last executing test programs: 3m28.347553262s ago: executing program 2 (id=1034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={0x0, 0xb}, &(0x7f0000000580)=0x8) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xfa, "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"}, &(0x7f0000000140)=0x102) (async) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {0x20000, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x2, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a0806000000020000000000230048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb00000000000000599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c50500721fc7aa2a583726c64c0fb6ca996d278fb00bba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee93f9959e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f54d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8989d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501ae03002af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a86ad4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909eb08cca312c557bff04cf1fbb0dcfe8ac00"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x7d, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000440)={r2, 0xd209}, &(0x7f0000000480)=0x8) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000005c0)=0x100, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="affa37bc", @ANYRES16=r9, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffff7f00000108000a0000000000060002000100000014001f000000000000000000000000000000000008000c0000000000"], 0x64}, 0x1, 0x620b}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x99}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x82}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x4000) 3m28.139542568s ago: executing program 2 (id=1037): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8917, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) close(0xffffffffffffffff) 3m28.006630346s ago: executing program 2 (id=1040): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, r3, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd}, {0xffff, 0xfff2}, {0xffe0}}}, 0x24}}, 0x20048003) socket$nl_xfrm(0x10, 0x3, 0x6) 3m27.817130997s ago: executing program 2 (id=1045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x4, 0x3}, 0x9c) 3m27.674900326s ago: executing program 2 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) syz_emit_ethernet(0x1e, &(0x7f0000000180)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x7, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0xab, 0x0, "0f", "16c1f3", 0x806}}}}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f0000"], 0x40}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x38, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24040884) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x80, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) 3m27.399490971s ago: executing program 2 (id=1050): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@deltclass={0x70, 0x29, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xfff3, 0xfff1}, {0xfff3, 0x9}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x63, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x44, 0xdf}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x10}}]}, 0x70}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="4000000000002000000000000000000000000000569e67c2372a5e5fc1e42aad21335717d5f4526313fd91e22f5481ae646dbeae50c5e647725e24aa57e99200c0ffbb0bed5f8ac9969fb86a1c5547ecc0e80cc1e6d60d66ac61f028681038d51fae90be2f3728d8998fb663da06c8bad20812f288a4680fa202af7b949d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r9}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r12) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'dummy0\x00'}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000001812000000000000000000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0900000000bd2e40b82a83", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000300"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 3m27.08422183s ago: executing program 32 (id=1050): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@deltclass={0x70, 0x29, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xfff3, 0xfff1}, {0xfff3, 0x9}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x63, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0x44, 0xdf}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x10}}]}, 0x70}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x2, 0x10}, 0xc) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="4000000000002000000000000000000000000000569e67c2372a5e5fc1e42aad21335717d5f4526313fd91e22f5481ae646dbeae50c5e647725e24aa57e99200c0ffbb0bed5f8ac9969fb86a1c5547ecc0e80cc1e6d60d66ac61f028681038d51fae90be2f3728d8998fb663da06c8bad20812f288a4680fa202af7b949d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r9}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r12) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'dummy0\x00'}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000001812000000000000000000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0900000000bd2e40b82a83", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000300"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 2.288109971s ago: executing program 0 (id=3303): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8", 0x17}], 0x1}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x2, 0x2001, 0x0) 2.228332101s ago: executing program 0 (id=3305): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8000, 0x58, 0x4, 0xfffffff7, {{0x17, 0x4, 0x1, 0x6, 0x5c, 0x65, 0x0, 0xe1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0x35}, {[@rr={0x7, 0x17, 0xb4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x42}]}, @timestamp={0x44, 0x18, 0x1c, 0x0, 0x0, [0x0, 0x7, 0x7, 0x5d2, 0xfffffffc]}, @lsrr={0x83, 0x7, 0x22, [@multicast2]}, @rr={0x7, 0xf, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x2) 2.104521446s ago: executing program 0 (id=3306): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r4, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) 1.915323674s ago: executing program 0 (id=3309): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty=0x3000000}, 0x10, 0x0}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xc8, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x104}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.311889174s ago: executing program 1 (id=3320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000000900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237720ff520100000000000000699c74e891a0c708000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x2}, 0x10}, 0x94) 1.158874079s ago: executing program 1 (id=3325): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304}, "7beff6274d60f640", "c940665e4dec8e2beba56b482d51938c", "365f67b4", "5d360f4c0049b665"}, 0x28) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xccf151da83be1610}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x1b8, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x1b8}}, 0x0) close(r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)=@mpls_delroute={0x1e4, 0x19, 0x400, 0x70bd2d, 0x25dfdbff, {0x1c, 0x10, 0x14, 0x6f, 0xff, 0x4, 0xfd, 0x6, 0x2000}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x8}, @RTA_NEWDST={0x84, 0x13, [{0x5}, {0x7, 0x0, 0x1}, {0x7f}, {0x1}, {0xfeea, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x3}, {}, {0x7, 0x0, 0x1}, {0x8}, {0xf, 0x0, 0x1}, {0xb8800}, {0x200, 0x0, 0x1}, {}, {0x5}, {0x319, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xff}, {0x1}, {0x1714}, {0x8}, {0x5f4f, 0x0, 0x1}, {0x1cd, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x2}, {0x7}, {0x4, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x1d, "99312d8b323ca07f5726f2ac62f3"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x5}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x6}, @RTA_NEWDST={0x84, 0x13, [{0xe5}, {0x3, 0x0, 0x1}, {0x25, 0x0, 0x1}, {0xe}, {0x7}, {0x0, 0x0, 0x1}, {0x9}, {0xae39}, {0x8}, {0x8, 0x0, 0x1}, {}, {}, {0xffffd, 0x0, 0x1}, {}, {0x3b8, 0x0, 0x1}, {0xa1e}, {0x1}, {0x5}, {0x0, 0x0, 0x1}, {0x6bbad}, {0x2}, {0x800}, {0x2}, {0x8001}, {0x962d5, 0x0, 0x1}, {0x45, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x81}, {0x3ff, 0x0, 0x1}, {0x29, 0x0, 0x1}, {0x6}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_NEWDST={0x84, 0x13, [{0x6, 0x0, 0x1}, {0x3}, {0x80, 0x0, 0x1}, {0x800}, {0xffe00, 0x0, 0x1}, {0x9}, {}, {0xfff}, {0x6, 0x0, 0x1}, {0x8}, {0x39}, {0x5, 0x0, 0x1}, {0x5}, {0x5}, {0x8, 0x0, 0x1}, {0x2}, {0x2}, {0x7, 0x0, 0x1}, {0x3}, {0x100}, {0x8d4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3ff}, {0x8000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xa037, 0x0, 0x1}, {0x7f6}, {0x4}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0x1, 0x0, 0x1}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x9}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000040)=0x4000000e, 0x4) r12 = socket$netlink(0x10, 0x3, 0xe) write(r12, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r12) 1.099199834s ago: executing program 3 (id=3326): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf256c00000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x48014}, 0x40800) accept(r1, &(0x7f0000000380)=@ax25={{0x3, @null}, [@bcast, @default, @remote, @netrom, @null, @null, @rose, @netrom]}, &(0x7f0000000400)=0x80) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {0xc, 0xf}, {0xffe0, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2}}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e044", 0x2}], 0x1}}], 0x1, 0x2000c0c0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf256c00000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x48014}, 0x40800) (async) accept(r1, &(0x7f0000000380)=@ax25={{0x3, @null}, [@bcast, @default, @remote, @netrom, @null, @null, @rose, @netrom]}, &(0x7f0000000400)=0x80) (async) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {0xc, 0xf}, {0xffe0, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2}}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x41) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) (async) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e044", 0x2}], 0x1}}], 0x1, 0x2000c0c0) (async) 972.133054ms ago: executing program 0 (id=3329): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0xfffffcb9) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(r2, 0x802) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) 923.243144ms ago: executing program 3 (id=3330): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xf, 0x6f, &(0x7f0000000000)="64d8c83e5d86ad62362845c2667552", &(0x7f0000000040)=""/111, 0x1, 0x0, 0xb8, 0xac, &(0x7f00000000c0)="b5b57d5ab5030100b2a993b35131b7b8db99a1638215ca386f14848917eaddd3a6a0462fbeb9e3ae0e7ee08bda805910d9d12dca055881053d5b4413101af8a8ff53a3ed2218d55d5025f948fcb40055e9a89d96c13f944e12af346e6b99c85f1c1ace3acf5a007c687219efdea1cb49c72628ac43126988fc90efc03b954cd81d471048af4cc436b00cc360fe64bfaa6ce1fe170e3d86ee76f122cee5092706933f4db3da078d424a8cbd7eb9a8883f140df73a90fcd3d7", &(0x7f0000000180)="4c6c44b09a3ca5e0f72d9aeae6d346a0a6e2dddd6086172bd9793b460f6310cb93ab9c3061d80b46daef688c7661521bd9698e4ee24f6b5a8568360974d2fff62950a7bd90ecb1e4875daa26af5bb8240a3bc527134ff3f907c4cd0f56251998b639ee13165a23fb85850e90f033ce8a43dd793ccd0b719b5ab3020c1686af679c0ce77fa6e54b60859cfbb2589a41670de1745464c04e08d508685e921c9f744dda5dbc505ecc0025481dd3", 0x0, 0x0, 0x6ea8a283}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f00000002c0)="78339f613e3b0d6d17257a0a6afd2cc058841af425c96e99f63bf042c758cb97598467abb0d5d1cc807963982c4325084b5d3c04891ef3ad20b6b8c961c1a2fe88e42464718657eb6ea3453044585e85d774b29b8beffd1ba813a6a1cf5b1c1cd72e12c67379ad18ace4a088a18cc3e2dcf1295fa853a8c4e0317076bcce32a480fbe7a9264e123517bf1c03303554ea41e69671ba23cddc92e220ddc63d58f3c893d4d0c6fe5a499d3f1d988d73ef78b534e9670b7ca8e57554499656b9f2c5fa957ad7de6e4b1c8ebe6482c267e4dfc40ced496e1da8eba8b1d6d8e96d213ba56b0f3ade2d0a193da8bdd80969103baf53c57e921698eaff2f", &(0x7f00000003c0)=""/19, &(0x7f0000000400)="bdb8b4c29960b4b9997b7152e21486a0da040e1fbb4e15df9ae22ad28c703b88056c9434eccec9c13ce35d091825a8f091a2801cac06bf7a6a163ba22d7a55d43cbac9d5cde93a0e7b5a8513c9de2a141878c3c52fba4e7e131ae65899cc54ef7498b048e8630c452bf1c3f266050b29df372c76861ee58e16c4f3dd0e8f03b505abd73286afe6e811930b7803fe19be62feb5903265631f2c524f18d608f559978d53da22556072bc8a", &(0x7f00000004c0)="ac119f946e76b1ae2685717577b958df9dd6ff4449df86986c54b32c4f43b123cc1b44e1d3fe0926c0bdb77714279b8c3739e4d5ee5d9407ff0a59cf2f0e80ff98c8da60b0a7d461f27cfd12446c8be85f8f2ad3658db491a971bce684b592cb0489113401952eff676b2654f32e735ff99b36077710f69f61346040207f2684e40a7def124e0989508e17c911ebc667aa414865de7dded8fd648b7b8f5f5876c3b38471147656e3e53b86c1145aeb8bebd8a348b7d901003c2866a38d255055c68cad738f8cd512", 0x7, 0x1, 0x4}, 0x38) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000640)='cgroup.events\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000006c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r2, 0x110, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000840)=0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000dc0)={&(0x7f0000000880)={0x27, r4, 0x0, 0x3, 0xa, 0x1, "43f5c17f13474ddd1116f96893a620afe8fe4c2c369369cbbf87eaf53078e6f09c2b5d0ff571e763bbffca73afb96d713d26d710b6989fd40232673cff128b", 0x1e}, 0x60, &(0x7f0000000c40)=[{&(0x7f0000000900)="904e921907c378a3db1839e6de254cb0f4232f072e6490e30bd3557c441b8b9a7608d40adc167d498b88d86124dd264b64ba1519664b92e1660865eca9ca1b60c52402657d921141d5659cfa4a5592e5210fa820fa1dbc0710ea54f649f40deae857845fc8a02f37c02a43c9f015c9fe9914d39bf659b08bbb582328c7abee60c639b9091e46836e184798264cabd681d0f720ffe3e62e93582db191f688bc97d5d71c8e3e44660485eeba3654e03fd86803ab57a5b8ff345b02fa0f0d550229", 0xc0}, {&(0x7f00000009c0)="4fa189c87e1ea11c0d2096f8005b8080608fd3ae1eb2917c102c12d355bfa3b95629dfefb8662dcde77091967738caa173d355d77722bff4c830a5c7369b48932ab84d75f784755ce3c8f4e596cb0d3ea467114dc831f2e14bd2a58df6f13c890d850c3d8d47964ee5db9d924e4efb7ae98032fa6385114aecbb0f6812230702ccf3674ccf09ccabf311f91fe1ed729891f153a5683ed8e6b82ed5a0c58287bdf004d76a15f276f3cd5469154082", 0xae}, {&(0x7f0000000a80)="0f28f1aa94c6c80d265d4e6efb3bb759fe1c703add8c1b95aa5b1c24ee93070332fc10a3de20cefa522bc1bc4ab9c4c734cd108ad18a83c790506d5e1688c88a37c61da736bbd357fc54609549044374d5cb10372b317a8d266626e34b8ff31aafb9419d5abade0c1af555508decedb5e0fca66a5acdcfacee2611aa2e05027723c11029474d3efc037bdd5441bc70514c47f223fb1ca4ad3e22800b0efb8b88eb3761bd44618772dc30888bb67bf63df19347e132fdb26935c7d506dce2d8b56a9501ae74aa", 0xc6}, {&(0x7f0000000b80)="4f4c4bbcc038a0c191e9920359137c54f80f7a9ed6af59a389b661ebcc157a53c3bab0307f8ba0556af6808078bfc4de7a8694e8b18feb5494ba75e848f237e9df038b49564247dc8d727d336c28ecea4da9b32811551da590fed6434279c45fc6bbe149f0f88596443ee5097b1a1850e510e3cbf3d9bee5f1d421742681ccbc9d3b55b69be7902a66feddd17984c36cc553faa91c9f39ce8556cb904e59413915c6ed1d04981160332759e4f2e02a", 0xaf}], 0x4, &(0x7f0000000c80)={0x110, 0x119, 0x2, "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"}, 0x110, 0x200400c0}, 0x5) socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e80)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r5, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, r6, 0x3c, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=@newchain={0x30, 0x64, 0x4, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xe}, {0xffea}, {0xffff, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004080) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, &(0x7f00000010c0), 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={&(0x7f0000001100)="365af9f07bcb9e548736260a07c36240dbd148dc3abcb638f3f6133406480176d51be493acbc84f7621cd83e206323e4a5dc4845cb599a5d6fbbec73e71bc80bb6902fa2d12b9a52762b938597d8c3a8fded474cd2337987f8308fb80e1f7e34ed5505040e6ccb9552d2253d587459e28be4ea5494e214762228c058b183c3599729873ed4020c8f5cb9f1ac5c2cc172018a64276484dbbcc914d0b6deba2ec2f9c601999662ab183b64767cde1e616a0f85", &(0x7f00000011c0)=""/78, &(0x7f0000001240)="975b9dfc81d082788b6ee131882b702e6c3dbed9de7e12a0949867a48747a7041427e8f04dbe9f28d5617be3dc693564753ebdea141f2fb099e27f6af9f3a216878c", &(0x7f00000012c0)="945baf2f4c8d583d7dd24e77b6827da7c1d1c6495a82d0ea621fef64c0749493a52188ffaccb3698bc73c045bb396d300cd6b5c170c7f2ef7061088d173617d45f20bdede663f8c41e42566097b190d34ebdef485cdfe98e6f337117128a4d12a6cf88bafea1f362592cfdec1e565bb1675ff08348ff2c2fb8650b2cfe31aa1b769521cd9da44e56e8467e6b74cbba058d8f905739930bc0a63e5fda31735b35aba5f04b296ae6ffb85498e9bf9285c8a12fb2553ec075d20a", 0x0, r1}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x10000, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000001400)={0x6}) accept4$nfc_llcp(r1, &(0x7f0000001440), 0xfffffffffffffffd, 0xc00) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001500), r5) sendmsg$NLBL_MGMT_C_REMOVE(r9, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x84, r10, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '/dev/net/tun\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffe}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'bpf\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x1007) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000001680)) syz_emit_ethernet(0x8f, &(0x7f00000016c0)={@multicast, @random="d4321b5c2bce", @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x3, 0x80, 0x27, "26c4db0b81ab51db87ed856c90b5b7fae3053b775c02121bbe8ef9da22f421466ee34daf34816f8a9e02af1b85f30e58289b59368e06724f4300f4c744672147f5602b876a2d6ac298a75eeb822929160a788e5c206f3c3b787d83de6430bcd8931b0a3b4b4fcc1337bdd51d297b1cd1b03731fee65725397397"}}}}, &(0x7f0000001780)={0x0, 0x1, [0x650, 0x604, 0x896, 0x4ad]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001800), r8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r13, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) 851.673631ms ago: executing program 4 (id=3331): r0 = socket(0x9, 0xa, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0x8004b706, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "024000dc00"}}}]}, 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r8, 0xffff0000, 0x10, 0x0, &(0x7f0000000980)="2b206d3c9d84609e73fb074824b354de", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x18) (async) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r10) sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r11, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r12) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xee4a}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7f}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xe}]}, 0x2c}}, 0x40) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r13, 0x325, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010001}, 0x8000) sendmsg$IEEE802154_ASSOCIATE_RESP(r10, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r13, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) (async) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r7, 0x1, 0x70bd30, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0x4}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "d7"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) 784.570488ms ago: executing program 1 (id=3332): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket(0x21, 0x5, 0xbb) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xa2, "7b43b2de5b5ecfbf9cf16bda7ca7a295daf905b991dcbc1d13d7470eb6f1542dd29502a4bd08a3a693bf49a8836131afd5b4c9971ff4ce6e837f6ac8d49fb46d40947a8bba7921da8bde1fcc83c49ca2f3b269e227e537c63ee36892adb44a16dd07e917014827ecb7a1c97cb7ec89e1762be306da431e412141d15077396e9c2a3f3bbf64f8f157f161f2ff4c673dd0394cc20e16f778c1d039546508a9440809f9"}, &(0x7f00000000c0)=0xaa) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x10008, 0x3, 0x6, r2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) 769.590597ms ago: executing program 3 (id=3333): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 707.792436ms ago: executing program 5 (id=3334): r0 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d1b561a8cfbde6da002577f2287623e3bec4ae436da1382325a2b518d89563273bc4e6c575ee4249fde0b3f90d81ece4e05af440eb258835f4520fb82b236a767c82e73b35a42748ddedddbdb8964e18f33914af49c3ee28fd96d92e69115fccb77f83e9e053addfd5feb45becfdf0824cea078184852f1c"], 0x48) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0), 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0xffffffffffffc000) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x9, 0x4) 677.646887ms ago: executing program 1 (id=3335): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 660.576111ms ago: executing program 4 (id=3336): bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x22, 0x2, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000410007010000000007000000017c00000400fc809400018006000600800a00008500908008"], 0xac}}, 0x4010) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) epoll_create1(0x80000) 626.388084ms ago: executing program 5 (id=3337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) r1 = socket(0x28, 0x1, 0x0) connect$packet(r1, &(0x7f0000000500)={0x28}, 0x14) connect$packet(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) connect$packet(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 535.775071ms ago: executing program 3 (id=3338): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d100d6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b35a20af1752f3f2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000e83e1300000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450fc21d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f7b5bf21ecd12357309e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a4de84ff1907140070000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba9b49254d8192124c20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f94791369df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c717ed53db529a811662841b1dc43291e450ce9b8d7d80fcb44966d7ad4691a3787000000000000000000000000000000000000000000001cadd5e4558166315878c65b6b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x16318}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xe9, 0x3}}]}]}}}]}, 0x44}}, 0x8004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 535.225565ms ago: executing program 1 (id=3339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4a9159ba}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7a576142a49c96b3}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r10}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 523.982296ms ago: executing program 4 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20040188}, 0x4004000) 494.483065ms ago: executing program 5 (id=3341): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7}, 0x4040815) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x48881) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x2c, r4, 0x201, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}]}, 0x2c}}, 0x24040800) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffe1e, &(0x7f0000000200)={&(0x7f0000000180)={0xfffffffffffffe9c, r0, 0x917, 0xfffffffe, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r7}, @L2TP_ATTR_RECV_SEQ={0x0, 0x12, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x44000004) 351.915964ms ago: executing program 4 (id=3342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffb}}}, 0xb8}}, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000040)={0x5, 0x5, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x48010) close(r5) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8650000ff0f000000000000feffffffe0000002000000000000000000000000e1ffffff00000000000000000000000000000000000000000a00102000000000daad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000001000000000000000000000000000000000000000000000900000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000"], 0xb8}}, 0x0) 351.801078ms ago: executing program 5 (id=3343): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x100000000) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x100000000) 349.92665ms ago: executing program 3 (id=3344): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6a0d41fd8"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 260.876374ms ago: executing program 1 (id=3345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0xce, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x14) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x60, r1, 0x1, 0x70bd2b, 0x4000000, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x60}}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r7) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r10}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}]}, 0x24}}, 0x64000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r13 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r13], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="0100fdffffff020000001d00000008000300", @ANYRES32=r16, @ANYBLOB="24002f800c000200"], 0x40}, 0x1, 0x0, 0x0, 0x4000485}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x110, r12, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x110}, 0x1, 0x0, 0x0, 0x20040141}, 0x10) 208.166968ms ago: executing program 5 (id=3346): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="078201000400000010001280080001006772650004000280"], 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="078201000400000010001280080001006772650004000280"], 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) (async) 136.003822ms ago: executing program 4 (id=3347): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private0}}}]}]}, 0x50}}, 0x0) 135.750504ms ago: executing program 5 (id=3348): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) socket$unix(0x1, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="73482ed6", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 125.775471ms ago: executing program 3 (id=3349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x8, 0x4, 0x0, 0x1, [@generic="af270f29"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000050d3f50a8129d7acfaabd2f21baee81b7d", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250600000014001f00fe8000000000000000000000000000aa05002100000000000c0016009e0b0000000000000c001600070000000000000006001d00000000000600030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) 85.185405ms ago: executing program 4 (id=3350): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='afs_get_tree\x00', r0}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x201, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) close(r0) (async) socket(0x28, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, 0x0, 0x81) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='afs_get_tree\x00', r0}, 0x18) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r3, 0x201, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) (async) pipe(&(0x7f0000000040)) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) (async) 0s ago: executing program 0 (id=3351): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x30}}, 0x8c04) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x60d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x30}}, 0x8c04) (async) kernel console output (not intermixed with test programs): entered allmulticast mode [ 233.603171][T10677] netlink: 'syz.4.1292': attribute type 10 has an invalid length. [ 234.336310][T10716] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 234.774914][T10745] __nla_validate_parse: 16 callbacks suppressed [ 234.774933][T10745] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1312'. [ 234.970287][T10754] lo: entered promiscuous mode [ 234.983426][T10755] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.1317'. [ 235.037334][T10754] tunl0: entered promiscuous mode [ 235.088920][T10760] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1318'. [ 235.094744][T10754] gre0: entered promiscuous mode [ 235.131920][T10761] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1318'. [ 235.165854][T10754] gretap0: entered promiscuous mode [ 235.198401][T10754] erspan0: entered promiscuous mode [ 235.231728][T10754] ip_vti0: entered promiscuous mode [ 235.328097][T10762] syzkaller1: entered promiscuous mode [ 235.345401][T10762] syzkaller1: entered allmulticast mode [ 235.679829][T10788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1326'. [ 235.974383][T10799] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1330'. [ 236.008416][T10799] netlink: 'syz.1.1330': attribute type 4 has an invalid length. [ 236.025372][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1329'. [ 236.060880][T10799] netlink: 'syz.1.1330': attribute type 4 has an invalid length. [ 236.266530][T10804] tipc: Enabling of bearer rejected, failed to enable media [ 236.385917][T10815] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 236.421088][T10813] pim6reg1: entered promiscuous mode [ 236.428215][T10813] pim6reg1: entered allmulticast mode [ 236.660497][T10820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1337'. [ 236.712232][T10824] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1338'. [ 236.905425][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 237.682088][T10882] vlan2: entered allmulticast mode [ 237.692365][T10882] gretap0: entered allmulticast mode [ 237.819554][T10879] wg1 speed is unknown, defaulting to 1000 [ 238.700691][T10940] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20003 [ 238.956104][T10951] C: renamed from lo [ 238.964862][T10947] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 238.997154][T10951] netlink: 'syz.0.1372': attribute type 39 has an invalid length. [ 239.438939][T10965] wg2: entered promiscuous mode [ 239.450507][T10965] wg2: entered allmulticast mode [ 239.489212][T10971] tipc: Started in network mode [ 239.519549][T10971] tipc: Node identity e0000002, cluster identity 4711 [ 239.532432][T10971] tipc: Enabling of bearer rejected, failed to enable media [ 239.642118][T10978] tipc: Enabled bearer , priority 0 [ 239.676315][T10981] sctp: [Deprecated]: syz.1.1381 (pid 10981) Use of int in max_burst socket option. [ 239.676315][T10981] Use struct sctp_assoc_value instead [ 239.693737][T10974] bridge_slave_0: default FDB implementation only supports local addresses [ 239.724038][T10982] syzkaller0: entered promiscuous mode [ 239.764433][T10982] syzkaller0: entered allmulticast mode [ 239.862957][T10978] tipc: Resetting bearer [ 239.899069][T10991] __nla_validate_parse: 8 callbacks suppressed [ 239.899085][T10991] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1383'. [ 239.931249][T10982] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20003 [ 240.315930][T10977] tipc: Resetting bearer [ 240.411405][T10977] tipc: Disabling bearer [ 240.422197][T11022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1389'. [ 240.433025][T11002] tipc: Enabled bearer , priority 0 [ 240.510533][T11006] tipc: Enabling of bearer rejected, already enabled [ 240.661862][T11006] tipc: Disabling bearer [ 240.927124][T11050] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1400'. [ 241.471488][T11065] syzkaller0: entered promiscuous mode [ 241.483348][T11065] syzkaller0: entered allmulticast mode [ 241.678556][T11095] netlink: 'syz.5.1410': attribute type 1 has an invalid length. [ 241.704844][T11095] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1410'. [ 243.051648][T11097] netlink: 'syz.1.1412': attribute type 30 has an invalid length. [ 243.334533][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 243.354294][T11115] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 243.576310][T11115] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 243.611030][T11115] gretap3: entered promiscuous mode [ 243.632676][T11115] gretap3: entered allmulticast mode [ 243.704390][T11126] tc_dump_action: action bad kind [ 243.741512][T11133] syz_tun: entered allmulticast mode [ 243.750647][T11119] syz_tun: left allmulticast mode [ 244.082029][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 244.266307][T11169] batadv_slave_0: entered promiscuous mode [ 244.354838][T11175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.423611][T11176] ve: renamed from ipvlan1 [ 244.669609][T11190] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 244.841612][T11199] netlink: 'syz.5.1441': attribute type 1 has an invalid length. [ 245.006103][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1441'. [ 245.012293][T11199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.160052][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 245.180295][T11203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.194299][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 245.220899][T11203] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 245.288741][T11203] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 245.379478][T11212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.487439][T11216] delete_channel: no stack [ 245.510352][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1446'. [ 245.886461][T11260] sctp: [Deprecated]: syz.0.1450 (pid 11260) Use of int in maxseg socket option. [ 245.886461][T11260] Use struct sctp_assoc_value instead [ 245.918006][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 245.965345][T11253] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 246.019136][T11253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.106942][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 246.124057][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1453'. [ 246.172665][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1453'. [ 246.254482][T11275] netlink: 'syz.1.1455': attribute type 4 has an invalid length. [ 246.268237][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1455'. [ 246.291929][T11276] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 247.103590][T11315] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 247.827635][T11351] IPv6: sit2: Disabled Multicast RS [ 247.833944][T11351] sit2: entered allmulticast mode [ 247.961004][T11360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1477'. [ 249.269448][T11432] openvswitch: netlink: Message has 4 unknown bytes. [ 249.290913][T11432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.457211][T11440] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 249.729663][T11457] netlink: 'syz.1.1505': attribute type 24 has an invalid length. [ 249.976522][T11470] netlink: 'syz.1.1510': attribute type 30 has an invalid length. [ 250.002638][T11471] netlink: 'syz.1.1510': attribute type 30 has an invalid length. [ 250.042232][T11471] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 250.092333][T11477] sctp: [Deprecated]: syz.0.1507 (pid 11477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.092333][T11477] Use struct sctp_sack_info instead [ 250.110309][T11471] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 250.174293][T11470] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 250.194990][T11470] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 250.265014][T11484] __nla_validate_parse: 3 callbacks suppressed [ 250.265032][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1512'. [ 250.422553][T11489] ipvlan2: entered promiscuous mode [ 250.478191][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1514'. [ 250.518947][T11498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1516'. [ 250.536864][T11500] netlink: 'syz.4.1518': attribute type 10 has an invalid length. [ 250.559393][T11498] !: renamed from dummy0 (while UP) [ 250.571579][T11500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.591852][T11500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.612602][T11500] team0: Port device hsr0 added [ 250.881333][T11513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1524'. [ 250.942721][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 251.347475][T11542] veth0_to_bond: entered allmulticast mode [ 251.377882][T11545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1533'. [ 251.604526][T11564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1538'. [ 251.624187][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1539'. [ 251.667224][T11563] netlink: 'syz.5.1539': attribute type 3 has an invalid length. [ 251.693024][T11565] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 251.756641][T11565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.874560][T11573] ip6gre1: entered allmulticast mode [ 251.886895][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.890246][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1542'. [ 251.900121][T11573] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 251.918559][T11573] bond0: (slave ip6gre1): Error -95 calling set_mac_address [ 251.962157][T11565] vlan3: entered allmulticast mode [ 251.969375][T11565] bond3: entered allmulticast mode [ 252.382601][T11590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.399908][T11598] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 252.407917][T11598] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1547'. [ 252.418045][T11598] netlink: 'syz.4.1547': attribute type 1 has an invalid length. [ 252.578678][T11612] veth3: entered allmulticast mode [ 253.532245][T11659] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:8 [ 253.560453][T11654] netlink: 'syz.5.1563': attribute type 4 has an invalid length. [ 253.754813][T11676] netlink: 'syz.4.1569': attribute type 2 has an invalid length. [ 253.798695][T11676] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 255.005684][T11756] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 255.043896][T11756] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 255.110327][T11762] openvswitch: netlink: Flow key attr not present in new flow. [ 255.663005][ T1302] aoe: packet could not be sent on ve. consider increasing tx_queue_len [ 255.813363][T11806] __nla_validate_parse: 8 callbacks suppressed [ 255.813379][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1607'. [ 256.398178][T11821] tipc: Enabled bearer , priority 0 [ 256.423360][T11821] syzkaller0: entered promiscuous mode [ 256.453751][T11821] syzkaller0: entered allmulticast mode [ 256.493869][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 256.523490][T11821] tipc: Resetting bearer [ 256.544788][T11820] tipc: Resetting bearer [ 256.596062][T11820] tipc: Disabling bearer [ 256.672196][T11830] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 256.808020][T11840] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1616'. [ 257.205359][T11854] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 257.267252][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 257.298797][T11857] validate_nla: 2 callbacks suppressed [ 257.298814][T11857] netlink: 'syz.5.1621': attribute type 15 has an invalid length. [ 257.340323][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 257.419985][ T6127] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 257.422239][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1621'. [ 257.437602][ T6127] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 257.447786][T11857] netlink: 'syz.5.1621': attribute type 15 has an invalid length. [ 257.460693][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 257.469568][ T6127] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 257.469605][ T6127] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 257.566747][T11867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1624'. [ 257.584605][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1624'. [ 257.985871][T11881] netlink: 'syz.4.1628': attribute type 11 has an invalid length. [ 258.054110][T11881] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1628'. [ 258.834739][T11925] netlink: 'syz.5.1638': attribute type 4 has an invalid length. [ 258.862567][T11925] `: renamed from bond0 (while UP) [ 259.120914][T11937] netlink: 'syz.0.1643': attribute type 10 has an invalid length. [ 259.560048][T11962] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 259.886646][T11980] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 260.359303][T12010] hsr0: mtu greater than device maximum [ 260.372320][T12010] team0: Device hsr0 failed to change mtu [ 260.499986][T12020] netlink: 'syz.4.1665': attribute type 3 has an invalid length. [ 260.532273][T12020] netlink: 'syz.4.1665': attribute type 2 has an invalid length. [ 260.600806][T12020] pim6reg1: entered promiscuous mode [ 260.606520][T12020] pim6reg1: entered allmulticast mode [ 260.927470][T12044] __nla_validate_parse: 21 callbacks suppressed [ 260.927488][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 261.220880][T12059] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 261.421892][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 261.559061][T12079] syzkaller1: entered allmulticast mode [ 261.590744][T12088] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1682'. [ 262.181342][T12124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.243131][T12124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.258910][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 262.411666][T12134] tipc: Enabled bearer , priority 0 [ 262.421480][T12136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 262.422278][T12134] tipc: Disabling bearer [ 262.968269][T12163] veth9: entered allmulticast mode [ 263.274747][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 263.310966][T12185] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 263.353149][T12185] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 263.572487][T12207] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1716'. [ 263.591245][T12208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1714'. [ 263.612163][T12207] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1716'. [ 263.652040][T12211] netlink: 'syz.1.1717': attribute type 1 has an invalid length. [ 263.714186][T12207] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1716'. [ 263.728364][T12211] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.737832][T12211] bond4: (slave bond5): making interface the new active one [ 263.746412][T12211] bond4: (slave bond5): Enslaving as an active interface with an up link [ 263.799277][T12211] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 263.826764][T12211] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.200634][ T24] IPVS: starting estimator thread 0... [ 264.325734][T12238] IPVS: using max 34 ests per chain, 81600 per kthread [ 264.372198][T12244] netlink: 'syz.3.1726': attribute type 2 has an invalid length. [ 264.580323][T12265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.256097][ T5874] Bluetooth: hci2: command tx timeout [ 265.521542][T12312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.709004][T12280] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 266.086069][T12342] pim6reg1: entered promiscuous mode [ 266.102858][T12342] pim6reg1: entered allmulticast mode [ 266.275024][T12344] netlink: 'syz.0.1755': attribute type 4 has an invalid length. [ 266.516766][T12365] __nla_validate_parse: 9 callbacks suppressed [ 266.516839][T12365] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1760'. [ 266.627684][T12372] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 266.994813][T12398] netlink: 'syz.3.1769': attribute type 21 has an invalid length. [ 267.036443][T12398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1769'. [ 267.168949][T12406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1770'. [ 267.320876][T12414] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1773'. [ 267.336082][ T5874] Bluetooth: hci2: command 0x0401 tx timeout [ 267.525697][T12418] netlink: 'syz.3.1776': attribute type 58 has an invalid length. [ 267.582670][T12418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1776'. [ 268.108655][T12449] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1786'. [ 268.173551][T12454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.219163][T12449] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1786'. [ 268.601874][T12482] tipc: Enabled bearer , priority 0 [ 268.646148][T12483] tipc: Enabling of bearer rejected, already enabled [ 268.696370][T12481] tipc: Resetting bearer [ 268.774267][T12479] tipc: Disabling bearer [ 268.862585][T12496] netlink: 'syz.0.1799': attribute type 29 has an invalid length. [ 268.883710][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 269.844706][T12550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.003055][T12555] netlink: 'syz.4.1815': attribute type 83 has an invalid length. [ 270.049577][T12556] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 270.059237][T12556] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 270.060000][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 270.086513][T12563] siw: device registration error -23 [ 270.363080][T12580] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 270.389740][T12581] hsr0: mtu greater than device maximum [ 270.412828][T12581] team0: Device hsr0 failed to change mtu [ 270.462563][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 270.481373][T12580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.525522][T12589] IPVS: Error joining to the multicast group [ 270.560004][T12594] IPVS: Error joining to the multicast group [ 270.866074][T12607] tipc: Enabled bearer , priority 0 [ 270.904133][T12607] syzkaller0: entered promiscuous mode [ 270.932157][ T30] audit: type=1107 audit(1757499390.775:2): pid=12619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 270.947980][T12607] syzkaller0: entered allmulticast mode [ 270.957538][ T36] nci: nci_rx_work: unknown MT 0x4 [ 271.097681][T12607] tipc: Resetting bearer [ 271.112944][T12604] tipc: Resetting bearer [ 271.168778][T12604] tipc: Disabling bearer [ 271.217393][T12636] netlink: 'syz.3.1839': attribute type 24 has an invalid length. [ 271.800073][T12654] netlink: 'syz.3.1844': attribute type 39 has an invalid length. [ 271.849044][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 271.888058][T12656] netlink: 'syz.0.1845': attribute type 20 has an invalid length. [ 271.922195][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 271.932456][ T3551] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.955506][T12656] netlink: 'syz.0.1845': attribute type 20 has an invalid length. [ 271.960143][ T3551] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.993738][ T3551] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.003692][ T3551] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.131547][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 273.018736][T12686] syzkaller1: entered promiscuous mode [ 273.024242][T12686] syzkaller1: entered allmulticast mode [ 273.122272][T12691] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1854'. [ 273.161590][T12691] netlink: zone id is out of range [ 273.170691][T12691] netlink: zone id is out of range [ 273.182347][T12691] netlink: zone id is out of range [ 273.187820][T12691] netlink: get zone limit has 8 unknown bytes [ 273.427688][T12708] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 273.436154][T12708] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1858'. [ 273.447195][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 273.456519][T12707] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1858'. [ 273.501215][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 273.789394][T12731] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1865'. [ 273.906593][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 274.103339][T12733] team0: Port device dummy0 removed [ 274.298233][T12756] validate_nla: 90 callbacks suppressed [ 274.298253][T12756] netlink: 'syz.1.1871': attribute type 10 has an invalid length. [ 274.367687][T12756] bridge0: port 3(team0) entered disabled state [ 274.394821][T12756] team0: left allmulticast mode [ 274.410790][T12756] team_slave_0: left allmulticast mode [ 274.421389][T12764] netlink: 'syz.5.1875': attribute type 1 has an invalid length. [ 274.424238][T12756] team_slave_1: left allmulticast mode [ 274.468371][T12756] dummy0: left allmulticast mode [ 274.482479][T12756] team0: left promiscuous mode [ 274.492777][T12756] team_slave_0: left promiscuous mode [ 274.501023][T12756] team_slave_1: left promiscuous mode [ 274.514059][T12756] dummy0: left promiscuous mode [ 274.522570][T12756] bridge0: port 3(team0) entered disabled state [ 274.568156][T12756] batman_adv: batadv0: Adding interface: team0 [ 274.574521][T12756] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.606361][T12756] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 274.899804][T12784] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 274.940101][T12784] 0ªî{X¹¦: entered allmulticast mode [ 274.952845][T12784] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 275.014140][T12797] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 275.042808][T12797] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 275.292416][T12811] ip6gre0: Master is either lo or non-ether device [ 275.482855][T12824] bond0: entered allmulticast mode [ 275.828462][T12846] netlink: 'syz.4.1899': attribute type 7 has an invalid length. [ 275.889377][T12846] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 276.100704][T12864] netlink: 'syz.1.1905': attribute type 1 has an invalid length. [ 276.210816][T12867] openvswitch: netlink: Actions may not be safe on all matching packets [ 276.305043][T12878] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 276.348266][T12878] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 276.578973][T12881] bond4: (slave bridge5): making interface the new active one [ 276.635494][T12881] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 276.817830][T12885] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003 [ 276.965772][T12892] netlink: 'syz.3.1912': attribute type 10 has an invalid length. [ 276.973900][T12892] bridge_slave_1: left allmulticast mode [ 277.016863][T12892] bridge_slave_1: left promiscuous mode [ 277.022676][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.079653][T12892] bridge0: mtu less than device minimum [ 277.097530][T12892] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 277.103704][T12902] IPv6: Can't replace route, no match found [ 277.209165][T12906] openvswitch: netlink: IPv4 tun info is not correct [ 277.273272][T12908] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 277.296734][T12908] __nla_validate_parse: 18 callbacks suppressed [ 277.296752][T12908] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1920'. [ 277.317954][T12908] netlink: 'syz.4.1920': attribute type 1 has an invalid length. [ 277.331663][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1920'. [ 277.342392][T12910] netlink: 'syz.1.1919': attribute type 2 has an invalid length. [ 277.576314][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'. [ 277.859241][T12942] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.1931'. [ 277.889622][T12942] netlink: zone id is out of range [ 278.172125][T12961] gre3: entered promiscuous mode [ 278.191583][T12961] gre3: entered allmulticast mode [ 278.273903][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 278.283184][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 278.612486][ T30] audit: type=1800 audit(1757499398.455:3): pid=12985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1945" name="memory.events" dev="tmpfs" ino=2045 res=0 errno=0 [ 279.219709][T13004] wg1 speed is unknown, defaulting to 1000 [ 279.240511][T13002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1951'. [ 279.927097][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 280.064320][T13021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.147450][T13021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.284240][T13043] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1961'. [ 280.344108][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 280.454431][T13056] tipc: Enabled bearer , priority 0 [ 280.478215][T13058] net_ratelimit: 232 callbacks suppressed [ 280.478232][T13058] veth1_vlan: mtu less than device minimum [ 280.505800][T13056] syzkaller0: entered promiscuous mode [ 280.526858][T13056] syzkaller0: entered allmulticast mode [ 280.566655][T13056] tipc: Resetting bearer [ 280.596027][T13055] tipc: Resetting bearer [ 280.644541][T13055] tipc: Disabling bearer [ 282.300157][T13155] bond8: entered promiscuous mode [ 282.305586][T13155] bond8: entered allmulticast mode [ 282.311107][T13155] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.449063][T13166] macvlan0: entered allmulticast mode [ 282.479600][T13166] veth1_vlan: entered allmulticast mode [ 282.512192][T13166] __nla_validate_parse: 10 callbacks suppressed [ 282.512209][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 282.528685][T13173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 282.742200][T13182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2003'. [ 282.752289][T13182] validate_nla: 2 callbacks suppressed [ 282.752306][T13182] netlink: 'syz.3.2003': attribute type 7 has an invalid length. [ 282.782002][T13182] netlink: 'syz.3.2003': attribute type 8 has an invalid length. [ 282.797819][T13164] macvlan0: left allmulticast mode [ 282.799569][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2004'. [ 282.803040][T13164] veth1_vlan: left allmulticast mode [ 282.818615][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 282.835891][T13185] hsr_slave_0: left promiscuous mode [ 282.872779][T13185] hsr_slave_1: left promiscuous mode [ 282.922733][T13190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2005'. [ 282.987166][T13185] team0: Port device hsr0 removed [ 283.012403][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 283.047585][T13189] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 283.084194][T13182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.192827][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 283.246147][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 284.052377][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2024'. [ 284.139016][T13263] netlink: 'syz.5.2024': attribute type 10 has an invalid length. [ 284.157784][T13263] veth0_vlan: entered allmulticast mode [ 284.192340][T13263] veth0_vlan: left promiscuous mode [ 284.210276][T13263] veth0_vlan: entered promiscuous mode [ 284.220439][T13263] team0: Device veth0_vlan failed to register rx_handler [ 284.615239][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 285.022864][T13312] netlink: 'syz.1.2038': attribute type 8 has an invalid length. [ 285.228802][T13327] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 285.261663][T13326] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 285.285211][T13327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.298335][T13326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.470584][T13341] wg1: entered promiscuous mode [ 285.481300][T13341] wg1: entered allmulticast mode [ 285.556585][T13341] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 285.610929][T13349] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 285.642619][T13351] netlink: 'syz.0.2052': attribute type 39 has an invalid length. [ 285.779598][T13366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.499177][T13399] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 286.869039][T13424] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 287.448147][T13466] pim6reg1: entered promiscuous mode [ 287.453484][T13466] pim6reg1: entered allmulticast mode [ 288.283555][T13511] __nla_validate_parse: 18 callbacks suppressed [ 288.283572][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 288.341247][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2094'. [ 288.461324][T13515] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 288.647829][T13527] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2100'. [ 288.667774][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2100'. [ 289.024863][T13535] syzkaller0: entered promiscuous mode [ 289.041050][T13535] syzkaller0: entered allmulticast mode [ 289.336897][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2108'. [ 289.347792][T13549] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2108'. [ 289.365808][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 289.591124][T13563] netlink: 'syz.0.2112': attribute type 83 has an invalid length. [ 290.422336][T13588] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2119'. [ 291.926803][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2116'. [ 292.161370][T13611] syzkaller0: entered promiscuous mode [ 292.182244][T13611] syzkaller0: entered allmulticast mode [ 292.203698][T13611] tipc: Enabled bearer , priority 0 [ 292.213178][T13611] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 292.318429][T13611] tipc: Resetting bearer [ 292.384470][T13627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2131'. [ 292.460788][T13608] tipc: Resetting bearer [ 292.518559][T13608] tipc: Disabling bearer [ 292.551604][T13641] syz_tun: entered allmulticast mode [ 292.557710][T13634] netlink: 'syz.4.2133': attribute type 3 has an invalid length. [ 292.588240][T13641] dvmrp8: entered allmulticast mode [ 292.757497][T13650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.792301][T13637] syz_tun: left allmulticast mode [ 293.040215][T13669] pim6reg1: entered promiscuous mode [ 293.067723][T13669] pim6reg1: entered allmulticast mode [ 293.517553][T13696] pim6reg1: entered allmulticast mode [ 294.310117][T13733] tipc: Enabling of bearer rejected, failed to enable media [ 294.395376][T13741] __nla_validate_parse: 4 callbacks suppressed [ 294.395394][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 294.506211][T13742] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 294.760146][T13733] syzkaller0: entered promiscuous mode [ 294.766481][T13733] syzkaller0: entered allmulticast mode [ 294.901521][T13766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2176'. [ 295.143654][T13782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2178'. [ 295.317688][T13782] syzkaller0: entered promiscuous mode [ 295.323837][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2181'. [ 295.346468][T13782] syzkaller0: entered allmulticast mode [ 295.453644][T13790] tipc: Bearer : already 2 bearers with priority 10 [ 295.478203][T13790] tipc: Bearer : trying with adjusted priority [ 295.492706][T13790] tipc: Enabling of bearer rejected, failed to enable media [ 295.734427][T13817] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2186'. [ 295.758221][T13817] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2186'. [ 295.768829][T13820] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2189'. [ 295.943019][T13828] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2193'. [ 295.978067][T13828] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2193'. [ 296.022842][T13828] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2193'. [ 296.119654][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.131584][T13836] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.138823][T13836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.292231][T13851] openvswitch: netlink: Message has 5 unknown bytes. [ 296.695811][T13871] netlink: 'syz.5.2207': attribute type 18 has an invalid length. [ 296.758603][T13871] netlink: 'syz.5.2207': attribute type 18 has an invalid length. [ 296.761419][ T36] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 296.807409][ T36] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 296.820646][ T36] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 296.832227][ T36] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 296.871624][T13882] syzkaller1: entered promiscuous mode [ 296.878894][T13882] syzkaller1: entered allmulticast mode [ 297.718570][T13938] openvswitch: netlink: Key type 10768 is out of range max 32 [ 297.786528][T13944] delete_channel: no stack [ 297.884969][T13955] xt_limit: Overflow, try lower: 271964/0 [ 297.970185][T13961] netlink: 'syz.3.2231': attribute type 1 has an invalid length. [ 298.142202][T13965] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 298.244013][T13961] veth11: entered promiscuous mode [ 298.265488][T13961] bond6: (slave veth11): Enslaving as a backup interface with a down link [ 298.288176][T13974] tipc: Enabling of bearer rejected, failed to enable media [ 298.353600][T13977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.512829][T13990] netlink: 'syz.5.2239': attribute type 10 has an invalid length. [ 298.562163][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 298.589278][T13990] netlink: 'syz.5.2239': attribute type 10 has an invalid length. [ 298.629685][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 298.650819][T13990] netlink: 'syz.5.2239': attribute type 10 has an invalid length. [ 298.664032][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 298.677525][T13998] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 298.720965][T13990] netlink: 'syz.5.2239': attribute type 10 has an invalid length. [ 298.754072][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 298.817616][T13990] netlink: 'syz.5.2239': attribute type 10 has an invalid length. [ 298.848329][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 298.876884][T13990] netlink: 'syz.5.2239': attribute type 10 has an invalid length. [ 298.917935][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 298.954575][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.003250][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.049482][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.096677][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.150643][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.194367][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.219861][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.245723][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.259013][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.271669][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.285889][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.298620][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.316430][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 299.340534][T13990] team0: Device veth1_macvtap failed to register rx_handler [ 319.830768][T14030] tipc: Enabling of bearer rejected, failed to enable media [ 319.868215][T14034] netem: unknown loss type 0 [ 319.891819][T14034] netem: change failed [ 319.929503][T14041] !€ÿ: renamed from bond_slave_0 [ 319.967253][T14046] lo: left promiscuous mode [ 319.971979][T14046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.148819][T14057] validate_nla: 21 callbacks suppressed [ 320.148835][T14057] netlink: 'syz.4.2259': attribute type 3 has an invalid length. [ 320.297016][T14056] bond4: (slave veth0_to_bond): Releasing active interface [ 320.473424][T14087] __nla_validate_parse: 80 callbacks suppressed [ 320.473442][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2264'. [ 320.501398][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 320.521986][T14075] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2263'. [ 320.534137][T14075] ip6gretap0: entered promiscuous mode [ 320.664755][T14092] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2266'. [ 320.717253][T14097] C: left promiscuous mode [ 320.807241][T14097] batadv_slave_0: left promiscuous mode [ 320.813474][T14105] netlink: 'syz.5.2269': attribute type 1 has an invalid length. [ 320.832090][T14097] A link change request failed with some changes committed already. Interface wpan1 may have been left with an inconsistent configuration, please check. [ 320.876006][ T92] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.012470][T14109] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2274'. [ 321.088935][T14113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2273'. [ 321.114949][T14113] veth1_macvtap: left promiscuous mode [ 321.185465][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.413623][T14144] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2279'. [ 321.551721][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 321.591088][T14163] atomic_op ffff88802eb71198 conn xmit_atomic 0000000000000000 [ 321.643856][ T5931] IPVS: starting estimator thread 0... [ 321.735379][T14166] IPVS: using max 33 ests per chain, 79200 per kthread [ 321.777368][T14175] netlink: 'syz.4.2289': attribute type 1 has an invalid length. [ 321.837080][T14175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.022821][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'. [ 322.091367][T14195] tls_set_device_offload_rx: netdev not found [ 322.281040][T14197] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2298'. [ 322.309063][T14209] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 322.315747][T14209] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 322.343327][T14201] bond0: (slave team0): Releasing backup interface [ 322.375919][T14201] team0 (unregistering): Port device team_slave_0 removed [ 322.396375][T14201] team0 (unregistering): Port device team_slave_1 removed [ 322.481527][T14205] wg1 speed is unknown, defaulting to 1000 [ 322.761933][T14230] Unsupported ieee802154 address type: 0 [ 322.844057][T14230] tipc: Enabling of bearer rejected, failed to enable media [ 323.266077][T14254] netlink: 'syz.3.2316': attribute type 1 has an invalid length. [ 323.284289][T14255] netlink: 'syz.3.2316': attribute type 18 has an invalid length. [ 323.308399][T14251] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 323.320271][T14251] bond3: (slave vcan1): Error -95 calling set_mac_address [ 323.363776][T14261] netlink: 'syz.3.2318': attribute type 14 has an invalid length. [ 323.747703][T14277] netlink: 'syz.1.2323': attribute type 1 has an invalid length. [ 323.761482][T14277] netlink: 'syz.1.2323': attribute type 1 has an invalid length. [ 323.944722][T14285] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 324.080718][T14294] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 324.179618][T14296] netlink: 'syz.3.2329': attribute type 17 has an invalid length. [ 324.204516][T14299] netlink: 'syz.1.2331': attribute type 8 has an invalid length. [ 324.715225][T14334] tap0: tun_chr_ioctl cmd 1074025677 [ 324.738796][T14334] tap0: linktype set to 65534 [ 325.430751][T14364] tipc: Enabled bearer , priority 0 [ 325.518348][T14364] tipc: Disabling bearer [ 325.612569][T14368] netlink: 'syz.1.2347': attribute type 5 has an invalid length. [ 325.753464][T14376] __nla_validate_parse: 10 callbacks suppressed [ 325.753481][T14376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2350'. [ 326.004930][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2354'. [ 326.028055][T14391] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2354'. [ 326.050067][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2354'. [ 326.067887][T14391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2354'. [ 326.159795][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 326.168987][T14394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2355'. [ 326.205573][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2357'. [ 326.224285][T14394] geneve2: entered promiscuous mode [ 326.235288][T14394] geneve2: entered allmulticast mode [ 326.523127][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 326.668161][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 326.693534][T14428] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 326.725744][T14428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.749181][T14433] IPVS: Error connecting to the multicast addr [ 326.867104][T14439] tipc: Enabled bearer , priority 0 [ 326.892347][T14430] tipc: Resetting bearer [ 327.044698][T14429] tipc: Disabling bearer [ 327.423809][T14457] netlink: 'syz.1.2372': attribute type 26 has an invalid length. [ 327.467196][T14457] netlink: 'syz.1.2372': attribute type 26 has an invalid length. [ 327.857103][T14467] netlink: 'syz.1.2376': attribute type 9 has an invalid length. [ 327.931999][T14470] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 327.953566][T14467] netlink: 'syz.1.2376': attribute type 9 has an invalid length. [ 327.975027][T14470] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 328.319453][T14480] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 328.334484][T14477] syzkaller0: entered promiscuous mode [ 328.350717][T14477] syzkaller0: entered allmulticast mode [ 328.375035][T14481] tipc: Enabled bearer , priority 0 [ 328.411708][T14477] tipc: Resetting bearer [ 328.425360][T14474] tipc: Resetting bearer [ 329.417716][ T92] tipc: Node number set to 3758096386 [ 329.842431][T14474] tipc: Disabling bearer [ 329.854271][T14493] veth0: entered promiscuous mode [ 329.884191][T14508] geneve2: entered promiscuous mode [ 329.890258][T14508] geneve2: entered allmulticast mode [ 329.906691][T14503] veth0: left promiscuous mode [ 329.911898][T14136] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 329.951275][T14136] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 330.022868][T14136] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 330.063276][T14130] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 330.178031][T14525] IPVS: set_ctl: invalid protocol: 11 127.0.0.1:20002 [ 330.399610][T14543] netlink: 'syz.4.2395': attribute type 64 has an invalid length. [ 330.604488][T14554] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003 [ 330.785176][T14566] batadv1: entered allmulticast mode [ 330.871813][T14573] __nla_validate_parse: 9 callbacks suppressed [ 330.871831][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 330.935972][T14566] batadv1: entered allmulticast mode [ 330.995402][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 331.026797][T14566] batadv1: entered allmulticast mode [ 331.123323][T14566] batadv1: entered allmulticast mode [ 331.137427][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 331.154187][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 331.164287][T14582] block nbd1: not configured, cannot reconfigure [ 331.172843][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 331.182677][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2408'. [ 331.245873][T14566] batadv1: entered allmulticast mode [ 331.342044][T14594] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2411'. [ 331.362676][T14566] batadv1: entered allmulticast mode [ 331.584548][T14566] batadv1: entered allmulticast mode [ 331.690616][T14606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 332.164328][T14630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2424'. [ 332.177818][T14629] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 332.304520][T14629] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.352712][T14643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2427'. [ 332.413189][T14637] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.415287][T14646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2427'. [ 332.427608][T14637] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 332.447164][T14637] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 332.511796][T14640] IPVS: Error joining to the multicast group [ 332.649572][T14641] veth11: entered promiscuous mode [ 332.674767][T14646] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 332.821235][T14665] delete_channel: no stack [ 332.887214][T14671] netlink: 'syz.5.2433': attribute type 1 has an invalid length. [ 332.895516][T14671] netlink: 'syz.5.2433': attribute type 2 has an invalid length. [ 332.903252][T14671] netlink: 'syz.5.2433': attribute type 1 has an invalid length. [ 333.079525][T14683] openvswitch: netlink: IP tunnel dst address not specified [ 333.345004][T14700] netlink: 'syz.5.2441': attribute type 23 has an invalid length. [ 333.910138][T14684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.916555][T14684] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 334.070591][T14727] netlink: 'syz.4.2447': attribute type 4 has an invalid length. [ 334.291212][T14743] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 334.962785][T14774] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 335.740635][T14826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.049359][T14840] __nla_validate_parse: 8 callbacks suppressed [ 336.049378][T14840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2480'. [ 336.121239][T14846] netlink: 'syz.1.2482': attribute type 33 has an invalid length. [ 336.147620][T14846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2482'. [ 336.356792][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2485'. [ 336.391048][T14862] netlink: 'syz.4.2483': attribute type 11 has an invalid length. [ 336.558526][T14873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2490'. [ 336.614138][T14876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.663697][T14873] bond7 (unregistering): Released all slaves [ 336.703957][T14881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2491'. [ 336.740622][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2491'. [ 336.751696][T14876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.784036][T14890] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 337.059702][T14902] netlink: 'syz.5.2497': attribute type 1 has an invalid length. [ 337.101463][T14902] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.124489][T14902] bond5: (slave geneve2): making interface the new active one [ 337.136397][T14902] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 337.287634][T14912] netlink: 'syz.3.2499': attribute type 3 has an invalid length. [ 337.300854][T14912] netlink: 'syz.3.2499': attribute type 3 has an invalid length. [ 337.309723][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 337.319394][T14902] wg1 speed is unknown, defaulting to 1000 [ 337.632235][T14934] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2504'. [ 337.728360][T14933] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2503'. [ 338.204882][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 338.445735][T14976] syz_tun: left allmulticast mode [ 338.455920][T14976] syz_tun: left promiscuous mode [ 338.463549][T14976] bridge0: port 1(syz_tun) entered disabled state [ 338.623124][T14976] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 339.287277][T15021] netlink: 'syz.0.2529': attribute type 1 has an invalid length. [ 339.305328][T15021] nbd: error processing sock list [ 339.317271][T15021] block nbd0: shutting down sockets [ 339.356917][T15033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.373489][T15033] batadv_slave_0: entered promiscuous mode [ 339.608835][T15041] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 339.622565][T15041] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 339.647317][T15041] gretap1: entered promiscuous mode [ 339.652612][T15041] gretap1: entered allmulticast mode [ 339.838502][T15051] netlink: 'syz.1.2535': attribute type 7 has an invalid length. [ 340.247585][T15073] netlink: 'syz.1.2543': attribute type 39 has an invalid length. [ 340.516907][T15084] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 340.892140][T15104] tipc: Enabled bearer , priority 0 [ 340.926357][T15105] syzkaller0: entered promiscuous mode [ 340.931863][T15105] syzkaller0: entered allmulticast mode [ 340.968868][T15115] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 341.035273][T15105] tipc: Resetting bearer [ 341.054946][T15103] tipc: Resetting bearer [ 341.100517][T15103] tipc: Disabling bearer [ 341.120819][T15121] __nla_validate_parse: 16 callbacks suppressed [ 341.120831][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 341.228014][T15125] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.2561'. [ 341.822777][T15156] tipc: New replicast peer: 255.255.255.255 [ 341.851449][T15156] tipc: Enabled bearer , priority 10 [ 341.883633][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2569'. [ 342.118688][T15172] veth0_to_bridge: entered promiscuous mode [ 342.138673][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 342.243259][T15171] veth0_to_bridge: left promiscuous mode [ 342.267838][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 342.277625][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 342.521311][T15198] netlink: 'syz.3.2580': attribute type 28 has an invalid length. [ 342.636233][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2582'. [ 342.720256][T15206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2583'. [ 342.730512][T15204] hsr_slave_1 (unregistering): left promiscuous mode [ 342.852709][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2587'. [ 343.010311][T15226] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2590'. [ 343.222346][T15239] netlink: 'syz.3.2593': attribute type 2 has an invalid length. [ 343.264284][T15242] netlink: 'syz.5.2596': attribute type 1 has an invalid length. [ 343.992582][T15282] netlink: 'syz.1.2605': attribute type 4 has an invalid length. [ 344.997097][T15343] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 345.256872][T15353] netlink: 'syz.3.2625': attribute type 11 has an invalid length. [ 345.304463][T15355] tipc: Enabled bearer , priority 0 [ 345.351478][T15360] tipc: Bearer : already 2 bearers with priority 10 [ 345.395359][T15360] tipc: Bearer : trying with adjusted priority [ 345.422549][T15360] tipc: Enabling of bearer rejected, failed to enable media [ 346.087694][T15415] IPVS: length: 4096 != 8 [ 346.277289][T15423] tipc: Enabled bearer , priority 0 [ 346.329425][T15423] syzkaller0: entered promiscuous mode [ 346.340543][T15423] syzkaller0: entered allmulticast mode [ 346.389786][T15432] __nla_validate_parse: 10 callbacks suppressed [ 346.389804][T15432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2649'. [ 346.417000][ T5953] tipc: Node number set to 1349009397 [ 346.476663][T15423] tipc: Resetting bearer [ 346.522054][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 346.561521][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2650'. [ 346.584359][T15432] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 346.601801][T15432] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 346.614038][T15432] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.638664][T15422] tipc: Resetting bearer [ 346.679454][T15422] tipc: Disabling bearer [ 346.724010][T15432] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 346.734790][T15432] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 346.746844][T15432] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.801818][T15439] dvmrp0: left allmulticast mode [ 346.932068][T15432] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 346.949399][T15432] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 346.966039][T15432] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.029807][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 347.122528][T15467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2658'. [ 347.149595][T15462] 8021q: adding VLAN 0 to HW filter on device bond10 [ 347.186535][T15432] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 347.198195][T15473] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2657'. [ 347.213473][T15432] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 347.229027][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 347.238533][T15432] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.251465][T15475] netlink: 'syz.4.2661': attribute type 3 has an invalid length. [ 347.310932][T15478] netlink: 'syz.4.2662': attribute type 15 has an invalid length. [ 347.312524][T15452] 8021q: adding VLAN 0 to HW filter on device bond10 [ 347.329679][T15452] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 347.342176][T15452] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 347.349939][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 347.368057][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2657'. [ 347.531840][T14135] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.555231][T14135] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.569584][T14135] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.579306][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 347.598616][T14138] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.608221][T14138] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.617698][T14138] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.665473][T14135] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.688804][T14135] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.706754][T14135] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.792477][T14139] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.811415][T14139] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 347.831252][T14139] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.901392][T15501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2668'. [ 347.982502][T15506] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 348.399717][T15521] vlan0: entered allmulticast mode [ 348.404883][T15521] erspan0: entered allmulticast mode [ 348.866722][T15555] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 349.304529][T15579] netlink: 'syz.0.2689': attribute type 16 has an invalid length. [ 349.313410][T15579] netlink: 'syz.0.2689': attribute type 17 has an invalid length. [ 349.340431][T15579] 1ªî{X¹¦: left allmulticast mode [ 349.403341][T15579] bond0: left allmulticast mode [ 349.446301][T15579] veth0_to_bond: left allmulticast mode [ 349.530165][T15579] gretap1: left allmulticast mode [ 349.544372][T15579] bridge2: left allmulticast mode [ 349.554827][T15579] A link change request failed with some changes committed already. Interface wpan1 may have been left with an inconsistent configuration, please check. [ 349.709000][T15593] netlink: 'syz.4.2693': attribute type 33 has an invalid length. [ 349.820700][T15596] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.984725][T15602] syzkaller1: entered promiscuous mode [ 350.005870][T15602] syzkaller1: entered allmulticast mode [ 350.138751][T15611] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 350.195787][T15616] IPv6: NLM_F_REPLACE set, but no existing node found! [ 350.281971][T15618] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.488431][T15629] netlink: 'syz.5.2703': attribute type 1 has an invalid length. [ 350.710407][T15636] netlink: 'syz.5.2703': attribute type 1 has an invalid length. [ 350.737271][T15636] netlink: 'syz.5.2703': attribute type 2 has an invalid length. [ 350.801043][T15636] netlink: 'syz.5.2703': attribute type 1 has an invalid length. [ 350.962186][T15658] netlink: 'syz.0.2714': attribute type 1 has an invalid length. [ 351.052296][T15669] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 351.073847][T15672] netlink: 'syz.5.2716': attribute type 1 has an invalid length. [ 351.081708][T15669] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 351.123044][T15669] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 351.194844][T15675] netlink: 'syz.3.2718': attribute type 11 has an invalid length. [ 351.324281][T15661] wg1 speed is unknown, defaulting to 1000 [ 351.522554][T15687] openvswitch: netlink: Missing key (keys=40, expected=80) [ 351.602504][T15694] __nla_validate_parse: 14 callbacks suppressed [ 351.602523][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2723'. [ 351.630410][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2723'. [ 351.798395][T15703] veth0: entered promiscuous mode [ 351.823810][T15702] veth0: left promiscuous mode [ 352.041483][T15712] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2731'. [ 352.063665][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2728'. [ 352.261063][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 352.467729][T15740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2738'. [ 352.479070][T15740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2738'. [ 352.508415][T15740] erspan0: entered promiscuous mode [ 352.656765][T15740] erspan0: left promiscuous mode [ 352.676061][T15750] C: renamed from team_slave_0 (while UP) [ 352.691711][T15750] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 352.719473][T15750] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2740'. [ 352.752400][T15760] xt_l2tp: invalid flags combination: 0 [ 352.804469][T15753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2740'. [ 353.733638][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2757'. [ 354.094753][T15836] sctp: [Deprecated]: syz.3.2760 (pid 15836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.094753][T15836] Use struct sctp_sack_info instead [ 354.110416][T15835] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 354.246268][T15841] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 354.970412][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.980510][T15877] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.987838][T15877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.161098][T15887] validate_nla: 2 callbacks suppressed [ 355.161114][T15887] netlink: 'syz.0.2777': attribute type 1 has an invalid length. [ 355.359699][T15902] vlan1: entered allmulticast mode [ 355.365615][T15902] veth0_vlan: entered allmulticast mode [ 355.703869][T15923] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 355.911964][T15934] netlink: 'syz.0.2788': attribute type 12 has an invalid length. [ 356.007694][T15941] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 356.035564][T15941] netlink: 'syz.1.2790': attribute type 2 has an invalid length. [ 356.050268][T15944] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 356.059636][T15944] netlink: 'syz.1.2790': attribute type 2 has an invalid length. [ 356.270922][T15950] netlink: 'syz.3.2793': attribute type 10 has an invalid length. [ 356.601255][T15969] pimreg: entered allmulticast mode [ 356.696698][T15974] __nla_validate_parse: 35 callbacks suppressed [ 356.696717][T15974] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2800'. [ 356.914614][T15989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2804'. [ 356.952662][T15992] macvtap1: entered promiscuous mode [ 357.264799][T16012] IPVS: length: 104 != 24 [ 357.296279][T16006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2810'. [ 357.327382][T16006] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2810'. [ 357.348193][T16022] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2815'. [ 357.759249][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2819'. [ 357.771899][T16039] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2819'. [ 357.956331][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2824'. [ 358.016539][T16050] syzkaller1: entered promiscuous mode [ 358.023014][T16050] syzkaller1: entered allmulticast mode [ 358.291864][T16074] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2830'. [ 358.598387][T16083] netlink: 'syz.3.2836': attribute type 12 has an invalid length. [ 358.604492][T16085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2835'. [ 358.690452][T16083] bridge0: entered promiscuous mode [ 358.705398][T16083] macvtap1: entered allmulticast mode [ 358.723921][T16083] bridge0: entered allmulticast mode [ 358.741028][T16083] bridge0: port 2(macvtap1) entered blocking state [ 358.753203][T16083] bridge0: port 2(macvtap1) entered disabled state [ 358.772303][T16083] bridge0: left allmulticast mode [ 358.778907][T16083] bridge0: left promiscuous mode [ 359.079049][T16123] netlink: 'syz.5.2844': attribute type 1 has an invalid length. [ 359.105662][T16123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.746991][T16157] netlink: 'syz.0.2854': attribute type 1 has an invalid length. [ 360.283340][T16186] netlink: 'syz.1.2863': attribute type 23 has an invalid length. [ 360.406527][T16191] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 361.053304][T16236] netlink: 'syz.3.2877': attribute type 19 has an invalid length. [ 361.632534][T16276] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 361.722821][T16282] __nla_validate_parse: 10 callbacks suppressed [ 361.722840][T16282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2890'. [ 361.795580][T16282] openvswitch: netlink: Flow actions attr not present in new flow. [ 361.839231][T16283] veth1_to_hsr: entered allmulticast mode [ 361.839841][T16289] netlink: 'syz.3.2893': attribute type 1 has an invalid length. [ 361.918383][T16289] netlink: 'syz.3.2893': attribute type 3 has an invalid length. [ 361.935781][T16289] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2893'. [ 361.963866][T16289] NCSI netlink: No device for ifindex 0 [ 361.982131][T16296] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 362.092958][T16296] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.162610][T16296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2895'. [ 362.238484][T16307] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.269909][T16310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2895'. [ 362.283060][T16316] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2901'. [ 362.283380][T16307] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 362.307439][T16307] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 362.415415][T16310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.433295][T16327] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2900'. [ 362.682086][T16334] netlink: 'syz.0.2904': attribute type 10 has an invalid length. [ 362.711150][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2904'. [ 362.747080][T16338] tipc: Enabled bearer , priority 0 [ 362.764277][T16338] syzkaller0: entered promiscuous mode [ 362.786147][T16338] syzkaller0: entered allmulticast mode [ 362.806516][T16338] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 362.893030][T16337] tipc: Resetting bearer [ 362.930599][T16337] tipc: Disabling bearer [ 362.985941][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 363.059586][T16351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.157858][T16356] netlink: 'syz.5.2911': attribute type 1 has an invalid length. [ 363.176052][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.321242][T16356] bond7: (slave gretap2): making interface the new active one [ 363.336648][T16356] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 363.613392][T16377] vlan1: left allmulticast mode [ 363.632122][T16377] veth0_vlan: left allmulticast mode [ 363.653096][T16377] dvmrp0: entered allmulticast mode [ 364.226360][T16398] batman_adv: batadv0: Adding interface: wlan1 [ 364.263145][T16398] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.375335][T16398] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 364.506173][T16408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2924'. [ 364.718434][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.728123][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.737394][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.751567][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.759290][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.944970][T14135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.958236][T14135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.987221][T16433] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 365.032521][T16415] wg1 speed is unknown, defaulting to 1000 [ 365.040340][T16437] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2930'. [ 365.127040][T14135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.139580][T16443] netlink: 'syz.1.2932': attribute type 142 has an invalid length. [ 365.140427][T14135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.235874][T14135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.246656][T14135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.354516][T14135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.378923][T14135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.450346][T16455] netlink: 'syz.0.2936': attribute type 1 has an invalid length. [ 365.646084][T16458] 8021q: adding VLAN 0 to HW filter on device bond8 [ 365.655753][T16458] bond7: (slave bond8): making interface the new active one [ 365.663437][T16458] bond7: (slave bond8): Enslaving as an active interface with an up link [ 365.689004][T16455] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 365.722499][T16470] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.334830][T16485] tipc: Enabled bearer , priority 0 [ 366.348053][T16479] tipc: Resetting bearer [ 366.424308][T16486] syzkaller0: entered promiscuous mode [ 366.433404][T16486] syzkaller0: entered allmulticast mode [ 366.444906][T16489] syzkaller0: entered promiscuous mode [ 366.453823][T16506] x_tables: ip_tables: udp match: only valid for protocol 17 [ 366.455150][T16489] syzkaller0: entered allmulticast mode [ 366.634145][T16478] tipc: Resetting bearer [ 366.663210][T16478] tipc: Disabling bearer [ 366.703990][T16513] netlink: 'syz.5.2946': attribute type 1 has an invalid length. [ 366.736693][T16513] __nla_validate_parse: 6 callbacks suppressed [ 366.736710][T16513] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2946'. [ 366.855542][ T5184] Bluetooth: hci3: command tx timeout [ 366.920934][T16415] chnl_net:caif_netlink_parms(): no params data found [ 366.938793][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 366.978334][T14135] dummy0: left allmulticast mode [ 366.990657][T14135] bridge0: port 3(dummy0) entered disabled state [ 367.012888][T14135] bridge_slave_0: left allmulticast mode [ 367.019748][T14135] bridge_slave_0: left promiscuous mode [ 367.021357][T16533] openvswitch: netlink: Duplicate or invalid key (type 0). [ 367.025883][T14135] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.035156][T16533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.121939][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2949'. [ 367.217528][T14135] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 367.226624][T14135] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ae:15:9d:b4:53:c8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 367.767260][T14135] bond4 (unregistering): (slave bridge5): Releasing active interface [ 367.914994][T14135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.939331][T14135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.950378][T14135] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 367.960867][T14135] bond0 (unregistering): Released all slaves [ 368.081509][T14135] bond1 (unregistering): (slave veth5): Releasing backup interface [ 368.092210][T14135] bond1 (unregistering): Released all slaves [ 368.254113][T14135] bond2 (unregistering): Released all slaves [ 368.384387][T14135] bond3 (unregistering): Released all slaves [ 368.400236][T14135] bond4 (unregistering): Released all slaves [ 368.413435][T14135] bond5 (unregistering): Released all slaves [ 368.432923][T14135] bond6 (unregistering): (slave veth11): Releasing backup interface [ 368.444170][T14135] bond6 (unregistering): Released all slaves [ 368.549202][T14135] bond7 (unregistering): Released all slaves [ 368.568889][T16523] pim6reg1: entered promiscuous mode [ 368.574285][T16523] pim6reg1: entered allmulticast mode [ 368.600344][T16539] pim6reg1: entered promiscuous mode [ 368.615832][T16539] pim6reg1: entered allmulticast mode [ 368.657565][T16550] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 368.783222][T16551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2953'. [ 368.796197][T14135] tipc: Left network mode [ 368.930371][T16554] netlink: 'syz.0.2954': attribute type 1 has an invalid length. [ 368.939879][ T5184] Bluetooth: hci3: command tx timeout [ 368.970257][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.281422][T16415] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.299422][T16415] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.315042][T16415] bridge_slave_0: entered allmulticast mode [ 369.329409][T16415] bridge_slave_0: entered promiscuous mode [ 369.359030][T16415] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.377256][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.384690][T16415] bridge_slave_1: entered allmulticast mode [ 369.400576][T16415] bridge_slave_1: entered promiscuous mode [ 369.489601][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2962'. [ 369.703482][T16592] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.2962'. [ 369.813894][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2964'. [ 369.816843][T16415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.034032][T16415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.038995][T16602] netlink: 'syz.4.2967': attribute type 10 has an invalid length. [ 370.076586][T16602] veth1_macvtap: left promiscuous mode [ 370.095620][T16602] team0: Port device veth1_macvtap added [ 370.277704][T16610] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 370.316396][T16610] netlink: 'syz.4.2971': attribute type 10 has an invalid length. [ 370.328026][T16415] team0: Port device team_slave_0 added [ 370.354160][T14135] hsr_slave_0: left promiscuous mode [ 370.369855][T14135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.400553][T14135] veth1_macvtap: left promiscuous mode [ 370.406924][T14135] veth0_macvtap: left promiscuous mode [ 370.414281][T14135] veth1_vlan: left promiscuous mode [ 370.427265][T14135] veth0_vlan: left promiscuous mode [ 371.025838][ T5184] Bluetooth: hci3: command tx timeout [ 371.307012][T16610] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 371.314232][T16610] batman_adv: batadv0: Removing interface: wlan1 [ 371.323607][T16610] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 371.340540][T16415] team0: Port device team_slave_1 added [ 371.353527][T16615] team0: Port device veth1_macvtap removed [ 371.360872][T16615] bond3: (slave veth3): Releasing active interface [ 371.371011][T16615] bond4: (slave veth5): Releasing active interface [ 371.398920][T16625] tipc: Enabled bearer , priority 0 [ 371.544135][T16625] tipc: Disabling bearer [ 371.595318][T16640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2977'. [ 371.659888][T16415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.667174][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.729454][T16415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.764390][T16415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.795267][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.893990][T16415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.096863][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 372.179451][T16415] hsr_slave_0: entered promiscuous mode [ 372.187191][T16415] hsr_slave_1: entered promiscuous mode [ 372.194258][T16415] debugfs: 'hsr0' already exists in 'hsr' [ 372.200957][T16415] Cannot create hsr debugfs directory [ 372.212816][T16674] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2984'. [ 372.225332][T16675] tipc: Enabled bearer , priority 0 [ 372.242001][T16675] syzkaller0: entered promiscuous mode [ 372.247787][T16675] syzkaller0: entered allmulticast mode [ 372.251694][T14135] IPVS: stop unused estimator thread 0... [ 372.346637][T16675] tipc: Resetting bearer [ 372.376045][T16673] tipc: Resetting bearer [ 372.430459][T16673] tipc: Disabling bearer [ 372.891170][T16704] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2995'. [ 372.894236][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 372.991314][T16708] netlink: 'syz.4.2997': attribute type 11 has an invalid length. [ 373.009694][T16709] sock: sock_timestamping_bind_phc: sock not bind to device [ 373.095605][ T5184] Bluetooth: hci3: command tx timeout [ 373.261814][T16723] netlink: 'syz.1.3002': attribute type 1 has an invalid length. [ 373.379124][T16723] 8021q: adding VLAN 0 to HW filter on device bond11 [ 373.392008][T16415] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.434147][T16415] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.445378][T16415] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.454856][T16736] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3006'. [ 373.473216][T16415] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.490663][T16736] veth0_vlan: left allmulticast mode [ 373.675040][T16415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.742030][T16415] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.759774][T14142] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.767006][T14142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.777634][T14132] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 373.793424][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.800706][T14132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.042038][T16415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.118215][T16415] veth0_vlan: entered promiscuous mode [ 374.131596][T16415] veth1_vlan: entered promiscuous mode [ 374.164167][T16415] veth0_macvtap: entered promiscuous mode [ 374.174834][T16415] veth1_macvtap: entered promiscuous mode [ 374.193983][T16415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.211008][T16415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.226322][T14136] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.237638][T14136] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.248503][T14136] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.260349][T14136] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.638046][T14132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.675329][T14132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.791232][T16788] tipc: Enabled bearer , priority 0 [ 374.810088][T16798] syzkaller0: entered promiscuous mode [ 374.817229][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'. [ 374.818980][T16798] syzkaller0: entered allmulticast mode [ 374.866875][T16802] IPVS: Error connecting to the multicast addr [ 374.881510][T14132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.897041][T14132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.939869][T16788] tipc: Resetting bearer [ 374.980182][T16787] tipc: Resetting bearer [ 375.001830][T16812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3024'. [ 375.026145][T16817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2919'. [ 375.041586][T16817] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2919'. [ 375.065387][T16787] tipc: Disabling bearer [ 375.121407][T16820] netlink: 'syz.5.3025': attribute type 1 has an invalid length. [ 375.151718][T16817] bridge1: entered promiscuous mode [ 375.180955][T16817] bridge1: entered allmulticast mode [ 376.291011][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.301494][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.321599][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.334547][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.344349][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.464301][T16879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 376.508172][T16870] wg1 speed is unknown, defaulting to 1000 [ 376.520694][T16881] netlink: 'syz.3.3041': attribute type 7 has an invalid length. [ 376.797091][T16896] netlink: 'syz.3.3049': attribute type 11 has an invalid length. [ 376.798943][T16894] bridge0: port 1(batadv2) entered blocking state [ 376.812533][T16894] bridge0: port 1(batadv2) entered disabled state [ 376.819235][T16894] batadv2: entered allmulticast mode [ 376.832100][T16894] batadv2: entered promiscuous mode [ 376.960333][T16887] syzkaller0: entered promiscuous mode [ 376.986495][T16887] syzkaller0: entered allmulticast mode [ 377.021033][T16870] chnl_net:caif_netlink_parms(): no params data found [ 377.121466][T16915] __nla_validate_parse: 4 callbacks suppressed [ 377.121483][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3052'. [ 377.296043][T14138] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 377.306005][T14138] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 377.351582][T16935] netlink: 'syz.1.3056': attribute type 10 has an invalid length. [ 377.380107][T16935] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3056'. [ 377.408040][T16937] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3057'. [ 377.438421][T16926] syzkaller1: entered promiscuous mode [ 377.444030][T16926] syzkaller1: entered allmulticast mode [ 377.452298][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.491216][T16870] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.514530][T16870] bridge_slave_0: entered allmulticast mode [ 377.538322][T16870] bridge_slave_0: entered promiscuous mode [ 377.635502][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.642655][T16870] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.668805][T16870] bridge_slave_1: entered allmulticast mode [ 377.680911][T16870] bridge_slave_1: entered promiscuous mode [ 377.699269][T16948] tipc: Enabled bearer , priority 0 [ 377.803305][T16958] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3062'. [ 377.824199][T16948] syzkaller0: entered promiscuous mode [ 377.830764][T16948] syzkaller0: entered allmulticast mode [ 377.851095][T16870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.851148][T16960] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.3063'. [ 377.874625][T16870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.884691][T16968] netlink: 'syz.3.3064': attribute type 18 has an invalid length. [ 378.007561][T14135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.042327][T16870] team0: Port device team_slave_0 added [ 378.051830][T14135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.062039][T14135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.080274][T16975] tipc: Resetting bearer [ 378.096492][T16870] team0: Port device team_slave_1 added [ 378.105905][T14135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.116237][T16947] tipc: Resetting bearer [ 378.152821][T16947] tipc: Disabling bearer [ 378.243353][T16870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.260870][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.345722][T16870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.377032][ T5874] Bluetooth: hci0: command tx timeout [ 378.387673][T16870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.398352][T16870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.443218][T16870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.478458][T16993] syzkaller0: entered promiscuous mode [ 378.483991][T16993] syzkaller0: entered allmulticast mode [ 378.505913][T16993] syzkaller0: mtu less than device minimum [ 378.733070][T14135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.744427][T14135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.754936][T14135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 378.757281][T17009] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 378.782646][T17009] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3073'. [ 378.810621][T16870] hsr_slave_0: entered promiscuous mode [ 378.817343][T16870] hsr_slave_1: entered promiscuous mode [ 378.823846][T16870] debugfs: 'hsr0' already exists in 'hsr' [ 378.829940][T16870] Cannot create hsr debugfs directory [ 378.838340][T17009] nbd: must specify a device to reconfigure [ 378.899678][T17015] sctp: [Deprecated]: syz.3.3076 (pid 17015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.899678][T17015] Use struct sctp_sack_info instead [ 378.992834][T14135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.016521][T14135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.038810][T14135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.082092][T17030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3079'. [ 379.159183][T17022] netlink: 'syz.1.3079': attribute type 6 has an invalid length. [ 379.192910][ T5953] wg1 speed is unknown, defaulting to 1000 [ 379.206432][ T5953] syz2: Port: 1 Link DOWN [ 379.242942][T14135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.264182][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3083'. [ 379.273583][T14135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.273645][T14135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.416123][T14135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.448044][T14135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.483759][T14135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.522234][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3087'. [ 379.551058][T17054] 8021q: adding VLAN 0 to HW filter on device bond8 [ 379.568020][T17055] C: renamed from lo (while UP) [ 379.586936][T17045] netlink: 'syz.4.3084': attribute type 9 has an invalid length. [ 379.624544][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3087'. [ 379.785458][T17068] netlink: 'syz.4.3089': attribute type 3 has an invalid length. [ 379.967677][T17077] netlink: 'syz.5.3092': attribute type 4 has an invalid length. [ 379.994724][T14135] bridge_slave_1: left allmulticast mode [ 380.018416][T17079] netlink: 'syz.5.3092': attribute type 4 has an invalid length. [ 380.020339][T14135] bridge_slave_1: left promiscuous mode [ 380.048055][T14135] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.064734][T14135] : left allmulticast mode [ 380.069572][T14135] : left promiscuous mode [ 380.074913][T14135] bridge0: port 1() entered disabled state [ 380.410264][T14135] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 380.457817][ T5874] Bluetooth: hci0: command tx timeout [ 380.756429][T14135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.769160][T14135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.782342][T14135] bond0 (unregistering): Released all slaves [ 380.800604][T14135] bond1 (unregistering): Released all slaves [ 380.842826][T16870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.858996][T16870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.869377][T16870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 380.930201][T17085] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 380.950615][T17085] team0: Device macvtap1 is already an upper device of the team interface [ 380.991991][T14135] tipc: Left network mode [ 381.096860][T16870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.114824][T16870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.130123][T16870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 381.196961][T17108] netlink: 'syz.1.3101': attribute type 8 has an invalid length. [ 381.333717][T16870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.347138][T16870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.362066][T16870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 381.423532][T17114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.598823][T16870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.624702][T16870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.651492][T16870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 381.746188][T17133] netlink: 'syz.3.3115': attribute type 1 has an invalid length. [ 381.964291][T17141] netlink: 'syz.3.3116': attribute type 2 has an invalid length. [ 381.991252][T17141] nbd: must specify at least one socket [ 382.146943][T14135] hsr_slave_0: left promiscuous mode [ 382.165535][T14135] hsr_slave_1: left promiscuous mode [ 382.226137][T14135] veth1_macvtap: left promiscuous mode [ 382.236036][T14135] veth0_macvtap: left promiscuous mode [ 382.241711][T14135] veth1_vlan: left promiscuous mode [ 382.265249][T14135] veth0_vlan: left promiscuous mode [ 382.338730][T17162] IPVS: set_ctl: invalid protocol: 168 100.1.1.1:20002 [ 382.545717][ T5874] Bluetooth: hci0: command tx timeout [ 383.255051][T16870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.319942][T17182] __nla_validate_parse: 4 callbacks suppressed [ 383.319959][T17182] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3130'. [ 383.352925][T16870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.407201][T16870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.441741][T16870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.722444][T16870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.784670][T16870] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.819509][T14133] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.826730][T14133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.846543][T17207] nbd3: detected capacity change from 0 to 63 [ 383.856240][T17209] block nbd3: NBD_DISCONNECT [ 383.879479][T17209] block nbd3: Disconnected due to user request. [ 383.886594][T14133] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.891367][T14059] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 383.893763][T14133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.903828][T17209] block nbd3: shutting down sockets [ 383.919458][T14059] Buffer I/O error on dev nbd3, logical block 0, async page read [ 383.956420][T17214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.965634][ T55] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 383.974746][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 383.974925][T17207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.985665][ T55] Buffer I/O error on dev nbd3, logical block 2, async page read [ 384.002014][ T55] Buffer I/O error on dev nbd3, logical block 3, async page read [ 384.011424][T14059] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.034691][T14059] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.064603][T14059] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.072307][T16870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.075983][T14059] Buffer I/O error on dev nbd3, logical block 1, async page read [ 384.093819][T14059] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.105516][T14059] Buffer I/O error on dev nbd3, logical block 2, async page read [ 384.113394][T14059] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.123645][T14059] Buffer I/O error on dev nbd3, logical block 3, async page read [ 384.132066][T14059] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.145894][T14059] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.154809][T14059] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.183509][T17220] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 384.190107][T17220] syzkaller0: linktype set to 264 [ 384.217285][T14059] Buffer I/O error on dev nbd3, logical block 1, async page read [ 384.258556][T17226] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3141'. [ 384.267812][T14059] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.277307][T17226] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 384.309283][T17229] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3141'. [ 384.319944][T14059] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 384.342776][T14059] ldm_validate_partition_table(): Disk read failed. [ 384.346634][T17229] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 384.358997][T14059] Dev nbd3: unable to read RDB block 0 [ 384.404197][T14059] nbd3: unable to read partition table [ 384.474862][T14059] ldm_validate_partition_table(): Disk read failed. [ 384.514664][T14059] Dev nbd3: unable to read RDB block 0 [ 384.548849][T14059] nbd3: unable to read partition table [ 384.616876][ T5874] Bluetooth: hci0: command tx timeout [ 384.841978][T16870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.924309][T16870] veth0_vlan: entered promiscuous mode [ 384.970746][T16870] veth1_vlan: entered promiscuous mode [ 385.049375][T16870] veth0_macvtap: entered promiscuous mode [ 385.069103][T16870] veth1_macvtap: entered promiscuous mode [ 385.111650][T16870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.141765][T16870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.188068][T14140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.211837][T14140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.232711][T17233] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 385.257116][T14140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.322831][T14140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.468061][T14132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.476642][T17267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3152'. [ 385.489281][T14132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.597969][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3153'. [ 385.604953][T14138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.636550][T14138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.177056][T17298] netlink: 'syz.0.3160': attribute type 11 has an invalid length. [ 386.584161][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.594995][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.608189][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.634957][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.651003][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.695295][ T5874] Bluetooth: hci0: command 0x080f tx timeout [ 386.894879][T17319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.970469][T17323] netlink: 'syz.0.3165': attribute type 13 has an invalid length. [ 387.002103][T17323] netlink: 'syz.0.3165': attribute type 58 has an invalid length. [ 387.026829][T17323] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3165'. [ 387.390737][T17347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3168'. [ 387.542584][T17313] chnl_net:caif_netlink_parms(): no params data found [ 387.557385][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 387.623984][T14138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.711575][T14138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.738969][T17313] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.746740][T17313] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.756889][T17313] bridge_slave_0: entered allmulticast mode [ 387.763920][T17313] bridge_slave_0: entered promiscuous mode [ 387.790936][T14138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.804325][T17313] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.815836][T17313] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.823034][T17313] bridge_slave_1: entered allmulticast mode [ 387.830385][T17313] bridge_slave_1: entered promiscuous mode [ 387.878183][T14138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.899379][T17313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.911062][T17313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.949704][T17313] team0: Port device team_slave_0 added [ 387.958996][T17313] team0: Port device team_slave_1 added [ 388.001870][T17313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.009388][T17313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.036263][T17313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.050613][T17313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.063631][T17313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.090854][T17313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.269064][T14138] bridge_slave_1: left allmulticast mode [ 388.274806][T14138] bridge_slave_1: left promiscuous mode [ 388.281052][T14138] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.291088][T14138] bridge_slave_0: left allmulticast mode [ 388.297616][T14138] bridge_slave_0: left promiscuous mode [ 388.303274][T14138] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.573289][T14138] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 388.643422][T14138] dvmrp8 (unregistering): left allmulticast mode [ 388.695556][ T5874] Bluetooth: hci5: command tx timeout [ 389.166551][T14138] bond0 (unregistering): Released all slaves [ 389.266115][T14138] bond1 (unregistering): Released all slaves [ 389.371157][T14138] bond2 (unregistering): Released all slaves [ 389.473314][T14138] bond3 (unregistering): Released all slaves [ 389.567725][T14138] bond4 (unregistering): (slave bond5): Releasing backup interface [ 389.576992][T14138] bond4 (unregistering): Released all slaves [ 389.676576][T14138] bond5 (unregistering): Released all slaves [ 389.688787][T14138] bond6 (unregistering): Released all slaves [ 389.705586][T14138] bond7 (unregistering): Released all slaves [ 389.804704][T14138] bond8 (unregistering): Released all slaves [ 389.900285][T14138] bond9 (unregistering): Released all slaves [ 389.996121][T14138] bond10 (unregistering): Released all slaves [ 390.094847][T14138] bond11 (unregistering): Released all slaves [ 390.114879][T17313] hsr_slave_0: entered promiscuous mode [ 390.122135][T17313] hsr_slave_1: entered promiscuous mode [ 390.128667][T17313] debugfs: 'hsr0' already exists in 'hsr' [ 390.134390][T17313] Cannot create hsr debugfs directory [ 390.233953][T14138] : left promiscuous mode [ 390.334134][T14138] tipc: Disabling bearer [ 390.344189][T14138] tipc: Disabling bearer [ 390.349815][T14138] tipc: Left network mode [ 390.362947][T14138] IPVS: stopping master sync thread 16433 ... [ 390.727145][T14138] hsr_slave_0: left promiscuous mode [ 390.734191][T14138] hsr_slave_1: left promiscuous mode [ 390.741642][T14138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.749090][T14138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.757374][T14138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.764749][T14138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.772342][T14138] batman_adv: batadv0: Removing interface: team0 [ 390.784214][ T5874] Bluetooth: hci5: command tx timeout [ 391.012773][T14138] veth1_to_hsr (unregistering): left allmulticast mode [ 391.114266][T14138] team0 (unregistering): Port device team_slave_1 removed [ 391.154403][T14138] team0 (unregistering): Port device C removed [ 391.370335][T14138] team0 (unregistering): Port device dummy0 removed [ 391.484355][T17313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.500066][T17313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 391.511399][T17313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 391.522730][T17313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 391.649055][T17313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.668603][T17313] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.682547][T14135] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.689701][T14135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.710760][T14142] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.717881][T14142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.737884][T14138] IPVS: stop unused estimator thread 0... [ 391.912383][T17313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.955536][T17313] veth0_vlan: entered promiscuous mode [ 391.968616][T17313] veth1_vlan: entered promiscuous mode [ 391.997394][T17313] veth0_macvtap: entered promiscuous mode [ 392.008390][T17313] veth1_macvtap: entered promiscuous mode [ 392.024537][T17313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.042227][T17313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.063084][T14140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.072902][T14140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.083400][T14140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.092326][T14140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.155947][T14130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.172813][T14130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.197155][T14130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.204986][T14130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.855227][ T5874] Bluetooth: hci5: command tx timeout [ 394.935824][ T5874] Bluetooth: hci5: command tx timeout [ 410.862455][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.872341][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.880858][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.891418][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.902610][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 411.340896][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3184'. [ 411.383279][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 411.430944][T17423] netlink: 'syz.3.3184': attribute type 7 has an invalid length. [ 411.647162][T17405] chnl_net:caif_netlink_parms(): no params data found [ 411.737208][T17441] netlink: 'syz.0.3190': attribute type 8 has an invalid length. [ 411.815928][T17441] netlink: 'syz.0.3190': attribute type 1 has an invalid length. [ 412.101897][T17405] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.122409][T17405] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.129258][T17454] netlink: 'syz.3.3194': attribute type 4 has an invalid length. [ 412.150911][T17405] bridge_slave_0: entered allmulticast mode [ 412.164599][T17405] bridge_slave_0: entered promiscuous mode [ 412.187404][T17464] tipc: Enabling of bearer rejected, failed to enable media [ 412.201992][T17468] tipc: Enabling of bearer rejected, failed to enable media [ 412.211461][T17405] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.228634][T17405] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.237330][T17405] bridge_slave_1: entered allmulticast mode [ 412.240270][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3194'. [ 412.246551][T17405] bridge_slave_1: entered promiscuous mode [ 412.382118][T17405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.412811][T17476] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 412.421321][T17476] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 412.433023][T17405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.477880][T17476] netlink: 'syz.1.3200': attribute type 10 has an invalid length. [ 412.513152][T17476] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 412.520280][T17476] mac80211_hwsim hwsim50 wlan1: left allmulticast mode [ 412.549277][T17476] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 412.596202][T17489] ipvlan0: entered promiscuous mode [ 412.602610][T17490] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 412.678681][T17492] x_tables: ip_tables: udp match: only valid for protocol 17 [ 412.756740][T17405] team0: Port device team_slave_0 added [ 412.772856][T17496] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3207'. [ 412.784333][T17405] team0: Port device team_slave_1 added [ 412.788233][T17499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3205'. [ 412.935925][ T5184] Bluetooth: hci1: command tx timeout [ 412.962122][T17405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.995424][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.071979][T17405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.118057][T17514] delete_channel: no stack [ 413.123503][T17405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.143013][T17405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.176115][T17405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.240075][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3213'. [ 413.458970][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'. [ 413.481512][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 413.490715][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 413.498096][T17535] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3216'. [ 413.628703][T17532] batman_adv: batadv0: Adding interface: wlan1 [ 413.637287][T17532] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.694675][T17532] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 413.732209][T17539] bridge0: port 3(vlan2) entered blocking state [ 413.740597][T17539] bridge0: port 3(vlan2) entered disabled state [ 413.750038][T17539] vlan2: entered allmulticast mode [ 413.756897][T17539] bridge0: entered allmulticast mode [ 413.766217][T17539] vlan2: left allmulticast mode [ 413.780969][T17539] bridge0: left allmulticast mode [ 413.820804][T17405] hsr_slave_0: entered promiscuous mode [ 413.828153][T17405] hsr_slave_1: entered promiscuous mode [ 413.834231][T17405] debugfs: 'hsr0' already exists in 'hsr' [ 413.840064][T17405] Cannot create hsr debugfs directory [ 413.851896][T17550] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 414.224511][T17576] bridge2: port 1(veth3) entered blocking state [ 414.244839][T17576] bridge2: port 1(veth3) entered disabled state [ 414.257932][T17576] veth3: entered allmulticast mode [ 414.271316][T17576] veth3: entered promiscuous mode [ 414.611764][T17405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.743434][T17590] Bluetooth: MGMT ver 1.23 [ 414.756517][T17405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.881483][T17405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.016706][ T5184] Bluetooth: hci1: command tx timeout [ 415.037392][T17405] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.404329][T17613] netlink: 'syz.5.3236': attribute type 11 has an invalid length. [ 415.658930][T17405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.751334][T17405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.832648][T17620] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 415.865715][T17405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.003114][T17405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.437623][T17405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.494453][T17662] __nla_validate_parse: 9 callbacks suppressed [ 416.494472][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 416.509547][T17405] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.520624][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 416.571502][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 416.575952][T14136] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.587806][T14136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.597622][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 416.608665][T14130] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.628671][T14130] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.649232][T14130] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.697878][T14130] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.720152][T14130] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.727324][T14130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.095654][ T5184] Bluetooth: hci1: command tx timeout [ 417.247076][T17405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.625625][T17707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3260'. [ 417.685545][T17707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.692778][T17707] IPv6: NLM_F_CREATE should be set when creating new route [ 417.700126][T17707] IPv6: NLM_F_CREATE should be set when creating new route [ 417.707393][T17707] IPv6: NLM_F_CREATE should be set when creating new route [ 417.767765][T17709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.995558][T17722] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3262'. [ 418.067733][T17405] veth0_vlan: entered promiscuous mode [ 418.130817][T17405] veth1_vlan: entered promiscuous mode [ 418.253428][T17405] veth0_macvtap: entered promiscuous mode [ 418.304286][T17405] veth1_macvtap: entered promiscuous mode [ 418.310537][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3265'. [ 418.386302][T17405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.461422][T17405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.520077][T17733] team_slave_0: entered promiscuous mode [ 418.526069][T17733] team_slave_1: entered promiscuous mode [ 418.533344][T14135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.581502][T14135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.606672][T14135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.686388][T14135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.885822][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3270'. [ 418.923344][T14135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.953949][T14135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.035241][T14135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.062051][T14135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.177876][ T5184] Bluetooth: hci1: command tx timeout [ 419.280363][T17772] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:18976 [ 419.308497][T17768] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:18976 [ 419.359079][T17768] netlink: 'syz.3.3274': attribute type 1 has an invalid length. [ 419.383088][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3277'. [ 419.392427][T17768] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3274'. [ 419.629871][T17791] netlink: 'syz.1.3280': attribute type 1 has an invalid length. [ 419.703783][T17791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.827188][T17795] vlan2: entered allmulticast mode [ 419.832341][T17795] veth1: entered allmulticast mode [ 419.878433][T17795] bond1: (slave vlan2): making interface the new active one [ 419.917170][T17795] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 420.211474][T17810] pimreg3: entered allmulticast mode [ 420.232173][T17810] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20002 [ 420.259639][T17816] sctp: [Deprecated]: syz.1.3290 (pid 17816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.259639][T17816] Use struct sctp_sack_info instead [ 420.290533][T17816] sctp: [Deprecated]: syz.1.3290 (pid 17816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.290533][T17816] Use struct sctp_sack_info instead [ 420.975873][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.145686][T17859] netlink: zone id is out of range [ 421.156367][T17859] netlink: zone id is out of range [ 421.162051][T17859] netlink: zone id is out of range [ 421.167585][T17859] netlink: zone id is out of range [ 421.172753][T17859] netlink: zone id is out of range [ 421.187305][T17859] netlink: zone id is out of range [ 421.192449][T17859] netlink: zone id is out of range [ 421.260912][T17859] netlink: zone id is out of range [ 421.266292][T17859] netlink: get zone limit has 8 unknown bytes [ 421.414477][T17869] ipvlan1: entered promiscuous mode [ 421.528175][T17877] __nla_validate_parse: 7 callbacks suppressed [ 421.528192][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3309'. [ 421.982440][T17904] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3319'. [ 422.158490][T17913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.174015][T17914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3322'. [ 422.266142][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3325'. [ 422.299751][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 422.493868][T17936] syzkaller1: entered promiscuous mode [ 422.514524][T17936] syzkaller1: entered allmulticast mode [ 422.873962][T17960] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 423.007407][T17968] team0: Device gtp0 is of different type [ 423.076922][T17975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.084183][T17975] IPv6: NLM_F_CREATE should be set when creating new route [ 423.103492][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 423.108183][T17970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.357819][T17977] [ 423.360182][T17977] ====================================================== [ 423.367209][T17977] WARNING: possible circular locking dependency detected [ 423.374232][T17977] syzkaller #0 Not tainted [ 423.378643][T17977] ------------------------------------------------------ [ 423.385652][T17977] syz.1.3345/17977 is trying to acquire lock: [ 423.391712][T17977] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 423.401312][T17977] [ 423.401312][T17977] but task is already holding lock: [ 423.408665][T17977] ffff888143724558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 423.418925][T17977] [ 423.418925][T17977] which lock already depends on the new lock. [ 423.418925][T17977] [ 423.429310][T17977] [ 423.429310][T17977] the existing dependency chain (in reverse order) is: [ 423.438306][T17977] [ 423.438306][T17977] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 423.446901][T17977] lock_acquire+0x120/0x360 [ 423.451917][T17977] blk_alloc_queue+0x538/0x620 [ 423.457203][T17977] __blk_mq_alloc_disk+0x15c/0x340 [ 423.462832][T17977] nbd_dev_add+0x46c/0xae0 [ 423.467761][T17977] nbd_init+0x168/0x1f0 [ 423.472443][T17977] do_one_initcall+0x233/0x820 [ 423.477717][T17977] do_initcall_level+0x104/0x190 [ 423.483164][T17977] do_initcalls+0x59/0xa0 [ 423.487996][T17977] kernel_init_freeable+0x334/0x4b0 [ 423.493701][T17977] kernel_init+0x1d/0x1d0 [ 423.498538][T17977] ret_from_fork+0x3fc/0x770 [ 423.503635][T17977] ret_from_fork_asm+0x1a/0x30 [ 423.508908][T17977] [ 423.508908][T17977] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 423.516115][T17977] lock_acquire+0x120/0x360 [ 423.521137][T17977] fs_reclaim_acquire+0x72/0x100 [ 423.526584][T17977] prepare_alloc_pages+0x153/0x610 [ 423.532199][T17977] __alloc_frozen_pages_noprof+0x123/0x370 [ 423.538506][T17977] __alloc_pages_noprof+0xa/0x30 [ 423.543947][T17977] pcpu_populate_chunk+0x182/0xb30 [ 423.549565][T17977] pcpu_alloc_noprof+0xcbf/0x16b0 [ 423.555095][T17977] bpf_map_alloc_percpu+0xbc/0x1b0 [ 423.560724][T17977] prealloc_init+0x225/0x630 [ 423.565830][T17977] htab_map_alloc+0x6ce/0xc70 [ 423.571013][T17977] map_create+0xaa0/0x14d0 [ 423.575935][T17977] __sys_bpf+0x60f/0x870 [ 423.580697][T17977] __x64_sys_bpf+0x7c/0x90 [ 423.585630][T17977] do_syscall_64+0xfa/0x3b0 [ 423.590639][T17977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.597043][T17977] [ 423.597043][T17977] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 423.604767][T17977] validate_chain+0xb9b/0x2140 [ 423.610043][T17977] __lock_acquire+0xab9/0xd20 [ 423.615231][T17977] lock_acquire+0x120/0x360 [ 423.620250][T17977] __mutex_lock+0x187/0x1350 [ 423.625343][T17977] pcpu_alloc_noprof+0x286/0x16b0 [ 423.630882][T17977] sbitmap_init_node+0x1e1/0x630 [ 423.636320][T17977] sbitmap_queue_init_node+0x3e/0x4d0 [ 423.642192][T17977] blk_mq_init_tags+0x110/0x280 [ 423.647562][T17977] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 423.653535][T17977] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 423.659855][T17977] nbd_start_device+0x17f/0xb10 [ 423.665222][T17977] nbd_genl_connect+0x135b/0x18f0 [ 423.670785][T17977] genl_family_rcv_msg_doit+0x212/0x300 [ 423.676843][T17977] genl_rcv_msg+0x60e/0x790 [ 423.681851][T17977] netlink_rcv_skb+0x208/0x470 [ 423.687125][T17977] genl_rcv+0x28/0x40 [ 423.691608][T17977] netlink_unicast+0x82f/0x9e0 [ 423.696886][T17977] netlink_sendmsg+0x805/0xb30 [ 423.702152][T17977] __sock_sendmsg+0x219/0x270 [ 423.707337][T17977] ____sys_sendmsg+0x505/0x830 [ 423.712604][T17977] ___sys_sendmsg+0x21f/0x2a0 [ 423.717782][T17977] __x64_sys_sendmsg+0x19b/0x260 [ 423.723220][T17977] do_syscall_64+0xfa/0x3b0 [ 423.728232][T17977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.734625][T17977] [ 423.734625][T17977] other info that might help us debug this: [ 423.734625][T17977] [ 423.744835][T17977] Chain exists of: [ 423.744835][T17977] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 423.744835][T17977] [ 423.758470][T17977] Possible unsafe locking scenario: [ 423.758470][T17977] [ 423.765895][T17977] CPU0 CPU1 [ 423.771240][T17977] ---- ---- [ 423.776583][T17977] lock(&q->q_usage_counter(io)#49); [ 423.781942][T17977] lock(fs_reclaim); [ 423.788429][T17977] lock(&q->q_usage_counter(io)#49); [ 423.796304][T17977] lock(pcpu_alloc_mutex); [ 423.800801][T17977] [ 423.800801][T17977] *** DEADLOCK *** [ 423.800801][T17977] [ 423.808948][T17977] 6 locks held by syz.1.3345/17977: [ 423.814381][T17977] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.822549][T17977] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 423.831499][T17977] #2: ffff888024f6c988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 423.842875][T17977] #3: ffff888024f6c8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 423.853814][T17977] #4: ffff888143724558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 423.864505][T17977] #5: ffff888143724590 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 423.875454][T17977] [ 423.875454][T17977] stack backtrace: [ 423.881341][T17977] CPU: 1 UID: 0 PID: 17977 Comm: syz.1.3345 Not tainted syzkaller #0 PREEMPT(full) [ 423.881358][T17977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.881373][T17977] Call Trace: [ 423.881381][T17977] [ 423.881390][T17977] dump_stack_lvl+0x189/0x250 [ 423.881409][T17977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.881425][T17977] ? __pfx__printk+0x10/0x10 [ 423.881442][T17977] ? print_lock_name+0xde/0x100 [ 423.881460][T17977] print_circular_bug+0x2ee/0x310 [ 423.881477][T17977] check_noncircular+0x134/0x160 [ 423.881494][T17977] validate_chain+0xb9b/0x2140 [ 423.881515][T17977] __lock_acquire+0xab9/0xd20 [ 423.881535][T17977] ? pcpu_alloc_noprof+0x286/0x16b0 [ 423.881553][T17977] lock_acquire+0x120/0x360 [ 423.881569][T17977] ? pcpu_alloc_noprof+0x286/0x16b0 [ 423.881591][T17977] __mutex_lock+0x187/0x1350 [ 423.881604][T17977] ? pcpu_alloc_noprof+0x286/0x16b0 [ 423.881622][T17977] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 423.881640][T17977] ? kasan_save_track+0x4f/0x80 [ 423.881655][T17977] ? kasan_save_track+0x3e/0x80 [ 423.881669][T17977] ? __kasan_kmalloc+0x93/0xb0 [ 423.881684][T17977] ? blk_mq_init_tags+0x85/0x280 [ 423.881698][T17977] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 423.881716][T17977] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 423.881728][T17977] ? pcpu_alloc_noprof+0x286/0x16b0 [ 423.881745][T17977] ? nbd_genl_connect+0x135b/0x18f0 [ 423.881762][T17977] ? genl_family_rcv_msg_doit+0x212/0x300 [ 423.881778][T17977] ? genl_rcv_msg+0x60e/0x790 [ 423.881792][T17977] ? __pfx___mutex_lock+0x10/0x10 [ 423.881804][T17977] ? ____sys_sendmsg+0x505/0x830 [ 423.881818][T17977] ? do_syscall_64+0xfa/0x3b0 [ 423.881830][T17977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.881849][T17977] pcpu_alloc_noprof+0x286/0x16b0 [ 423.881871][T17977] sbitmap_init_node+0x1e1/0x630 [ 423.881885][T17977] ? __kasan_kmalloc+0x93/0xb0 [ 423.881902][T17977] sbitmap_queue_init_node+0x3e/0x4d0 [ 423.881916][T17977] blk_mq_init_tags+0x110/0x280 [ 423.881933][T17977] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 423.881953][T17977] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 423.881966][T17977] ? kfree+0x18e/0x440 [ 423.881983][T17977] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 423.882003][T17977] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 423.882023][T17977] ? sysfs_add_file_mode_ns+0x259/0x300 [ 423.882045][T17977] nbd_start_device+0x17f/0xb10 [ 423.882064][T17977] ? device_create_file+0xf4/0x1c0 [ 423.882079][T17977] nbd_genl_connect+0x135b/0x18f0 [ 423.882099][T17977] ? __pfx_nbd_genl_connect+0x10/0x10 [ 423.882120][T17977] ? __nla_parse+0x40/0x60 [ 423.882140][T17977] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 423.882158][T17977] genl_family_rcv_msg_doit+0x212/0x300 [ 423.882262][T17977] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 423.882284][T17977] ? stack_trace_save+0x9c/0xe0 [ 423.882302][T17977] genl_rcv_msg+0x60e/0x790 [ 423.882320][T17977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.882334][T17977] ? __pfx_nbd_genl_connect+0x10/0x10 [ 423.882357][T17977] netlink_rcv_skb+0x208/0x470 [ 423.882376][T17977] ? __lock_acquire+0xab9/0xd20 [ 423.882394][T17977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.882409][T17977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.882434][T17977] ? down_read+0x1ad/0x2e0 [ 423.882448][T17977] genl_rcv+0x28/0x40 [ 423.882462][T17977] netlink_unicast+0x82f/0x9e0 [ 423.882482][T17977] ? __pfx_netlink_unicast+0x10/0x10 [ 423.882499][T17977] ? netlink_sendmsg+0x642/0xb30 [ 423.882510][T17977] ? skb_put+0x11b/0x210 [ 423.882524][T17977] netlink_sendmsg+0x805/0xb30 [ 423.882540][T17977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.882553][T17977] ? aa_sock_msg_perm+0xf1/0x1d0 [ 423.882566][T17977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.882580][T17977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.882593][T17977] __sock_sendmsg+0x219/0x270 [ 423.882612][T17977] ____sys_sendmsg+0x505/0x830 [ 423.882628][T17977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.882645][T17977] ? import_iovec+0x74/0xa0 [ 423.882660][T17977] ___sys_sendmsg+0x21f/0x2a0 [ 423.882675][T17977] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.882700][T17977] ? __fget_files+0x2a/0x420 [ 423.882712][T17977] ? __fget_files+0x3a0/0x420 [ 423.882726][T17977] __x64_sys_sendmsg+0x19b/0x260 [ 423.882741][T17977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.882758][T17977] ? rcu_is_watching+0x15/0xb0 [ 423.882772][T17977] ? do_syscall_64+0xbe/0x3b0 [ 423.882786][T17977] do_syscall_64+0xfa/0x3b0 [ 423.882797][T17977] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.882815][T17977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.882828][T17977] ? clear_bhb_loop+0x60/0xb0 [ 423.882842][T17977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.882863][T17977] RIP: 0033:0x7f9cc4f8eba9 [ 423.882883][T17977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.882895][T17977] RSP: 002b:00007f9cc5e9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.882910][T17977] RAX: ffffffffffffffda RBX: 00007f9cc51d5fa0 RCX: 00007f9cc4f8eba9 [ 423.882920][T17977] RDX: 0000000000000800 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 423.882930][T17977] RBP: 00007f9cc5011e19 R08: 0000000000000000 R09: 0000000000000000 [ 423.882938][T17977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.882947][T17977] R13: 00007f9cc51d6038 R14: 00007f9cc51d5fa0 R15: 00007ffe45e68f38 [ 423.882963][T17977] [ 424.449322][ T5184] block nbd0: Receive control failed (result -32) [ 424.458093][ T5184] block nbd0: Receive control failed (result -32) [ 424.465036][ T5184] block nbd0: Receive control failed (result -32) [ 424.465040][ T5874] block nbd0: Receive control failed (result -32)