_ioctl+0x7b4/0x1150 [ 1201.528193][ T9105] sock_do_ioctl+0x23e/0x320 [ 1201.532799][ T9105] sock_ioctl+0x5c6/0x7f0 [ 1201.537151][ T9105] __se_sys_ioctl+0xfc/0x170 [ 1201.541764][ T9105] do_syscall_64+0xe2/0xf80 [ 1201.546286][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.552195][ T9105] [ 1201.554530][ T9105] Freed by task 8999: [ 1201.558519][ T9105] kasan_save_track+0x3e/0x80 [ 1201.563212][ T9105] kasan_save_free_info+0x46/0x50 [ 1201.568264][ T9105] __kasan_slab_free+0x5c/0x80 [ 1201.573053][ T9105] kfree+0x1be/0x650 [ 1201.576978][ T9105] rcu_core+0xc9e/0x1750 [ 1201.581246][ T9105] handle_softirqs+0x22a/0x7c0 [ 1201.586027][ T9105] __irq_exit_rcu+0x5f/0x150 [ 1201.590641][ T9105] irq_exit_rcu+0x9/0x30 [ 1201.594895][ T9105] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1201.600550][ T9105] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1201.606572][ T9105] [ 1201.608908][ T9105] Last potentially related work creation: [ 1201.614636][ T9105] kasan_save_stack+0x3e/0x60 [ 1201.619333][ T9105] kasan_record_aux_stack+0xbd/0xd0 [ 1201.624561][ T9105] call_rcu+0xee/0x890 [ 1201.628657][ T9105] dev_shutdown+0x93/0x440 [ 1201.633099][ T9105] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1201.639529][ T9105] unregister_netdevice_queue+0x31f/0x360 [ 1201.645282][ T9105] __tun_detach+0x6d9/0x15d0 [ 1201.649919][ T9105] tun_chr_close+0x10a/0x1c0 [ 1201.654535][ T9105] __fput+0x44f/0xa70 [ 1201.658543][ T9105] task_work_run+0x1d9/0x270 [ 1201.663156][ T9105] exit_to_user_mode_loop+0xed/0x480 [ 1201.668466][ T9105] do_syscall_64+0x2b7/0xf80 [ 1201.673075][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.679001][ T9105] [ 1201.681343][ T9105] The buggy address belongs to the object at ffff88807a7ca000 [ 1201.681343][ T9105] which belongs to the cache kmalloc-2k of size 2048 [ 1201.695412][ T9105] The buggy address is located 0 bytes inside of [ 1201.695412][ T9105] freed 2048-byte region [ffff88807a7ca000, ffff88807a7ca800) [ 1201.709223][ T9105] [ 1201.711561][ T9105] The buggy address belongs to the physical page: [ 1201.717990][ T9105] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a7c8 [ 1201.726782][ T9105] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1201.735324][ T9105] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1201.742888][ T9105] page_type: f5(slab) [ 1201.746889][ T9105] raw: 00fff00000000040 ffff88813fe27000 ffffea0000adc600 dead000000000002 [ 1201.755490][ T9105] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1201.764092][ T9105] head: 00fff00000000040 ffff88813fe27000 ffffea0000adc600 dead000000000002 [ 1201.772780][ T9105] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1201.781567][ T9105] head: 00fff00000000003 ffffea0001e9f201 00000000ffffffff 00000000ffffffff [ 1201.790258][ T9105] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1201.798940][ T9105] page dumped because: kasan: bad access detected [ 1201.805377][ T9105] page_owner tracks the page as allocated [ 1201.811125][ T9105] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 97362213242, free_ts 97311335314 [ 1201.831554][ T9105] post_alloc_hook+0x228/0x280 [ 1201.836350][ T9105] get_page_from_freelist+0x24dc/0x2580 [ 1201.841912][ T9105] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1201.847847][ T9105] alloc_pages_mpol+0x232/0x4a0 [ 1201.852723][ T9105] allocate_slab+0x86/0x3a0 [ 1201.857247][ T9105] ___slab_alloc+0xd82/0x1760 [ 1201.861941][ T9105] __slab_alloc+0x65/0x100 [ 1201.866385][ T9105] __kmalloc_node_track_caller_noprof+0x5b7/0x7f0 [ 1201.872819][ T9105] kmalloc_reserve+0x136/0x290 [ 1201.877612][ T9105] __alloc_skb+0x204/0x390 [ 1201.882069][ T9105] inet6_ifinfo_notify+0x70/0x120 [ 1201.887116][ T9105] addrconf_notify+0xca0/0x1050 [ 1201.891991][ T9105] notifier_call_chain+0x19d/0x3a0 [ 1201.897125][ T9105] netif_state_change+0x27d/0x3a0 [ 1201.902188][ T9105] __linkwatch_run_queue+0x572/0x840 [ 1201.907509][ T9105] linkwatch_event+0x4c/0x60 [ 1201.912126][ T9105] page last free pid 5825 tgid 5825 stack trace: [ 1201.918465][ T9105] __free_frozen_pages+0xbf8/0xd70 [ 1201.923600][ T9105] __put_partials+0x146/0x170 [ 1201.928305][ T9105] __slab_free+0x294/0x320 [ 1201.932745][ T9105] qlist_free_all+0x97/0x100 [ 1201.937359][ T9105] kasan_quarantine_reduce+0x148/0x160 [ 1201.942840][ T9105] __kasan_slab_alloc+0x22/0x80 [ 1201.947707][ T9105] __kmalloc_cache_noprof+0x36f/0x6e0 [ 1201.953107][ T9105] nsim_fib_event+0xf3c/0xa410 [ 1201.957895][ T9105] nsim_fib_event_work+0x254/0x3d0 [ 1201.963029][ T9105] process_scheduled_works+0xaec/0x17a0 [ 1201.968617][ T9105] worker_thread+0xda6/0x1360 [ 1201.973346][ T9105] kthread+0x726/0x8b0 [ 1201.977439][ T9105] ret_from_fork+0x51b/0xa40 [ 1201.982225][ T9105] ret_from_fork_asm+0x1a/0x30 [ 1201.987026][ T9105] [ 1201.989388][ T9105] Memory state around the buggy address: [ 1201.995038][ T9105] ffff88807a7c9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1202.003126][ T9105] ffff88807a7c9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1202.011202][ T9105] >ffff88807a7ca000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1202.019297][ T9105] ^ [ 1202.023378][ T9105] ffff88807a7ca080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1202.031469][ T9105] ffff88807a7ca100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1202.039558][ T9105] ================================================================== [ 1202.066196][T24271] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1202.092602][ T9105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1202.099878][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1202.109377][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1202.119474][ T9105] Call Trace: [ 1202.122790][ T9105] [ 1202.125766][ T9105] vpanic+0x1e0/0x670 [ 1202.129798][ T9105] panic+0xc5/0xd0 [ 1202.133558][ T9105] ? __pfx_panic+0x10/0x10 [ 1202.138023][ T9105] ? preempt_schedule_thunk+0x16/0x30 [ 1202.143450][ T9105] ? preempt_schedule_thunk+0x16/0x30 [ 1202.148874][ T9105] ? mini_qdisc_pair_swap+0x68/0x190 [ 1202.154203][ T9105] check_panic_on_warn+0x89/0xb0 [ 1202.159188][ T9105] ? mini_qdisc_pair_swap+0x68/0x190 [ 1202.164516][ T9105] end_report+0x6f/0x140 [ 1202.168813][ T9105] kasan_report+0x128/0x150 [ 1202.173361][ T9105] ? mini_qdisc_pair_swap+0x68/0x190 [ 1202.178697][ T9105] mini_qdisc_pair_swap+0x68/0x190 [ 1202.183857][ T9105] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 1202.189973][ T9105] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 1202.196003][ T9105] tcf_block_put_ext+0x129/0x390 [ 1202.200990][ T9105] clsact_destroy+0x25e/0x820 [ 1202.205714][ T9105] ? __pfx_clsact_destroy+0x10/0x10 [ 1202.210951][ T9105] __qdisc_destroy+0x153/0x3f0 [ 1202.215758][ T9105] dev_shutdown+0x233/0x440 [ 1202.220407][ T9105] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1202.226879][ T9105] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1202.233685][ T9105] ? do_raw_spin_lock+0x12b/0x2f0 [ 1202.238760][ T9105] unregister_netdevice_queue+0x31f/0x360 [ 1202.244544][ T9105] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1202.250861][ T9105] nsim_destroy+0x1e5/0x680 [ 1202.255491][ T9105] __nsim_dev_port_del+0x14d/0x1b0 [ 1202.260678][ T9105] nsim_dev_reload_destroy+0x288/0x490 [ 1202.266189][ T9105] nsim_drv_remove+0x58/0x170 [ 1202.270923][ T9105] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1202.276259][ T9105] device_release_driver_internal+0x46f/0x860 [ 1202.282375][ T9105] bus_remove_device+0x34d/0x440 [ 1202.287360][ T9105] device_del+0x527/0x8f0 [ 1202.291728][ T9105] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1202.297620][ T9105] ? __pfx_device_del+0x10/0x10 [ 1202.302520][ T9105] ? sysfs_file_kobj+0x1a/0x230 [ 1202.307420][ T9105] device_unregister+0x21/0xf0 [ 1202.312217][ T9105] del_device_store+0x2b0/0x370 [ 1202.317110][ T9105] ? __pfx_del_device_store+0x10/0x10 [ 1202.322519][ T9105] ? sysfs_file_kobj+0x1e4/0x230 [ 1202.327508][ T9105] ? sysfs_kf_write+0x166/0x260 [ 1202.332413][ T9105] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1202.337749][ T9105] kernfs_fop_write_iter+0x3af/0x540 [ 1202.343086][ T9105] vfs_write+0x61d/0xb90 [ 1202.347563][ T9105] ? __pfx_vfs_write+0x10/0x10 [ 1202.352388][ T9105] ? kmem_cache_free+0x195/0x610 [ 1202.357368][ T9105] ? do_sys_openat2+0x168/0x220 [ 1202.362270][ T9105] ksys_write+0x150/0x270 [ 1202.366657][ T9105] ? __pfx_ksys_write+0x10/0x10 [ 1202.371575][ T9105] do_syscall_64+0xe2/0xf80 [ 1202.376116][ T9105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.382227][ T9105] ? trace_irq_disable+0x37/0x100 [ 1202.387323][ T9105] ? clear_bhb_loop+0x60/0xb0 [ 1202.392166][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.398095][ T9105] RIP: 0033:0x7f0305b5b84e [ 1202.402548][ T9105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1202.422196][ T9105] RSP: 002b:00007ffe943e9468 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1202.430672][ T9105] RAX: ffffffffffffffda RBX: 000055555a43f500 RCX: 00007f0305b5b84e [ 1202.438695][ T9105] RDX: 0000000000000001 RSI: 00007ffe943e94f0 RDI: 0000000000000005 [ 1202.446724][ T9105] RBP: 00007f0305c31fe6 R08: 0000000000000000 R09: 0000000000000000 [ 1202.454738][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.462746][ T9105] R13: 00007ffe943e94f0 R14: 00007f0306944620 R15: 0000000000000003 [ 1202.470769][ T9105] [ 1202.474438][ T9105] Kernel Offset: disabled [ 1202.478783][ T9105] Rebooting in 86400 seconds..