last executing test programs: 2.723596634s ago: executing program 0 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x51}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40010}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f8, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x11, 0x34, @random="88f547cc2396b6ff166fe4907c"}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "89dac3d5c015ea5c"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "af098e73c08d76b7"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x5}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = socket(0x1d, 0x80000, 0x96b) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x98}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x238, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfc2c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "31b41db90a0d62705fd4ac4f699871ed"}, @TIPC_NLA_NODE_ID={0x8, 0x3, "8833dc47"}, @TIPC_NLA_NODE_ID={0x81, 0x3, "a8224a8b7f24a5de475c60b00e49749c82a827228ed68fcc463d7b86e7538bf8213d78a9890ea82cd296e7c36d3bb7b6e4bc765360183fbbe6ad49a57b6e58b00e5f11b7555581a8f76f61af484c33178429b850716d697900a07d3dcde15cc1dad0230e38c3cffff0b7a6fc91acb79a078d03d66f6e6e3d18d4dac122"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdb7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf0}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcac8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)=[{0xf34, 0x7c, &(0x7f0000000900)="e9f6ad9c6cb431ec372367c3d05f7acde0f54bc28ea0953c9a630e533e1a80c49bdf78dd9419cbaccc9bdc5ccdd3a816e0dad66775922ff3f9eec71bb781ffb2672591639327304dac9feed0d552de912a880f9f07157ab7da1f78ae30fbac706553d37f268e3289cca9d45acc02cd784a3a4377c09caa02bcececa8", 0x1}, {0x6, 0xd4, &(0x7f0000000980)="41151e5f1bf651413aa5ee16eea728ff86d4aa8144c4bdc97d2bccca7d80fe6d77e3833f94ba3cbb39e314e100d6d5fbbd646ca957299e6777b0f0b7d1c4c8cc521c9bde551b495bcaf81189bb641867511d6986fa96b9fdf484a107eba7870dc7f70ee6cc8ab1fc2a9ae05e8817acfc2e139d759900a57fe8f7bfc89eb7628b2fd9ba1c5d204d7f54b8c014b835593501a86fb53036a3053c24b9052272e0d2d93eaae69d8e3736355c6165a4ee1318b640568cec7e4b0d6525afd6203adf3e34d2f5791745148a1e9382d16a10d0d9a26f052c"}, {0x1, 0x12, &(0x7f0000000a80)="b8c8d4ae7e4ddbf3b21f7589c740542bc0ec", 0x0, 0x1}, {0x9, 0xb8, &(0x7f0000000ac0)="48fc42a022340a120830b1fc8fbcabf4aaf7f5d374b8ccc5054ee742466c3d099a65755887d20bb4ae61632027adb6394e6b08785d5108794d5fdfbcc7eb252fed028e42209fbed49ee2fbfce3925f3212ec514ff98e99d39c43143943c5ef448a9e777dd66a42d7ae950e38e1f2e77d7c1ff6b52dad4d9e5fff7d9f199a15785187581ac90bca245a2be05da96c6fb7d954bec27be5e19527f1169b5ebe4f17359bf62c8aaa69772e05ca5569b4d287476598a9012b1902", 0x1}, {0x800, 0x6d, &(0x7f0000000b80)="159da932deaaebb472620ef3b1f6d2c56e098e7893aa01e9d30c41b9821514b4e7a246e19fea2c398c708df62b700c7dcb4125a49d21fe6902a2f98eaacd02cb5e56017f7a0f35b8fa64683285c7324255dd51eb6092fdd33c227ee314bfe140bd2907baf49c39b60acac92b07"}, {0x2, 0xbc, &(0x7f0000000c00)="d511a423501bcba9702463d17a21a70a5f58446ea7d7bcd024a87d912de3a391333487e98beb3c39ca9a9ac5ce62354654960ea22b160ca559d56abc10d932716791627f5fd6529ad6ff8221a9b0f78241bcbbdc2bf0a929fc890a952e6f071e46ddf21ee3562f02b0dbb89d3031b02a7e2f0a7e1aac526331ace06d13ef49a52bc6fa60c1da2395bd357c3105e799d37a60cad50ccc003461b864081192b08d486ab6e77da463c3793b1ab71a0aaf46f6a6cf19d65a8319badd9413", 0x1, 0x1}, {0x3, 0x18, &(0x7f0000000cc0)="4904ad66ad2b8dcf982a1faae20458326ae9239074b2ccac", 0x1, 0x1}, {0x8, 0x21, &(0x7f0000000d00)="42667a257ff89a2c717c0136087a235c296d5f141a44db1572607520a466797c19", 0x1, 0x1}, {0x8, 0x3d, &(0x7f0000000d40)="ba5c9324d5c489378379e0dec15e1c9e3dbf05ec85b0ecd19640165a9dd728d33c892e9bf7e67e6996b7197a36331c99f5f2f4655715ad081a6c56dda0", 0x0, 0x1}, {0x400, 0xdd, &(0x7f0000000d80)="60f3beab358703891fb1a49e9fbaf6b669766ca31991b8c6d30d956edd91a7fd190222129071b5ad47945ab06ed5d4e42bc437eb4124faab801cd4dd2ec194e9bb49771c17495e7eaa135611003c927695cb15e99e027711de3429e823deb80e3bde40d58fb96b376064641a6de6528c6a71139df9e5f17ff27f44152b37e45195a40a8220ac691c1e0da2682f3ddb583787f53391e268c37c4dc9a347b4b552728fc60b7aed8e9705e56b1b3f3af7ffd8872545b08a3fca0351f100edef7d9d1342bf35149aeb8b07450c951d042edc2ac50e6222d766a758f631ee85", 0x1, 0xa0d693f8304189de}]}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x58, r1, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c028cef15373"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cb2ea1e75e71"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="25489ad88f83"}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) poll(&(0x7f0000001140)=[{r0, 0x20}, {r3, 0xb82697efefe01451}], 0x2, 0x8) r5 = socket$tipc(0x1e, 0x0, 0x0) listen(r5, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x54, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc0b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x33ee}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001340)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001740)={r8, 0x3, 0x40, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80), r3) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000001d80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x174, r10, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffb1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast2, 0xb2}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8c1}, 0x48004) getsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001e40)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001f40)={'syztnl0\x00', &(0x7f0000001e80)={'gre0\x00', r11, 0x8, 0x700, 0x0, 0xfff, {{0x19, 0x4, 0x0, 0x22, 0x64, 0x67, 0x0, 0x2, 0x4, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x23, 0xe1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @multicast2, @rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x30, [@local, @local, @rand_addr=0x64010102]}, @end, @timestamp_addr={0x44, 0x1c, 0x9c, 0x1, 0x5, [{@remote}, {@remote, 0x3}, {@multicast2, 0x200}]}, @end]}}}}}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1400200a4}, 0xc, &(0x7f0000002080)={&(0x7f0000001fc0)={0xa4, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xa40, 0x8, 0x3, 0x3ff]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1342}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10af}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xa}, @device_a, @broadcast, @initial, {0x8, 0x7}}, 0x33, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe8e}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004840}, 0x48000) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000002100)={@multicast2, @private=0xa010101, 0x1, "59b6865cd3c73d1272ff85295f319dbd25d0cb922f13707bfd00ee24ca00ce7d", 0x3, 0x7ff, 0xce, 0x6}, 0x3c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000002140)) sendmsg$inet6(r3, &(0x7f00000029c0)={&(0x7f0000002340)={0xa, 0x4e20, 0xb28a, @loopback, 0x7ff}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000002380)="85fa578c5f98749dec73e782f27f6d74186c5beb50ebf577f62b5e480fd551d81fd4364ea4caa213f1e693e65b63c02de88eb0171506313502e9aba9605ff46870fadc28be5c91ca4cd7108756b4189dde67c6a1819acd32bb31b4ede8f822c6f1af4574f8c732cf005dcf06cf28a5aaf495dae6e437f55c1c586a2ddd5efd341a476c27233d57d8d324b5af89882d6ad9ba08750871ef01a63bf0e1b51f495affcb78fc7d0cfcf9ea9a0ec9978a29eeac9770461ba7c66050eed0bb2faf", 0xbe}, {&(0x7f0000002440)="c7e43959144d757e0b716f940a7bdcda4390129c8e33aec6e41916ca609e13155978303178fb2ca21e71019711e455aa3dd5e5c64ab5d64832807f901af8f7fef8dabc1f7c03698eaad3c2c9439dcb48812bcca0320a33f95eefc0d0815ce3185aa45883e15a52fa8e0741b632ddd621e618e1fc939a0f5b9d73bafa326cf947766e9c38e2fdf320a569eff3ab12d481f1a4b2b0696c7dace8b8845bce9ba65d45df49a204b78a959dcf03ded9ac3471e1946f92340046dabbddda28431a32ff2d2c14ae920772d6b567abcf3b96", 0xce}, {&(0x7f0000002540)="e72d3c6933f011662f0a65fb666f008ba3a4fd81a23c53e8780f0ec63f43b130f1d35798ed1df35f07d5be05d4b5e156eba3d1b4fa502c53d523fed13b4d244417c26462675169dd11e7e4c7b2eb8cf25eeac822ea077604f68c165089fd45b2169d00fd0a2b3f12996f018536ae5578bb14308dd843190ce51eab5fe71963a53d8faadad7a55a522d33be25b6b5b8a611f71c32a13fe3f99db7baa7c6dab74e2c23e93cce1e13b08b2d189f1a9dfa11d5109067459d7ce80e0a9ac13cec58b6f6d269e36414fa6d0ef09bc96998cfd87d034b240659f0936aab04c843b312b9302f35977baeb5f3e6ded82fb2cb09a730393a3448f2", 0xf6}, {&(0x7f0000002640)="393de97003c1af45411bdfc7095b825ec80bc4a306ecbf1fa58acd3480c821ed85be7d9944d7c72d243ecbb45d6d08d66008308c31f2f6a4e99b8a67ee7ac365d7fd64b0c84abb3ccfdac71016a99780b281fc065595916c3b00bc3b3b761e8c9b6f12328ca59568675bb824904266e5acac60ab89c8bdaf94aafdf6f5c64edb30f92a74e346c5bed7bbf6ed2932eac715cd3a2bb5e048de97a3f85055b1cbc1c13d", 0xa2}, {&(0x7f0000002700)="f848b8ae8550e06823fd10681859badb332f7f5e9be568703d85b1223ffcf5c4dbd0f69b5a463d8ed0fc689f2592b83ae43272154e6d4df3becd2fd8343895b11afaa51e365658ffb7e0543b2c60ac5b0db711b41090ea753cbd349c11b606d3b222882cccd444a48fa0289c6baae3b7792f4c7d2318d2e8aec57152731e9924f89072cf0ff64be16881a548545a24f789", 0x91}], 0x5, &(0x7f0000002840)=[@dstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x4b1}, @enc_lim, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x3, [0xb90b, 0xd, 0x2, 0x1, 0x6]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x62, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts={{0x60, 0x29, 0x37, {0x8, 0x8, '\x00', [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x4, [0x100000000, 0x9, 0x6, 0x4]}}, @pad1, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffff34}}, @tclass={{0x14, 0x29, 0x43, 0x10}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}], 0x158}, 0x880) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000002a00)={0x0, 0x1}) 2.469674748s ago: executing program 0 (id=1479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01"], 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010401fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00003c0012800b00010062617461647600002c0002800c0001004241544d414e5f560d0001004241544d414e5f49560000000c0001004241544d414e5f5608000a00", @ANYRES32=r5, @ANYBLOB], 0x64}}, 0x24000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r8, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42012010}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}}, 0x10) 2.285165067s ago: executing program 1 (id=1481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000180)=0x800, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x31c000, 0x800, 0x9}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x2010, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x25, r2}, 0x10) syz_emit_ethernet(0x1dc, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "9d2218", 0x1a6, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@srh={0x33, 0x4, 0x4, 0x2, 0x6, 0x68, 0x9, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x33, 0x12, 0x2, 0xfe, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, @empty, @local, @loopback]}, @dstopts={0x5e, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff7}]}, @routing={0x8, 0x2, 0x0, 0x73, 0x0, [@rand_addr=' \x01\x00']}, @srh={0x3b, 0xc, 0x4, 0x6, 0xb1, 0x40, 0x2, [@empty, @mcast1, @private1, @local, @empty, @empty]}, @dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x100}, @pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "e2f3"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x6, 0x3, 0x0, 0x2, 0x4, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x0, 0x7}, 0x2, {0x0, 0x0, 0x3, 0xa, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@remote, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @random="69d7d9f5a653", @loopback, @empty, @empty}}}}, 0x0) 2.047443187s ago: executing program 0 (id=1485): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x118, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x36, 0x4, 0x0, 0x7, 0x10a, 0x64, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x8, 0xbf, 0x0, 0x7, [0x40d1]}, @timestamp_prespec={0x44, 0x4c, 0x10, 0x3, 0x8, [{@multicast1, 0x3bf19af2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff81}, {@local, 0x5}, {@empty, 0xb912}, {@multicast2}, {@remote, 0x7}, {@remote, 0x2}, {@rand_addr=0x64010100, 0x1}, {@loopback, 0x5}]}, @noop, @lsrr={0x83, 0x17, 0xef, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x44}]}, @lsrr={0x83, 0xf, 0xbe, [@multicast1, @empty, @multicast1]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x13, 0x19, [@multicast1, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0xa4, 0x0, 0x6, [0x3, 0x2, 0x0, 0x0, 0x2f9]}, @rr={0x7, 0x17, 0x34, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}, @payload_named={{{{{0x32, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x2, 0x67da, 0x0, 0x2, 0x2, 0x4, 0x2, 0x8, 0x8, 0x0, 0x4e21, 0x4e22}, 0x1}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001740)={&(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001600)=[{&(0x7f00000001c0)="590b2bf347c548d10723eb7ff88899bbd1d32a014d01f70d6937469dbdca3a85f38176958346fed2a3885d1e4c5ae6ba32defa4b2bd18477f2fc23f454b3eaed0556524a04240f99754fbe24fc5905b41b377e7c1e6a9f4adda598220f5272d8d0b48d7e418cd08813df1c882dfd478ee8b79bbdd08570b543", 0x79}, {&(0x7f0000000240)="b20f8a93febca530d1c5418d9ee220039adc91b799794eab34269060aa4537bec5fd0552ec474fb181c680b2beab472a02245f32b47c202fc85a88a67cee7cdf474758f889d6879c3a48c73c384d70f8650035f3be50b738c8baa301bf77081b4bf89b79b123e7a2ffffefba6689776c58fa759a0b1b6c0fd922e2bea29c9c6c9b98d30be2d7e4b4b24479d02c4ca401815c0156c839", 0x96}, {&(0x7f0000000300)="02899fd82196886fe87e599ccabcf6a5607a640c3fab893e4fdc19ca6a814340024c3a04e09eaa20f9e1d1023478761ef1aa4069724b68b3e78a1bf6f6ea371d08b8b8f40a63cb1f9eea0291563e7b457bb4fdc066f6bb0c502bdc797fdde1230fa606366877b8c8cb04f62ac005e418044bb548bfeaeae511d43337b1864c32ac4a25bff48a78ec69ed", 0x8a}, {&(0x7f00000003c0)="2ae6d8e10bf6563b1011d75c273fb23a8d75f299609ff8a98b830e00d6c36c9464632e8db9a8b383db8382dac54d973500cf374a7ab537e97e5c8147e328b77574b0915e271c7e1ab0747209198554413c21d8095e1ad7cfa43281c8d4ab9cf72af502fceb9ab281a737d0affb80be1cb396b45bb44651b72036d9fba90d1ec3136571d8a32ac3db64698997", 0x8c}, {&(0x7f0000000480)="f1ef53730c8d6574d8997c4865b2bd7dfb92fd5017db63fd895e214de3e580d88eca3487a36cec7a0470d5363961e42622ea31fd65d9c0dbe08a5c54b859bcd5bb578c7c3c891e340703b48547d61f5def15612721e2498f9386c413af8536d5250b30b69d7c3db26cb43f9ed0fed98989fc8b7142", 0x75}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="ca79f72776759dfc0ea8db618a4ffc3247a23a5016d5436b088e532d59a728359bdd9b8d9859929636398d1e5cd34e6207f1308bf82b635f7e31ca8a65c74ce084c027d1c30cd6864e3a48ac3b63889f451e7aa685d35ae0dbe2c4cf2929458738ae06e2907ab7637fb078e77177bd112ba10146448918d247fb35c4cadec7b2c747cb8cb4436c32bb740350f88b63ea101024ab807dc983564e9c21de982eecc6f15610569c3e9efa5515378cd015af97437babee6f73d482cffd805844bc2c4fa42ac526a749d077", 0xc9}], 0x7, &(0x7f0000001680)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @init={0x18, 0x84, 0x0, {0x7ff, 0xfff, 0xa, 0x4}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @init={0x18, 0x84, 0x0, {0x1000, 0x100, 0x7, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xe}}, @init={0x18, 0x84, 0x0, {0xffd0, 0x80, 0x6, 0x4}}], 0xb0, 0x1}, 0x24040040) 1.88470387s ago: executing program 1 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="0c005a80080089"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040)=0x5, 0x4) 1.733344852s ago: executing program 1 (id=1490): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000003100)=ANY=[], 0x10448) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 1.56474488s ago: executing program 2 (id=1492): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000130201000000000000004000070000002dcc5018c7e98f10438755e24bb8cba52445c309448070eaff8b34ba39b9b585bc8eeb1840447b9780b19e9b7080c6540ab24f47d9c9216fab34a57b860d836c0ae21d37c05de1cedeafd5e93ac0edd448506b77f2890d50a90c888cc43ee700"/126, @ANYRES32=r3, @ANYBLOB="000000000000000004001a80"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000007fa1c5294b6116e552df220000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000480)={"a34fcece7b2d210881d08a04aee43465", 0x0, 0x0, {0x5, 0x7}, {0x8, 0x8}, 0x5, [0x5, 0x8000000000000001, 0x100, 0x7, 0x8, 0x6, 0x1, 0x2, 0x7fffffff, 0x9, 0x3ff, 0x1000, 0x4, 0x3, 0x7]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001880)={{r5}, r6, 0x10, @inherit={0x60, &(0x7f0000000580)={0x0, 0x3, 0x2, 0x4, {0x38, 0x8, 0xc, 0xc0000000000000, 0xfff}, [0x3827260, 0x1, 0x280]}}, @name="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"}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r8, r7, 0x0, r7}, 0x10) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000000)) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x31, 0x9, 0x3, 0x11, @remote, @loopback, 0x700, 0x40, 0xe, 0x7}}) (rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r11, r13, 0x25, 0x0, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x5, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@map_fd={0x18, 0x9, 0x1, 0x0, r4}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.477988538s ago: executing program 0 (id=1494): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000280)={0xfe00, 0x6, 0x8001, 0x5}, 0x8) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340001c088daf1e7c4542b5e000000080104000000000000000000000000090001f4727900000006000240000000000400"], 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000db0a010300657b6e827838b05f5d0000000000000000"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000091101f00000000009501669fc8b900000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000440)=0x1120000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) sendmsg$AUDIT_SET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x248614}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3e9, 0x0, 0x70bd25, 0x25dfdbfc, {0x21, 0x0, 0x1, 0xffffffffffffffff, 0x1000, 0x5, 0x8, 0x4, 0x0, 0x4, 0x7}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x4, 0x0, 0x11}, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf256f0000000c009900000000004d0000000500d6000f0000000800a1000500000008009f00030000000500180136000000"], 0x40}}, 0x20044000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f0000000680)="1ded000000185e5a1d669a2f9ef02b4640f4055d4237309d6472156bf4a1c94fbd7e10935cf2b500"/52) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.388884738s ago: executing program 3 (id=1495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x4, 0x2, 0x81, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x21010000) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, 0xa4}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.386755369s ago: executing program 2 (id=1496): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r0, @ANYBLOB="40005200060010"], 0x24}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (rerun: 32) 1.354516338s ago: executing program 4 (id=1497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000380)=r2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 1.219352265s ago: executing program 4 (id=1498): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8401}, 0x4040084) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xc4, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x84, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1c}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x20010884) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x70}, 0x1, 0x0, 0x0, 0x40814}, 0x840) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x20000000000000b7, &(0x7f0000000b00)=[{0xd, 0x10, 0x3, 0x7ff}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x3e97f86af162c537}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240040d4}, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="30540200347aba66e66bab475e13c03b4e421020970f5b30abf7710d4e5a36af02df94c90fbbbbfd0f89bab974e4581f5e84d829e6d2bf3f7dfcd7797767d9", @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="18005e800800060000000000040001000800050000000000"], 0x34}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="000228bd7000fedbdf255d00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x4800}, 0x890) (async) close(0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x1c, r10, 0xb35, 0x70bd22, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0xa0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r9, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x84) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000040)) 1.120744859s ago: executing program 2 (id=1499): socket$nl_route(0x10, 0x3, 0x0) accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@null, @remote, @netrom, @rose, @netrom, @remote, @bcast, @netrom]}, &(0x7f00000000c0)=0x48, 0x80000) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="060100000d0000000400"/20, @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="05000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r6, 0x18}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x68, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffd}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x41, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x1}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) 1.11987569s ago: executing program 3 (id=1500): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x22, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/93, 0x5d}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/92, 0x5c}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x8}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 1.06942892s ago: executing program 4 (id=1501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x218, r1, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x160, 0x13, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [{0x4}, {0x6, 0x1, '(^'}, {0x6, 0x1, '-,'}, {0x4}, {0x4}, {0xf, 0x1, '!,b.(+.\'\'}]'}, {0x4}]}, {0x30, 0x0, 0x0, 0x1, [{0x7, 0x1, ')$['}, {0x8, 0x1, ')/,\''}, {0x6, 0x1, '}-'}, {0xa, 0x1, '--%.*\''}, {0x5, 0x1, '$'}]}, {0x18, 0x0, 0x0, 0x1, [{0x8, 0x1, '$-/:'}, {0x4}, {0x6, 0x1, ':$'}]}, {0x48, 0x0, 0x0, 0x1, [{0x8, 0x1, '^-%\\'}, {0x9, 0x1, '\xc8&-!g'}, {0x10, 0x1, '(/@/#$}]%{&$'}, {0x7, 0x1, '--+'}, {0x4}, {0x7, 0x1, '\\:#'}, {0x7, 0x1, '}&#'}, {0x4}]}, {0x3c, 0x0, 0x0, 0x1, [{0x6, 0x1, '&/'}, {0x4}, {0x8, 0x1, '/,]*'}, {0x9, 0x1, 'I[\'!)'}, {0x8, 0x1, '*@)+'}, {0xf, 0x1, '^+.*}-)&\\**'}]}, {0x40, 0x0, 0x0, 0x1, [{0x10, 0x1, '-&p(]\\$\xf9-{/*'}, {0x6, 0x1, '^&'}, {0x10, 0x1, '+-&{:!*:\xbd\\%!'}, {0x4}, {0x6, 0x1, '&^'}, {0x8, 0x1, '-^)+'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x4}, {0x9, 0x1, '+$(^]'}, {0x4}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_LLC_SDP={0x74, 0x13, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [{0x8, 0x1, '-^*\''}, {0x7, 0x1, '.~,'}, {0xb, 0x1, '##*$$^('}, {0x4}, {0x4}, {0x4}, {0x4}]}, {0x20, 0x0, 0x0, 0x1, [{0x7, 0x1, ',)/'}, {0x6, 0x1, '$.'}, {0x5, 0x1, '$'}, {0x4}]}, {0x10, 0x0, 0x0, 0x1, [{0xb, 0x1, '%)\t.\\])'}]}, {0x10, 0x0, 0x0, 0x1, [{0x5, 0x1, '.'}, {0x4}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x218}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r6 = socket$netlink(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000480), r6) sendmsg$SMC_PNETID_DEL(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040805) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0x804) (async) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) read$nci(r11, &(0x7f0000000780)=""/54, 0x36) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000840)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r12, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xa}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400485c}, 0x200000c4) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000000c40)={{r7}, r18, 0x10, @inherit={0x48, &(0x7f0000000bc0)={0x0, 0x0, 0x1e, 0x8000000000000000, {0x2, 0x10, 0x6, 0x2, 0x80000001}}}, @name="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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000001c40)={0x0, [{r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15}, {r15}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15}, {r15}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {0x0, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r16}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15}, {r15, r17}, {r15, r17}, {r15}, {r16, r17}, {r15, r17}, {0x0, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r15}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r16, r17}, {r15, r17}, {r16, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r15, r17}, {r16, r17}, {r16}, {r16, r17}, {r15, r17}, {r16, r17}], 0xd, "6767e08e18d671"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000002c40)={r17, r19, "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", "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"}) (async) r20 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r20, &(0x7f0000003c40)={0x2, 0x4e23, @multicast1}, 0x10) (async) r21 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r21, 0x4, &(0x7f0000003c80)="4f3507c103b76f19026c88cefaa661a949f46ca2381990c22cfdf11c0ad08f747fe723ad502af0a31396cc0da18215e8d59e3b33998c18d25722da0287bed509057cce417f185b2a0cddd36796df") (async) r22 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r22, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x38, 0x0, 0x10, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1.021037345s ago: executing program 3 (id=1502): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRES8=r0], 0x10}}, 0x800) (async) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0200020000"], 0x10}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket(0x2c, 0x803, 0x7) 840.607596ms ago: executing program 4 (id=1503): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x48, 0x0, 0x0, @u64=0x919b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="64010ea1d2c37b65b5e2f9372270fc0000aa09e81ea89edcc6b9488226ebb7d1260d2ee7c2259914a629d2dd04cb55fd400c33d81cab14fbd636e2a706000000e0bd048a004f282840d17a4535d6dd650100050b6172298de0", @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0x164}}, 0x4080) 798.741668ms ago: executing program 3 (id=1504): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14b842cc281a8f1c18ed07475b4e1795d00400000000002400128009000100626f6e64000000457720876796"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 729.475557ms ago: executing program 1 (id=1505): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000500)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000005200840029bd7000fedbdf25022bfe06000000010d080006000600000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000300925800000800050004000000080006000f000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000005200840029bd7000fedbdf25022bfe06000000010d080006000600000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000300925800000800050004000000080006000f000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f00000002c0)={r4, &(0x7f0000000080)='syzkaller0\x00', 0x101000, &(0x7f00000000c0)={@align=0x87c, {0x7fff, 0x3ff, 0x8, 0xe}}, 0xbebd, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0xad}) sendmsg$AUDIT_USER_AVC(r11, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x453, 0x800, 0x70bd25, 0x25dfdbfc, "9eb050b257c2e19194f30885c9faa08649008318ccfc4f41e2f20d000095eb02827441e2ddfde95e4a69ed6d91e92e0d66ad1ee35dc7", ["", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x40d4}, 0x4000000) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000000)=0x7) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r11) sendmsg$NL80211_CMD_DEAUTHENTICATE(r11, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r12, 0x2, 0x70bd28, 0xfff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x14}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xbe9a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x90) 648.042289ms ago: executing program 2 (id=1506): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000180)={0x2a, 0x3, 0x8000}, 0xc) (async) connect$qrtr(r3, &(0x7f0000000180)={0x2a, 0x3, 0x8000}, 0xc) getpeername$qrtr(r3, 0x0, &(0x7f0000000700)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 646.671541ms ago: executing program 0 (id=1507): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e0f000000e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[]}, 0x78) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r1], 0x30}}, 0x20000000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00'], 0x28}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r5, 0x0, 0x7) r6 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000000)={0x0, 0x8001, "939e5d", 0x8, 0xd}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000500)={{r2, &(0x7f00000004c0)='\x00', 0x4a0901, &(0x7f0000000280)={@_ha_fsid={[0x400, 0x7f]}, {0x7, 0xf3f7, 0x4, 0x3}}, 0x5, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000300)=0x7ffffffe}, 0x1, &(0x7f00000001c0)=[{0x3, 0x4, &(0x7f0000000340)='{/.\x00', &(0x7f0000000400)="1c4bb434946151efa90597346aabc651c689c86b97170a135c7dfcfa33bd8935da1aaa267721766fe700ff559009783dbc690475927338cd2fb69fa6a4090e1e08fb3a74f43c80c1bf667d84a3090e208c7b6006dd99c6fafc023c6653efacff0f1907a6bf2536359519e8eb8aad564c3d0040ba567503c6f5a0850f03dd53cc9e7884bc51e39cc93328e925c61aa74b8654cc99dc3d70dec17834fe81003daabc6c51634c37de3a9cb224cd86fc7122734985288ae862c2993e55d8c4", 0xbd, 0x20}]}) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5010}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000007f00000000ea8e0b1f0785b2772229f10000000000001b5927b852659ff7196cdfb43c"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000017cf1a1fa5afbdacf1a9a5f7a4f1c307d0824fa7e482f4d15220d097cfcc046006652783632d257732172155d3224e960e7ea783619370c750c772cac132b0000ae2c1ef162701e62983321fe551261c4bfb8f7bf531b52f26684a5dc8ff2aa17addb5b855a46164067b87d1caa91d5626851e11f7103a57eaffd78bb8fd8114bfae44a2df72530bab9b58af8f1514f97ac1e3d29b13ee7bdc6555675dcad9116d50043732ef0460b0f487dbf8f92fbe010cf1fb9d119af42b0a0757c57dbe947ebfe9c46d745808ad0612f75dcaa3211c"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r9, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000080c0)=@newtaction={0x58, 0x31, 0x901, 0x0, 0x0, {}, [{0x44, 0x1, [@m_nat={0x40, 0x1, 0x0, 0x0, {{0x38}, {0x4}, {0x15, 0x6, "02122a1364ca4168600ce2c275478c859e"}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r9, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) socket(0x25, 0xa, 0x4) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) 547.411769ms ago: executing program 3 (id=1508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000780)="0374b89b6b8dcbb4cb8a", 0xa}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) 409.082076ms ago: executing program 1 (id=1509): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r1, @ANYBLOB="14005a80100001802112d90fa8c3461908000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) socket$kcm(0x29, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x0, 0xb1e, {{0x1d, 0x4, 0x1, 0x12, 0x74, 0x65, 0x0, 0x9, 0x2, 0x0, @empty, @empty, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe4, [@remote, @loopback, @private=0xa010101, @local]}, @lsrr={0x83, 0x17, 0x56, [@remote, @multicast2, @multicast1, @multicast1, @local]}, @cipso={0x86, 0x32, 0x1, [{0x0, 0x7, "f475fceb01"}, {0x0, 0xb, "e8d5e29d03b959d3ae"}, {0x6, 0xa, "b238b3d5e1f2e866"}, {0x0, 0x10, "1a467d9327bdc722e53258a26e54"}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x6e0, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x248, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "b5ce18f15cbabbe2fdc245b376f330308e92301eb400a879cf1b32"}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "8322fae9393c9bb37b94e80273098e81fc56e4fdc2be4944f9678bfee3a23d8762cc1d966d372bde408dbe362d4da27ce788a7e515b353d2c8087bbc5bba9f612dc1c693230226557046a1eae5b601fc1d87845c7a08672441a01715b083fb09266dcb61ca00f413500b804706336ec0e06701e9e61300bfc3ae16ac33de3a6d64a9cc08668cc4b41b28cc3a207f3f9f3a6afdb91005faaa3eeb6b0669f3e4c0ae1119d1eb1cd3e746cfe377e71fd9ab3d7389c98115f9dbfb6390adfe5ab418728de39566d9548bece11d85f36b3457d20f623440d1874ddc5ba1899372dfdae1863bf2a42cd6189e854ffa46a2d5c06cce77"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x91, 0x4, "d50cc70e1725a95217725ac86e65ef7d2ec8ea2ffdf5afb9f2c92ab1728272cf2c2a9e43eb8c81e1e89774f5927e5d7843d2c65417f86883cd2ab51f4ff2262928bb34d4a5fa98afffd51ff9d9d68325ba9eab9153384d2e2713ad3e2d259786c8f15e78c0cca4d234a602c20b7a6d84f68012d70187ae0f4c1f0b9d66fda711f97f32fde51defd4a633601f71"}, @ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "4ace358a840fe6bf3947a42cf93cb881b2f741de37b03f87a147ba21bba9136922b1ba1bfffd19027507b855fe3cda187950d8b80de515e98e4c6337c13f9d432bdda2616d90adabc78f191559a81a4cdf923122af7ff715607c3d2565bedda4df946f1c350c5dc1e7adaf10d2428858706b9fb99eb7bb9834b5994e6a3829eaea39b007ef50299be0"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x84, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_MASK={0x75, 0x5, "36a14f87ae045cc7ce2b7df8ab00ec6edc80307c5c5c62092b3501c3982f42a54bc4843f49044f2a2bf7d5c7f0b2195179d901fbee59a0bc510267faf4427416398e56d6742f853687a2976a1bb4500c513addd096627a3ce85d1e0ae96c48af350bb493b128e528dcdf641aeb5b1bb915"}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1dc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "4424134012760c6d271bea372bcc89b414489757d7fa5193dec0893e0a230f5e41706e0a80b9c6646525c75a7f69cbfcd3dbaacff532e15a7c7e653935be6aecf8a3599bbdaabd996eead990ae6cb4db2c342023500cc1f1caa8f9478e98270bc61a409014f4f34b7ba7a378e8f571a3c6209e6b65e8f49f15160f4fcf88d4c57cf9a8657d81def62b93e93cfc3b205fe7eb86744bdfdc93fbd684"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffbff}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x614b}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\]).)*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\!,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.:%,\\:[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '],\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'hash:net,iface\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')\'\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xed8}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x18c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/\xb4\x9c[*\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffdb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "afefa8f0d5ff"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "3b3b926870a32c5340a8104b89850964e7e123ea1564a04ff8ad56eb0e5d6689759183da33b0473b0b531511ceb39dea4aa561a7fca951248acf366f735e6fed585735cd81e1c8b3f074d79b3b9dfd2350e48b2c63b237c07f5b611885cf3d63fa5bfa032f59a1cbfbe066e5c6b53e7fd46f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "b98f4e846c95a75d8be95b5c6e3d0ec21c923a9851ab6ca9b1ca7fa631612d27c4e0fde4d2b6bb0053eb152ed3a58c136d41ad5866591426bdc0311453bfab2998d3128087f4692033dc931f616d0e33582143993090d8df6d0ca77b9a6521456a8a6d5f594d72c3f20ac54a244da42dac1b652905a705b600800d6f0b2a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x40}, 0x4010004) 260.522764ms ago: executing program 3 (id=1510): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200"], 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108000604"], 0x0) r2 = socket(0xb, 0x80002, 0x3ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xecb4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xce81}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x8) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x3, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$igmp6(0xa, 0x3, 0x2) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="0000006daea3ac497407ad3e7936de44c1170ce2b6abbd008ce755894373bac1a9a0b30fd1062800"], 0x1d) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x1, 0x10}, &(0x7f0000000140)=0x14) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=r5, @ANYRESOCT=r12], 0x44}}, 0x24008c95) 260.238839ms ago: executing program 2 (id=1511): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x80, 0x20, 0x7, 0x3, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x64, 0x0, 0xc, 0x0, 0x0, @broadcast, @private=0xa010100, {[@noop, @timestamp={0x44, 0x14, 0x93, 0x0, 0x4, [0x7, 0x4, 0xfffff3f7, 0x91]}, @timestamp_prespec={0x44, 0xc, 0x92, 0x3, 0x7, [{@loopback, 0xaf}]}, @generic={0x82, 0x2}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_addr={0x44, 0x4, 0x83, 0x1, 0xd}, @noop]}}}}}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002100000a00000d0000000002000000"], 0x1c}}, 0x8044) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400ac1e00011400"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 230.1733ms ago: executing program 4 (id=1512): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000a9000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0xc824}, 0x8804) 99.372203ms ago: executing program 4 (id=1513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) epoll_pwait(r1, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) shutdown(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[], 0x48) 8.921309ms ago: executing program 2 (id=1514): r0 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000140)={r1, &(0x7f0000000040)='\x00', 0x4800, &(0x7f0000000080)={@align=0xffffffffffff5e99, {0x5, 0x8, 0x4, 0x10000}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x3daf}) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/3, 0x3, 0x40002041, 0x0, 0x0) (async) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/3, 0x3, 0x40002041, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000580)={{r0, &(0x7f00000001c0)='tasks\x00', 0x10000, &(0x7f0000000200)={@align=0x5, {0x9, 0x81, 0x7, 0xf5}}, 0x492, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x9d0}, 0x3, &(0x7f0000000500)=[{0x2, 0x9, &(0x7f00000002c0)='\xae*\x00', &(0x7f0000000300)="ffe377836d6e2951944bbb2c7e2c27f37bafa3c2c63bd9376c00056535caa98cfd1e98a03f8cb3f4baa3a3727f188dd0000109ee", 0x34, 0x8}, {0x2, 0x4, &(0x7f0000000340)='\x00', &(0x7f0000000380)="b02abf1599e28710d33784bb8ac0b8e8ee9630adf80c2d09d758c0e17744ccf4b96e8f66583ac9736ab53e6a9883779a2c7e923e55e88e0d3cc6e5342505fd6421d682405568a3bdbe11cbf1cc4a84ab6937e81ebcafbe8e08beb9489473e156fec558ffe6e94f5e5f69939159bc386748a5f643393117d2739b296b6b5672abf7f215a1f4f3ca4e99eab1a3a1bea4af3f4077b54f5d10660850eb24a334189918b89ae33402c02d2d317c301e065b6bea40f4576ed085186ba13c431f984979ead61b93b60d9e05bf3403a32c72991be4fe105412b311ef3edb220fbf50275f7a477011daff5299e7ee881364dd8601fdcc8fb84bf0", 0xf6, 0x32}, {0x2, 0x85b7, &(0x7f0000000480)='\x00', &(0x7f00000004c0)='Zj', 0x2, 0x8}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000640)={0x1d, r3, 0x3, {0x1, 0x1, 0x1}}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000680)={@private1, 0x0}, &(0x7f00000006c0)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="8069e2e06aa77c46dc62b1a49e4711"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4cb90961ef99"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1e}]}, 0x64}}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x36}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x464, 0x4, 0x70bd2a, 0x25dfdbfe, "335233e74a77359197e99cb392f74b506e", ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x2c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x88}, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000d00)) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000d40)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000e00)={@empty, 0x76, r4}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000e40)={0x0, 0x100000001, 0x1, [0x3, 0xfffffffffffffffe, 0x4, 0xce, 0x7fffffffffffffff], [0x7fffffff, 0x100, 0xfffffffffffffffc, 0x0, 0x6, 0xb5b, 0xff, 0x6, 0x1, 0x2, 0xfffffffffffffffd, 0xe0e1, 0x4, 0x7, 0x9, 0x40, 0x48, 0xffff, 0x10000, 0x2, 0x80, 0x1000, 0x6, 0x101, 0xffffffffffffffff, 0x20000, 0x8000000000000001, 0x2, 0x6, 0x9, 0x8, 0x8, 0x80000001, 0x4e, 0x2, 0x79, 0x8000, 0x0, 0x8, 0xfffffffffffffffd, 0xa, 0x6, 0x7, 0x3, 0xa673, 0x7, 0x8, 0x80, 0xd18, 0xece, 0xd, 0xb8, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x10000, 0x7ff, 0x8000, 0x5, 0x7fffffffffffffff, 0x420, 0x18b, 0x8000000000000000, 0x9, 0xffffffffffffffff, 0x1, 0x2, 0x9, 0x30, 0x100000000, 0x9d5a, 0x2, 0x7, 0x0, 0x6, 0x6, 0xb6d, 0xffffffff, 0x7, 0x3542, 0x6, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x4, 0x5, 0x10000, 0x1, 0x4b4, 0x200, 0x5, 0x832, 0x4, 0xe2, 0x0, 0x318, 0x80, 0xfc99, 0x3, 0x53a0000000000000, 0x100000001, 0x1, 0xb3, 0x91, 0x8, 0x0, 0x6, 0x3, 0x8001, 0x7, 0x5, 0x10001, 0x800, 0x19c1, 0x80, 0x2, 0xd43]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001280)={r9, "5cdc98bcaf5fc0dd65c3587e27d6ad04"}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000002280)=0x1, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000002280)=0x1, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000022c0)={0x0, 0xffffff45, 0x1, 0x4, 0x8, 0x6, 0x6, 0xc8b, {0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xfffffffa, 0x8, 0x6, 0x6, 0x3}}, &(0x7f0000002380)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000023c0)={0x8, 0x0, 0x8209, 0x4, 0x40, 0xfffffffc, 0x4, 0xe, r10}, &(0x7f0000002400)=0x20) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000002480)={0x0, @l2tp={0x2, 0x0, @remote, 0x3}, @can={0x1d, r3}, @xdp={0x2c, 0x0, r4, 0x6}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)='nr0\x00', 0xf, 0x92, 0x9410}) (async) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000002480)={0x0, @l2tp={0x2, 0x0, @remote, 0x3}, @can={0x1d, r3}, @xdp={0x2c, 0x0, r4, 0x6}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)='nr0\x00', 0xf, 0x92, 0x9410}) bind$vsock_stream(r2, &(0x7f0000002500)={0x28, 0x0, 0x0, @local}, 0x10) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000002540)={'erspan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000002540)={'erspan0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 8.221005ms ago: executing program 1 (id=1515): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, &(0x7f0000000140), 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x17, 0xa, 0x200, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 0 (id=1516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4080010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 78.909552][ T5827] cgroup: Unknown subsys name 'net' [ 79.021265][ T5827] cgroup: Unknown subsys name 'cpuset' [ 79.030894][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.671125][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.825383][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.840129][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.862672][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.878260][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.890045][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.894991][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.898415][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.908263][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.915778][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.923448][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.927098][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.936527][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.941542][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.946950][ T5161] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.954790][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.962197][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.976312][ T5161] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.985093][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.992579][ T5161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.010721][ T5161] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.018430][ T5161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.026820][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.035227][ T5161] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.043001][ T5161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.053728][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.576506][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 83.731275][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 83.848723][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.857114][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.865344][ T5840] bridge_slave_0: entered allmulticast mode [ 83.873895][ T5840] bridge_slave_0: entered promiscuous mode [ 83.884299][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 83.916831][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.924400][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.932752][ T5840] bridge_slave_1: entered allmulticast mode [ 83.941288][ T5840] bridge_slave_1: entered promiscuous mode [ 84.022330][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 84.062547][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.077673][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 84.090097][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.099233][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.106452][ T5839] bridge_slave_0: entered allmulticast mode [ 84.113889][ T5839] bridge_slave_0: entered promiscuous mode [ 84.128419][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.165135][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.172553][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.179967][ T5839] bridge_slave_1: entered allmulticast mode [ 84.187354][ T5839] bridge_slave_1: entered promiscuous mode [ 84.297114][ T5840] team0: Port device team_slave_0 added [ 84.317018][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.337885][ T5840] team0: Port device team_slave_1 added [ 84.360668][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.370085][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.377533][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.384728][ T5843] bridge_slave_0: entered allmulticast mode [ 84.391880][ T5843] bridge_slave_0: entered promiscuous mode [ 84.452909][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.460331][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.467651][ T5843] bridge_slave_1: entered allmulticast mode [ 84.474719][ T5843] bridge_slave_1: entered promiscuous mode [ 84.490651][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.498159][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.505514][ T5842] bridge_slave_0: entered allmulticast mode [ 84.512937][ T5842] bridge_slave_0: entered promiscuous mode [ 84.533900][ T5839] team0: Port device team_slave_0 added [ 84.550964][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.558486][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.584848][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.600643][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.607908][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.615516][ T5842] bridge_slave_1: entered allmulticast mode [ 84.623184][ T5842] bridge_slave_1: entered promiscuous mode [ 84.630190][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.637353][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.644997][ T5841] bridge_slave_0: entered allmulticast mode [ 84.652687][ T5841] bridge_slave_0: entered promiscuous mode [ 84.665101][ T5839] team0: Port device team_slave_1 added [ 84.693515][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.700749][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.727184][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.748409][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.755634][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.763458][ T5841] bridge_slave_1: entered allmulticast mode [ 84.770943][ T5841] bridge_slave_1: entered promiscuous mode [ 84.789675][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.826315][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.833614][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.860044][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.873344][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.898753][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.919506][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.926586][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.952900][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.978476][ T5161] Bluetooth: hci1: command tx timeout [ 84.989427][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.002004][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.041515][ T5840] hsr_slave_0: entered promiscuous mode [ 85.048247][ T5840] hsr_slave_1: entered promiscuous mode [ 85.056732][ T5843] team0: Port device team_slave_0 added [ 85.067803][ T5161] Bluetooth: hci0: command tx timeout [ 85.077242][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.108255][ T5843] team0: Port device team_slave_1 added [ 85.137671][ T5161] Bluetooth: hci2: command tx timeout [ 85.137691][ T50] Bluetooth: hci3: command tx timeout [ 85.138413][ T5849] Bluetooth: hci4: command tx timeout [ 85.158712][ T5841] team0: Port device team_slave_0 added [ 85.176200][ T5842] team0: Port device team_slave_0 added [ 85.198616][ T5839] hsr_slave_0: entered promiscuous mode [ 85.204925][ T5839] hsr_slave_1: entered promiscuous mode [ 85.211413][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 85.217199][ T5839] Cannot create hsr debugfs directory [ 85.224946][ T5841] team0: Port device team_slave_1 added [ 85.243330][ T5842] team0: Port device team_slave_1 added [ 85.281796][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.289013][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.315285][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.366279][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.373721][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.400074][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.422059][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.429386][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.455612][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.474274][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.481538][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.507603][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.533510][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.540593][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.566683][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.592304][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.599670][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.626112][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.739264][ T5843] hsr_slave_0: entered promiscuous mode [ 85.745968][ T5843] hsr_slave_1: entered promiscuous mode [ 85.752408][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 85.758217][ T5843] Cannot create hsr debugfs directory [ 85.818248][ T5842] hsr_slave_0: entered promiscuous mode [ 85.824592][ T5842] hsr_slave_1: entered promiscuous mode [ 85.831286][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 85.837199][ T5842] Cannot create hsr debugfs directory [ 85.888186][ T5841] hsr_slave_0: entered promiscuous mode [ 85.894474][ T5841] hsr_slave_1: entered promiscuous mode [ 85.900797][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 85.906539][ T5841] Cannot create hsr debugfs directory [ 86.306844][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.320337][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.328921][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.340552][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.349436][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.360440][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.379746][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.389477][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.468817][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.480703][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.489224][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.500608][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.514086][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.526080][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.534274][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.543772][ T5839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.630344][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.642961][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.651921][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.663193][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.684107][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.696087][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.705061][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.720433][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.846604][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.857080][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.865736][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.876075][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.896733][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.908841][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.916629][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.926250][ T5843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.972689][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.058237][ T5849] Bluetooth: hci1: command tx timeout [ 87.131415][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.138269][ T5849] Bluetooth: hci0: command tx timeout [ 87.153745][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.166309][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.182391][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.193994][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.214289][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.218281][ T5849] Bluetooth: hci4: command tx timeout [ 87.221706][ T5161] Bluetooth: hci3: command tx timeout [ 87.227250][ T50] Bluetooth: hci2: command tx timeout [ 87.260772][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.277346][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.293227][ T5842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.345571][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.353107][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.414961][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.422120][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.450731][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.544296][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.558372][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.614261][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.621518][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.631609][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.638957][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.658705][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.706543][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.713793][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.734006][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.800882][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.808127][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.884768][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.929201][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.936368][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.968809][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.976022][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.998781][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.067322][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.138586][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.154519][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.161749][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.216858][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.224114][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.442090][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.496555][ T5840] veth0_vlan: entered promiscuous mode [ 88.568462][ T5840] veth1_vlan: entered promiscuous mode [ 88.650201][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.724601][ T5839] veth0_vlan: entered promiscuous mode [ 88.765844][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.785438][ T5840] veth0_macvtap: entered promiscuous mode [ 88.823375][ T5839] veth1_vlan: entered promiscuous mode [ 88.855666][ T5840] veth1_macvtap: entered promiscuous mode [ 88.950277][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.994537][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.012233][ T5839] veth0_macvtap: entered promiscuous mode [ 89.032940][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.050196][ T5843] veth0_vlan: entered promiscuous mode [ 89.066056][ T5839] veth1_macvtap: entered promiscuous mode [ 89.085381][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.095714][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.116341][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.126033][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.137968][ T5161] Bluetooth: hci1: command tx timeout [ 89.146034][ T5843] veth1_vlan: entered promiscuous mode [ 89.210394][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.217833][ T5161] Bluetooth: hci0: command tx timeout [ 89.254118][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.288662][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.298045][ T5161] Bluetooth: hci2: command tx timeout [ 89.298081][ T5161] Bluetooth: hci4: command tx timeout [ 89.307831][ T50] Bluetooth: hci3: command tx timeout [ 89.311545][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.351930][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.361174][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.388183][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.397167][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.414687][ T5841] veth0_vlan: entered promiscuous mode [ 89.446057][ T5842] veth0_vlan: entered promiscuous mode [ 89.463703][ T5841] veth1_vlan: entered promiscuous mode [ 89.476923][ T5843] veth0_macvtap: entered promiscuous mode [ 89.497318][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.504887][ T5843] veth1_macvtap: entered promiscuous mode [ 89.520421][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.569580][ T5842] veth1_vlan: entered promiscuous mode [ 89.611916][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.622843][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.651243][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.658885][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.663694][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.723544][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.736421][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742466][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.776011][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.793003][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.825572][ T5841] veth0_macvtap: entered promiscuous mode [ 89.861799][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.902166][ T5841] veth1_macvtap: entered promiscuous mode [ 89.921559][ T5842] veth0_macvtap: entered promiscuous mode [ 89.980393][ T5842] veth1_macvtap: entered promiscuous mode [ 90.050455][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.095216][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.121413][ T5968] Zero length message leads to an empty skb [ 90.153122][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.169772][ T5972] netlink: 'syz.1.7': attribute type 51 has an invalid length. [ 90.196861][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.218509][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.231843][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.236871][ T5975] sctp: [Deprecated]: syz.2.8 (pid 5975) Use of int in max_burst socket option deprecated. [ 90.236871][ T5975] Use struct sctp_assoc_value instead [ 90.244184][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.292234][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.311874][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.322138][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.330456][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.346289][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.386594][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.396056][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.432718][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'. [ 90.449383][ T138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.470076][ T138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.495762][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.510267][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.534094][ T5982] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 90.538755][ T138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.561588][ T138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.589449][ T5982] team0: Device vxcan1 is of different type [ 90.825431][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.874096][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.994027][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.007187][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.057262][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.082825][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.159467][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.179684][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.229465][ T50] Bluetooth: hci1: command tx timeout [ 91.298821][ T50] Bluetooth: hci0: command tx timeout [ 91.313363][ T6000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.378315][ T50] Bluetooth: hci3: command tx timeout [ 91.384106][ T5161] Bluetooth: hci4: command tx timeout [ 91.385411][ T5849] Bluetooth: hci2: command tx timeout [ 91.406028][ T6002] netlink: 'syz.2.16': attribute type 8 has an invalid length. [ 91.454613][ T6006] hsr0: mtu less than device minimum [ 91.811702][ T6015] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.831202][ T6019] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 91.924282][ T6025] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 92.115431][ T29] cfg80211: failed to load regulatory.db [ 92.249090][ T6035] netlink: 'syz.3.21': attribute type 11 has an invalid length. [ 92.680064][ T6056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.27'. [ 92.877150][ T6067] netlink: 96 bytes leftover after parsing attributes in process `syz.0.30'. [ 93.100746][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'. [ 93.233343][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 93.248108][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 93.283696][ T6083] netlink: 'syz.4.33': attribute type 3 has an invalid length. [ 93.434342][ T6095] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 93.550484][ T6095] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 93.622072][ T6109] netlink: 64 bytes leftover after parsing attributes in process `syz.4.38'. [ 93.710990][ T6076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.761317][ T6076] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 93.838162][ T6113] : entered promiscuous mode [ 93.886825][ T6076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.908852][ T6076] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 94.015839][ T6076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.042953][ T6076] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 94.049207][ T6128] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.117815][ T6076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.124446][ T6076] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 94.235454][ T6076] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 94.258906][ T6076] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 94.402986][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'. [ 94.429854][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'. [ 94.564685][ T6151] atomic_op ffff88807f525998 conn xmit_atomic 0000000000000000 [ 94.601052][ T6138] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 94.623878][ T6138] bond1 (unregistering): Released all slaves [ 95.010757][ T6169] netlink: 'syz.4.51': attribute type 1 has an invalid length. [ 95.024782][ T6169] netlink: 'syz.4.51': attribute type 4 has an invalid length. [ 95.124911][ T6176] trusted_key: syz.1.52 sent an empty control message without MSG_MORE. [ 95.312353][ T6178] can: request_module (can-proto-0) failed. [ 95.397145][ T6192] netlink: 'syz.1.52': attribute type 2 has an invalid length. [ 95.460910][ T6176] syzkaller0: entered promiscuous mode [ 95.466722][ T6176] syzkaller0: entered allmulticast mode [ 97.106970][ T6189] __nla_validate_parse: 6 callbacks suppressed [ 97.106993][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.127560][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.146714][ T6189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.751375][ T6248] bond1: Unable to set up delay as MII monitoring is disabled [ 97.783738][ T6248] bond1 (unregistering): Released all slaves [ 97.799240][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 97.809704][ T6265] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 97.841440][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 97.851277][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 97.986718][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 98.039111][ T6271] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 98.093651][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 98.133974][ T6275] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 98.181780][ T6275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.398489][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 98.424547][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 98.708741][ T6302] netlink: 'syz.4.78': attribute type 9 has an invalid length. [ 99.062920][ T6320] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 99.269596][ T6326] bridge2: entered promiscuous mode [ 99.278245][ T6326] bridge2: entered allmulticast mode [ 99.298316][ T6332] sctp: [Deprecated]: syz.3.86 (pid 6332) Use of int in maxseg socket option. [ 99.298316][ T6332] Use struct sctp_assoc_value instead [ 100.573522][ T6377] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 101.003738][ T6402] xt_l2tp: v2 doesn't support IP mode [ 101.064117][ T6404] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 101.148080][ T6409] IPVS: length: 55 != 8 [ 101.226758][ T6412] netlink: 'syz.0.103': attribute type 83 has an invalid length. [ 101.264621][ T6414] macvlan0: entered promiscuous mode [ 102.057855][ T6454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.213121][ T6467] __nla_validate_parse: 83 callbacks suppressed [ 102.213141][ T6467] netlink: 96 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.308450][ T6467] Bluetooth: MGMT ver 1.23 [ 102.594148][ T6487] netlink: 36 bytes leftover after parsing attributes in process `syz.3.129'. [ 102.787917][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 102.825341][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 103.041477][ T6510] netlink: 'syz.1.135': attribute type 17 has an invalid length. [ 103.098742][ T6514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.173923][ T6519] netlink: 72 bytes leftover after parsing attributes in process `syz.4.137'. [ 103.223475][ T6518] netlink: 72 bytes leftover after parsing attributes in process `syz.4.137'. [ 103.421704][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 103.565405][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 103.665551][ T6542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 103.730705][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 103.778463][ T6544] netlink: 'syz.4.144': attribute type 13 has an invalid length. [ 103.807361][ T6548] x_tables: duplicate underflow at hook 4 [ 103.878974][ T6544] veth0_macvtap: left promiscuous mode [ 103.902628][ T6544] macvtap0: entered allmulticast mode [ 103.941930][ T6544] macvtap0: refused to change device tx_queue_len [ 104.141427][ T6564] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 104.538687][ T6582] syzkaller0: entered promiscuous mode [ 104.544306][ T6582] syzkaller0: entered allmulticast mode [ 104.723789][ T6588] tipc: Started in network mode [ 104.743386][ T6588] tipc: Node identity 82a65666a25d, cluster identity 4711 [ 104.757858][ T6588] tipc: Enabled bearer , priority 0 [ 104.899227][ T6604] netlink: 'syz.0.160': attribute type 1 has an invalid length. [ 105.009209][ T6595] syzkaller0: entered promiscuous mode [ 105.020301][ T6606] xt_hashlimit: size too large, truncated to 1048576 [ 105.029027][ T6595] syzkaller0: entered allmulticast mode [ 105.035920][ T6595] tipc: Resetting bearer [ 105.107346][ T6587] tipc: Resetting bearer [ 106.645557][ T6587] tipc: Disabling bearer [ 106.804593][ T29] tipc: Node number set to 553342566 [ 107.174345][ T6657] delete_channel: no stack [ 107.349966][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.548383][ T6670] ip6tnl0: entered promiscuous mode [ 107.554077][ T6670] veth0: entered promiscuous mode [ 107.574918][ T6669] veth0: left promiscuous mode [ 107.580657][ T6669] ip6tnl0: left promiscuous mode [ 107.640824][ T6673] __nla_validate_parse: 10 callbacks suppressed [ 107.640847][ T6673] netlink: 56 bytes leftover after parsing attributes in process `syz.1.178'. [ 107.710496][ T6673] bond2 (unregistering): Released all slaves [ 108.467216][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 108.486651][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 108.568170][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 108.696387][ T6716] xt_connbytes: Forcing CT accounting to be enabled [ 108.735950][ T6721] netlink: 'syz.3.193': attribute type 13 has an invalid length. [ 108.740393][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 108.760780][ T6716] xt_CT: No such helper "netbios-ns" [ 108.836123][ T6721] veth0_macvtap: left promiscuous mode [ 108.869171][ T6721] macvtap0: entered allmulticast mode [ 108.917091][ T6721] macvtap0: refused to change device tx_queue_len [ 109.003564][ T6733] xt_l2tp: invalid flags combination: 0 [ 109.012847][ T6734] warning: `syz.2.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.136247][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 109.146689][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 109.331695][ T6747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.442654][ T5907] IPVS: starting estimator thread 0... [ 109.522105][ T6752] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 109.567889][ T6754] IPVS: using max 26 ests per chain, 62400 per kthread [ 110.170010][ T6782] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 110.337959][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.405011][ T6803] veth1_to_batadv: mtu greater than device maximum [ 110.421489][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.440058][ T6804] netlink: 'syz.0.215': attribute type 8 has an invalid length. [ 111.457798][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.497837][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.384618][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.537756][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.714177][ T6838] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.224'. [ 113.824794][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 113.846821][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 113.861122][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.872542][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.226'. [ 113.884442][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.227'. [ 113.930387][ T6842] geneve2: entered promiscuous mode [ 113.960240][ T6842] geneve2: entered allmulticast mode [ 114.021699][ T6852] netlink: 'syz.2.229': attribute type 39 has an invalid length. [ 114.498288][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.563321][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 114.581448][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.710769][ T6889] syzkaller0: entered promiscuous mode [ 114.747736][ T6889] syzkaller0: entered allmulticast mode [ 114.787281][ T6895] xt_l2tp: v2 doesn't support IP mode [ 114.874983][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 115.362003][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 115.618927][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.904343][ T6954] netlink: 'syz.1.246': attribute type 21 has an invalid length. [ 116.659606][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.205831][ T6953] : renamed from bond0 (while UP) [ 117.222973][ T6954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.246'. [ 117.292365][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 117.341582][ T6958] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 117.444940][ T6958] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.510733][ T6967] syzkaller0: entered promiscuous mode [ 117.561789][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.578768][ T6967] syzkaller0: entered allmulticast mode [ 117.699310][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.910057][ T6988] netlink: 'syz.0.257': attribute type 2 has an invalid length. [ 117.951571][ T6987] syzkaller1: entered promiscuous mode [ 117.967357][ T6987] syzkaller1: entered allmulticast mode [ 117.993507][ T6993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.345246][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.425410][ T7022] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 118.447262][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.538531][ T7027] netlink: 'syz.2.265': attribute type 10 has an invalid length. [ 118.594812][ T7030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.631831][ T7030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.651862][ T7027] team0: Port device dummy0 added [ 118.673231][ T7030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.867499][ T7041] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 119.154994][ T7058] __nla_validate_parse: 3 callbacks suppressed [ 119.155016][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 119.207257][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 119.252942][ T7058] xfrm1: entered promiscuous mode [ 119.272847][ T7058] xfrm1: entered allmulticast mode [ 119.575832][ T7070] bond2: entered promiscuous mode [ 119.615127][ T7076] macvlan2: entered promiscuous mode [ 119.630362][ T7082] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.281'. [ 119.641768][ T7082] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.281'. [ 119.653084][ T7076] macvlan2: entered allmulticast mode [ 119.674004][ T7076] bond2: (slave macvlan2): Opening slave failed [ 119.696276][ T7085] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 119.780847][ T5908] net_ratelimit: 3 callbacks suppressed [ 119.780866][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.872410][ T7085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.971104][ T7098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.285'. [ 120.007003][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 120.040036][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 120.055589][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 120.159186][ T7098] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 120.263333][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.278720][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.289'. [ 120.300363][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 120.577817][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.627300][ T7129] netlink: 'syz.3.293': attribute type 39 has an invalid length. [ 122.194715][ T7193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.490593][ T7204] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 122.599670][ T7208] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.819136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.938939][ T7218] netlink: 'syz.2.319': attribute type 10 has an invalid length. [ 122.968261][ T7218] bond0: (slave wlan1): Opening slave failed [ 123.003590][ T7217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.083826][ T7223] sctp: [Deprecated]: syz.1.322 (pid 7223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.083826][ T7223] Use struct sctp_sack_info instead [ 123.424706][ T7240] pim6reg: entered allmulticast mode [ 123.730485][ T7250] ipt_REJECT: TCP_RESET invalid for non-tcp [ 123.756727][ T7254] netlink: 'syz.3.331': attribute type 39 has an invalid length. [ 124.145542][ T7269] bridge1: entered promiscuous mode [ 124.171028][ T7269] bridge1: entered allmulticast mode [ 124.213158][ T7269] team0: Port device bridge1 added [ 124.227780][ T7271] bridge0: port 3(team0) entered blocking state [ 124.249800][ T7271] bridge0: port 3(team0) entered disabled state [ 124.277202][ T7271] team0: entered allmulticast mode [ 124.317524][ T7271] team_slave_0: entered allmulticast mode [ 124.327765][ T7271] team_slave_1: entered allmulticast mode [ 124.353668][ T7271] team0: entered promiscuous mode [ 124.367566][ T7271] team_slave_0: entered promiscuous mode [ 124.378032][ T7271] team_slave_1: entered promiscuous mode [ 124.395664][ T7271] bridge0: port 3(team0) entered blocking state [ 124.403180][ T7271] bridge0: port 3(team0) entered forwarding state [ 124.434786][ T7274] __nla_validate_parse: 14 callbacks suppressed [ 124.434810][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'. [ 124.626783][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 124.661773][ T7286] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.826504][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 125.100799][ T7307] netlink: 104 bytes leftover after parsing attributes in process `syz.1.350'. [ 125.723272][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.359'. [ 126.423268][ T7366] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.364'. [ 126.467168][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.364'. [ 126.613853][ T808] IPVS: starting estimator thread 0... [ 126.670664][ T7376] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 126.727480][ T7377] IPVS: using max 24 ests per chain, 57600 per kthread [ 126.931732][ T7389] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.196569][ T7387] syzkaller1: entered promiscuous mode [ 127.223781][ T7387] syzkaller1: entered allmulticast mode [ 127.318609][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.328047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.867475][ T7414] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 127.925953][ T7414] bond3 (unregistering): Released all slaves [ 128.104067][ T7426] netlink: 248 bytes leftover after parsing attributes in process `syz.1.385'. [ 128.299921][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 128.335419][ T7447] tipc: Enabling of bearer rejected, media not registered [ 128.337658][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 128.368394][ T7437] netlink: 'syz.0.387': attribute type 5 has an invalid length. [ 128.376363][ T7448] netlink: 'syz.3.390': attribute type 2 has an invalid length. [ 128.522998][ T7453] unsupported nlmsg_type 40 [ 128.524685][ T7454] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 128.599576][ T7461] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 128.630133][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.682423][ T7461] bridge_slave_1: left allmulticast mode [ 128.698130][ T7461] bridge_slave_1: left promiscuous mode [ 128.708296][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.751748][ T7461] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 128.936450][ T7468] syzkaller1: entered promiscuous mode [ 128.963959][ T7468] syzkaller1: entered allmulticast mode [ 129.495106][ T7510] __nla_validate_parse: 10 callbacks suppressed [ 129.495129][ T7510] netlink: 10 bytes leftover after parsing attributes in process `syz.1.408'. [ 129.651794][ T7504] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 129.662978][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.670903][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.705484][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.410'. [ 129.725331][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.410'. [ 129.742991][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.410'. [ 129.772601][ T7519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.410'. [ 129.868110][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.901012][ T7525] syzkaller1: entered promiscuous mode [ 129.921368][ T7525] syzkaller1: entered allmulticast mode [ 129.969725][ T7529] netlink: 96 bytes leftover after parsing attributes in process `syz.0.414'. [ 130.211692][ T7543] netlink: 'syz.2.418': attribute type 29 has an invalid length. [ 130.229578][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 130.281626][ T7543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.371264][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.418'. [ 130.400924][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 130.730944][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 130.801688][ T7569] team0 (unregistering): Port device team_slave_0 removed [ 130.872099][ T7569] team0 (unregistering): Port device team_slave_1 removed [ 130.902750][ T7572] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 130.952683][ T7572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.183460][ T29] IPVS: starting estimator thread 0... [ 131.277609][ T7587] IPVS: using max 25 ests per chain, 60000 per kthread [ 131.327927][ T7586] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 131.702244][ T7608] syzkaller0: entered promiscuous mode [ 131.721073][ T7608] syzkaller0: entered allmulticast mode [ 131.821283][ T7608] tun0: tun_chr_ioctl cmd 1074025675 [ 131.839125][ T7608] tun0: persist disabled [ 131.993510][ T7631] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 132.014944][ T7631] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 132.028526][ T7633] 0·: renamed from hsr_slave_1 (while UP) [ 132.056859][ T7622] IPVS: persistence engine module ip_vs_pe_À not found [ 132.076461][ T7633] 0·: entered allmulticast mode [ 132.109970][ T7633] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 132.433913][ T7653] tipc: Enabling of bearer rejected, failed to enable media [ 132.476247][ T7653] netlink: 'syz.4.444': attribute type 15 has an invalid length. [ 132.620437][ T7662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.630156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.738778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.067078][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.079318][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.773060][ T7721] syzkaller0: entered promiscuous mode [ 133.790519][ T7721] syzkaller0: entered allmulticast mode [ 133.952560][ T7729] x_tables: duplicate underflow at hook 1 [ 133.993150][ T7729] netlink: 'syz.0.466': attribute type 21 has an invalid length. [ 134.036959][ T7729] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.338732][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.347139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.368799][ T7743] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 134.385896][ T7743] bond4 (unregistering): Released all slaves [ 134.675239][ T7760] bond3: entered allmulticast mode [ 134.718225][ T7773] __nla_validate_parse: 18 callbacks suppressed [ 134.718245][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 134.775318][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 134.811947][ T7764] veth3: entered allmulticast mode [ 134.819731][ T7764] bond3: (slave veth3): Enslaving as an active interface with an up link [ 134.837103][ T7771] bond3 (unregistering): (slave veth3): Releasing backup interface [ 134.847077][ T7771] veth3: left allmulticast mode [ 134.860115][ T7771] bond3 (unregistering): Released all slaves [ 134.913454][ T7781] bridge3: port 1(vlan2) entered blocking state [ 134.921152][ T7781] bridge3: port 1(vlan2) entered disabled state [ 134.928313][ T7781] vlan2: entered allmulticast mode [ 134.936774][ T7781] bridge3: entered allmulticast mode [ 134.965817][ T7781] vlan2: left allmulticast mode [ 134.979009][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.988508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.999998][ T7781] bridge3: left allmulticast mode [ 135.298130][ T36] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 135.320132][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.3.487'. [ 135.896987][ T7818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'. [ 136.111267][ T7826] netlink: 156 bytes leftover after parsing attributes in process `syz.4.497'. [ 136.139722][ T7828] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 136.150869][ T7826] netlink: 156 bytes leftover after parsing attributes in process `syz.4.497'. [ 136.183656][ T7829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.200292][ T7834] Bluetooth: MGMT ver 1.23 [ 136.206348][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 136.219990][ T7838] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.499'. [ 136.231830][ T7838] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.414246][ T7828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.424264][ T7826] netlink: 156 bytes leftover after parsing attributes in process `syz.4.497'. [ 136.468401][ T7826] netlink: 156 bytes leftover after parsing attributes in process `syz.4.497'. [ 136.517135][ T7836] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 136.555897][ T7836] bond1: entered allmulticast mode [ 136.713963][ T7858] team0: Port device dummy0 removed [ 136.739075][ T7858] batman_adv: batadv0: Adding interface: dummy0 [ 136.758585][ T7858] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.827449][ T7858] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 137.218311][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.274550][ T7887] bridge_slave_1: left allmulticast mode [ 137.298886][ T7887] bridge_slave_1: left promiscuous mode [ 137.319331][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.382642][ T7887] bridge_slave_0: left allmulticast mode [ 137.397540][ T7887] bridge_slave_0: left promiscuous mode [ 137.415512][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.255652][ T7933] delete_channel: no stack [ 138.732371][ T7949] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 138.779672][ T7949] bond2: option packets_per_slave: allowed values 0 - 65535 [ 138.782940][ T7964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.808237][ T7967] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 138.841607][ T7949] bond2 (unregistering): Released all slaves [ 139.035887][ T7978] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 139.295004][ T7992] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 139.346805][ T7996] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 139.358298][ T7996] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 139.421335][ T7993] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 139.421674][ T8001] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 139.431489][ T7996] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 139.461210][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.513804][ T7993] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 139.564885][ T5849] block nbd0: Receive control failed (result -1) [ 139.742092][ T8016] __nla_validate_parse: 12 callbacks suppressed [ 139.742112][ T8016] netlink: 72 bytes leftover after parsing attributes in process `syz.0.538'. [ 140.439852][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 140.824039][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 140.873072][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 140.920223][ T8063] netlink: 224 bytes leftover after parsing attributes in process `syz.4.553'. [ 140.951984][ T8063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.553'. [ 141.377810][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.386295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.316756][ T8113] Bluetooth: MGMT ver 1.23 [ 143.373420][ T8163] openvswitch: netlink: Message has 63 unknown bytes. [ 143.559440][ T8170] xt_hashlimit: size too large, truncated to 1048576 [ 143.593730][ T8174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.110009][ T8200] openvswitch: netlink: IP tunnel TTL not specified. [ 144.352652][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 145.021090][ T8246] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 145.084706][ T8246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 145.142820][ T8255] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 145.159429][ T8255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.597'. [ 145.176078][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.1.596'. [ 145.182498][ T8255] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 145.208808][ T8255] netlink: 192 bytes leftover after parsing attributes in process `syz.3.597'. [ 145.258276][ T8258] netlink: 'syz.3.597': attribute type 2 has an invalid length. [ 145.285000][ T8258] netlink: 'syz.3.597': attribute type 11 has an invalid length. [ 145.300751][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.597'. [ 145.754404][ T8268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.805927][ T8268] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 145.956842][ T8268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.089806][ T8275] bond2: (slave ip6erspan0): making interface the new active one [ 146.110263][ T8275] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 146.212298][ T8287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'. [ 146.281209][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 146.302529][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 146.501103][ T8299] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 146.848567][ T8302] syzkaller0: entered promiscuous mode [ 146.860268][ T8302] syzkaller0: entered allmulticast mode [ 146.873184][ T8312] netlink: 'syz.3.605': attribute type 29 has an invalid length. [ 146.900699][ T8315] netlink: 'syz.0.610': attribute type 29 has an invalid length. [ 146.917752][ T8319] netlink: 'syz.3.605': attribute type 29 has an invalid length. [ 146.944125][ T8314] netlink: 'syz.0.610': attribute type 29 has an invalid length. [ 146.980548][ T8295] netlink: 548 bytes leftover after parsing attributes in process `syz.3.605'. [ 148.437753][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.446070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.061415][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.069635][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.078048][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.095665][ T8337] syzkaller0: entered promiscuous mode [ 149.102777][ T8337] syzkaller0: entered allmulticast mode [ 149.703958][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.678043][ T8356] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 150.693013][ T8358] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 150.918521][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 150.951247][ T8366] netlink: 'syz.1.618': attribute type 7 has an invalid length. [ 150.980371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.006932][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.618'. [ 151.516386][ T8398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.628'. [ 151.543412][ T8398] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.628'. [ 151.612187][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.629'. [ 151.624077][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.773151][ T8409] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002 [ 152.644069][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 152.726968][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 152.758919][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 152.788054][ T8472] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 152.853265][ T8474] netlink: 'syz.4.649': attribute type 1 has an invalid length. [ 152.864415][ T8460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.891060][ T8468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.902149][ T8479] netlink: 596 bytes leftover after parsing attributes in process `syz.1.648'. [ 152.914578][ T8468] bond3: (slave bond0): making interface the new active one [ 152.924425][ T8468] bond3: (slave bond0): Enslaving as an active interface with an up link [ 152.934764][ T8470] netlink: 'syz.1.648': attribute type 29 has an invalid length. [ 152.944168][ T8477] netlink: 'syz.1.648': attribute type 29 has an invalid length. [ 152.956191][ T8476] tipc: Enabled bearer , priority 0 [ 152.964958][ T8478] netlink: 'syz.0.650': attribute type 11 has an invalid length. [ 152.974005][ T8467] syzkaller0: entered promiscuous mode [ 152.981897][ T8478] netlink: 224 bytes leftover after parsing attributes in process `syz.0.650'. [ 152.991855][ T8467] syzkaller0: entered allmulticast mode [ 153.006902][ T8474] netlink: 'syz.4.649': attribute type 3 has an invalid length. [ 153.200932][ T8481] bond0 (unregistering): Released all slaves [ 153.205282][ T8490] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 153.271301][ T8467] tipc: Resetting bearer [ 153.431880][ T8490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.491812][ T8494] bond3: (slave bridge5): making interface the new active one [ 153.500833][ T8494] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 153.510293][ T8465] tipc: Resetting bearer [ 153.543139][ T8465] tipc: Disabling bearer [ 153.675536][ T8507] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 153.794444][ T8515] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 154.039432][ T8513] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.076954][ T8513] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 154.285163][ T8538] bond4: (slave gretap1): making interface the new active one [ 154.322034][ T8538] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 154.874492][ T8580] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 155.155629][ T9] IPVS: starting estimator thread 0... [ 155.267998][ T8589] IPVS: using max 22 ests per chain, 52800 per kthread [ 155.570607][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.579077][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.702812][ T8611] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 156.098128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.326573][ T8638] __nla_validate_parse: 13 callbacks suppressed [ 156.326595][ T8638] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.692'. [ 156.502635][ T8646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.510600][ T8646] IPv6: NLM_F_CREATE should be set when creating new route [ 156.517910][ T8644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.533948][ T8645] validate_nla: 1 callbacks suppressed [ 156.533968][ T8645] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 156.615679][ T8645] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.690661][ T8644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.742785][ T8646] lo: entered allmulticast mode [ 156.782351][ T8646] tunl0: entered allmulticast mode [ 156.820450][ T8646] gre0: entered allmulticast mode [ 156.857959][ T8646] gretap0: entered allmulticast mode [ 156.898465][ T8646] erspan0: entered allmulticast mode [ 156.922557][ T8646] ip_vti0: entered allmulticast mode [ 156.932289][ T8646] ip6_vti0: entered allmulticast mode [ 156.942460][ T8646] sit0: entered allmulticast mode [ 156.955593][ T8646] ip6tnl0: entered allmulticast mode [ 156.973402][ T8646] ip6gre0: entered allmulticast mode [ 156.990725][ T8646] syz_tun: entered allmulticast mode [ 157.009003][ T8646] ip6gretap0: entered allmulticast mode [ 157.021632][ T8646] vcan0: entered allmulticast mode [ 157.030997][ T8646] bond0: entered allmulticast mode [ 157.036424][ T8646] bond_slave_0: entered allmulticast mode [ 157.044557][ T8646] bond_slave_1: entered allmulticast mode [ 157.059745][ T8646] team0: entered allmulticast mode [ 157.065171][ T8646] team_slave_0: entered allmulticast mode [ 157.073304][ T8646] team_slave_1: entered allmulticast mode [ 157.091037][ T8646] dummy0: entered allmulticast mode [ 157.102783][ T8646] nlmon0: entered allmulticast mode [ 157.113038][ T8646] caif0: entered allmulticast mode [ 157.123566][ T8646] batadv0: entered allmulticast mode [ 157.132929][ T8646] vxcan0: entered allmulticast mode [ 157.139770][ T8646] vxcan1: entered allmulticast mode [ 157.146280][ T8646] veth0: entered allmulticast mode [ 157.153721][ T8646] veth1: entered allmulticast mode [ 157.162820][ T8646] wg0: entered allmulticast mode [ 157.170253][ T8646] wg1: entered allmulticast mode [ 157.180021][ T8646] wg2: entered allmulticast mode [ 157.191383][ T8646] veth0_to_bridge: entered allmulticast mode [ 157.221181][ T8646] veth1_to_bridge: entered allmulticast mode [ 157.245008][ T8646] veth0_to_bond: entered allmulticast mode [ 157.255811][ T8646] veth1_to_bond: entered allmulticast mode [ 157.269896][ T8646] veth0_to_team: entered allmulticast mode [ 157.282626][ T8646] veth1_to_team: entered allmulticast mode [ 157.295104][ T8646] veth0_to_batadv: entered allmulticast mode [ 157.306914][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.315503][ T8646] batadv_slave_0: entered allmulticast mode [ 157.325761][ T8646] veth1_to_batadv: entered allmulticast mode [ 157.337680][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.346024][ T8646] batadv_slave_1: entered allmulticast mode [ 157.361309][ T8646] xfrm0: entered allmulticast mode [ 157.371235][ T8646] veth0_to_hsr: entered allmulticast mode [ 157.384928][ T8646] hsr_slave_0: entered allmulticast mode [ 157.393779][ T8646] veth1_to_hsr: entered allmulticast mode [ 157.405096][ T8646] hsr_slave_1: entered allmulticast mode [ 157.413317][ T8646] hsr0: entered allmulticast mode [ 157.421092][ T8646] veth1_virt_wifi: entered allmulticast mode [ 157.431703][ T8646] veth0_virt_wifi: entered allmulticast mode [ 157.440408][ T8646] virt_wifi0: entered allmulticast mode [ 157.446272][ T8646] veth1_vlan: entered allmulticast mode [ 157.454139][ T8646] veth0_vlan: entered allmulticast mode [ 157.466005][ T8646] vlan0: entered allmulticast mode [ 157.471445][ T8646] vlan1: entered allmulticast mode [ 157.476938][ T8646] macvlan0: entered allmulticast mode [ 157.485525][ T8646] macvlan1: entered allmulticast mode [ 157.493314][ T8646] ipvlan0: entered allmulticast mode [ 157.499778][ T8646] ipvlan1: entered allmulticast mode [ 157.505390][ T8646] veth1_macvtap: entered allmulticast mode [ 157.515124][ T8646] veth0_macvtap: entered allmulticast mode [ 157.525517][ T8646] macvtap0: entered allmulticast mode [ 157.533464][ T8646] macsec0: entered allmulticast mode [ 157.541557][ T8646] geneve0: entered allmulticast mode [ 157.550595][ T8646] geneve1: entered allmulticast mode [ 157.559046][ T8646] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 157.572565][ T8646] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 157.583099][ T8646] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 157.595628][ T8646] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 157.605020][ T8646] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 157.611774][ T8646] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 157.619551][ T8646] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 157.626863][ T8646] bridge1: entered allmulticast mode [ 157.632505][ T8646] vxlan0: entered allmulticast mode [ 157.639413][ T8646] bridge2: left promiscuous mode [ 157.646165][ T8646] bridge3: entered allmulticast mode [ 157.651936][ T8646] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 157.660133][ T8646] bond1: entered allmulticast mode [ 157.666443][ T8646] bond2: entered allmulticast mode [ 157.672873][ T8646] bridge4: entered allmulticast mode [ 157.680748][ T8646] veth2: entered allmulticast mode [ 157.686019][ T8646] veth3: entered allmulticast mode [ 157.692031][ T8646] bond3: entered allmulticast mode [ 157.697259][ T8646] bridge5: entered allmulticast mode [ 157.754645][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.788405][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.863760][ T8685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.872163][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.872412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.903828][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.964041][ T8691] openvswitch: netlink: IP tunnel dst address not specified [ 158.273246][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 159.144649][ T8730] netlink: 'syz.4.718': attribute type 1 has an invalid length. [ 159.542182][ T8756] bond4: entered promiscuous mode [ 159.667217][ T8758] vlan2: entered allmulticast mode [ 159.696833][ T8758] bond0: entered allmulticast mode [ 159.710020][ T8762] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.730'. [ 159.723406][ T8758] bond_slave_0: entered allmulticast mode [ 159.733828][ T8758] bond_slave_1: entered allmulticast mode [ 159.835034][ T8773] netlink: 44 bytes leftover after parsing attributes in process `syz.0.731'. [ 159.851642][ T8773] unsupported nla_type 28962 [ 159.877046][ T8767] bond5: option min_links: invalid value (18446744073709551614) [ 159.885186][ T8767] bond5: option min_links: allowed values 0 - 2147483647 [ 159.897764][ T8767] bond5 (unregistering): Released all slaves [ 159.950253][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.732'. [ 159.978403][ T8753] syz.4.726 (8753) used greatest stack depth: 17152 bytes left [ 160.219478][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.732'. [ 160.236850][ T8758] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 160.287171][ T8758] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 160.315499][ T8792] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 160.336051][ T8758] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 160.403086][ T8758] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.514510][ T8758] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 160.676169][ T8805] tipc: Failed to remove unknown binding: 66,0,0/0:523374989/523374990 [ 160.686061][ T8805] tipc: Failed to remove unknown binding: 66,0,0/0:523374989/523374990 [ 162.149552][ T8805] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 162.156828][ T8792] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 162.157267][ T8805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.738'. [ 162.357040][ T1161] smbdirect: ib_dev[syz2] removed [ 162.586943][ T8813] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 162.755699][ T8823] openvswitch: netlink: Duplicate or invalid key (type 0). [ 162.806080][ T8823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.843266][ T8830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.019368][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.039933][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.071987][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.092524][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 163.241734][ T8847] netlink: 'syz.3.754': attribute type 3 has an invalid length. [ 163.390043][ T8861] xt_hashlimit: size too large, truncated to 1048576 [ 163.551803][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 163.575925][ T8868] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.759'. [ 163.717635][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 164.135060][ T8889] syzkaller0: entered promiscuous mode [ 164.154757][ T8889] syzkaller0: entered allmulticast mode [ 164.163165][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.768'. [ 164.192578][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 164.408224][ T8913] netlink: 'syz.3.773': attribute type 4 has an invalid length. [ 165.236036][ T8958] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.395481][ T8965] xt_cluster: node mask cannot exceed total number of nodes [ 165.412194][ T8965] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 165.422824][ T8963] syzkaller0: entered promiscuous mode [ 165.429823][ T8963] syzkaller0: entered allmulticast mode [ 165.435567][ T8965] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 165.600425][ T8974] openvswitch: netlink: Flow key attr not present in new flow. [ 166.006787][ T8989] syz.2.793: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.063313][ T8989] CPU: 0 UID: 0 PID: 8989 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 166.063342][ T8989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.063354][ T8989] Call Trace: [ 166.063362][ T8989] [ 166.063371][ T8989] dump_stack_lvl+0xe8/0x150 [ 166.063413][ T8989] warn_alloc+0x249/0x340 [ 166.063442][ T8989] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 166.063475][ T8989] ? __pfx_warn_alloc+0x10/0x10 [ 166.063509][ T8989] ? kasan_save_track+0x4f/0x80 [ 166.063533][ T8989] ? kasan_save_track+0x3e/0x80 [ 166.063553][ T8989] ? __kasan_kmalloc+0x93/0xb0 [ 166.063575][ T8989] ? __kmalloc_cache_noprof+0x31c/0x660 [ 166.063597][ T8989] ? xskq_create+0x56/0x170 [ 166.063620][ T8989] ? xsk_setsockopt+0x54c/0x990 [ 166.063640][ T8989] ? do_sock_setsockopt+0x17c/0x1b0 [ 166.063659][ T8989] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 166.063676][ T8989] ? do_syscall_64+0x15f/0xf80 [ 166.063708][ T8989] __vmalloc_node_range_noprof+0x132/0x1750 [ 166.063770][ T8989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.063801][ T8989] ? __kasan_kmalloc+0x93/0xb0 [ 166.063832][ T8989] vmalloc_user_noprof+0xad/0xe0 [ 166.063857][ T8989] ? xskq_create+0xbf/0x170 [ 166.063883][ T8989] xskq_create+0xbf/0x170 [ 166.063910][ T8989] xsk_init_queue+0x8a/0xe0 [ 166.063937][ T8989] xsk_setsockopt+0x54c/0x990 [ 166.063962][ T8989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.063984][ T8989] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.064019][ T8989] ? aa_sock_opt_perm+0xff/0x1a0 [ 166.064043][ T8989] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 166.064067][ T8989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.064103][ T8989] do_sock_setsockopt+0x17c/0x1b0 [ 166.064129][ T8989] __x64_sys_setsockopt+0x13d/0x1b0 [ 166.064154][ T8989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.064177][ T8989] do_syscall_64+0x15f/0xf80 [ 166.064205][ T8989] ? trace_irq_disable+0x3b/0x140 [ 166.064233][ T8989] ? clear_bhb_loop+0x40/0x90 [ 166.064259][ T8989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.064280][ T8989] RIP: 0033:0x7f0d3db9cdd9 [ 166.064301][ T8989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.064318][ T8989] RSP: 002b:00007f0d3e975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.064342][ T8989] RAX: ffffffffffffffda RBX: 00007f0d3de15fa0 RCX: 00007f0d3db9cdd9 [ 166.064362][ T8989] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 166.064375][ T8989] RBP: 00007f0d3dc32d69 R08: 0000000000000004 R09: 0000000000000000 [ 166.064388][ T8989] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.064400][ T8989] R13: 00007f0d3de16038 R14: 00007f0d3de15fa0 R15: 00007ffe67e4dae8 [ 166.064436][ T8989] [ 166.064478][ T8989] Mem-Info: [ 166.128172][ T9006] erspan0: left allmulticast mode [ 166.163338][ T8989] active_anon:6175 inactive_anon:0 isolated_anon:0 [ 166.163338][ T8989] active_file:2565 inactive_file:39964 isolated_file:0 [ 166.163338][ T8989] unevictable:768 dirty:76 writeback:0 [ 166.163338][ T8989] slab_reclaimable:10635 slab_unreclaimable:98036 [ 166.163338][ T8989] mapped:29207 shmem:1357 pagetables:1266 [ 166.163338][ T8989] sec_pagetables:0 bounce:0 [ 166.163338][ T8989] kernel_misc_reclaimable:0 [ 166.163338][ T8989] free:1329584 free_pcp:9034 free_cma:0 [ 166.398103][ T8989] Node 0 active_anon:24600kB inactive_anon:0kB active_file:10260kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116828kB dirty:296kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12392kB pagetables:4928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 166.467015][ T8989] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 166.565739][ T8989] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.680389][ T8989] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 166.747170][ T8989] Node 0 DMA32 free:1359028kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24800kB inactive_anon:0kB active_file:10260kB inactive_file:159652kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:36708kB local_pcp:17840kB free_cma:0kB [ 166.794182][ T9030] bridge: RTM_NEWNEIGH with invalid ether address [ 166.821399][ T9030] bridge: RTM_NEWNEIGH with invalid ether address [ 166.833208][ T8989] lowmem_reserve[]: 0 0 0 0 0 [ 166.879109][ T9037] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 166.901666][ T8989] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.968446][ T8989] lowmem_reserve[]: 0 0 0 0 0 [ 167.031026][ T8989] Node 1 Normal free:3944076kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.098130][ T8989] lowmem_reserve[]: 0 0 0 0 0 [ 167.104920][ T8989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.112484][ T9042] erspan0: entered promiscuous mode [ 167.119936][ T8989] Node 0 DMA32: 1712*4kB (UME) 2083*8kB (UME) 1472*16kB (UME) 379*32kB (UM) 434*64kB (UM) 423*128kB (UM) 283*256kB (UME) 147*512kB (UM) 76*1024kB (UME) 32*2048kB (UM) 226*4096kB (M) = 1357880kB [ 167.145366][ T8989] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.149001][ T9042] gretap0: entered promiscuous mode [ 167.187217][ T8989] Node 1 Normal: 1*4kB (M) 13*8kB (UM) 6*16kB (UM) 12*32kB (UM) 9*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944076kB [ 167.225590][ T8989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.247904][ T8989] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.272442][ T8989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.305538][ T8989] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.316494][ T9048] __nla_validate_parse: 142 callbacks suppressed [ 167.316512][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.808'. [ 167.346678][ T8989] 43899 total pagecache pages [ 167.380420][ T8989] 0 pages in swap cache [ 167.401406][ T8989] Free swap = 124996kB [ 167.418211][ T8989] Total swap = 124996kB [ 167.436056][ T8989] 2097051 pages RAM [ 167.455204][ T8989] 0 pages HighMem/MovableOnly [ 167.476311][ T8989] 427573 pages reserved [ 167.489955][ T8989] 0 pages cma reserved [ 167.581239][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 167.656311][ T9065] syzkaller0: create flow: hash 4168383660 index 1 [ 167.922324][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 168.081310][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.104051][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.112129][ T48] syzkaller0: tun_net_xmit 76 [ 168.118713][ T48] syzkaller0: tun_net_xmit 48 [ 168.128345][ T9079] syzkaller0: delete flow: hash 4168383660 index 1 [ 168.192892][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.220056][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.240899][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.266043][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.276481][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.309450][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.328109][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.363535][ T9087] netlink: 'syz.0.815': attribute type 3 has an invalid length. [ 168.768138][ T9119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.315888][ T9080] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 170.909838][ T9154] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.829'. [ 171.122119][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 171.185641][ T9165] netlink: 260 bytes leftover after parsing attributes in process `syz.3.833'. [ 171.440789][ T9174] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 171.683612][ T9186] netlink: 260 bytes leftover after parsing attributes in process `syz.4.834'. [ 171.763063][ T9190] netlink: 68 bytes leftover after parsing attributes in process `syz.3.842'. [ 171.791572][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 171.819354][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 171.938445][ T9190] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.047185][ T9203] ieee802154 phy1 wpan1: encryption failed: -90 [ 172.492798][ T9222] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 172.522390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.790902][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.854'. [ 172.877775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 172.939177][ T9235] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 173.548846][ T9271] validate_nla: 29 callbacks suppressed [ 173.548869][ T9271] netlink: 'syz.2.865': attribute type 3 has an invalid length. [ 173.593943][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 173.672271][ T9279] sctp: [Deprecated]: syz.1.868 (pid 9279) Use of int in maxseg socket option. [ 173.672271][ T9279] Use struct sctp_assoc_value instead [ 177.025691][ T9334] netlink: 'syz.0.883': attribute type 11 has an invalid length. [ 177.061812][ T9334] netlink: 'syz.0.883': attribute type 11 has an invalid length. [ 177.090136][ T9334] netlink: 224 bytes leftover after parsing attributes in process `syz.0.883'. [ 177.145970][ T9343] netlink: 'syz.1.884': attribute type 13 has an invalid length. [ 177.506631][ T9346] netlink: 'syz.1.884': attribute type 2 has an invalid length. [ 177.528392][ T9346] netlink: 'syz.1.884': attribute type 2 has an invalid length. [ 177.544261][ T9360] tipc: Started in network mode [ 177.549672][ T9360] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 177.562760][ T9360] tipc: Enabled bearer , priority 24 [ 178.031473][ T9380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 178.337324][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.899'. [ 178.384584][ T9402] netlink: 104 bytes leftover after parsing attributes in process `syz.0.899'. [ 178.436151][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.900'. [ 178.695956][ T9422] netlink: 72 bytes leftover after parsing attributes in process `syz.0.905'. [ 178.995305][ T29] tipc: Node number set to 10005162 [ 179.264213][ T9443] xt_hashlimit: size too large, truncated to 1048576 [ 179.450540][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.536865][ T9449] bridge_slave_0 (unregistering): left allmulticast mode [ 179.604414][ T9449] bridge_slave_0 (unregistering): left promiscuous mode [ 179.644491][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.949743][ T9470] netlink: 272 bytes leftover after parsing attributes in process `syz.3.917'. [ 179.979972][ T9470] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 180.465907][ T9496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.742791][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.928'. [ 180.773770][ T9512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.928'. [ 180.791617][ T9514] netlink: 80 bytes leftover after parsing attributes in process `syz.0.928'. [ 181.406458][ T9533] syzkaller0: entered promiscuous mode [ 181.425218][ T9533] syzkaller0: entered allmulticast mode [ 181.447303][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 181.464679][ T9537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.549453][ T9537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.099746][ T9558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.125969][ T9558] bridge0: port 1(bond5) entered blocking state [ 182.158638][ T9558] bridge0: port 1(bond5) entered disabled state [ 182.188156][ T9558] bond5: entered allmulticast mode [ 182.203715][ T9558] bond5: entered promiscuous mode [ 182.215324][ T9558] bridge0: port 1(bond5) entered blocking state [ 182.223218][ T9558] bridge0: port 1(bond5) entered forwarding state [ 182.284872][ T9575] : entered promiscuous mode [ 182.304519][ T48] bridge0: port 1(bond5) entered disabled state [ 182.608876][ T9601] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 182.807554][ T9594] "syz.2.949" (9594) uses obsolete ecb(arc4) skcipher [ 183.023921][ T9608] bond4: option lp_interval: invalid value (0) [ 183.030456][ T9608] bond4: option lp_interval: allowed values 1 - 2147483647 [ 183.045334][ T9608] bond4 (unregistering): Released all slaves [ 183.729668][ T9653] __nla_validate_parse: 4 callbacks suppressed [ 183.729689][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 183.759093][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 183.770157][ T9654] gre1: entered promiscuous mode [ 183.797219][ T9655] gre1: entered promiscuous mode [ 183.883047][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.970'. [ 184.085921][ T9669] netlink: 'syz.4.974': attribute type 13 has an invalid length. [ 184.149037][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.344100][ T9670] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.973'. [ 184.356375][ T9685] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 184.396749][ T9685] team0: Device ipvlan1 failed to register rx_handler [ 184.649231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.692579][ T9702] netlink: 196 bytes leftover after parsing attributes in process `syz.2.980'. [ 184.717018][ T9702] netlink: 196 bytes leftover after parsing attributes in process `syz.2.980'. [ 184.726876][ T9702] netlink: 19 bytes leftover after parsing attributes in process `syz.2.980'. [ 184.752476][ T9702] geneve2: entered promiscuous mode [ 185.198603][ T9719] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.985'. [ 185.512424][ T9738] netlink: 108 bytes leftover after parsing attributes in process `syz.2.990'. [ 185.758327][ T9745] netlink: 76 bytes leftover after parsing attributes in process `syz.2.993'. [ 186.408055][ T9787] netlink: 'syz.3.1002': attribute type 10 has an invalid length. [ 186.492879][ T9787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.522486][ T9787] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 186.619183][ T9795] netlink: 'syz.4.1005': attribute type 10 has an invalid length. [ 187.056232][ T9819] openvswitch: netlink: Message has 5 unknown bytes. [ 187.170028][ T9821] sctp: [Deprecated]: syz.3.1014 (pid 9821) Use of int in maxseg socket option. [ 187.170028][ T9821] Use struct sctp_assoc_value instead [ 187.214747][ T9818] set match dimension is over the limit! [ 187.594494][ T9847] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 187.631439][ T9847] netlink: 'syz.0.1018': attribute type 5 has an invalid length. [ 187.784009][ T9858] bond1: entered promiscuous mode [ 188.756557][ T9905] __nla_validate_parse: 6 callbacks suppressed [ 188.756576][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 189.024081][ T9916] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 189.531112][ T9942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.668237][ T9951] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.125956][ T9967] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 190.156446][ T9967] bond5 (unregistering): Released all slaves [ 190.795162][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 190.908882][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 191.103796][T10011] IPv6: sit3: Disabled Multicast RS [ 191.130786][T10011] sit3: entered allmulticast mode [ 191.317111][T10031] SET target dimension over the limit! [ 191.543720][T10047] netlink: 'syz.0.1065': attribute type 10 has an invalid length. [ 191.645739][T10041] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 191.703058][T10041] bond5 (unregistering): Released all slaves [ 191.830219][T10047] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 191.846995][T10047] batman_adv: batadv0: Adding interface: netdevsim0 [ 191.854003][T10047] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.881109][T10047] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 192.063003][T10070] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1073'. [ 192.179340][T10079] netlink: 'syz.4.1075': attribute type 2 has an invalid length. [ 192.232420][T10079] netlink: 'syz.4.1075': attribute type 3 has an invalid length. [ 192.294227][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1075'. [ 192.331319][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1076'. [ 192.386376][T10086] tunl0: Caught tx_queue_len zero misconfig [ 193.426939][T10135] syzkaller0: entered allmulticast mode [ 193.546200][T10135] syzkaller0 (unregistering): left allmulticast mode [ 193.563043][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 193.896584][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1098'. [ 194.075889][T10165] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1100'. [ 194.124275][T10165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.302785][T10174] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1102'. [ 194.365789][T10175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1101'. [ 194.397484][T10175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1101'. [ 194.505597][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.922915][T10184] syzkaller0: entered promiscuous mode [ 194.935477][T10184] syzkaller0: entered allmulticast mode [ 194.969456][T10189] macvlan0: entered promiscuous mode [ 195.009033][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1105'. [ 197.422187][T10237] netlink: 'syz.4.1116': attribute type 12 has an invalid length. [ 197.549634][T10243] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1117'. [ 197.639833][T10244] syzkaller1: entered promiscuous mode [ 197.670931][T10244] syzkaller1: entered allmulticast mode [ 197.687439][T10252] delete_channel: no stack [ 197.739136][T10252] xfrm1: entered allmulticast mode [ 197.847177][T10260] syzkaller1: entered promiscuous mode [ 197.860464][T10260] syzkaller1: entered allmulticast mode [ 198.124015][T10273] netlink: 2212 bytes leftover after parsing attributes in process `syz.2.1125'. [ 198.162906][T10275] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 198.164402][T10273] openvswitch: netlink: Flow key attr not present in new flow. [ 198.280412][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1128'. [ 198.360538][T10275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.449484][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 198.876877][T10309] IPv6: sit1: Disabled Multicast RS [ 199.753816][T10350] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 200.277747][T10361] openvswitch: netlink: Flow actions attr not present in new flow. [ 200.351904][T10369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 200.363789][T10352] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.433125][T10352] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 200.512546][T10352] bond3: (slave vxcan3): making interface the new active one [ 200.531831][T10352] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 200.549897][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 200.643262][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 200.717116][ T156] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.741530][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 200.756693][ T156] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.886617][ T156] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.897063][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 200.920860][ T156] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.470966][T10418] syzkaller1: entered promiscuous mode [ 201.505952][T10418] syzkaller1: entered allmulticast mode [ 201.778622][T10414] lec:lec_atm_close: lec0: Shut down! [ 201.853277][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 201.881066][T10438] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 201.920200][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.966614][T10438] bridge_slave_1: left allmulticast mode [ 201.998133][T10438] bridge_slave_1: left promiscuous mode [ 202.022881][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.096445][T10438] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 202.122669][T10445] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 202.139275][T10445] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1170'. [ 202.483830][T10465] syzkaller0: entered promiscuous mode [ 202.492583][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 202.495464][T10465] syzkaller0: entered allmulticast mode [ 202.824469][T10485] syzkaller1: entered promiscuous mode [ 202.864620][T10485] syzkaller1: entered allmulticast mode [ 203.088718][T10495] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 203.137081][T10499] lo: Caught tx_queue_len zero misconfig [ 203.395893][T10514] openvswitch: netlink: Flow key attribute not present in set flow. [ 203.808566][ T5899] lec:lec_start_xmit: lec0:No lecd attached [ 203.876353][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 203.918819][T10540] SET target dimension over the limit! [ 203.939749][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1193'. [ 203.968339][T10535] syzkaller0: entered promiscuous mode [ 203.993847][T10535] syzkaller0: entered allmulticast mode [ 204.026395][T10535] netlink: 'syz.3.1192': attribute type 23 has an invalid length. [ 204.080782][T10543] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 204.128548][T10544] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 204.226370][T10555] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 204.269247][T10555] syzkaller0: entered promiscuous mode [ 204.285077][T10555] syzkaller0: entered allmulticast mode [ 204.863750][T10582] x_tables: duplicate underflow at hook 1 [ 205.374031][T10607] __nla_validate_parse: 4 callbacks suppressed [ 205.374068][T10607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1207'. [ 205.399144][T10610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1210'. [ 205.473267][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 205.529286][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 205.564363][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 205.608389][T10616] netlink: 'syz.4.1212': attribute type 11 has an invalid length. [ 205.925738][T10638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1218'. [ 205.944762][T10638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1218'. [ 206.241096][T10655] xt_policy: too many policy elements [ 206.654835][T10678] netlink: 'syz.0.1229': attribute type 4 has an invalid length. [ 206.959299][T10692] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1235'. [ 207.013328][T10696] netlink: 'syz.3.1236': attribute type 1 has an invalid length. [ 207.140861][T10696] bond5 (unregistering): Released all slaves [ 207.273665][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 207.467498][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 207.490648][T10715] netlink: 'syz.4.1240': attribute type 2 has an invalid length. [ 207.517476][T10715] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 207.598324][T10721] netlink: 'syz.0.1242': attribute type 16 has an invalid length. [ 207.632552][T10721] netlink: 'syz.0.1242': attribute type 17 has an invalid length. [ 207.660905][T10721] lo: left allmulticast mode [ 207.717257][T10721] tunl0: left allmulticast mode [ 207.758230][T10721] gre0: left allmulticast mode [ 207.789924][T10721] gretap0: left allmulticast mode [ 207.814277][T10721] erspan0: entered promiscuous mode [ 207.835120][T10721] ip_vti0: left allmulticast mode [ 207.851017][T10721] ip6_vti0: left allmulticast mode [ 207.870408][T10721] sit0: left allmulticast mode [ 207.892852][T10721] ip6tnl0: left allmulticast mode [ 207.903669][T10721] ip6gre0: left allmulticast mode [ 207.922737][T10721] syz_tun: left allmulticast mode [ 207.941855][T10721] ip6gretap0: left allmulticast mode [ 207.953446][T10721] bond0: left allmulticast mode [ 207.960075][T10721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.970132][T10721] team0: left allmulticast mode [ 207.975853][T10721] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.983962][T10721] dummy0: left allmulticast mode [ 207.993242][T10721] nlmon0: left allmulticast mode [ 208.000984][T10721] caif0: left allmulticast mode [ 208.005853][T10721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.057730][ T9104] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 208.107823][ T9104] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 208.161903][ T9104] bond0: now running without any active interface! [ 208.715168][T10772] netlink: 'syz.1.1261': attribute type 10 has an invalid length. [ 208.749673][T10772] team0: Device vxcan1 is of different type [ 208.835463][T10779] x_tables: unsorted entry at hook 3 [ 209.057374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 209.067008][ C1] lec:lec_tx_timeout: lec0 [ 209.072202][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 209.208836][T10792] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 209.317063][T10792] 8021q: adding VLAN 0 to HW filter on device bond6 [ 209.338795][T10799] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 209.375166][T10799] bond6: entered allmulticast mode [ 209.416298][T10792] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 209.959561][T10824] can: request_module (can-proto-0) failed. [ 210.167677][T10828] nbd1: detected capacity change from 0 to 63 [ 210.193561][ T5161] block nbd1: Receive control failed (result -32) [ 210.193627][ T5849] block nbd1: Receive control failed (result -32) [ 210.235216][ T5848] block nbd1: Dead connection, failed to find a fallback [ 210.260323][ T5848] block nbd1: shutting down sockets [ 210.266287][ T5848] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.299603][ T5848] Buffer I/O error on dev nbd1, logical block 0, async page read [ 210.329384][ T5848] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.353422][ T5848] Buffer I/O error on dev nbd1, logical block 1, async page read [ 210.374995][ T5848] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.399059][T10846] lo: Caught tx_queue_len zero misconfig [ 210.404871][ T5848] Buffer I/O error on dev nbd1, logical block 2, async page read [ 210.419488][ T5848] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.449312][ T5848] Buffer I/O error on dev nbd1, logical block 3, async page read [ 210.472117][ T5848] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.475138][T10846] netlink: 'syz.4.1285': attribute type 1 has an invalid length. [ 210.482976][ T5848] Buffer I/O error on dev nbd1, logical block 0, async page read [ 210.502257][ T5848] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.514015][T10850] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 210.523039][ T5848] Buffer I/O error on dev nbd1, logical block 1, async page read [ 210.546793][ T5848] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.556859][T10850] __nla_validate_parse: 13 callbacks suppressed [ 210.556877][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 210.577135][T10851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.578358][ T5848] Buffer I/O error on dev nbd1, logical block 2, async page read [ 210.608644][T10851] raw_sendmsg: syz.4.1285 forgot to set AF_INET. Fix it! [ 210.636429][ T5848] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.665510][ T5848] Buffer I/O error on dev nbd1, logical block 3, async page read [ 210.693560][ T5848] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.752826][ T5848] Buffer I/O error on dev nbd1, logical block 0, async page read [ 210.791276][ T5848] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 210.833109][ T5848] Buffer I/O error on dev nbd1, logical block 1, async page read [ 210.854409][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 210.876645][ T5848] ldm_validate_partition_table(): Disk read failed. [ 210.933598][ T5848] Dev nbd1: unable to read RDB block 0 [ 210.936277][T10868] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1291'. [ 210.964633][T10863] xt_l2tp: invalid flags combination: 8 [ 210.976102][ T5848] nbd1: unable to read partition table [ 211.066202][ T5848] ldm_validate_partition_table(): Disk read failed. [ 211.114391][ T5848] Dev nbd1: unable to read RDB block 0 [ 211.196449][ T5848] nbd1: unable to read partition table [ 211.378953][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.541744][T10892] syzkaller0: entered promiscuous mode [ 211.597430][T10892] syzkaller0: entered allmulticast mode [ 211.968399][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 212.419699][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.671069][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 212.859288][T10962] --map-set only usable from mangle table [ 213.055635][T10968] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 213.058014][ T9104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.069741][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1319'. [ 213.091071][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 213.124965][T10970] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 213.326378][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 213.459080][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.467131][T10988] team0: Device vlan0 is already an upper device of the team interface [ 213.504477][T10995] netlink: 'syz.0.1326': attribute type 1 has an invalid length. [ 213.515019][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1325'. [ 213.550398][T10997] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1325'. [ 213.700027][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.701291][T10997] veth3: entered promiscuous mode [ 213.711305][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.751639][ T9108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.028674][T11016] netlink: 'syz.1.1332': attribute type 5 has an invalid length. [ 214.097400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 214.105931][ C1] lec:lec_tx_timeout: lec0 [ 214.112502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.210845][T11018] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.248793][T11018] bond4: (slave lo): Enslaving as an active interface with an up link [ 214.304664][T11018] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 214.502581][T11038] sctp: [Deprecated]: syz.0.1337 (pid 11038) Use of int in max_burst socket option. [ 214.502581][T11038] Use struct sctp_assoc_value instead [ 214.529688][T11045] IPVS: length: 82 != 24 [ 214.554088][T11048] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 214.980033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.995169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 215.460661][T11074] geneve2: entered promiscuous mode [ 215.483436][T11074] geneve2: entered allmulticast mode [ 215.512810][ T9106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 215.541123][ T9106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 215.573719][ T9106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 215.604315][T11083] netlink: 'syz.3.1350': attribute type 1 has an invalid length. [ 215.607185][ T9106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 216.049492][T11109] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 216.060459][T11109] __nla_validate_parse: 68 callbacks suppressed [ 216.060489][T11109] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1356'. [ 216.076542][T11109] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1356'. [ 216.085803][T11109] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1356'. [ 216.346745][T11125] netlink: 'syz.2.1359': attribute type 21 has an invalid length. [ 216.452147][T11119] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 216.483358][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 216.788937][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1363'. [ 217.166098][T11161] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1366'. [ 217.232502][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 217.252832][T11161] netlink: 'syz.4.1366': attribute type 7 has an invalid length. [ 217.258499][T11164] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.261638][T11161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1366'. [ 217.293305][T11164] bond0: (slave lo): Error: Device can not be enslaved while up [ 217.370033][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 217.560411][T11170] team_slave_0 (unregistering): left promiscuous mode [ 217.582952][T11170] team_slave_0 (unregistering): left allmulticast mode [ 217.599345][T11170] team0: Port device team_slave_0 removed [ 217.807187][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 217.824195][T11191] netlink: 'syz.4.1375': attribute type 58 has an invalid length. [ 217.986682][T11198] ip6tnl0: Caught tx_queue_len zero misconfig [ 218.031695][T11199] Cannot find add_set index 0 as target [ 218.437487][T11222] sctp: [Deprecated]: syz.4.1382 (pid 11222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.437487][T11222] Use struct sctp_sack_info instead [ 218.801602][T11238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 218.809072][T11238] IPv6: NLM_F_CREATE should be set when creating new route [ 218.983593][T11248] net_ratelimit: 3 callbacks suppressed [ 218.983621][T11248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.133977][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 219.142370][ C1] lec:lec_tx_timeout: lec0 [ 219.147125][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.107481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.173560][T11262] __nla_validate_parse: 10 callbacks suppressed [ 221.173582][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'. [ 221.221410][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'. [ 221.242828][T11262] netlink: 'syz.1.1393': attribute type 5 has an invalid length. [ 221.263999][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1393'. [ 221.292888][T11264] set match dimension is over the limit! [ 221.322242][T11262] geneve2: entered promiscuous mode [ 221.334643][T11262] geneve2: entered allmulticast mode [ 221.356158][ T138] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 221.375352][T11274] netlink: 'syz.2.1396': attribute type 10 has an invalid length. [ 221.377079][T11270] sctp: [Deprecated]: syz.0.1395 (pid 11270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.377079][T11270] Use struct sctp_sack_info instead [ 221.407109][ T138] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 221.526620][T11274] team0 (unregistering): Port device team_slave_0 removed [ 221.565478][T11274] team0 (unregistering): Port device team_slave_1 removed [ 221.599226][ T9106] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 221.617925][ T9106] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 221.757775][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'. [ 221.863742][T11303] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1403'. [ 221.936954][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 222.009870][T11309] --map-set only usable from mangle table [ 222.605270][T11344] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.1415'. [ 222.632653][T11344] netlink: Unknown conntrack attr (type=2304, max=9) [ 222.741850][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 222.898414][T11360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1420'. [ 222.916173][T11358] xt_TPROXY: Can be used only with -p tcp or -p udp [ 223.131858][T11374] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1424'. [ 223.172795][T11373] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 223.189508][T11373] bond5 (unregistering): Released all slaves [ 224.157403][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 224.165695][ C1] lec:lec_tx_timeout: lec0 [ 224.170748][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 224.356676][T11423] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 224.483197][T11427] tipc: Started in network mode [ 224.513247][T11427] tipc: Node identity 0a4c7fc02e2f, cluster identity 4711 [ 224.540891][T11427] tipc: Enabled bearer , priority 0 [ 224.875920][T11434] syzkaller0: entered promiscuous mode [ 224.893182][T11434] syzkaller0: entered allmulticast mode [ 224.911473][T11434] tipc: Resetting bearer [ 225.000263][T11434] tipc: Resetting bearer [ 227.592112][T11434] tipc: Disabling bearer [ 227.626020][ T5899] tipc: Node number set to 610500544 [ 227.839527][T11510] xt_hashlimit: size too large, truncated to 1048576 [ 228.070158][T11520] __nla_validate_parse: 4 callbacks suppressed [ 228.070178][T11520] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1459'. [ 228.115860][T11520] ip6tnl0: Caught tx_queue_len zero misconfig [ 228.201094][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1459'. [ 228.214086][T11533] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 228.281372][T11538] wg1: entered promiscuous mode [ 228.462886][T11544] netlink: 'syz.3.1465': attribute type 12 has an invalid length. [ 228.488543][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 228.512763][T11544] netlink: 'syz.3.1465': attribute type 12 has an invalid length. [ 228.537452][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 228.595816][T11547] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1466'. [ 228.680525][T11549] netlink: 'syz.4.1467': attribute type 7 has an invalid length. [ 228.744546][T11554] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 228.766860][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.766993][T11549] netlink: 'syz.4.1467': attribute type 7 has an invalid length. [ 228.793559][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.911917][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1469'. [ 228.974106][T11557] bond5: (slave ip6gretap1): making interface the new active one [ 228.984061][T11557] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.993405][T11557] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.001610][T11557] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 229.011289][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.023582][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.177420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.185516][ C1] lec:lec_tx_timeout: lec0 [ 229.190707][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.225896][T11570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'. [ 229.349212][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 229.603277][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1478'. [ 229.624739][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 229.660401][T11591] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 229.814324][T11604] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 230.403849][T11631] Cannot find set identified by id 0 to match [ 230.660378][T11644] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 230.722704][T11642] lo: entered promiscuous mode [ 230.732680][T11642] tunl0: entered promiscuous mode [ 230.744973][T11642] gre0: entered promiscuous mode [ 230.769804][T11642] gretap0: entered promiscuous mode [ 230.811602][T11642] ip_vti0: entered promiscuous mode [ 230.904573][T11642] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 231.546924][T11701] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 231.962096][T11720] [ 231.964499][T11720] ====================================================== [ 231.971902][T11720] WARNING: possible circular locking dependency detected [ 231.978932][T11720] syzkaller #0 Not tainted [ 231.983374][T11720] ------------------------------------------------------ [ 231.990388][T11720] syz.4.1513/11720 is trying to acquire lock: [ 231.996452][T11720] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 232.005611][T11720] [ 232.005611][T11720] but task is already holding lock: [ 232.012975][T11720] ffff88802c306538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 232.022469][T11720] [ 232.022469][T11720] which lock already depends on the new lock. [ 232.022469][T11720] [ 232.032882][T11720] [ 232.032882][T11720] the existing dependency chain (in reverse order) is: [ 232.041897][T11720] [ 232.041897][T11720] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 232.049468][T11720] __might_fault+0xcb/0x130 [ 232.054505][T11720] _copy_from_user+0x28/0xb0 [ 232.059622][T11720] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 232.066128][T11720] ip_generic_getfrag+0x149/0x2d0 [ 232.071707][T11720] __ip6_append_data+0x3902/0x3e90 [ 232.077380][T11720] ip6_append_data+0x10f/0x280 [ 232.082676][T11720] rawv6_sendmsg+0x12d3/0x18e0 [ 232.088067][T11720] ____sys_sendmsg+0x80a/0x9f0 [ 232.093363][T11720] ___sys_sendmsg+0x2a5/0x360 [ 232.098591][T11720] __x64_sys_sendmsg+0x1bd/0x2a0 [ 232.104314][T11720] do_syscall_64+0x15f/0xf80 [ 232.109452][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.115875][T11720] [ 232.115875][T11720] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 232.123642][T11720] lock_sock_nested+0x41/0x100 [ 232.128943][T11720] inet_shutdown+0x6a/0x390 [ 232.133979][T11720] nbd_mark_nsock_dead+0x2e9/0x560 [ 232.139622][T11720] recv_work+0x1c2e/0x1d40 [ 232.144674][T11720] process_scheduled_works+0xb5d/0x1860 [ 232.150851][T11720] worker_thread+0xa53/0xfc0 [ 232.155985][T11720] kthread+0x388/0x470 [ 232.160610][T11720] ret_from_fork+0x514/0xb70 [ 232.165734][T11720] ret_from_fork_asm+0x1a/0x30 [ 232.171024][T11720] [ 232.171024][T11720] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 232.178677][T11720] __mutex_lock+0x1a3/0x1550 [ 232.183802][T11720] nbd_queue_rq+0x37b/0x1100 [ 232.188919][T11720] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 232.194989][T11720] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 232.201857][T11720] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 232.208387][T11720] blk_mq_run_hw_queue+0x348/0x4f0 [ 232.214028][T11720] blk_mq_dispatch_list+0xd16/0xe10 [ 232.219753][T11720] blk_mq_flush_plug_list+0x48d/0x570 [ 232.225651][T11720] __blk_flush_plug+0x3ed/0x4d0 [ 232.231029][T11720] __submit_bio+0x28d/0x580 [ 232.236071][T11720] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 232.242230][T11720] block_read_full_folio+0x599/0x830 [ 232.248149][T11720] filemap_read_folio+0x137/0x3b0 [ 232.253808][T11720] do_read_cache_folio+0x358/0x590 [ 232.259459][T11720] read_part_sector+0xb6/0x2b0 [ 232.264779][T11720] adfspart_check_ICS+0xb1/0x960 [ 232.270279][T11720] bdev_disk_changed+0x817/0x1770 [ 232.275836][T11720] blkdev_get_whole+0x380/0x510 [ 232.281238][T11720] bdev_open+0x31e/0xd30 [ 232.286106][T11720] blkdev_open+0x470/0x610 [ 232.291138][T11720] do_dentry_open+0x785/0x14e0 [ 232.296448][T11720] vfs_open+0x3b/0x340 [ 232.301042][T11720] path_openat+0x2e08/0x3860 [ 232.306166][T11720] do_file_open+0x23e/0x4a0 [ 232.311733][T11720] do_sys_openat2+0x113/0x200 [ 232.316934][T11720] __x64_sys_openat+0x138/0x170 [ 232.322309][T11720] do_syscall_64+0x15f/0xf80 [ 232.327434][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.333855][T11720] [ 232.333855][T11720] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 232.341071][T11720] __mutex_lock+0x1a3/0x1550 [ 232.346193][T11720] nbd_queue_rq+0xc6/0x1100 [ 232.351237][T11720] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 232.357308][T11720] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 232.364204][T11720] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 232.370733][T11720] blk_mq_run_hw_queue+0x348/0x4f0 [ 232.376384][T11720] blk_mq_dispatch_list+0xd16/0xe10 [ 232.382155][T11720] blk_mq_flush_plug_list+0x48d/0x570 [ 232.388059][T11720] __blk_flush_plug+0x3ed/0x4d0 [ 232.393436][T11720] __submit_bio+0x28d/0x580 [ 232.398466][T11720] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 232.404625][T11720] block_read_full_folio+0x599/0x830 [ 232.410440][T11720] filemap_read_folio+0x137/0x3b0 [ 232.416095][T11720] do_read_cache_folio+0x358/0x590 [ 232.421740][T11720] read_part_sector+0xb6/0x2b0 [ 232.427384][T11720] adfspart_check_ICS+0xb1/0x960 [ 232.432884][T11720] bdev_disk_changed+0x817/0x1770 [ 232.438443][T11720] blkdev_get_whole+0x380/0x510 [ 232.443825][T11720] bdev_open+0x31e/0xd30 [ 232.448593][T11720] blkdev_open+0x470/0x610 [ 232.453644][T11720] do_dentry_open+0x785/0x14e0 [ 232.459046][T11720] vfs_open+0x3b/0x340 [ 232.463640][T11720] path_openat+0x2e08/0x3860 [ 232.468760][T11720] do_file_open+0x23e/0x4a0 [ 232.473792][T11720] do_sys_openat2+0x113/0x200 [ 232.478990][T11720] __x64_sys_openat+0x138/0x170 [ 232.484365][T11720] do_syscall_64+0x15f/0xf80 [ 232.489499][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.496196][T11720] [ 232.496196][T11720] -> #3 (set->srcu){.+.+}-{0:0}: [ 232.503417][T11720] __synchronize_srcu+0xca/0x300 [ 232.508979][T11720] elevator_switch+0x1e8/0x7a0 [ 232.514528][T11720] elevator_change+0x2cc/0x450 [ 232.519850][T11720] elevator_set_default+0x36c/0x430 [ 232.525683][T11720] blk_register_queue+0x3e9/0x4e0 [ 232.531255][T11720] __add_disk+0x677/0xd50 [ 232.536129][T11720] add_disk_fwnode+0xfb/0x480 [ 232.541451][T11720] nbd_dev_add+0x72c/0xb50 [ 232.546402][T11720] nbd_init+0x168/0x1f0 [ 232.551111][T11720] do_one_initcall+0x250/0x870 [ 232.556668][T11720] do_initcall_level+0x104/0x190 [ 232.562250][T11720] do_initcalls+0x59/0xa0 [ 232.567634][T11720] kernel_init_freeable+0x2a6/0x3e0 [ 232.573556][T11720] kernel_init+0x1d/0x1d0 [ 232.578453][T11720] ret_from_fork+0x514/0xb70 [ 232.583674][T11720] ret_from_fork_asm+0x1a/0x30 [ 232.588989][T11720] [ 232.588989][T11720] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 232.596826][T11720] __mutex_lock+0x1a3/0x1550 [ 232.601950][T11720] elevator_change+0x1b3/0x450 [ 232.607244][T11720] elevator_set_none+0xb5/0x140 [ 232.612634][T11720] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 232.618992][T11720] nbd_start_device+0x17f/0xb10 [ 232.624381][T11720] nbd_genl_connect+0x165b/0x1cf0 [ 232.630115][T11720] genl_family_rcv_msg_doit+0x22a/0x330 [ 232.636193][T11720] genl_rcv_msg+0x61c/0x7a0 [ 232.641266][T11720] netlink_rcv_skb+0x232/0x4b0 [ 232.646558][T11720] genl_rcv+0x28/0x40 [ 232.651068][T11720] netlink_unicast+0x75c/0x8e0 [ 232.656373][T11720] netlink_sendmsg+0x813/0xb40 [ 232.661666][T11720] ____sys_sendmsg+0x972/0x9f0 [ 232.667045][T11720] ___sys_sendmsg+0x2a5/0x360 [ 232.672263][T11720] __x64_sys_sendmsg+0x1bd/0x2a0 [ 232.677822][T11720] do_syscall_64+0x15f/0xf80 [ 232.682944][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.689451][T11720] [ 232.689451][T11720] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 232.698093][T11720] blk_alloc_queue+0x546/0x680 [ 232.703387][T11720] __blk_mq_alloc_disk+0x197/0x390 [ 232.709037][T11720] nbd_dev_add+0x499/0xb50 [ 232.713986][T11720] nbd_init+0x168/0x1f0 [ 232.718675][T11720] do_one_initcall+0x250/0x870 [ 232.723974][T11720] do_initcall_level+0x104/0x190 [ 232.729526][T11720] do_initcalls+0x59/0xa0 [ 232.734386][T11720] kernel_init_freeable+0x2a6/0x3e0 [ 232.740197][T11720] kernel_init+0x1d/0x1d0 [ 232.745055][T11720] ret_from_fork+0x514/0xb70 [ 232.750191][T11720] ret_from_fork_asm+0x1a/0x30 [ 232.755479][T11720] [ 232.755479][T11720] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 232.762797][T11720] __lock_acquire+0x15a5/0x2cf0 [ 232.768273][T11720] lock_acquire+0x106/0x350 [ 232.773310][T11720] fs_reclaim_acquire+0x71/0x100 [ 232.778775][T11720] prepare_alloc_pages+0x152/0x650 [ 232.784419][T11720] __alloc_frozen_pages_noprof+0x12f/0x380 [ 232.790783][T11720] alloc_pages_mpol+0x235/0x490 [ 232.796170][T11720] folio_alloc_mpol_noprof+0x39/0x160 [ 232.802159][T11720] vma_alloc_folio_noprof+0xe1/0x1e0 [ 232.808012][T11720] do_pte_missing+0x159d/0x33f0 [ 232.813391][T11720] handle_mm_fault+0x1bd7/0x3170 [ 232.818853][T11720] do_user_addr_fault+0x75b/0x1340 [ 232.824528][T11720] exc_page_fault+0x6a/0xc0 [ 232.829560][T11720] asm_exc_page_fault+0x26/0x30 [ 232.834933][T11720] ep_try_send_events+0x79f/0xf10 [ 232.840571][T11720] do_epoll_wait+0x5cf/0xf60 [ 232.845695][T11720] __se_sys_epoll_pwait+0x1a2/0x390 [ 232.851596][T11720] do_syscall_64+0x15f/0xf80 [ 232.856890][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.863305][T11720] [ 232.863305][T11720] other info that might help us debug this: [ 232.863305][T11720] [ 232.873552][T11720] Chain exists of: [ 232.873552][T11720] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 232.873552][T11720] [ 232.886282][T11720] Possible unsafe locking scenario: [ 232.886282][T11720] [ 232.893734][T11720] CPU0 CPU1 [ 232.899205][T11720] ---- ---- [ 232.904575][T11720] rlock(&mm->mmap_lock); [ 232.908999][T11720] lock(sk_lock-AF_INET6); [ 232.916025][T11720] lock(&mm->mmap_lock); [ 232.922878][T11720] lock(fs_reclaim); [ 232.926871][T11720] [ 232.926871][T11720] *** DEADLOCK *** [ 232.926871][T11720] [ 232.935010][T11720] 2 locks held by syz.4.1513/11720: [ 232.940207][T11720] #0: ffff8880349de460 (&ep->mtx){+.+.}-{4:4}, at: ep_try_send_events+0x19d/0xf10 [ 232.949536][T11720] #1: ffff88802c306538 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 232.959473][T11720] [ 232.959473][T11720] stack backtrace: [ 232.965366][T11720] CPU: 1 UID: 0 PID: 11720 Comm: syz.4.1513 Not tainted syzkaller #0 PREEMPT(full) [ 232.965385][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.965396][T11720] Call Trace: [ 232.965403][T11720] [ 232.965409][T11720] dump_stack_lvl+0xe8/0x150 [ 232.965436][T11720] print_circular_bug+0x2e1/0x300 [ 232.965456][T11720] check_noncircular+0x12e/0x150 [ 232.965475][T11720] __lock_acquire+0x15a5/0x2cf0 [ 232.965508][T11720] ? __lock_acquire+0x6b5/0x2cf0 [ 232.965534][T11720] ? __lock_acquire+0x6b5/0x2cf0 [ 232.965558][T11720] ? prepare_alloc_pages+0x152/0x650 [ 232.965579][T11720] lock_acquire+0x106/0x350 [ 232.965601][T11720] ? prepare_alloc_pages+0x152/0x650 [ 232.965622][T11720] ? unwind_next_frame+0xa6/0x2550 [ 232.965642][T11720] fs_reclaim_acquire+0x71/0x100 [ 232.965661][T11720] ? prepare_alloc_pages+0x152/0x650 [ 232.965680][T11720] prepare_alloc_pages+0x152/0x650 [ 232.965703][T11720] __alloc_frozen_pages_noprof+0x12f/0x380 [ 232.965726][T11720] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 232.965749][T11720] ? __pfx_policy_nodemask+0x10/0x10 [ 232.965771][T11720] ? __lock_acquire+0x6b5/0x2cf0 [ 232.965796][T11720] alloc_pages_mpol+0x235/0x490 [ 232.965818][T11720] folio_alloc_mpol_noprof+0x39/0x160 [ 232.965840][T11720] vma_alloc_folio_noprof+0xe1/0x1e0 [ 232.965862][T11720] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 232.965884][T11720] ? __pte_offset_map+0x29/0x240 [ 232.965901][T11720] ? __pte_offset_map+0x29/0x240 [ 232.965917][T11720] do_pte_missing+0x159d/0x33f0 [ 232.965941][T11720] ? handle_mm_fault+0xee/0x3170 [ 232.965958][T11720] handle_mm_fault+0x1bd7/0x3170 [ 232.965978][T11720] ? handle_mm_fault+0xee/0x3170 [ 232.965995][T11720] ? __pfx_handle_mm_fault+0x10/0x10 [ 232.966017][T11720] ? lock_mm_and_find_vma+0xa7/0x340 [ 232.966036][T11720] do_user_addr_fault+0x75b/0x1340 [ 232.966064][T11720] exc_page_fault+0x6a/0xc0 [ 232.966087][T11720] asm_exc_page_fault+0x26/0x30 [ 232.966103][T11720] RIP: 0010:ep_try_send_events+0x79f/0xf10 [ 232.966123][T11720] Code: b6 04 28 84 c0 0f 85 d4 03 00 00 49 8b 07 48 ba 00 f0 ff ff ff 7f 00 00 48 8b 74 24 68 48 89 f1 48 39 d1 48 0f 47 ca 0f 01 cb <44> 89 31 48 89 41 04 0f 01 ca 48 83 c6 0c 44 8b 74 24 14 0f 84 13 [ 232.966138][T11720] RSP: 0018:ffffc9000d3bfac0 EFLAGS: 00050283 [ 232.966152][T11720] RAX: 0000000000000000 RBX: ffff88807c82be58 RCX: 0000200000000280 [ 232.966164][T11720] RDX: 00007ffffffff000 RSI: 0000200000000280 RDI: ffff88807c82beb3 [ 232.966176][T11720] RBP: ffffc9000d3bfbf0 R08: ffff88803088bd5f R09: 1ffff110061117ab [ 232.966188][T11720] R10: dffffc0000000000 R11: ffffed10061117ac R12: 1ffff1100f9057d5 [ 232.966200][T11720] R13: dffffc0000000000 R14: 0000000000000010 R15: ffff88807c82beac [ 232.966222][T11720] ? __pfx_ep_try_send_events+0x10/0x10 [ 232.966240][T11720] ? __fget_files+0x3a0/0x420 [ 232.966260][T11720] do_epoll_wait+0x5cf/0xf60 [ 232.966280][T11720] ? __pfx_futex_wait+0x10/0x10 [ 232.966306][T11720] ? __pfx_do_epoll_wait+0x10/0x10 [ 232.966325][T11720] ? seqcount_lockdep_reader_access+0xea/0x100 [ 232.966348][T11720] ? set_user_sigmask+0xcd/0x1c0 [ 232.966372][T11720] ? fput+0xa0/0xd0 [ 232.966389][T11720] __se_sys_epoll_pwait+0x1a2/0x390 [ 232.966409][T11720] ? __pfx___se_sys_epoll_pwait+0x10/0x10 [ 232.966430][T11720] ? __x64_sys_epoll_pwait+0x21/0xf0 [ 232.966449][T11720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.966465][T11720] do_syscall_64+0x15f/0xf80 [ 232.966486][T11720] ? trace_irq_disable+0x3b/0x140 [ 232.966513][T11720] ? clear_bhb_loop+0x40/0x90 [ 232.966532][T11720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.966547][T11720] RIP: 0033:0x7f4fa2f9cdd9 [ 232.966562][T11720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.966575][T11720] RSP: 002b:00007f4fa3d86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 232.966591][T11720] RAX: ffffffffffffffda RBX: 00007f4fa3215fa0 RCX: 00007f4fa2f9cdd9 [ 232.966603][T11720] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 232.966613][T11720] RBP: 00007f4fa3032d69 R08: 0000000000000000 R09: 0000000000000000 [ 232.966623][T11720] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 232.966633][T11720] R13: 00007f4fa3216038 R14: 00007f4fa3215fa0 R15: 00007fff27b8f7e8 [ 232.966650][T11720] [ 233.431406][T11727] __nla_validate_parse: 4 callbacks suppressed [ 233.431426][T11727] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1515'. [ 234.207382][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 234.215426][ C1] lec:lec_tx_timeout: lec0 [ 234.220084][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 238.017524][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 239.227420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 239.235598][ C1] lec:lec_tx_timeout: lec0 [ 239.240191][ C1] lec:lec_start_xmit: lec0:No lecd attached