last executing test programs: 2.408999772s ago: executing program 2 (id=7582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xa1}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000500)='./file0\x00', &(0x7f0000000740)=[0x61, 0x1ff, 0x0, 0x3, 0x4, 0x1, 0xf], &(0x7f0000000580)=[0x1], 0x43fa, 0x7, 0x1, r3}}, 0x40) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) (async) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_police={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9aaa"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000006c0)) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000040)=@phonet={0x23, 0xf, 0x1, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="2efd8cb49a7d413aad5cc1fb9d6e13f2df970c2e2801235fff035fa7453d5ab55a8f6fdb746b65e78990590ac9061f", 0x2f}, {&(0x7f0000000100)="bbac997b06c097b29e75b83f4322808f6f1ce552039e9fc50ebe7d060fa9fc4a4659769caf742bbb98b210670ca04cdc398a8c4f426c3046be1715f33b3ce2a2cf80e53eb75e04d4", 0x48}, {&(0x7f0000000180)="976e512d612071e110001cf5569f2bf175fc504998ef5553986160723ce95f35f797b7650d2d7771bd0b", 0x2a}, {&(0x7f00000001c0)="901a2a1c757193929fa3b99adb0886567d7dffc597054d3934754b5df53bb518aa2129fdaa671f4ca08e91230a30b46cecb1779f05894307f3aae584418cd2ce89d794bc2ffeee52edb376", 0x4b}, {&(0x7f0000000240)="a89f25416d1b20e986f051ecc074351ccf44db9c6be70e8bb4b3ab8557feb492b9621dbeb12ceee49cf6dd396e71e5ba6b544290649c9548d016923ce761294b463d32408737676959", 0x49}, {&(0x7f00000002c0)="3b04c4f285916fded6644eae64cf1a848dbac648f987dad07209d267e739bf254f1dc94b62bd7ed82c792c2d45355541d29dd799853e7aafe2e9cd2d6a66c3fb7c4e691b99ebc71e1d2f42018a0a00e9ddf52dc2e4a737b112eca7c0480328e800508622ab4f5811c1d043c14a7a7b87e90e3f5d49a19662e55b7abd1b29a3e70b6fc9c2cec9f8", 0x87}, {&(0x7f0000000380)="9344d084ca642efc959d9e26960e726d169551128ca361bc2ca695eaf6e5b70cd23cb4cdeaae9d0570d29374f8e41390c29a3f287eba58eaad4d00f3af0f4de7b5e66b9078f17edfd8aaeb48f3a56f237fae", 0x52}], 0x7, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x13b8}, 0x4) 2.217087724s ago: executing program 3 (id=7585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000c, 0x22051, r0, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r3 = socket$kcm(0x1e, 0x4, 0x0) close(r1) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.198769911s ago: executing program 2 (id=7586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a534871a76d2608fff74588a80a38882f15e0", 0x0, 0xf11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) ioctl$sock_netdev_private(r2, 0x8924, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000207000000000000001bbf92ed7f8e1ff6559a000000957fda84601cff6718f2be62de29d6cafb6ed4a3f7ee08592800c653f8e831862f889595d2b90c3fa51a77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r8, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) connect$ax25(r6, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) 1.905419856s ago: executing program 0 (id=7590): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000000000000000157f2cb188a7654ccc81b58bd36518032ae62bcab6cfe3c7f8f4f6b4101bed0b8e424d2c8c16493fe9c7c8db4bb794b0f504216a9ba1d699b9c15f2548315a720844b8f135ee6b4a7082cae0b04a6014910128b7440bd7f6b1d0b4b2f077596e1d2239badcd75571e2125e81d21b5608064e53540a0af73cd42062e1f2c6f8ceb818c6244432c380d1674c6d"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 1.808669059s ago: executing program 3 (id=7591): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x38, r0, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000855}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.67713823s ago: executing program 3 (id=7592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000000), 0x4) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r7, 0x801054db, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x9, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0xf6, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 1.424544121s ago: executing program 0 (id=7594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x40008d4}, 0x20048050) socket$nl_rdma(0x10, 0x3, 0x14) 1.421876123s ago: executing program 1 (id=7595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000018010000696c6c25000000000020b42a7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000086460000850000000600e7c40ae61e34c44052caaf7a29000085000000c90000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0x8000000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000001540)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}, 0x1}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x6d, @mcast1, 0x7}, 0x1c, &(0x7f0000000c00)=[{&(0x7f00000006c0)="22465fab0f48b0690494a39bebb7508c270e06d0f4006b03ff38c4ae196ade7cd899c01032defab0fc7de73eb5285b3d0456e134ff8b28909ec273e01548c929adcaf93e17a1331d5feb24d1966d4e0ec8dbe2debf2b5809a28b7284fabb7b0cc1c558c22783214bb5d791a6c949ff83e351cccc7f69ce1ca509f2f79766a8b14ba7b6ac49e42a85d66754b249c51ee7587982e242bc13253f81818bcbb8d2c5e00f7f93cd8aab7ec4843a08bfa74b6b8cccb3aefd2dc66690c6fb52d16a9099ea5465dc813f900cf5120f9430ae62633049cdf4994bd95963e2c31d3558b8294bf144ac595d18f7b75be1ab2545d8bce64c627495", 0xf5}, {&(0x7f00000007c0)="111c5d0009795da519dafbbabdf6773cbd8c5055f70c7dd3211773469d6518336ea63e37539fa6cbdec624330f5e2a2150580409dc42252c3472309c0ebc0f1594ea24a1ae527758754e81", 0x4b}, {&(0x7f0000000840)="1603a3314266ccdf0894cbb92783af1f098220bdc7cf0d7654e018ccb532a9b4749e761cb44b642371e38922a13ee8432d5d5f6598194ce975643caaecedec21ab5bd3f31a4958211318b471c0066eef8d8e6a4c5a184e9744d6f9f5b41ad383cae2c33cc85036d7c8607187a8dca96486bc7b884151c2c4806dc44e3101ded3e87d9e945835", 0x86}, {&(0x7f00000003c0)="7732d0b24334929eb49999ae614751489589688736bf8d6f50f2", 0x1a}, {&(0x7f0000000900)="a5191c3bc23f7a83f49e821fcab09d7c30842a40d3d7932caf385e6fd2ca2d778f2866ecd4e7184c4c0633cad9da", 0x2e}, {&(0x7f0000000940)}, {&(0x7f0000000980)="0f30ff375184984df7aef909e6cdc91441e6c1a332c77310bc6309ac6b7c6f531843995248a3bd2682ae71e06befeab60e37b32f574966d93397e0c8b6edd52ada2a6536cb5f890d16c359b3865e027cee1e9da93215b773d63acacdb6439f4a7c4a33d41de2f429db46a44d41a72779bb1edfeb7815b14a1e46d32f91224ac1e2aeafd8a8a10ced798f1df1869da50cb2dbd473452b8c6d6e35c1c20bb1e38a25c94acf5fcab03b930d2e0b9ac14763bf901ab06badef8e86918cf09c0b30661fe97cfc285f18751bed4cf7276638a00e0c4bc9f2d2b2aed2733a1ce777defd4a41d2480d9f1d46a4", 0xe9}, {&(0x7f0000000a80)="247cf0b70c87869059769eef36cd1cfee220c250403ac39a8cdc1328dde96eea4b09eef433dd2499832bdefc30bbcc2e619ef7140585921b014abf2b6b9e0e2ff2443955a07bb82e7247efcf42dfaf7b59c894039109f27126cf8523", 0x5c}, {&(0x7f0000000b00)="d7d533c0f7424e71029be493f7b455faac532d2ae0431252ac085d3608cbdb44a610db6fd4bcace641902cf88914ffe752a0b8009cc83c25f1728e19557b60ad9f0f9ab6157b0a315ef7b1232cab415e2b67db7ebed9670d7e28b9ca0289238126e57d946dacc70832138d280fa12c267bf51026840eab7d07d11608c281a1dae411b023e5d7e0efebebb6ee83c176059a8f6b3d3196c2261e4dbdb576eb9ac470f3b0d85085f31e7cad945c99cfe5557b20a4e9b4053d88656442f33d848e027f7dfd98f521f37ef82d2b91acc18b4ab63c949f775dba13e426f37cd0aa80ea72487edab954800987ba836a", 0xec}], 0x9, &(0x7f0000000cc0)=[@dstopts={{0x20, 0x29, 0x37, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x50}}, {{&(0x7f0000000d80)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000000e80)="05b684737c6df36bd588b0237f2f881856ff2ee44e537a3785e052418a6f0ed47c6c7c3ad8684ded5c29638de4c59140e140fdbe81bf3af004f5e58a6a586cdc76114093e02ca03d54f0386985c710b7df9b251507b60356457968221c8ae1a3ed97f61c8360260955d06c075b71069387b8988df8a36812df678c383578ef0c6a366b4ad92a23acac5dd021d73bfe1acfc27e475dd0efa6fef1f03c6808a9451fedf31253d179cf107e9f8aad63b7de9eefa75845a0ad990d83721d7435ad83a98406b7d9a2", 0xc6}, {&(0x7f0000000f80)="9cd2e9267b24fb27c81627d8ca0e8e95653fbba4d49194b4c400de05c0ec8fb56e395f6611f5a4af43e21b8a8178496d0a6d9e518f51ad4cda09ee6530624673dcc07f723146f25921b8cf32a7d8917a047bf45dd5cf03d0857176d41d955ae600391bd68e0018c7ed924cc0fccdd2d934fe974ddc07dfb2e3dce15178748feab14812b44a9b7f2e22199dcae8f87c81fa0113d85984bd9d202c520d91cb033e971a2023b9521dc8de098536d9dc86b6f5e007be71ed10c5e5b04ab1254ea9710bcf67b6f351571ae95e2414dcb3472dd3424db645e7c52201d60b6f6d711bcc79e60063", 0xe4}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000001080)="4bab93f0360b313bbcc5da3228cab49aa08ce6a963998df55d29494341af9d9ec189a5b85c6df0b76215ccbc47b83d84eb01fbc70c825e0ded3de676677cbb91b179172733ee1ebf0a3e6f1c27771c8d6712b985e3d0a645d11d5a47bd4c047546c6a111f11441bf9e421cd983e34e3beafdc53bac6879", 0x77}, {&(0x7f0000001100)="b2bc6a89506467484e2b87813a44c667890cf0e6499ac76628ff232bd1ab68e42f69b6d2d45f51d0915af0707e10051e909fab94d4850f08048e1003a3342b433c19f18774ca49392db1e4c090e48fe4a93d274d747b6e43c5cab9110a", 0x5d}, {&(0x7f0000001180)="eaaba1689e5b5ce2879bdd130b73345904ae70c4537c45f04a10f60604b3f513e0eb6f299473b91716c9113a3aaf8edac7e8b18e0d261b9c72037f0859fa68a81a1673e7c6fa6c40520278055eded7a57b24142d4684b9bb50a99e1d9f5730dc6a20640f0037a2ec099b738be4309126faca2ccecd13c55ff698b796be59924ff449fe4d459f2553af23e8253f5e4daefefd4f7b0e40c72f76e85740773d49d91f3ac68858a109e1e077cd5fb2acc4fe9a2716a734b100cdd66d4e82bcbf84404a4428eb5bf7", 0xc6}, {&(0x7f0000001300)="8378f544046673d5f5f2cc4841734056c9b2079c0bc3719009605e58", 0x1c}, {&(0x7f0000001340)="b08c009fc51612cfbce6cb123735b13f7773ce61fe60baefed6ebfb8c527b1b7c52aa9a0f99f313c7f0f28acb7565751121636ba07e992803e0ceb4038bc1098ad3eead42edb482d025c830b5c2d711aa5338f6d", 0x54}], 0x8, &(0x7f0000001440)=[@tclass={{0x14, 0x29, 0x43, 0x62b2}}, @hopopts={{0x30, 0x29, 0x36, {0x67, 0x2, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x40}, @ra={0x5, 0x2, 0x101}]}}}, @hopopts={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1ff}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0xffffffff}, @pad1, @enc_lim={0x4, 0x1, 0xd2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x3, 0x10, 0xd, 0x1, [0x6, 0x1874, 0x89, 0xfffffffffffffffa, 0x0, 0xffffffffffffff9e, 0xd1f, 0x7fffffffffffffff]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x6c, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}], 0xf8}}], 0x3, 0x20004855) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r4, r5, 0x3, 0x4, 0x5}, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) write$bt_hci(r6, &(0x7f0000000040)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x2, 0x1, 0x4}}}, 0x7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000140)=0x0) recvfrom(r1, &(0x7f00000005c0)=""/196, 0xc4, 0x40000000, &(0x7f0000000300)=@nfc_llcp={0x27, r7, 0x0, 0x1, 0x1, 0x1, "e698e65dde58115e248ca49b51b321993225383e68cbf32376984b6d6b87e3c38299f4893e47442407d2f9419a845fe46717f146c93ba23f7086b8111a8f1e", 0x1}, 0x80) 1.354324692s ago: executing program 0 (id=7597): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000140)=""/4096, 0x1000}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 1.265000806s ago: executing program 1 (id=7598): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.201122881s ago: executing program 3 (id=7600): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], 0x20) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) socketpair(0x27, 0x8000c, 0x901, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) sendto$inet6(r2, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.14929066s ago: executing program 2 (id=7601): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x200000, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x2]}, {0x7, 0x1ac7, 0x1, 0x100000000}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xfffffff9}, {[0x7, 0x8000, 0x3, 0x401]}, 0xcf1, 0xae, &(0x7f00000002c0)=""/174}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0xc, 0x0, 0x0, 0xe, 0x4, 0x2}, @float={0x2, 0x0, 0x0, 0x10, 0x10}, @var={0x9, 0x0, 0x0, 0xe, 0x5}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x5f]}}, &(0x7f00000007c0)=""/4096, 0x53, 0x1000, 0x0, 0x20000, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0x20, &(0x7f00000019c0)={&(0x7f0000001840)=""/91, 0x5b, 0x0, &(0x7f00000018c0)=""/222, 0xde}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x18, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @call={0x85, 0x0, 0x0, 0x41}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x8, 0xb0, &(0x7f0000000680)=""/176, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x10, r1, 0x8, &(0x7f00000017c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0xd, 0xffff, 0xff}, 0x10, r2, 0xffffffffffffffff, 0xa, &(0x7f0000001a80)=[r3], &(0x7f0000001ac0)=[{0x1, 0x3, 0xe, 0xb}, {0x1, 0x4, 0xd, 0x4}, {0x1, 0x5, 0xc, 0x5}, {0x3, 0x3, 0x2, 0x5}, {0x1, 0x2, 0x10, 0x5}, {0x5, 0x4, 0xc, 0x9}, {0x0, 0x1, 0x7}, {0x3, 0x2, 0xf, 0x9}, {0x1, 0x4, 0xf, 0x7}, {0x8, 0x1, 0xa, 0x6}], 0x10, 0x1ff}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff0000000000000000000000070000000000000000000000090000000000000000000000090400000000000000000000090600000001"], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0xf34d690b18ac462a, 0x22, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x800, 0x0, 0x101}, 0x10}, 0x94) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) 1.148730533s ago: executing program 0 (id=7602): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe00000100000000840012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e00"/161], 0xa0}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'macsec0\x00', {0x2, 0x4e21, @remote}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'macsec0\x00', {0x2, 0x4e21, @remote}}) socket$inet6(0xa, 0x6, 0x0) (async) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000041400032dbd7000ffdbdf2508000100820000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160005000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160005000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000380)=0x4) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000380)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003c0007010000000000000000010900001c1b355d7f6f4621cb7876f2dc554beeb1a9215bdb357bde305fa6f7f717edddff028289b1e1022a1916ae727245adaecb14e9e75b"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x100010, r5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, &(0x7f0000000740)={0x77359400}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, &(0x7f0000000740)={0x77359400}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000000200)={{0x7, 0x2}, 0x100, './file0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f0000000200)={{0x7, 0x2}, 0x100, './file0\x00'}) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="dc0100002f00010000000000fcdbdf25c601f2800c00180008ac0f00001000007690cd58ac32f583d1737ea3596b11bb618acc20ae4bfdaf1cf550cae745f29bc15010209c61e974633f09f9a51a1bd9ea760f03b4351fc043035f09933c453c85f05bf16aca43cd68d39004f062c93b12e3f7e1e44cee6bcffef3f2900b8c34b32f1d27321c61e539fa8a7c8fac27cba7b97ab83229bb4719471164760367dcf407415899508b9022052dc1c091d0f54c866827426a62bcdada9f45a797c33b10dd5166193c9b3a9c69b4cd1151e26e9604342d72af9cfeb3f4d01b85849c2be9b799a8d3a1c02860bbd6375e957cafa93f08004400", @ANYRES32=0x0, @ANYBLOB="d90066802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000b80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fd17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab260000000000040002800000000000"], 0x1dc}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) 1.147700263s ago: executing program 1 (id=7603): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x200}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000000)=0xfffffff7, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={r3, 0x3}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)=0x9, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x200}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000000)=0xfffffff7, 0x4) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={r3, 0x3}, &(0x7f0000000540)=0x8) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)=0x9, 0x4) (async) 1.020135795s ago: executing program 2 (id=7605): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x6, 0x0, 0x3, 0x2, 0x0, 0x1}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x158, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4091}, 0x8000) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) 941.084606ms ago: executing program 0 (id=7606): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0xe0, 0x428, 0x338, 0x338, 0x338, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000003e80)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/11, 0xb}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/192, 0xc0}], 0x1, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f0000000c00)=""/199, 0xc7}], 0x4, &(0x7f0000000d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000e40)=""/36, 0x24}, {&(0x7f0000000e80)=""/247, 0xf7}, {&(0x7f0000000f80)=""/38, 0x26}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x4, &(0x7f0000002000)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f00000021c0)=""/37, 0x25}, {&(0x7f0000002200)=""/119, 0x77}, {&(0x7f0000002280)=""/14, 0xe}, {&(0x7f00000022c0)=""/21, 0x15}], 0x4, &(0x7f0000002340)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002480)=""/182, 0xb6}, {&(0x7f0000002540)=""/217, 0xd9}], 0x2, &(0x7f0000002680)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000003840)=[{&(0x7f0000002780)=""/121, 0x79}, {&(0x7f0000002800)=""/39, 0x27}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x3, &(0x7f0000003880)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000003980)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003a00)=""/100, 0x64}, {&(0x7f0000003a80)=""/105, 0x69}, {&(0x7f0000003b00)=""/102, 0x66}, {&(0x7f0000003b80)=""/143, 0x8f}], 0x4}}], 0x8, 0x141, &(0x7f0000003ec0)={r3, r4+10000000}) connect$packet(r1, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) shutdown(r1, 0x1) 843.790426ms ago: executing program 1 (id=7607): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000000), 0x4) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x40c, 0x2e, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x3fa, 0x10f3, 0x0, 0x1, [@nested={0x103, 0xe5, 0x0, 0x1, [@generic="2d51891b0104137e9b411e25b4f94eb60e8161b9f93f63e429cc8bdcb62ea91b4c4f59bcfb30825a9bb268d1674d250a5238172775409aa5704808f15f0049171372a09c6e574e4e43049c0ddaa93821bc93a0c348c530dd759b5c435c76dd76e46811b1b5bd0b36df0d331848aa38c707c3d098f1e66f26fea1405109d89b0371f847cf047338db9ef9c3546dffa7b336f9abbcf25e8506807ab2671c7404b3e6de6103502df40ab18c22e0a1427b5fc743247672c49c7bc33e9680682d1ce7ab30007c92a4026c624080864dc8c3e6e388a6a61f7bdd568987fa31838558a052a87568c8f1ce40624b39ec89157f09200b754b4a9b4d34cb08901e903634"]}, @nested={0x15d, 0x7f, 0x0, 0x1, [@generic="cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913", @generic="f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee5", @generic="8a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2af8f34aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf62"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d", @generic="053b3a0b0a3176fa81d5dd205df77d46f70df08bc18894624e7bffe90164484395675b08b5cb590c676c2142be91e216739d0690e72a5925af7fb13fb2a4be76902e2211229172bd7c360f6d603e8eff61b35dd6ff34fe58dc5d3ba23ebb70b0d2f8d302084ad3e98ec61864d2cb9d0647451ab80d4f325eadc8d7ad364274f68cf6f7874b0d0c1b6442967dae092f893ad27643e311bc94a206618e9e36515064a0fab336692db34956ed512f98d73cf478601a5677008289970a674d1b41"]}]}, 0x40c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$FIOCLEX(r1, 0x5451) 804.182042ms ago: executing program 3 (id=7608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230800000000030000000b00000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000200050800500020002000000090001007ee5d52ffd0000000800030001ac0f"], 0x48}}, 0x40000) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x20004040) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xe, 0xb}, {0xf, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6c}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x1}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40004) 753.400354ms ago: executing program 4 (id=7609): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010800"/20, @ANYRES32=0x0, @ANYRES16], 0x40}}, 0x0) 751.9468ms ago: executing program 2 (id=7610): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/249, 0x13f, 0x102, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x200000}}) 638.833555ms ago: executing program 1 (id=7611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000010001ffffcffffff80009445e4a12746", @ANYRES32=0x0, @ANYBLOB="00000000003f0000400012800e0001006970366772657461700000002c00028014000700fc00000000000000000000000000000014000600fc02000000000000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 633.426878ms ago: executing program 4 (id=7612): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x21}}}}}, 0x30}}, 0x4800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r2}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0x90, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xdffc, 0x2, 0x0, 0x0, 0xa, 0xa0}, 0x2}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) 380.911654ms ago: executing program 4 (id=7613): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000800)=0x6, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000080095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000600"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x0, 0xbe, 0x41, &(0x7f0000000400)="1246e8f5fba55eacbdd0bc6027c5aeb43e5fc9645b11c1c54d69e9f5cc2fb9307e8698f8a39a6babfe690843da9c6760d0d6ac90be8cf7e40bd9f22b40d856f32b1f4736783145667161af00478078acff3f27fabb17753e68597dcbfd9068ba0fbf80e8823186656fc7764988d8434f15a38ba2fc73ff73eab126055c5e2b9714b3d1ac8708ad9046517719ab8d7d7bf6d3e3e746e52d1a1b90eed88a8a53f95dddf33fbfa99af19724ec61f7cc247a647b76c3b361f2a1281c979e4267", &(0x7f00000002c0)=""/65, 0xb, 0x0, 0x48, 0xd1, &(0x7f00000004c0)="35be0e37b8e2a40406114c06e0cf96ebbbc70c6a9ea6ee16dc41897040b018d910c50bb2d3be644c11e6aba6996c8b8b1cb50cadb1717e228673104f6f9a15469668792cc1f2d904", &(0x7f0000000540)="c4bb343de5bbe8f3b5ecd9cfe23951325497e15f21b65aea6961967ab838c154ca6250ef4bd440ee7a441f700f3540c6ff9898f08c58299dd9cb6f1f5c5c9e25660a559940f717106c933f820aba628eb450c64eb4d1e43e0fa462d7cd5d47f9a6e1e819bf1c44c9240798412b09eb5dd660f5ce89f58453ce858adcaa70e3978269f9a67f34003dabfd33e7e6dae0f6703efd7fb49870447aa5e14035ffae42714d9638fdd39c8f8c55319754765c53d7cc7dd94d639256868cf8aa014fb96fa047ebc184dc7b2ed679a68f6f133890ce", 0x0, 0x0, 0xffff}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0xc2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r6}, 0x38) sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8) close(r4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}}, 0xfff9, 0x7}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r7, 0x948}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@float={0x9, 0x0, 0x0, 0x10, 0x10}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x3e, 0x0, 0x43, 0x1}]}, {0x0, [0x5f, 0x61, 0x5f]}}, &(0x7f0000000080)=""/17, 0x39, 0x11, 0x1, 0x400000}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r5, r3}, 0xc) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000e00)={0xa, 0x4e22, 0xde, @mcast1, 0x91}, 0x1c) 313.76067ms ago: executing program 4 (id=7614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r2) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r7, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) listen(r11, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r11, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @remote, 0x9}}, 0x0, 0x0, 0x4d, 0x0, "3023e519504254c1b5a34f91c57d8c79f12c8b32c21823a6be3126e5370ca14e54017a80a3d3e78f7a7b8c5895e68d01b9c347e864933b4b2dc1e00fd53b6ad9583f5dc3db99776f8d76917a816cc335"}, 0xd8) (async) syz_emit_ethernet(0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaab72693b59bc786dd6000000000740601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="c6d035f9c7"], 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r12], 0x5c}, 0x1, 0x400000000000000}, 0x40000) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x2e4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x67d1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbaf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff771f}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "e582255a8de24d3091d0e9a69af68ad7bcb6f9c777318f52747bc725909a7e4fe52bf52ff6ca1521e1a160f13616f96c0303ee57dec3c696f589bf292316eb613adba1f43f7a7bb0ff685c059172253d455b83059aeb07da3d28ae2f724ed8acccc58718a090320f385d36220e2a43f98171df1787c62c05ff0162db8a451260dc1318584bc42dfcccedb15ee60ceda38e732e3d64b92f1fa0b9da43299edc049051ad25dcd6a9326b73c7d3a427b7f731"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "34ae2014a69e0482d37591c55f34838d9125d4711a68645d59f4fb56c9ccfc79340281"}}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "1409d0b4643a098d66de82ba3a3db97a2647196f6083768af978f00c2924912ede2fa33fb0ca4a989f90640a26d0fce5ad596bc892e57bed"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc5}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffe94}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe008}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe69d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf54}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "801974a874c18b0e7a4bf180042d1787003d81bcf3fbe534c036a7fa9c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4004004}, 0x20040040) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 203.273092ms ago: executing program 3 (id=7615): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtaction={0x104, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xf0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x22be, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xc19, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffff2b3, 0x5000000, 0x5, 0x4, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xac8, 0x7, 0x9, 0x9, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb1, 0x0, 0x4, 0x70}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1fb, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x104}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x40, 0x1c}, 0xc) r2 = socket(0x15, 0x5, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x88008000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='ciBI', @ANYRES16=r3, @ANYBLOB="12042dbd7000fedbdf250100000005000400020000000900010073797a31000000000900030073797a30000000000900030073797a3200000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008080) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000340)='ip6gre0\x00', 0x8) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300001d0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000200fe8000000000000000000000000000bb000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000700000000000a00000000000000fc01000000000000000000000000000000000000000000000200130001"], 0xe8}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0xb, 0x49, @local, @empty, 0x80, 0x0, 0x64d, 0x3}}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000200)={0x2b, 0x2, 0x2, 0x4, 0x0, [@mcast2]}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf8f420000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006e87384e094f24000af0a00060008060f00000000004a8c7f2e198402939c152d527cf529f17d34a39257e1fc472e097a81563a110e22faf4eb3638a0f91494bf96e5c9c03f128dbf25531d7d61967dcbae7b90b274a06906718e1f75187cbe9ee66dd13461737270b8665eb7667b536c50fbe0d9daeb72412a3bb9ec37b3dc2c68f935b336272e4750634839cc75c5d547fd122535907812c5e1be7512662ed99c9eb253dac68683367ce55cd3e97cca"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048081) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'wg2\x00', @ifru_ivalue=0x8001}}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000540)={0x6, 0x6, 0x0, 0x7f, 0x1}) 128.908981ms ago: executing program 1 (id=7616): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000000c0), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x1, 0x38000, 0xfa9a, 0x5, 0x3, 0x1, 0xffffe7cf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x1, 0x38000, 0xfa9a, 0x5, 0x3, 0x1, 0xffffe7cf}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r6, 0x89e3) (async) ioctl$SIOCRSACCEPT(r6, 0x89e3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0x4}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x1, 0x17}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27050200590200000600002fb96dbcf706e1050007008100040088a8", 0x1c}, {&(0x7f0000000380)="80a64bc8f8ee2d04a8aac0d3a293ce6d50a01555a9d0e6974540e3c9e18ff90b09b7bf162fac49de6f4b74c7a8c3e4c6a8c8c9ec8d2887d8ac0906ff55dcfc", 0x3f}, {&(0x7f00000005c0)="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", 0xf9f}], 0x1}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept(r0, 0x0, 0x0) 127.801824ms ago: executing program 2 (id=7617): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000f800"/28], 0x48) (async) unshare(0x6020400) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000200)={0x2, @long}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@deltaction={0xa4, 0x31, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xa4}}, 0x24040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffe5, &(0x7f0000000200)={&(0x7f0000000180)=@newtclass={0x24, 0x28, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff1, 0x6}, {0x0, 0xc}, {0xe, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000000)={'caif0\x00', @ifru_map={0x3, 0x0, 0x9, 0xa, 0x18, 0x4}}) (async, rerun: 64) unshare(0x50040a00) (async, rerun: 64) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r15, 0x0, 0x0, 0x0) 127.447432ms ago: executing program 4 (id=7618): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000600)={{0xfffffff9, 0x7fffffff}, 0x100, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x17, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 48.971944ms ago: executing program 0 (id=7619): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4a, 0x0, &(0x7f0000000280)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) r3 = socket$inet6(0x10, 0x2, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000140)={&(0x7f0000000300)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x96, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14}}], 0x18}, 0x0) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000010000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x28, 0x9, {{0x16, 0x4, 0x1, 0x7, 0x58, 0x67, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, {[@cipso={0x86, 0x30, 0xfffffffffffffffc, [{0x5, 0x6, "4c841cbc"}, {0x0, 0x5, "2b93b4"}, {0x5, 0x5, "999943"}, {0x7, 0xd, "2a56266420556ee20c60bf"}, {0x1, 0x2}, {0x7, 0xb, "a6179814497cf85cb0"}]}, @timestamp_prespec={0x44, 0x14, 0x49, 0x3, 0xb, [{@broadcast, 0x81}, {@rand_addr=0x64010100}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000001880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001840)={&(0x7f00000002c0)={0x154c, 0x13, 0x8, 0x70bd2c, 0x25dfdbfd, {0xa, 0x8, 0x4, 0x5, {0x4e24, 0x4e21, [0x7, 0x2, 0x100000, 0x4], [0x37, 0xb7, 0x2, 0x100], r6, [0xf, 0xb7]}, 0x3, 0x81}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "15b46759d20babac1497325bbbfadef04446320dee50e2f59a809e41207d126365021728c1afe51cf1a4d9de12bf3436736afaaa7756b76fce10c55ef1da3f0bab6aa7f8fb7f73dc8d33fb37c23a3e47b648da359d0dcdfbd213b49c9c151f0b0bc218d4ac07e80d7228d00809e0cf6933fe8e87a8fa79c396da9c50900000409cabe9f260391e1a12ec48711a51d58c6e8d759e0813a64cca414ab693ae18a0c46b8aa2759bca85564083433a165611025aa40509894a2352f56e1c236b544d37e14af9a456b12adff7e0515a788a7e1d695430c0412457622be589b479318bf911034ddf0dca6bae390e77d01d2808c9fddd9b45160a7cdc0449e1174b2f35fee925501d00d9a33eb0153a0577c54d1ee40d9abc9960d79ffa4d30e69feaecfd7014951d2c0da1d355db2c683ef204c002145c8e68917c2aefad3fde8a6257c62164f9cf649cdecd77cd7de42cc9698d06edd6c7aaff4071cd236708b0d2295991b17fbe72ba65a26031e5d48fa7bc191ca5bde068d0b1118f7ac75d1f1d392151d8ce728c067bd363d4fbb91086b5126370a09b64191ec9d84d1a1b0bf8d4e8b78f0adbab0bdfa53413f8837312907f8a235e8dd1b8958e901bde1b1dbc8aecdadb3ed13d30225d25f623c9af61d3ca235c9cec6024b0102b7bfc0e9e32139cad94e7e4ac1bfeb4e9eff7234dbd69b43826ad2e5d372191135964e5b32988c7b167f4d4ddc77a4acf3073d23031d01e338f3ce93149569c9b60e97ba6979f4f0cff2dfd520643cd1756db0ecfe345a0ec0c0c2414f8f31d037fa340d1a5af73e22bb2e3a6a2338c6cf517bbe2eee85763e4c093dd5997301a7e07a2324cdf1df560bfe1735713d7a329df61e7a0166f8b9fa0d0a06855e541a25263e6f20dbe3144676cc585c255eb6d8c87925591a41bfb4f242afcd48c98c2c6d5f81c321fb95b6b200f41a752c50f10555a52ae1dc3ed2d17a9a7def359d1af0da27e1e52975fd06576de2abe5f9825beea87f0897a6283394a00c6fdfa758724caf0fd7eb315bcd50b7a369d589d964ee42aa1a1124b9dfb8bf9e640ffa083a63bee81d53edb9b48f9e38e611556947a3cc52ce36bb6707e1e001a6fb9eb54df277e68b2682d34939a5c284d7decbb620525b508a33dbf6e22a9686fb2a10a553f5bdd56a33aec1aef80a72d2c7b4fc169d96fac517d71c9ee227f38d54d0d63ea18ecd17cb402c06d8198484554847e67806ac32b8f1c59414af70e25d40f7e4cd49d868320bdccdd413caac06d0a9156eab210d28dd3cffe41afb2032a4c17e9e91bb20815cab4c008ca4b5915a6f29e62a9390c8f23161f50b274762c18c02783ab40cf42aba0d20e493e253fa53fb55e983af7553f383627efb93927f644dc24a8416148d50f3fc6d32ad2f52e97ab7f0361ee54b120ef2a440eeb73b8a146b91359311c2748076a9e1a53f723f7b8cb6d0cf89d696c018f721e7cf471b237c7b106beaa88adae415e3f66dcb50440fa488c0e051a94b84b6c54c97afb599519c1629d8b216b8a205e525eaac45812a90f167c50684a511011ba87906102ebf2a1201346524f90686d4e6949203d94bb372061b99e340ac41d33a92fd02a1607cf77c2588d6f5f85180e6400e2df6292748a939045d1c4d15e402964aedc37055e943c8571797131ce1ba81ae52f05d1407f97c8a9a80d5838e4ca61b7d93f7d7f9e99cc70966d3328569e568e00613df337e06f124c0927f48ae077a38c31c21dc97f5ec105bdf97dda27c6ae88996ec8c43db16cff0c14526ced98ca27b4dd9fbcbc5a74c161967d091efbc813f3f5d6d7465f34d0efe55df8ec0304c676d71d056bc802df4a2b4dd1b7a1b35b3a27502b6842e3d3ad753e58b5ed017ff53e79fba1cbdb250feee8c5f25fc8df8436bbd3ae3a87ac6470605df2e250ff47947e4ef21899622edf7226101b0b9dc717d50dd783c4714fabd82639be2947bbfc6d9f4e954d399033119a206491d550cc0f73b481c6af19c8f4cbb06e55223a40e818c47faa35526cff8bbb792518b5a7b1af12ae4e5f9bf06aa468b57ecf47f2a2bd3499891629a5a17e394ee01f59a940aa2eb626b2e064414d2baed5dbd5fec477579d3bf08d45d1b5f7ea09f977e3d3f057522dc0476cab810473dd9872b520d1da08662d08d660ac82938a69895e16ac4cdf719411140bf43637bcef979f36a61af20006df392382389242b9240e11155bab0138073ae586f8ade68f80e269b1733d52239981a0104de385acfff89f685053ecca5054fdd438ab010f98988fecf0d5838e17038bb35516da09cbb5a077eb5b849af1a0fdee1b81cd4264781e94b75f3073b2adeb3f03efc26a4203887ca5682a0585fd88db141bbe27ee112eadffd6ec50cf781a537574c768cb495665682dcafc466327861b1c7b100a57c7c4f564fddfc8083fd3ee88f3128b7f120477d2cd93db46d94bae0979f72629210302bb258638f973a54e0d8d386d498958079d6f00c2ec86fb19a6c641fed5780f75c9cb9ff11587539ce9a3e36ab335b89983b0738640bb2a0e3a6dcae709fcb079bd76dec7396ba94ac4381d2c8ad616162d3e092dd3c303fadb1f737c42d891731db0be3185140c4da7367ffd49a7a763e03d5e37eced8da8180b3a8a9eb55cc2c5144d60cd5e1ccf00bef5046f6fd64c24a6737375fc77b659dd50e0e9ba0c40ee3bcfc63f72b490cedd086ab4a487d79a33dee8f005a02c056eb8a9bbff2a48808e3af46ec37a3bddfb425daae5dde8878351c130d60d36c5740efc4998487d0290f8dbb88a37a127ba4328e0649f47bad54c8aa02f799117d0ae0ff91f6199c40b5ec6ede1f9b040dfc9c3369dd684c96a3f4f2cc42314a32fc77855614ed7b2d2c16dc17741743fbe7ce8af858bbdc32967905cb9f0091ab9ebd50d716952229ad91928bff578ee59c67428b32a66a06f5743098796571f9f0d1cf1012eb4521dcc4ffe88bbee04d5965750322fe3a0ddf82add0619802a3fa9351e1a82b0c90e453597996f2033819498a04a013c345926626cc194548cf055943b1689c84c2a85ac97f8340af913015ff2fe16b841264209abc66a62765e5eebd46618c529bdcc5f88015384b2b16db14924507d344ade8ef242fc253cec93daed96d6b26b159b544ce32b2310cf40c49dc183a4019c8198d9a7a6b96f6a1fbc47741bfe782d88fa76df3268548212b29876c4c9c3ca905c4fc8f6156e67cedbf2e39dad71193ab769803998dc0cfb10cebbca7ca1af18259447935ef050c9d4af747bf0baa2f16fcf2fa778fc2d456ae711e83b1fb67620f3746dfef2e580f0952bb6e68c26a850b7aed5a4e5570d56a64909cb2352e0b8d5f9a162b545d36cd05fa7f9af40ce0db230a203230daa5c6ad6b406613d9586f0c2a7a98dfe689d9550c4bfb213215fcd150b598ca91de06b522cb606555758709bf210296c904437837133690058c81eb8131299f65ba7927ccaf90288f5b94d15aa6b8fed3c0c67a5e6159282ababed0e12fde431f1034ac3e3fa59de891050c49a840060af297faa0171dfd162c00a8e37749777d5d361ce4cb63157167900160c37d60d2bceb2c2be4457febefe1fc903d310b1c578c1cfcb2430c2da6a8d76b6ff0ceb0845a81738cc0c9a8ad0b0cbe9bb193378a9384ebc36c5072c929f48c1bf49ab3c3e8948aaad477e7d6301ed24aedebba8b68d6baf7f50cb75d414dbc379d4accf63b8f521bb9de5bfa230176ee120322e83f25b1d6a2216d02ac7a239bdbd0fe3b7cdd329d7a13b57be46e53a960354729051c0b7642f09562ae6646d2bf999c60ee19a067ed4d2a556e12b8af7e6c0c3e07667661210612a35ce37393e52422b7ac2152c940848bd8d52bd36deec2485dc5769e11b6eb8e4176d81639eed3ac62c19d38b2f25de8b200885ce939802c0a1279562439822db0e8675f0add2f562a93a79937574feb79f7b539bbfe944be74f20240f28f368cb0411bef3fbfa48bb20f97813739cb17274eb89ac6ce4dafa5062cbc3a698e3264775685592538f0c01e534d34634e02a272d1b016415c5dd5b44d126e77d8dacc2bf8029315ac979a9a2a1820988a82df554e739f85cfbc9e1e8271c36ab60a54eac4755e31e906def86e4bd70c14869f5a6f1b36ea0279cac8b60f488d175b4a32b4e42d7b834507bb07a6438bd7590ed9bb08528206f06c57ea652ad1b48b7a50838e3f3db92d93401d601652de6fdd66713a5d4cfc9f9651761b8dd19dcfae4ffa67c4dc55c21b2d1b28942e8f18b22d78dbef480a1a317f458a92857d37fbbbfb96f8002846f72599c8cb43f0eaf9c69a8889a42e9df526057296fe69b804b425bf2aad25512519d918d3743ae279bf5318d371b0a7d676f292db15c3db68ebe93d9a277e762e50079e9b0bcc4f3df2afca1cd1fa0b518e6a097f8b7ac703b97f0987236c2b109872926a6c35d7f9962ecb1344db25586a664f49e373f510550b4d808b8d1465b6564f7e5df586bb1fd37f8f92aa923e2cb4a411df39a625e81c2f64e127410213736356c70a7a5d375762c2e8243ad2736b86f70e01ac6ee99c34dcfe526aa86178a6030f9156bc92be64ae726b3d1fef5d87832c2309377fa02ef86c2fb36c697a4dbcc9295b15938a906a194ee614dbe47f579d85bafe169aa3d5890f19fccc85c45e652ad3182745f27cb8c409bc5f8cacd82d6d26b831ffd8dacccfa95f0a53997adfbbf60ac1eb04ac4f3302a88efbf4868b59514ffb22f1060e37ddc1a90221b7baa1e3e4edb97cd59de7209ec3b24b37bee6dad6b2e25c9d1234a446cb22e07d7e42194256543ff2cce1e11d13d86521a1f9e61815856e8ab7d08e34f0ec9d8915fa9a43c8efd21ccd3a331a927291b90d8f59fe11a52da4c7826ab1927ae8085fe2dc19f6983270c03ffcf55026e2db2fa1d7a6553aea786f7fbfd5fd8c8c1f8191e001bc5d3cbaabbbf1882bd33c11b91ae54181081c96987949358d3a359497b2c264a69ad618fae5fa7c2278c3dbd424748ec978b70bee5e56a21b82270b2ef79393ba1fed26dc7a7b70e731b09513f1a5249bb5852f36e55749dac0a2ffb79c4b8d2a6b5d24d66b65fad626e16b18ae69460529afe002124e2fc3b78f2316a30b7ec7d7123a1128695c073395a735f19c9fdf84b17dfee3df45378b7e8e28a8e0a0703a6c00cbaf29ca4b3eb9dee73647ce68167fec181d07faf72babd95b8373a56b2e59df3b5fa6042782c7b34cf162852c068afa9a44688322310e9c855ccd4caddcc1fe9fd3d4f91b9cfa748227e59698002055ddeb4f9468e2914f11069b6ed4214e2f5394d8293b4dd56f9377a1360d09dec747c021a7df7b52990740d505140097ae402ab876ea314b14cd3ed7aa80d5ffb83f3be80eef86cf8ae64e82ace52c3a9f302831c90da279360cda657d30effcec794622dde98e35c0276aae37e20064f89b740546a66143ce22c0d3ca2d5863c9538ad8cf7523e2aa9474c4fdd09593c92fe8262a13430e2da8d0a222196bac9b492a2535e1cb91fad1080ac3e4d2006a4108a03ed2e464abfc4e6111a0481539d0750e341ee5b8989ade4109b96cc2cf1f1ac596f6ecb23733add26fc75d34671618215007483a81542fd5503fa9dc27e2bae22c366d68cc835f327f2e0a79d33343199f1bfb1a78b79b693bead7f3ec37be09636ccd043248f71eb0f343ac0600e1c9c815d9d6eb692eba6a25df26ab027bdab41a70345f29613ee7aa42a55e31abdc4af0d2"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "43b246bff73b313934d161fe2cbdf4d7e7d0a4aa1ff0fd2f5699c2fbc7eddc21da6da9a7a86ace4eb025a0eedb0cab2f3fff96fc71e4aa9281dbf6db81e4257a6503705eaf4d07fb4839ffb7ce09028e7587a18227858a41ac3b4e3d243b645d4207918916c59b0c679261a5ec772ca6796a02374f99517afe74e31b4847db8b7cfd6ceca53670e45bff50d14704244632694dc4e16d4a894d860fc9da3e2b9946d9974590807428839cef6f72f1ceb5d4f126db0bc1001ab8b4fb907563ffa2ba9b0b45835d0e65ddd4da01afff"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "0a3fb9018e18a75fb5bc9c"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "a6e6f04bdd8c22dccbb4e670b0dac0f06afffde5280db9bcf6adebc36c41443105a4f7e7eb47bcd2db40f0cf640823ab47cf9a1bc5217204c82bc9f93500f83ff81a397c2b0955726923e92bb835f168ca11aeca03bfa72eb011c02fd6add626295a94c4cd"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "5064bbb09a975bf68118c4e50551b5e8bab027d1ab594f98e425715b1889b9944c3ef30bcf39a2859a9c52880f9aae0fa6dd629dab54e0f8dc424305dc1c1109e4e0c7c0777d05e5083da9e5450c01f4dbc6327cad07985ecd5cb3b79a7d614505f375e16fb5b556f31597c1787db5b387d55b67e3ac00d2fe1c60f7dfd774a0ead0d5dbba92912c4b966d74e0f108233e1439e326cfd6afed4150da0d872b64e713b5390087"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "52b11bf3904dd7bc7ad297356b4ef59018ee75dcf53c4074884aa5bff30164ff573b172bc7c25140e2b4aa3c6820f7696923791f0da53b00da09c03012521772842cd449c85164376c427e2c1efe62e8086d98bc02d434df8202744b67fd78e76e7127d3599723b3ebcbd090c8e316f0a3fa289cb95f5a47c2a888a532a6213948f4ab9401f6e69c759e8753ab3a8b2d94bac9ee0e3dd9d48155e761d3d31dc4e90196770c543f760d7e784e1e07f578ef489b777c7d485a02374844991c99d7f3fedaa44c977c8ba60bc11ce954ba8338a5242e1e8a0cab003427ff46e137a83f"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "7a122a76ec2c9c67b57904373b8c8bd91a5170592435fd0a2b193821713e7f5846b975af7b8a29f5d1d22067f0e4b628e37e7bed4fea67de6af4189130780082c3d197b08394ce0313fec10d6a958bce5b7f9bb53955107fad2606ad586d308ca1a7c0f90b0d9f74f33e381344f9a31255a26b4064542bb81fdeb6585b28431966e526fa5c36aeba4ac3ae61f63761bbcffabb66ec56e9551bb9cec422d1b9579a3fdce204d13bfc93a36bddd64d36e74e66874c52566ae2b9dea67a"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x54, 0x1, "b952ea2676637dcdf99c9603732750a9a6ab05a8444c007eff7cf0a5def93ddd7dd38ff5f241e9b582ea119c3bf603d38b44bfa50c41951dc8dc17ea4c9c3b9644687284e6d5c307e554a90de74200d7"}]}, 0x154c}, 0x1, 0x0, 0x0, 0xc004}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x74}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000200)={0x0}, &(0x7f00000019c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000001a00)={r7, 0x2}, 0x8) r8 = accept4$rose(r5, 0x0, &(0x7f00000018c0), 0x80000) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, 0x0, 0x5c) setsockopt(r8, 0x9, 0x8, &(0x7f0000001900)="d104c555c3a814c4682402d719395c873d54e70c4a1159bab5dd0815888b1291b4afe99f840a4e1b2c8938610e7bbc61afacd394456fb486e321383ade4dde8cfb79c6ec8a5b0154ae61f29c0b1a94cbdbedb8d3bcae493a0710c0d14a089508d830a17fd28cc1e65f81bcfdcf5eff63f16fb40a3a846239ce77ab0bcb4f2733998c5eb9", 0x84) 0s ago: executing program 4 (id=7620): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c19000010000704fcffffff0002000000230000dc1498605f069542d8b7f78811", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c00028008000f00ff7f0000"], 0x3c}}, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x0, 'syz0\x00', @bcast, 0x1, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0xf90, 0x1, [@m_ipt={0xf8c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0xf61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900676c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000400000000000000000000001000000000000000000000000000000000000000000000000000000000000df000012000000000000000000000000000000000000010000000000000044"], 0xfc}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x5}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) recvfrom$l2tp(r1, &(0x7f0000000980)=""/4096, 0x1000, 0x12163, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000700)={r3, &(0x7f00000002c0)='cbc(camellia)\x00', 0x2, &(0x7f0000000600)={@align=0x5, {0x7, 0x0, 0x8, 0x9}}, 0x7f, &(0x7f0000000640), &(0x7f0000000680)=0x8}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r10, 0x25, 0x0, @void}, 0x10) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r10, @ANYRESHEX=r8, @ANYRES8=r8, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="d85dfca9f3bf59ea14e74d0073be399024f9aa3a1c320bcfc8070ee7a8f398bdc29c87ac2a510c691edadf87411c1e556f1bfa6b5a3333de8ede6abe25d2", @ANYRESOCT=r2, @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0xc000) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r12, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): registering): unset [1, 1] type 2 family 0 port 256 - 0 [ 658.439989][ T1167] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 658.509862][T27808] netlink: 'syz.2.5972': attribute type 1 has an invalid length. [ 658.520148][T27804] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 658.536388][T27807] netlink: 'syz.1.5973': attribute type 1 has an invalid length. [ 658.613782][ T1167] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.633524][ T1167] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53723 - 0 [ 658.643994][ T1167] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 658.654628][ T1167] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 658.748104][T27823] xt_socket: unknown flags 0x50 [ 658.786117][T27815] bond7: (slave ip6gretap1): making interface the new active one [ 658.798229][T27815] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 658.838879][ T1167] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.870449][ T1167] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53723 - 0 [ 658.903717][ T1167] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 658.920455][ T1167] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 658.971429][T27831] team0: Device gtp0 is up. Set it down before adding it as a team port [ 659.055393][T27845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5980'. [ 659.066910][T27742] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.092528][T27742] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.107615][T27742] bridge_slave_0: entered allmulticast mode [ 659.126937][T27742] bridge_slave_0: entered promiscuous mode [ 659.150658][T27742] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.165396][ T51] Bluetooth: hci4: command tx timeout [ 659.179506][T27742] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.187732][T27851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5981'. [ 659.201272][T27742] bridge_slave_1: entered allmulticast mode [ 659.212920][T27742] bridge_slave_1: entered promiscuous mode [ 659.281630][T27853] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 659.382289][T27742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.408756][T27742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.455039][T27858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5985'. [ 659.598452][T27742] team0: Port device team_slave_0 added [ 659.642178][T27742] team0: Port device team_slave_1 added [ 659.826667][T27878] openvswitch: netlink: Message has 8 unknown bytes. [ 659.833521][T27878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.938494][ T1167] bond2 (unregistering): (slave gretap2): Releasing active interface [ 659.999309][ T1167] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 660.007927][ T1167] bridge1 (unregistering): left promiscuous mode [ 660.014287][ T1167] bridge1 (unregistering): left allmulticast mode [ 660.059561][ T1167] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 660.068519][ T1167] bridge2 (unregistering): left promiscuous mode [ 660.074886][ T1167] bridge2 (unregistering): left allmulticast mode [ 660.300461][ T1167] ` (unregistering): Released all slaves [ 660.312440][ T1167] bond1 (unregistering): Released all slaves [ 660.328015][ T1167] bond2 (unregistering): Released all slaves [ 660.343943][ T1167] bond3 (unregistering): Released all slaves [ 660.375551][ T1167]  (unregistering): Released all slaves [ 660.398791][ T1167] bond4 (unregistering): Released all slaves [ 660.432598][T27742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.439860][T27742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.466858][T27742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.478554][T27875] syzkaller1: entered promiscuous mode [ 660.484233][T27875] syzkaller1: entered allmulticast mode [ 660.500990][T27879] geneve4: entered promiscuous mode [ 660.512002][T27742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.519622][T27742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.547485][T27742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.618636][ T1167] : left promiscuous mode [ 660.664519][T27742] hsr_slave_0: entered promiscuous mode [ 660.673108][T27742] hsr_slave_1: entered promiscuous mode [ 660.681670][ T1167] 9: left promiscuous mode [ 660.733085][ T1167] : left promiscuous mode [ 660.805365][ T1167] tipc: Disabling bearer [ 660.820250][ T1167] tipc: Left network mode [ 661.245605][ T51] Bluetooth: hci4: command tx timeout [ 661.382885][ T1167] hsr_slave_0: left promiscuous mode [ 661.390641][ T1167] hsr_slave_1: left promiscuous mode [ 661.405056][ T1167] veth1_vlan: left allmulticast mode [ 661.411470][ T1167] veth0_macvtap: left promiscuous mode [ 661.419384][ T1167] veth1_vlan: left promiscuous mode [ 661.424931][ T1167] veth0_vlan: left promiscuous mode [ 661.498639][ T1167] team0 (unregistering): Port device batadv1 removed [ 661.908945][T27831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.927774][T27742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 661.978293][T27742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.058356][T27742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.118552][T27742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.208314][T27886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.215649][T27886] IPv6: NLM_F_CREATE should be set when creating new route [ 662.222901][T27886] IPv6: NLM_F_CREATE should be set when creating new route [ 662.255894][T27886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.375932][T27903] __nla_validate_parse: 2 callbacks suppressed [ 662.375952][T27903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5994'. [ 662.664514][T27742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.696324][ T1167] IPVS: stop unused estimator thread 0... [ 662.721316][T27742] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.786987][T20149] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.794181][T20149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.898540][T20136] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.905792][T20136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.021691][T27935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6002'. [ 663.054227][T27935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6002'. [ 663.092402][T27939] netlink: 'syz.3.6004': attribute type 13 has an invalid length. [ 663.124796][T27933] wg1 speed is unknown, defaulting to 1000 [ 663.131043][T27935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6002'. [ 663.131066][T27935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6002'. [ 663.288948][T27949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6005'. [ 663.328234][ T51] Bluetooth: hci4: command tx timeout [ 663.345882][T27957] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6005'. [ 663.574387][T27963] netlink: 'syz.3.6006': attribute type 1 has an invalid length. [ 663.597075][T27963] netlink: 'syz.3.6006': attribute type 1 has an invalid length. [ 663.604868][T27963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6006'. [ 663.640598][T27963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6006'. [ 663.674898][T27963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6006'. [ 663.687787][T27742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.716567][T17656] lec:lec_start_xmit: lec0:No lecd attached [ 664.034234][T27933] lo speed is unknown, defaulting to 1000 [ 664.425643][T28005] lo: Caught tx_queue_len zero misconfig [ 664.550855][T27742] veth0_vlan: entered promiscuous mode [ 664.618521][T28013] siw: device registration error -23 [ 664.622431][T27742] veth1_vlan: entered promiscuous mode [ 664.803510][T27742] veth0_macvtap: entered promiscuous mode [ 664.834101][T27742] veth1_macvtap: entered promiscuous mode [ 664.892951][T27742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.940266][T27742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.043969][T20146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.084868][T20146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.171728][T20146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.187981][T20146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.269820][T28040] macsec0: entered promiscuous mode [ 665.279981][T28040] macsec0: entered allmulticast mode [ 665.290007][T28044] veth1_macvtap: entered allmulticast mode [ 665.296647][T28044] macsec0: left promiscuous mode [ 665.301915][T28044] macsec0: left allmulticast mode [ 665.307371][T28044] veth1_macvtap: left allmulticast mode [ 665.360924][T20136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.378103][T20136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.409940][ T51] Bluetooth: hci4: command tx timeout [ 665.462776][T20136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.496713][T20136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.649373][T28056] netlink: 'syz.3.6029': attribute type 3 has an invalid length. [ 665.657668][T28056] netlink: 'syz.3.6029': attribute type 1 has an invalid length. [ 665.969201][T28073] vcan1: entered promiscuous mode [ 665.985941][T28073] vcan1: entered allmulticast mode [ 666.035509][T28071] syzkaller0: entered promiscuous mode [ 666.041050][T28071] syzkaller0: entered allmulticast mode [ 666.062411][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 666.100335][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 666.116278][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 666.137749][T22338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 666.145550][T22338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 666.301517][T28078] wg1 speed is unknown, defaulting to 1000 [ 666.584956][T28100] netlink: 'syz.0.6045': attribute type 2 has an invalid length. [ 666.721603][T28100] tunl0: entered promiscuous mode [ 666.746482][T28100] netlink: 'syz.0.6045': attribute type 3 has an invalid length. [ 666.855789][T28078] lo speed is unknown, defaulting to 1000 [ 666.913661][T28107] syzkaller0: entered promiscuous mode [ 666.919454][T28107] syzkaller0: entered allmulticast mode [ 667.084249][T28124] netlink: 'syz.4.6049': attribute type 1 has an invalid length. [ 667.348196][T28145] xt_hashlimit: max too large, truncated to 1048576 [ 668.208405][T22338] Bluetooth: hci5: command tx timeout [ 668.858119][T28149] netlink: 'syz.1.6055': attribute type 2 has an invalid length. [ 668.978229][T28156] netlink: 'syz.4.6057': attribute type 8 has an invalid length. [ 669.037126][T28165] __nla_validate_parse: 10 callbacks suppressed [ 669.037144][T28165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6059'. [ 669.085463][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 669.093556][ C0] lec:lec_tx_timeout: lec0 [ 669.118892][T28165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6059'. [ 669.162360][T28165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6059'. [ 669.201109][T28078] chnl_net:caif_netlink_parms(): no params data found [ 669.457506][T28078] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.469564][T28078] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.485840][T28078] bridge_slave_0: entered allmulticast mode [ 669.494136][T28078] bridge_slave_0: entered promiscuous mode [ 669.526699][T28078] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.534127][T28078] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.545908][T28078] bridge_slave_1: entered allmulticast mode [ 669.566906][T28078] bridge_slave_1: entered promiscuous mode [ 669.659412][T28078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.692318][T28078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.826612][T28212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6069'. [ 669.837441][T28078] team0: Port device team_slave_0 added [ 669.874307][T28218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6070'. [ 669.894673][T28212] bond16: Invalid ad_actor_system MAC address. [ 669.901397][T28212] bond16: option ad_actor_system: invalid value (1) [ 669.910276][T28212] bond16 (unregistering): Released all slaves [ 669.942371][T28078] team0: Port device team_slave_1 added [ 669.959835][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [ 670.011959][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [ 670.035293][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6071'. [ 670.117279][T28078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.124289][T28078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.169732][T28227] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 670.173236][T28078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.221212][T28078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.236472][T28078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.285517][T22338] Bluetooth: hci5: command tx timeout [ 670.327030][T28078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.461002][T28078] hsr_slave_0: entered promiscuous mode [ 670.468583][T28078] hsr_slave_1: entered promiscuous mode [ 670.475026][T28078] debugfs: 'hsr0' already exists in 'hsr' [ 670.503575][T28078] Cannot create hsr debugfs directory [ 670.574286][T28249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.604412][T28249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.793512][T28249] vxcan1: entered promiscuous mode [ 670.802858][T28249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6080'. [ 670.847465][T28258] syzkaller0: entered promiscuous mode [ 670.853082][T28258] syzkaller0: entered allmulticast mode [ 671.101236][T28078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.120486][T28078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 671.131511][T28078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 58681 - 0 [ 671.154234][T28268] netlink: 'syz.4.6085': attribute type 23 has an invalid length. [ 671.254780][T28078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.271080][T28078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 671.306616][T28078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 58681 - 0 [ 671.459197][T28078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.480271][T28078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 671.491934][T28078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 58681 - 0 [ 671.581806][T28078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.613097][T28078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 671.626256][T28078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 58681 - 0 [ 671.775301][T28309] syzkaller0: entered promiscuous mode [ 671.787775][T28306] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 671.791913][T28309] syzkaller0: entered allmulticast mode [ 671.802212][T28311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6100'. [ 671.823555][T28306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.097487][T28329] netlink: 'syz.2.6104': attribute type 29 has an invalid length. [ 672.124238][T28078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 672.149455][T28078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 672.274456][T28078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 672.290545][T28078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 672.346294][T28336] bond8: entered allmulticast mode [ 672.365771][T22338] Bluetooth: hci5: command tx timeout [ 672.402333][T28337] bridge5: entered promiscuous mode [ 672.408194][T28337] bridge5: entered allmulticast mode [ 672.417628][T28337] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 672.557899][T28078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.617453][T28078] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.641552][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.648919][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.703281][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.710548][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.827814][T28078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.838322][T28078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.029323][T28376] netem: change failed [ 673.059144][T28376] tipc: Enabled bearer , priority 0 [ 673.066894][T28376] syzkaller0: entered promiscuous mode [ 673.072408][T28376] syzkaller0: entered allmulticast mode [ 673.089668][T28375] tipc: Resetting bearer [ 673.146435][T28375] tipc: Disabling bearer [ 673.536544][T28078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.615561][T28399] syz_tun: entered allmulticast mode [ 673.634200][T28078] veth0_vlan: entered promiscuous mode [ 673.642613][T28379] xt_TCPMSS: Only works on TCP SYN packets [ 673.680744][T28399] dvmrp8: entered allmulticast mode [ 673.696611][T28403] dvmrp8: left allmulticast mode [ 673.738351][T28078] veth1_vlan: entered promiscuous mode [ 673.786622][T28398] syz_tun: left allmulticast mode [ 673.833443][T28078] veth0_macvtap: entered promiscuous mode [ 673.871664][T28078] veth1_macvtap: entered promiscuous mode [ 673.929398][T28078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.971350][T28414] netlink: 'syz.2.6127': attribute type 13 has an invalid length. [ 673.994435][T28078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.047921][T20145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.075857][ T1167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.098338][T28421] __nla_validate_parse: 6 callbacks suppressed [ 674.098365][T28421] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6129'. [ 674.127511][T28424] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6130'. [ 674.159197][ T1167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.172448][T28424] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 674.181178][ T1167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.344785][T28436] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 674.447255][T22338] Bluetooth: hci5: command tx timeout [ 674.483067][T20136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.505405][T20136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.568577][T20145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.580731][T20145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.686514][T28449] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6032'. [ 674.718729][T28449] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 675.186814][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 675.201367][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 675.210838][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 675.221642][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 675.246248][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 675.378646][T28487] netlink: 'syz.4.6148': attribute type 4 has an invalid length. [ 675.434142][T28487] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6148'. [ 675.472834][T28473] wg1 speed is unknown, defaulting to 1000 [ 675.564524][T28492] bond15: option mode: invalid value (133) [ 675.597773][T28492] bond15 (unregistering): Released all slaves [ 675.650966][T28498] ±ÿ: renamed from team_slave_1 (while UP) [ 675.678120][T28501] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6150'. [ 675.892198][T28513] sctp: [Deprecated]: syz.2.6155 (pid 28513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.892198][T28513] Use struct sctp_sack_info instead [ 676.056463][T20145] wlan1: Trigger new scan to find an IBSS to join [ 676.157494][T28473] lo speed is unknown, defaulting to 1000 [ 676.175654][T28528] openvswitch: netlink: IP tunnel dst address not specified [ 676.188386][T28527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6160'. [ 676.321396][T28534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 676.543243][T28549] netlink: 'syz.2.6164': attribute type 1 has an invalid length. [ 676.584565][T28549] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6164'. [ 676.620819][T28473] chnl_net:caif_netlink_parms(): no params data found [ 676.659694][T28560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6166'. [ 676.838495][T28566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6167'. [ 676.879726][T28473] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.894823][T28473] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.912182][T28473] bridge_slave_0: entered allmulticast mode [ 676.929492][T28473] bridge_slave_0: entered promiscuous mode [ 676.976133][T28473] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.983581][T28473] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.993150][T28473] bridge_slave_1: entered allmulticast mode [ 677.011927][T28473] bridge_slave_1: entered promiscuous mode [ 677.148240][T28473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.223202][T28582] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 677.268138][T28582] bond15 (unregistering): Released all slaves [ 677.338274][T22338] Bluetooth: hci2: command tx timeout [ 677.351863][T28473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.464080][T28586] bond15: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 677.524001][T28586] bond15 (unregistering): Released all slaves [ 677.609436][T28608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6177'. [ 677.638049][T28473] team0: Port device team_slave_0 added [ 677.687939][T28473] team0: Port device team_slave_1 added [ 677.759932][T28615] netlink: 'syz.1.6178': attribute type 4 has an invalid length. [ 677.769957][T28473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.777318][T28473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.804263][T28473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.827621][T28473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.855714][T28473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.898109][T28473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.952547][T28620] netlink: zone id is out of range [ 677.976048][T28620] netlink: del zone limit has 4 unknown bytes [ 677.994653][T28625] netlink: 'syz.3.6183': attribute type 7 has an invalid length. [ 678.036108][T28625] netlink: 'syz.3.6183': attribute type 8 has an invalid length. [ 678.048665][T28473] hsr_slave_0: entered promiscuous mode [ 678.068491][T28473] hsr_slave_1: entered promiscuous mode [ 678.087699][T28473] debugfs: 'hsr0' already exists in 'hsr' [ 678.098449][T28473] Cannot create hsr debugfs directory [ 678.160437][T28632] tipc: Started in network mode [ 678.173104][T28632] tipc: Node identity , cluster identity 4711 [ 678.180274][T28632] tipc: Failed to set node id, please configure manually [ 678.188160][T28632] tipc: Enabling of bearer rejected, failed to enable media [ 678.288431][T28634] bond1: option miimon: invalid value (18446744073709551585) [ 678.296539][T28634] bond1: option miimon: allowed values 0 - 2147483647 [ 678.307516][T28634] bond1 (unregistering): Released all slaves [ 678.350823][T28638] netlink: 'syz.1.6189': attribute type 2 has an invalid length. [ 678.375441][T28642] netlink: 'syz.1.6189': attribute type 2 has an invalid length. [ 678.477956][T28650] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 678.494489][T28648] ip6gre0: Master is either lo or non-ether device [ 678.537201][T28653] netlink: 'syz.2.6190': attribute type 9 has an invalid length. [ 678.545001][T28653] netlink: 'syz.2.6190': attribute type 11 has an invalid length. [ 678.821366][T28473] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.954843][T28473] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.988452][T28684] validate_nla: 1 callbacks suppressed [ 678.988471][T28684] netlink: 'syz.1.6201': attribute type 10 has an invalid length. [ 679.127485][T28473] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.373851][T28473] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.418291][T22338] Bluetooth: hci2: command 0x041b tx timeout [ 679.923891][T28749] __nla_validate_parse: 15 callbacks suppressed [ 679.923911][T28749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6211'. [ 680.025484][T28751] netlink: 'syz.4.6211': attribute type 11 has an invalid length. [ 680.076619][T28751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6211'. [ 680.148318][T28749] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 680.196625][T28749] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 680.309166][T28473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 680.376288][T28473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 680.413382][T28473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 680.520951][T28473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.756106][T28793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6218'. [ 680.907434][T28799] nbd: socks must be embedded in a SOCK_ITEM attr [ 680.920739][T28473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.993936][T28473] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.032540][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.039955][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.056897][T28804] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6221'. [ 681.114501][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.120919][T28804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6221'. [ 681.122038][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.287272][T28812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6223'. [ 681.334615][T28812] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.402529][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6224'. [ 681.443635][T28820] veth0: entered promiscuous mode [ 681.466027][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6224'. [ 681.486517][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 681.507620][T28820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6226'. [ 681.756350][T28473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.847663][T28473] veth0_vlan: entered promiscuous mode [ 681.882706][T28473] veth1_vlan: entered promiscuous mode [ 681.942995][T28836] bond1: entered promiscuous mode [ 681.993724][T28473] veth0_macvtap: entered promiscuous mode [ 682.017153][T28837] netlink: 'syz.1.6227': attribute type 21 has an invalid length. [ 682.036790][T28473] veth1_macvtap: entered promiscuous mode [ 682.045648][T20148] wlan1: Trigger new scan to find an IBSS to join [ 682.100588][T28473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.156067][T28473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.156428][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6230'. [ 682.202825][T20143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.235525][T20143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.247638][T20143] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.352700][T20143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.549454][T28856] pimreg: entered allmulticast mode [ 682.576422][T28856] netlink: 'syz.1.6233': attribute type 1 has an invalid length. [ 682.604809][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.624172][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.693544][T28856] 8021q: adding VLAN 0 to HW filter on device bond9 [ 682.705188][T28860] bond9: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 682.786564][T28862] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link [ 682.816756][T28866] netlink: 'syz.2.6235': attribute type 1 has an invalid length. [ 682.826283][T20143] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 682.835922][T20146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.859267][T20146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.975459][T20146] bond9: (slave ip6gretap2): link status up, enabling it in 0 ms [ 683.006152][T20146] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 683.118354][T20146] bond9: (slave ip6gretap2): link status up, enabling it in 0 ms [ 683.149586][T20146] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 683.189785][T28884] siw: device registration error -23 [ 683.275837][T20148] bond9: (slave ip6gretap2): link status up, enabling it in 0 ms [ 683.283736][T20148] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 683.445469][T20146] bond9: (slave ip6gretap2): link status up, enabling it in 0 ms [ 683.453275][T20146] bond9: (slave ip6gretap2): failed to get link speed/duplex [ 683.566532][ T51] Bluetooth: hci2: command 0x041b tx timeout [ 683.608654][ T1167] bond9: (slave ip6gretap2): link status up, enabling it in 0 ms [ 683.638603][T22338] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.652600][T22338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.686705][T22338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.715816][T22338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.733570][T22338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.970442][T28902] wg1 speed is unknown, defaulting to 1000 [ 684.235944][T20149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.459280][T20148] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.508152][T20148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.545884][T20148] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 684.691401][T20148] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.713220][T20148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.737399][T20148] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 684.786845][T28902] lo speed is unknown, defaulting to 1000 [ 684.801635][T28947] syzkaller0: entered promiscuous mode [ 684.825459][T28947] syzkaller0: entered allmulticast mode [ 684.904002][T20148] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.923319][T20148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.936225][T20148] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 685.036927][T20148] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.054075][T20148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.077556][T20148] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 685.499672][T28979] __nla_validate_parse: 5 callbacks suppressed [ 685.499693][T28979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6259'. [ 685.561978][T28902] chnl_net:caif_netlink_parms(): no params data found [ 685.646941][T22338] Bluetooth: hci2: command 0x041b tx timeout [ 685.763782][T20148] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.788404][T20148] bridge_slave_0: left allmulticast mode [ 685.806690][T22338] Bluetooth: hci1: command tx timeout [ 685.813213][T20148] bridge_slave_0: left promiscuous mode [ 685.819195][T20148] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.841411][T28991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6261'. [ 685.873029][T28991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6261'. [ 685.983696][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 686.333695][T20148] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 686.376606][T20148] bond9 (unregistering): (slave ip6gretap2): Releasing active interface [ 686.450932][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6266'. [ 686.799730][T20148] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 686.860806][T20148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.872016][T20148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.884480][T20148] bond0 (unregistering): Released all slaves [ 686.897390][T20148] bond1 (unregistering): Released all slaves [ 686.912108][T20148] bond2 (unregistering): Released all slaves [ 686.927337][T20148] bond3 (unregistering): Released all slaves [ 686.941885][T20148] bond4 (unregistering): Released all slaves [ 686.959601][T20148] bond5 (unregistering): Released all slaves [ 686.977236][T20148] bond6 (unregistering): Released all slaves [ 687.003721][T20148] bond7 (unregistering): Released all slaves [ 687.022043][T20148] bond8 (unregistering): Released all slaves [ 687.036922][T20148] bond9 (unregistering): Released all slaves [ 687.237113][T28992] tipc: Resetting bearer [ 687.336786][T20148] : left promiscuous mode [ 687.572538][T28902] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.577259][T28992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 687.585697][T28992] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 687.606160][T28902] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.616790][T28902] bridge_slave_0: entered allmulticast mode [ 687.628381][T28902] bridge_slave_0: entered promiscuous mode [ 687.640558][T28902] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.649917][T28902] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.660875][T28902] bridge_slave_1: entered allmulticast mode [ 687.669612][T28902] bridge_slave_1: entered promiscuous mode [ 687.767570][T29040] syzkaller0: entered promiscuous mode [ 687.773183][T29049] x_tables: duplicate underflow at hook 1 [ 687.780248][T29040] syzkaller0: entered allmulticast mode [ 687.889949][T22338] Bluetooth: hci1: command tx timeout [ 687.916969][T29054] sctp: [Deprecated]: syz.0.6275 (pid 29054) Use of int in maxseg socket option. [ 687.916969][T29054] Use struct sctp_assoc_value instead [ 687.989886][T29054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6275'. [ 688.456708][T29079] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 688.468290][T29079] tipc: Failed to remove unknown binding: 66,0,0/0:1654054157/1654054158 [ 688.481960][T29079] tipc: Failed to remove unknown binding: 66,0,0/0:1654054157/1654054158 [ 689.965775][T22338] Bluetooth: hci1: command tx timeout [ 690.017454][T28902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.026643][T29054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.034074][T29054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.042442][T29054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.050407][T29054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.108969][T28902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.161857][T28902] team0: Port device team_slave_0 added [ 690.173688][T28902] team0: Port device team_slave_1 added [ 690.246652][T28902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.260945][T28902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.289830][T29096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6283'. [ 690.310066][T28902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.324882][T28992] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.336375][T28902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.343405][T28902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.352925][T28992] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 690.381956][T28902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.393464][T29097] x_tables: duplicate underflow at hook 4 [ 690.414056][T29097] netlink: 'syz.3.6282': attribute type 3 has an invalid length. [ 690.422742][T29097] netlink: 'syz.3.6282': attribute type 3 has an invalid length. [ 690.432648][T29097] net_ratelimit: 77 callbacks suppressed [ 690.432668][T29097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.540611][T28902] hsr_slave_0: entered promiscuous mode [ 690.556708][T28902] hsr_slave_1: entered promiscuous mode [ 690.575299][T28902] debugfs: 'hsr0' already exists in 'hsr' [ 690.581095][T28902] Cannot create hsr debugfs directory [ 690.703258][T29108] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 [ 690.706888][T28992] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 690.728164][T28992] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 690.756484][T29115] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 690.783824][T29117] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6287'. [ 690.786654][T29114] sctp: [Deprecated]: syz.2.6286 (pid 29114) Use of int in maxseg socket option. [ 690.786654][T29114] Use struct sctp_assoc_value instead [ 690.807398][T29117] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6287'. [ 690.944330][T29122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6289'. [ 690.982431][T29127] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 690.996403][T28992] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 691.002372][T28992] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 691.061870][T29128] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 691.096618][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 691.104718][ C0] lec:lec_tx_timeout: lec0 [ 691.251135][T28992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 691.263775][T28992] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 691.586444][T29148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6294'. [ 691.719324][T29149] bond2: option fail_over_mac: invalid value (16) [ 691.767388][T29149] bond2 (unregistering): Released all slaves [ 691.812672][T29156] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6295'. [ 691.923023][T29146] syzkaller1: entered promiscuous mode [ 691.930707][T29146] syzkaller1: entered allmulticast mode [ 692.068864][T29159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6297'. [ 692.116513][T29160] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.6296'. [ 692.325670][T29167] ipt_rpfilter: unknown options [ 692.358149][T29167] veth0: entered promiscuous mode [ 692.429428][T29170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6300'. [ 692.454523][T29167] bridge0: port 3(ipvlan2) entered blocking state [ 692.525797][T29167] bridge0: port 3(ipvlan2) entered disabled state [ 692.555020][T29167] ipvlan2: entered allmulticast mode [ 692.576829][T29167] bridge0: entered allmulticast mode [ 692.600216][T29167] ipvlan2: left allmulticast mode [ 692.646367][T29167] bridge0: left allmulticast mode [ 692.760662][T29191] netlink: 'syz.4.6304': attribute type 1 has an invalid length. [ 692.780864][T29182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6302'. [ 692.797519][T29182] netlink: 'syz.2.6302': attribute type 21 has an invalid length. [ 692.814491][T20148] veth1_macvtap: left promiscuous mode [ 692.820425][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6302'. [ 692.825440][T20148] veth0_macvtap: left promiscuous mode [ 692.846167][T20148] veth1_vlan: left promiscuous mode [ 692.851510][T20148] veth0_vlan: left promiscuous mode [ 693.059234][T20148] pimreg (unregistering): left allmulticast mode [ 693.145931][T20148] team0 (unregistering): Port device batadv2 removed [ 693.209495][T20148] team0 (unregistering): Port device batadv1 removed [ 693.479541][T20148] team0 (unregistering): Port device 26±ÿ removed [ 693.613666][T29166] veth0: left promiscuous mode [ 693.618896][T28902] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 693.633407][T29193] veth0: entered promiscuous mode [ 693.656994][T29182] netlink: 'syz.2.6302': attribute type 21 has an invalid length. [ 693.676228][T28902] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 693.708547][T20145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.741333][T29194] veth0: left promiscuous mode [ 693.757062][T28902] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 693.780457][T20145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.810827][T20145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.830285][T28902] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 693.856599][T20145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.304362][T28902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.387972][T28902] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.418337][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.425621][ T7142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.508046][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.515318][ T7142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.131647][T28902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.293536][T28902] veth0_vlan: entered promiscuous mode [ 695.422317][T29290] wg1 speed is unknown, defaulting to 1000 [ 695.440514][T28902] veth1_vlan: entered promiscuous mode [ 695.600040][T28902] veth0_macvtap: entered promiscuous mode [ 695.636872][T28902] veth1_macvtap: entered promiscuous mode [ 695.670829][T29308] netlink: 'syz.0.6327': attribute type 11 has an invalid length. [ 695.691433][T28902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.736091][T28902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.839704][ T1101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.874900][ T1101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.921338][T29290] lo speed is unknown, defaulting to 1000 [ 695.921329][ T1101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.952716][T29319] __nla_validate_parse: 11 callbacks suppressed [ 695.952739][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6329'. [ 696.084679][ T1101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.184703][T20148] IPVS: stop unused estimator thread 0... [ 696.216710][T29331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6332'. [ 696.702661][T20148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.715525][T20148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.896048][T29360] netlink: 'syz.0.6338': attribute type 11 has an invalid length. [ 696.922709][T29360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6338'. [ 697.183010][T20136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.209962][T20136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.376103][T29380] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6341'. [ 697.647979][T29390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6343'. [ 697.880184][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.891063][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.903709][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.926137][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.936584][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.944168][T29403] x_tables: duplicate underflow at hook 2 [ 697.952851][T29406] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 697.967412][T29405] x_tables: duplicate underflow at hook 2 [ 698.004089][T29406] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6348'. [ 698.013946][T29406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6348'. [ 698.136736][T29400] wg1 speed is unknown, defaulting to 1000 [ 698.275318][T29415] netlink: 'syz.3.6350': attribute type 1 has an invalid length. [ 698.460433][T29415] bond1: entered promiscuous mode [ 698.467663][T29415] bond1: entered allmulticast mode [ 698.473568][T29415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.514131][T29431] netlink: 'syz.1.6354': attribute type 5 has an invalid length. [ 698.548917][T29431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6354'. [ 698.550554][T23555] IPVS: starting estimator thread 0... [ 698.675299][T29436] IPVS: using max 29 ests per chain, 69600 per kthread [ 698.711190][T29442] netlink: 'syz.0.6356': attribute type 1 has an invalid length. [ 698.740424][T29400] lo speed is unknown, defaulting to 1000 [ 698.748532][T29442] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6356'. [ 699.208400][T29400] chnl_net:caif_netlink_parms(): no params data found [ 699.413761][T29493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.462828][T29495] Cannot find add_set index 65532 as target [ 699.501663][T29400] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.511557][T29400] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.519197][T29400] bridge_slave_0: entered allmulticast mode [ 699.527774][T29400] bridge_slave_0: entered promiscuous mode [ 699.582188][T29505] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6371'. [ 699.632683][T29400] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.642827][T29400] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.661355][T29400] bridge_slave_1: entered allmulticast mode [ 699.687265][T29400] bridge_slave_1: entered promiscuous mode [ 699.800976][T29400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.829800][T29400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.917337][T29400] team0: Port device team_slave_0 added [ 699.935177][T29400] team0: Port device team_slave_1 added [ 699.942708][T29515] wg1 speed is unknown, defaulting to 1000 [ 700.047814][ T51] Bluetooth: hci0: command tx timeout [ 700.051381][T29400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.070983][T29400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.098674][T29400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.121102][T29400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.145420][T29400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.349209][T29400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.360461][T29515] lo speed is unknown, defaulting to 1000 [ 700.532708][T29400] hsr_slave_0: entered promiscuous mode [ 700.540434][T29400] hsr_slave_1: entered promiscuous mode [ 700.549823][T29400] debugfs: 'hsr0' already exists in 'hsr' [ 700.558429][T29400] Cannot create hsr debugfs directory [ 700.792597][T20149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.829607][T20149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.865775][T20149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.941692][T20149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.131843][T29538] wg1 speed is unknown, defaulting to 1000 [ 701.587856][T29400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.766850][T29400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.887555][T29538] lo speed is unknown, defaulting to 1000 [ 701.932923][T29400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.013771][T29400] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 702.043536][T29595] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 702.073962][T29595] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 702.092335][T29596] openvswitch: netlink: Flow actions attr not present in new flow. [ 702.118388][T29596] __nla_validate_parse: 5 callbacks suppressed [ 702.118410][T29596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6394'. [ 702.139946][ T51] Bluetooth: hci0: command tx timeout [ 702.261052][T29600] openvswitch: netlink: Missing valid actions attribute. [ 702.272109][T29600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.357920][T29400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 702.382899][T29400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 702.417693][T29400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 702.464971][T29400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 702.733849][T29627] netlink: 'syz.0.6401': attribute type 1 has an invalid length. [ 702.749700][T29400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.758883][T29627] Cannot find set identified by id 0 to match [ 702.797628][T29400] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.837048][T20148] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.844250][T20148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.903695][T20148] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.910929][T20148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.966169][T29633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 703.017075][T29637] netlink: 'syz.3.6406': attribute type 1 has an invalid length. [ 703.077927][T29637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6406'. [ 703.415434][T29654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6411'. [ 703.580734][T29400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.710533][T29400] veth0_vlan: entered promiscuous mode [ 703.749011][T29400] veth1_vlan: entered promiscuous mode [ 703.815950][T29676] nbd: must specify a size in bytes for the device [ 703.911605][T29400] veth0_macvtap: entered promiscuous mode [ 703.924112][T29400] veth1_macvtap: entered promiscuous mode [ 703.949097][T29400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.991562][T29400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.036250][T20146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.057964][ T7142] wlan1: Trigger new scan to find an IBSS to join [ 704.093819][T20146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.114641][T20146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.176947][T20146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.205432][ T51] Bluetooth: hci0: command tx timeout [ 704.255044][T29689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6421'. [ 704.344020][T29689] syzkaller0: entered promiscuous mode [ 704.356460][T29689] syzkaller0: entered allmulticast mode [ 704.403565][T29689] tipc: Started in network mode [ 704.418181][T29689] tipc: Node identity 92984ddfa048, cluster identity 4711 [ 704.447899][T29689] tipc: Enabled bearer , priority 0 [ 704.460776][T29694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6423'. [ 704.546453][T29688] tipc: Resetting bearer [ 704.587227][T29681] netlink: 'syz.0.6416': attribute type 2 has an invalid length. [ 704.597142][T29688] tipc: Disabling bearer [ 704.635610][ T7142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.657427][ T7142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.778458][ T7142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.789423][ T7142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.912492][T29704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.120938][T29714] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6428'. [ 705.143790][T29715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6427'. [ 705.227344][T29720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6430'. [ 705.248484][T29723] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6428'. [ 705.261525][T29714] netlink: 'syz.2.6428': attribute type 39 has an invalid length. [ 705.303454][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6431'. [ 705.339573][T20148] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.348584][T20148] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.377541][T20148] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.387368][ T1101] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.569681][T29741] syzkaller0: entered promiscuous mode [ 705.575555][T29741] syzkaller0: entered allmulticast mode [ 705.939644][T29762] wg1 speed is unknown, defaulting to 1000 [ 706.014730][T29773] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 706.109581][T29773] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 706.145037][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.162634][T29779] syzkaller0: entered promiscuous mode [ 706.172975][T29779] syzkaller0: entered allmulticast mode [ 706.188290][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.292217][ T51] Bluetooth: hci0: command tx timeout [ 706.408147][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.464198][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.560494][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.568783][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.610947][T29762] lo speed is unknown, defaulting to 1000 [ 706.618840][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.638408][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.843087][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 706.884243][T29784] netlink: 'syz.3.6448': attribute type 11 has an invalid length. [ 707.093794][T20149] wlan1: Trigger new scan to find an IBSS to join [ 707.514756][T29843] netlink: 'syz.4.6463': attribute type 16 has an invalid length. [ 707.535704][T29843] netlink: 'syz.4.6463': attribute type 17 has an invalid length. [ 707.662675][T29843] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.692795][T29843] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.060430][T29863] netlink: 'syz.3.6467': attribute type 1 has an invalid length. [ 708.147292][T29863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.524908][T29882] __nla_validate_parse: 10 callbacks suppressed [ 708.524930][T29882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6470'. [ 708.932636][T29871] bond3: (slave gretap1): making interface the new active one [ 708.947288][T29871] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 709.052168][T29893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.075826][T29893] openvswitch: netlink: Key type 31 is not supported [ 709.092403][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.181927][T29894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.202225][T29896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6474'. [ 709.252681][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.369129][T29894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.430804][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.475026][T29894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.525726][T29894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'. [ 709.709375][T29921] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 709.855936][T29941] ÿÿÿÿÿÿ: renamed from bond_slave_1 (while UP) [ 709.919769][T29945] netlink: 'syz.1.6485': attribute type 21 has an invalid length. [ 710.058834][ T1101] wlan1: Trigger new scan to find an IBSS to join [ 710.462708][T29980] netlink: 'syz.0.6495': attribute type 28 has an invalid length. [ 710.511174][T29980] netlink: 'syz.0.6495': attribute type 3 has an invalid length. [ 711.011261][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.085732][T20138] wlan1: Trigger new scan to find an IBSS to join [ 711.337330][T30031] netlink: 'syz.1.6508': attribute type 1 has an invalid length. [ 711.449680][T30037] netlink: 'syz.0.6510': attribute type 10 has an invalid length. [ 711.511720][T30037] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 711.594250][T30052] netlink: 'syz.1.6513': attribute type 12 has an invalid length. [ 711.656291][T30051] netlink: 'syz.1.6513': attribute type 12 has an invalid length. [ 711.969650][T30080] 8021q: VLANs not supported on wg1 [ 712.149639][T30084] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20001 [ 712.196195][T30087] netlink: 'syz.3.6522': attribute type 1 has an invalid length. [ 712.218929][T30087] netlink: 'syz.3.6522': attribute type 7 has an invalid length. [ 712.220849][T30084] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20001 [ 712.410082][T30099] tipc: Started in network mode [ 712.420091][T30099] tipc: Node identity eeb43bb0825c, cluster identity 4711 [ 712.448370][T30099] tipc: Enabled bearer , priority 0 [ 712.503555][T30102] bridge0: port 3(ipvlan2) entered blocking state [ 712.538959][T30102] bridge0: port 3(ipvlan2) entered disabled state [ 712.562503][T30110] xt_policy: output policy not valid in PREROUTING and INPUT [ 712.570938][T30102] ipvlan2: entered allmulticast mode [ 712.580794][T30102] bridge0: entered allmulticast mode [ 712.641109][T30102] ipvlan2: left allmulticast mode [ 712.674380][T30102] bridge0: left allmulticast mode [ 712.731679][T30098] tipc: Resetting bearer [ 712.846332][T30098] tipc: Disabling bearer [ 713.553089][T30178] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 713.724109][T30186] __nla_validate_parse: 136 callbacks suppressed [ 713.724130][T30186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6548'. [ 713.741325][T30186] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6548'. [ 714.238075][T30216] validate_nla: 2 callbacks suppressed [ 714.238095][T30216] netlink: 'syz.2.6553': attribute type 3 has an invalid length. [ 714.397065][T30224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6555'. [ 714.631178][T30240] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6556'. [ 715.042547][T30252] syzkaller1: entered promiscuous mode [ 715.059537][T30252] syzkaller1: entered allmulticast mode [ 715.080020][T30254] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6563'. [ 715.094470][T30256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6564'. [ 715.139445][T30264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6564'. [ 715.204134][T30268] sctp: [Deprecated]: syz.2.6566 (pid 30268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 715.204134][T30268] Use struct sctp_sack_info instead [ 715.337230][T30274] netlink: 'syz.2.6567': attribute type 12 has an invalid length. [ 715.857310][T30302] netlink: 'syz.2.6575': attribute type 1 has an invalid length. [ 715.876610][T30302] netlink: 'syz.2.6575': attribute type 1 has an invalid length. [ 715.910910][T30302] sctp: [Deprecated]: syz.2.6575 (pid 30302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 715.910910][T30302] Use struct sctp_sack_info instead [ 715.941329][T30305] syzkaller1: entered promiscuous mode [ 715.962021][T30305] syzkaller1: entered allmulticast mode [ 716.113112][T30314] netlink: 'syz.2.6578': attribute type 1 has an invalid length. [ 716.200479][T30311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.229141][T30309] bond1: (slave bridge1): making interface the new active one [ 716.250077][T30309] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 716.349623][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6579'. [ 716.551906][T30331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6584'. [ 716.582403][T30331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6584'. [ 716.632998][T30331] geneve2: entered promiscuous mode [ 716.643408][T30331] geneve2: entered allmulticast mode [ 716.662901][T30336] netlink: 'syz.0.6582': attribute type 32 has an invalid length. [ 716.732790][T30344] netlink: 'syz.3.6586': attribute type 1 has an invalid length. [ 716.766130][T30344] openvswitch: netlink: Unknown nsh attribute 0 [ 718.077690][T30408] sch_fq: defrate 0 ignored. [ 718.604067][T30442] netlink: 'syz.3.6603': attribute type 75 has an invalid length. [ 718.774683][T30438] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 718.808738][T30450] __nla_validate_parse: 3 callbacks suppressed [ 718.808763][T30450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6606'. [ 718.841798][T30438] bond4: (slave lo): Enslaving as an active interface with an up link [ 718.911891][T30438] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 719.127308][T30458] x_tables: unsorted underflow at hook 4 [ 719.140557][T30461] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6611'. [ 719.247920][T30463] netlink: 'syz.4.6613': attribute type 1 has an invalid length. [ 719.285546][T30463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6613'. [ 719.330790][T30468] netlink: 'syz.4.6613': attribute type 4 has an invalid length. [ 719.371975][T30464] netlink: 'syz.4.6613': attribute type 4 has an invalid length. [ 719.833161][T30498] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6623'. [ 719.854540][T30498] netlink: 'syz.1.6623': attribute type 1 has an invalid length. [ 719.862934][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6623'. [ 720.222190][T30518] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6630'. [ 720.244963][T30518] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6630'. [ 720.262232][T30518] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 720.294501][T30525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6632'. [ 720.633015][ T5864] IPVS: starting estimator thread 0... [ 720.639442][T30536] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 720.727417][T30549] IPVS: using max 27 ests per chain, 64800 per kthread [ 720.910936][T30567] bond1 (unregistering): Released all slaves [ 720.982290][T30563] bond1 (unregistering): Released all slaves [ 721.021826][T30579] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6643'. [ 721.389952][T30599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6650'. [ 721.799873][T30624] openvswitch: netlink: IP tunnel TTL not specified. [ 721.973240][T30630] netlink: 'syz.2.6656': attribute type 11 has an invalid length. [ 722.008410][T30630] netlink: 'syz.2.6656': attribute type 11 has an invalid length. [ 722.028272][ T5864] IPVS: starting estimator thread 0... [ 722.125460][T30634] IPVS: using max 24 ests per chain, 57600 per kthread [ 722.183559][T30606] lec:lec_start_xmit: lec0:No lecd attached [ 722.400457][T30647] wg1 speed is unknown, defaulting to 1000 [ 722.693371][T30667] netlink: 'syz.4.6667': attribute type 1 has an invalid length. [ 723.054617][T30683] netlink: 'syz.3.6672': attribute type 4 has an invalid length. [ 723.173960][T30647] lo speed is unknown, defaulting to 1000 [ 723.261819][T30694] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 723.497198][T30706] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 723.754114][T30702] syzkaller0: entered promiscuous mode [ 723.810503][T30702] syzkaller0: entered allmulticast mode [ 724.541146][T30752] __nla_validate_parse: 13 callbacks suppressed [ 724.541168][T30752] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6689'. [ 726.242412][T20145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.338736][T20148] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.355195][T20148] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.363974][T20148] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.423987][T30763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6692'. [ 726.586571][T30775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6694'. [ 726.630442][T20143] bond0: (slave bond_slave_0): interface is now down [ 726.647869][T20143] bond0: (slave bond_slave_1): interface is now down [ 726.720451][T30775] netlink: 'syz.4.6694': attribute type 1 has an invalid length. [ 726.736548][T30789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6696'. [ 726.902172][T30791] netlink: 'syz.2.6696': attribute type 25 has an invalid length. [ 726.928152][T30791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6696'. [ 727.195106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 727.203223][ C0] lec:lec_tx_timeout: lec0 [ 727.208489][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 727.228953][T30813] bond4: (slave lo): Releasing backup interface [ 727.289867][T30813] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 727.410043][T30813] bridge_slave_0: left allmulticast mode [ 727.417296][T30839] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6706'. [ 727.464854][T30813] bridge_slave_0: left promiscuous mode [ 727.487766][T30813] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.512856][T30813] bridge_slave_1: left allmulticast mode [ 727.536889][T30813] bridge_slave_1: left promiscuous mode [ 727.551185][T30813] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.574553][T30813] bond0: (slave bond_slave_0): Releasing backup interface [ 727.603286][T30813] bond0: (slave bond_slave_1): Releasing backup interface [ 727.633415][T30813] team0: Port device team_slave_0 removed [ 727.651329][T30813] team0: Port device 26±ÿ removed [ 727.659156][T30813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.667680][T30813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.682931][T30813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.691426][T30813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.700520][T30813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 727.827872][T30850] vcan0: tx drop: invalid sa for name 0x0008000000000005 [ 727.970846][T30858] Bluetooth: MGMT ver 1.23 [ 728.164979][T30833] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.172717][T30833] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.477910][T30833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.493559][T30833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.979273][T20143] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.012751][T20143] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.110010][T20143] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.130286][T20143] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.194937][T30879] tipc: Enabling of bearer rejected, failed to enable media [ 729.382828][T30892] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6719'. [ 729.406418][T30892] openvswitch: netlink: Missing key (keys=40, expected=100) [ 729.514063][T30899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.808614][T30916] netlink: 296 bytes leftover after parsing attributes in process `syz.1.6725'. [ 730.046106][ T51] Bluetooth: hci0: command tx timeout [ 730.188295][T30948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6733'. [ 730.239371][T30946] netlink: 'syz.2.6734': attribute type 2 has an invalid length. [ 730.424036][T30963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6737'. [ 730.466655][T30965] netlink: 'syz.3.6735': attribute type 1 has an invalid length. [ 730.502869][T30965] 8021q: adding VLAN 0 to HW filter on device bond18 [ 730.542749][T30956] bond18: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 730.580337][T30970] netlink: 'syz.2.6739': attribute type 1 has an invalid length. [ 730.589482][T30970] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6739'. [ 730.608645][T30972] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 730.634545][T30956] 8021q: adding VLAN 0 to HW filter on device bond19 [ 730.646236][T30956] bond18: (slave bond19): Enslaving as an active interface with a down link [ 730.691571][T30974] netlink: 'syz.1.6740': attribute type 1 has an invalid length. [ 730.797584][T30980] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6741'. [ 731.006892][T30988] syzkaller1: entered promiscuous mode [ 731.106997][T30988] syzkaller1: entered allmulticast mode [ 731.170603][T31001] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6749'. [ 731.440936][T31011] netlink: 'syz.1.6751': attribute type 1 has an invalid length. [ 731.498967][T31011] netlink: 'syz.1.6751': attribute type 2 has an invalid length. [ 731.732609][T31027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6757'. [ 731.778159][T31031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6758'. [ 731.820648][T31031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6758'. [ 731.826014][T31033] netlink: 'syz.3.6759': attribute type 39 has an invalid length. [ 732.215127][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 732.223246][ C0] lec:lec_tx_timeout: lec0 [ 732.228145][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 732.557234][T31081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6772'. [ 732.715486][T31092] netlink: 'syz.4.6776': attribute type 14 has an invalid length. [ 732.770544][T20145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.780239][T20145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.796595][T31092] netlink: 'syz.4.6776': attribute type 14 has an invalid length. [ 732.809717][T20145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.819464][T31098] netlink: 'syz.1.6777': attribute type 2 has an invalid length. [ 732.828480][T20145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.843783][T31098] netlink: 'syz.1.6777': attribute type 1 has an invalid length. [ 733.047948][T31115] xt_l2tp: v2 doesn't support IP mode [ 733.153860][T31111] wg1 speed is unknown, defaulting to 1000 [ 733.589514][T31111] lo speed is unknown, defaulting to 1000 [ 734.504718][T31190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.514997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.842567][T31206] syzkaller0: entered promiscuous mode [ 734.875947][T31206] syzkaller0: entered allmulticast mode [ 735.019489][T31217] tipc: Enabled bearer , priority 0 [ 735.046354][T31206] tipc: Resetting bearer [ 735.052334][T31206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.060921][T31206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.108722][T31205] tipc: Resetting bearer [ 735.157375][T31205] tipc: Disabling bearer [ 735.172222][T31216] __nla_validate_parse: 8 callbacks suppressed [ 735.172243][T31216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6806'. [ 735.309610][T31225] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 735.343764][T31225] bond1 (unregistering): Released all slaves [ 735.670592][T31253] wg1 speed is unknown, defaulting to 1000 [ 735.792902][T31263] veth1_macvtap: left promiscuous mode [ 735.995002][T31272] .: renamed from bridge_slave_1 (while UP) [ 736.064214][T31253] lo speed is unknown, defaulting to 1000 [ 736.103505][T31282] netlink: 'syz.1.6827': attribute type 9 has an invalid length. [ 736.111734][T31282] netlink: 'syz.1.6827': attribute type 6 has an invalid length. [ 736.590189][T31302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6833'. [ 736.602105][T31304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6832'. [ 736.630229][T31302] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6833'. [ 736.737339][T31316] netlink: 'syz.4.6834': attribute type 3 has an invalid length. [ 736.745694][T31316] netlink: 'syz.4.6834': attribute type 1 has an invalid length. [ 736.755707][T31316] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6834'. [ 736.864318][T31313] wg1 speed is unknown, defaulting to 1000 [ 736.986724][T31330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6838'. [ 737.147267][T31335] netlink: 'syz.1.6840': attribute type 11 has an invalid length. [ 737.155708][T31335] netlink: 'syz.1.6840': attribute type 11 has an invalid length. [ 737.163640][T31335] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6840'. [ 737.235127][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 737.243296][ C0] lec:lec_tx_timeout: lec0 [ 737.248326][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 737.427498][T31313] lo speed is unknown, defaulting to 1000 [ 737.563068][T31338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6841'. [ 737.666798][T31354] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6844'. [ 737.751494][T31360] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6844'. [ 737.958461][T31367] nbd: must specify at least one socket [ 738.039261][T31374] sch_fq: defrate 0 ignored. [ 738.220379][T31381] vlan4: entered promiscuous mode [ 738.226300][T31381] bridge0: entered promiscuous mode [ 738.250846][ T30] audit: type=1800 audit(1771828269.222:6): pid=31387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6852" name="memory.events" dev="tmpfs" ino=507 res=0 errno=0 [ 738.349387][ T30] audit: type=1804 audit(1771828269.252:7): pid=31387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6852" name="/newroot/96/memory.events" dev="tmpfs" ino=507 res=1 errno=0 [ 739.552270][T31449] openvswitch: netlink: IP tunnel dst address not specified [ 739.655775][T31454] netlink: 'syz.2.6870': attribute type 1 has an invalid length. [ 740.242374][T31492] openvswitch: netlink: Message has -2 unknown bytes. [ 740.460777][T31454] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 740.594010][T31509] netlink: 'syz.3.6885': attribute type 3 has an invalid length. [ 740.632412][T31511] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 740.639038][T31508] netlink: 'syz.3.6885': attribute type 3 has an invalid length. [ 740.753610][T31511] bridge_slave_0: left allmulticast mode [ 740.821158][T31511] bridge_slave_0: left promiscuous mode [ 740.858419][T31511] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.907639][T31511] .: left allmulticast mode [ 740.919905][T31511] .: left promiscuous mode [ 740.927893][T31511] bridge0: port 2(.) entered disabled state [ 740.940335][T31511] bond0: (slave bond_slave_0): Releasing backup interface [ 740.980994][T31511] bond0: (slave bond_slave_1): Releasing backup interface [ 741.058504][T31511] team0: Port device team_slave_0 removed [ 741.100439][T31511] team0: Port device team_slave_1 removed [ 741.117343][T31511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.128394][T31511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.140979][T31511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.150059][T31511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.161405][T31511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 741.211122][T31527] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 741.239995][T31527] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 741.256951][T31527] gretap1: entered promiscuous mode [ 741.270871][T31527] gretap1: entered allmulticast mode [ 741.279506][T31532] __nla_validate_parse: 8 callbacks suppressed [ 741.279526][T31532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6891'. [ 741.533614][T31556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6897'. [ 741.564061][T31550] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6894'. [ 741.725804][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 741.778994][T31576] netlink: 'syz.1.6899': attribute type 39 has an invalid length. [ 742.255116][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 742.263414][ C0] lec:lec_tx_timeout: lec0 [ 742.268383][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 742.292930][T31599] netlink: 'syz.1.6905': attribute type 1 has an invalid length. [ 742.339513][T31599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6905'. [ 742.450035][T31610] netlink: 'syz.0.6909': attribute type 2 has an invalid length. [ 742.751307][T31624] smc: net device team0 applied user defined pnetid SYZ2 [ 742.979513][T31635] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 743.026896][T31635] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 743.091461][T31648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6919'. [ 743.126895][T31648] netlink: 'syz.3.6919': attribute type 1 has an invalid length. [ 743.134697][T31648] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6919'. [ 743.269139][T31662] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6920'. [ 743.293820][T31662] netlink: 'syz.4.6920': attribute type 4 has an invalid length. [ 743.413257][T31673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6920'. [ 743.432421][T31675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6925'. [ 743.467419][T31662] syzkaller1: entered promiscuous mode [ 743.490559][T31662] syzkaller1: entered allmulticast mode [ 743.568739][T31670] netlink: 'syz.4.6920': attribute type 4 has an invalid length. [ 743.960431][T31703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 743.964409][T31697] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 743.978285][T31703] openvswitch: netlink: Missing key (keys=40, expected=80) [ 743.987568][T31702] netlink: 'syz.4.6931': attribute type 1 has an invalid length. [ 744.398072][T31724] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 744.822211][T31753] vlan2: entered promiscuous mode [ 744.839674][T31753] geneve1: entered promiscuous mode [ 744.860078][T31753] vlan2: entered allmulticast mode [ 744.878644][T31753] geneve1: entered allmulticast mode [ 744.918097][T31760] validate_nla: 1 callbacks suppressed [ 744.918117][T31760] netlink: 'syz.3.6947': attribute type 10 has an invalid length. [ 744.965497][T31760] dummy0: entered promiscuous mode [ 744.981852][T31760] bridge0: port 1(dummy0) entered blocking state [ 745.030534][T31760] bridge0: port 1(dummy0) entered disabled state [ 745.038794][T31760] dummy0: entered allmulticast mode [ 745.051942][T31760] bridge0: port 1(dummy0) entered blocking state [ 745.058637][T31760] bridge0: port 1(dummy0) entered forwarding state [ 746.022056][T31828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.389723][T31852] --map-set only usable from mangle table [ 746.528084][T31860] __nla_validate_parse: 17 callbacks suppressed [ 746.528106][T31860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6972'. [ 746.577339][T31860] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6972'. [ 746.922095][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6977'. [ 746.941385][T31877] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6979'. [ 746.998331][T31880] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 747.008849][T31880] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 747.140412][T31895] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 747.211569][T31895] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6983'. [ 747.369489][T31908] netlink: 'syz.2.6986': attribute type 12 has an invalid length. [ 747.398857][T31908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6986'. [ 747.417361][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.449243][T31910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.491195][T31911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.665958][T31921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6989'. [ 747.921869][T31938] netlink: 'syz.1.6995': attribute type 2 has an invalid length. [ 747.998894][T31943] bond2: option resend_igmp: invalid value (32767) [ 748.009539][T31943] bond2: option resend_igmp: allowed values 0 - 255 [ 748.029155][T31943] bond2 (unregistering): Released all slaves [ 748.045087][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 748.053145][ C0] lec:lec_tx_timeout: lec0 [ 748.060083][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 748.833124][T32003] netlink: 'syz.2.7007': attribute type 1 has an invalid length. [ 748.898824][T32010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7009'. [ 748.916762][T32010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7009'. [ 748.936585][T32013] bond2: entered promiscuous mode [ 748.948197][T32013] bond2: entered allmulticast mode [ 748.965390][T32013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 749.077328][T32003] bridge2: entered promiscuous mode [ 749.088497][T32003] bridge2: entered allmulticast mode [ 749.107447][T32003] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 749.156999][T20146] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 749.305313][T20141] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 749.486635][T32033] netlink: 'syz.2.7013': attribute type 1 has an invalid length. [ 749.663940][T32033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 749.713760][T32043] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 749.772045][T32047] bond3: entered promiscuous mode [ 749.790496][T32047] bond3: entered allmulticast mode [ 749.974104][T32063] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 750.026089][T32071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7023'. [ 750.040897][T32063] team0: Device macvlan2 is already an upper device of the team interface [ 750.104722][T32071] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 750.137233][T32066] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 750.626469][T32103] nbd3: detected capacity change from 0 to 127 [ 750.643346][ T51] block nbd3: Receive control failed (result -32) [ 750.686555][T31887] block nbd3: Dead connection, failed to find a fallback [ 750.710775][T31887] block nbd3: shutting down sockets [ 750.717510][T31887] blk_print_req_error: 138 callbacks suppressed [ 750.717529][T31887] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.733831][T31887] buffer_io_error: 138 callbacks suppressed [ 750.733851][T31887] Buffer I/O error on dev nbd3, logical block 0, async page read [ 750.749054][T31887] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.763541][T31887] Buffer I/O error on dev nbd3, logical block 1, async page read [ 750.781030][T31887] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.801357][T31887] Buffer I/O error on dev nbd3, logical block 2, async page read [ 750.835215][T31887] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.851741][T31887] Buffer I/O error on dev nbd3, logical block 3, async page read [ 750.878605][T31887] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 750.903838][T32120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.945140][T31887] Buffer I/O error on dev nbd3, logical block 0, async page read [ 750.952991][T31887] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 751.003234][T31887] Buffer I/O error on dev nbd3, logical block 1, async page read [ 751.024114][T31887] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 751.075750][T31887] Buffer I/O error on dev nbd3, logical block 2, async page read [ 751.083798][T31887] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 751.126039][T31887] Buffer I/O error on dev nbd3, logical block 3, async page read [ 751.134036][T31887] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 751.171900][T31887] Buffer I/O error on dev nbd3, logical block 0, async page read [ 751.197406][T31887] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 751.212416][T31887] Buffer I/O error on dev nbd3, logical block 1, async page read [ 751.244462][T31887] ldm_validate_partition_table(): Disk read failed. [ 751.260545][T31887] Dev nbd3: unable to read RDB block 0 [ 751.285733][T31887] nbd3: unable to read partition table [ 751.295760][T31887] ldm_validate_partition_table(): Disk read failed. [ 751.303838][T31887] Dev nbd3: unable to read RDB block 0 [ 751.311394][T31887] nbd3: unable to read partition table [ 751.321673][T32148] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 751.326990][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 751.349040][T32148] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 751.376330][T32148] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 751.560892][T32169] netlink: 'syz.2.7050': attribute type 1 has an invalid length. [ 751.643004][T32172] bond4: (slave veth5): Enslaving as an active interface with a down link [ 751.841326][T32169] __nla_validate_parse: 7 callbacks suppressed [ 751.841344][T32169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7050'. [ 751.858108][T32169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 753.085369][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 753.093425][ C0] lec:lec_tx_timeout: lec0 [ 753.098442][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 758.105604][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 758.113667][ C0] lec:lec_tx_timeout: lec0 [ 758.118850][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 763.125206][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 763.133284][ C0] lec:lec_tx_timeout: lec0 [ 763.138259][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 768.155525][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 768.163568][ C0] lec:lec_tx_timeout: lec0 [ 768.168542][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 773.175167][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 773.183213][ C0] lec:lec_tx_timeout: lec0 [ 773.188410][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 778.195591][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 778.203681][ C0] lec:lec_tx_timeout: lec0 [ 778.208492][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 782.064117][T32206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.103441][T32213] netlink: 'syz.4.7055': attribute type 1 has an invalid length. [ 782.143965][T32214] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7053'. [ 782.353520][T32227] netlink: 'syz.3.7060': attribute type 20 has an invalid length. [ 782.369221][T32227] IPv6: NLM_F_CREATE should be specified when creating new route [ 782.393561][T32231] netlink: 'syz.2.7059': attribute type 63 has an invalid length. [ 782.417777][T32232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7061'. [ 782.440539][T32232] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7061'. [ 782.460334][T32232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7061'. [ 782.508835][T32223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7057'. [ 782.594889][T32223] syzkaller0: entered promiscuous mode [ 782.600724][T32223] syzkaller0: entered allmulticast mode [ 782.606918][ T7142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 782.628624][T32239] dummy0: left allmulticast mode [ 782.636489][T32239] bridge0: port 1(dummy0) entered disabled state [ 782.663089][T32239] bond18: (slave veth0_to_bond): Releasing active interface [ 782.671744][T32239] bond18: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 782.706529][T32239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 782.994830][T32251] openvswitch: netlink: Invalid VLAN frame [ 783.215391][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 783.223472][ C0] lec:lec_tx_timeout: lec0 [ 783.228163][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 788.235336][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 788.243394][ C0] lec:lec_tx_timeout: lec0 [ 788.248324][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 794.045123][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 794.053208][ C0] lec:lec_tx_timeout: lec0 [ 794.058235][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 799.085203][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 799.093279][ C0] lec:lec_tx_timeout: lec0 [ 799.098199][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 804.105158][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 804.113205][ C0] lec:lec_tx_timeout: lec0 [ 804.118422][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 808.851861][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 809.125467][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 809.133544][ C0] lec:lec_tx_timeout: lec0 [ 809.138231][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 811.760181][T32274] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7068'. [ 812.052367][T32299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.081891][T32303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.138068][T32296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 812.174594][T32308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7080'. [ 812.188258][T32309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7080'. [ 812.491585][T32328] wg1 speed is unknown, defaulting to 1000 [ 812.538751][T32322] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7086'. [ 812.552949][T32322] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7086'. [ 812.564156][T32322] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7086'. [ 812.574238][T32322] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7086'. [ 812.589848][T32335] netlink: 'syz.4.7088': attribute type 1 has an invalid length. [ 812.602356][T32322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7086'. [ 812.722190][T32322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7086'. [ 812.877433][T32322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7086'. [ 813.053393][T32354] geneve2: entered promiscuous mode [ 813.600020][T32328] lo speed is unknown, defaulting to 1000 [ 813.656232][T32390] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 813.672412][T32390] bond4: (slave lo): Enslaving as an active interface with an up link [ 813.686757][T32390] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 813.962692][T32391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.988708][T32391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.126230][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 814.145151][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 814.153252][ C0] lec:lec_tx_timeout: lec0 [ 814.158205][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 814.255634][T32391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.319065][T32391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.562692][T32391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.609661][ T7142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 814.631254][T32391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.719414][T32447] netlink: 'syz.2.7112': attribute type 1 has an invalid length. [ 814.868507][T32391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.882746][T32391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.357874][ T1101] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.368443][ T1101] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.462535][ T1101] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.496398][ T1101] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.505958][ T1101] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.514179][ T1101] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.588538][ T1101] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.612115][ T1101] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.723110][T32493] bond1: option miimon: invalid value (18446744073709551585) [ 815.764729][T32493] bond1: option miimon: allowed values 0 - 2147483647 [ 815.819543][T32493] bond1 (unregistering): Released all slaves [ 815.861703][T32512] netlink: 'syz.3.7125': attribute type 11 has an invalid length. [ 816.201783][T32533] netlink: 'syz.2.7135': attribute type 1 has an invalid length. [ 816.224587][T32533] netlink: 'syz.2.7135': attribute type 1 has an invalid length. [ 816.426047][T32544] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 816.854185][T32570] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 816.923655][T32570] __nla_validate_parse: 11 callbacks suppressed [ 816.923678][T32570] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.7146'. [ 817.054998][T32584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7149'. [ 817.187744][T32593] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 817.321075][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7154'. [ 817.340106][T32601] IPVS: length: 135 != 8 [ 817.497579][T32609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7158'. [ 817.706614][T32623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 817.714026][T32623] IPv6: NLM_F_CREATE should be set when creating new route [ 817.721381][T32623] IPv6: NLM_F_CREATE should be set when creating new route [ 817.728680][T32623] IPv6: NLM_F_CREATE should be set when creating new route [ 817.770403][T32623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 817.808466][T32626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7161'. [ 817.886706][T32630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7162'. [ 817.913539][T32630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7162'. [ 817.934046][T32630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7162'. [ 817.973256][T32630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7162'. [ 818.306430][T32641] wg1 speed is unknown, defaulting to 1000 [ 818.614036][T32641] lo speed is unknown, defaulting to 1000 [ 818.642385][T32657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7169'. [ 819.165238][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 819.173355][ C0] lec:lec_tx_timeout: lec0 [ 819.180216][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 820.271035][T32745] netlink: 'syz.2.7194': attribute type 5 has an invalid length. [ 820.461640][T32752] syzkaller1: entered promiscuous mode [ 820.475695][T32752] syzkaller1: entered allmulticast mode [ 820.537885][T32752] dvmrp0: entered allmulticast mode [ 820.730000][T32764] macvtap1: entered promiscuous mode [ 820.739125][T32764] vlan0: entered promiscuous mode [ 820.744582][T32764] macvtap1: entered allmulticast mode [ 820.770885][T32764] vlan0: entered allmulticast mode [ 820.777044][T32764] veth0_vlan: entered allmulticast mode [ 820.918479][ T308] netlink: 'syz.4.7202': attribute type 16 has an invalid length. [ 820.936527][ T313] sctp: [Deprecated]: syz.0.7205 (pid 313) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.936527][ T313] Use struct sctp_sack_info instead [ 820.956369][ T313] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20003 [ 821.110436][ T321] netlink: 'syz.3.7206': attribute type 4 has an invalid length. [ 821.431767][ T340] netlink: 'syz.0.7215': attribute type 1 has an invalid length. [ 821.675843][ T356] Bluetooth: MGMT ver 1.23 [ 821.821375][ T364] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.835995][ T379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.862491][ T379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.900224][ T383] IPVS: Unknown mcast interface: pim6reg [ 823.922683][ T387] __nla_validate_parse: 9 callbacks suppressed [ 823.922703][ T387] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7225'. [ 824.195534][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 824.203640][ C0] lec:lec_tx_timeout: lec0 [ 824.210881][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 824.535465][ T425] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7236'. [ 824.716480][ T438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7240'. [ 824.724496][ T441] netlink: 'syz.4.7239': attribute type 1 has an invalid length. [ 824.763204][ T441] netlink: 'syz.4.7239': attribute type 2 has an invalid length. [ 825.054225][ T461] xt_SECMARK: invalid mode: 9 [ 825.118699][ T463] netlink: 440 bytes leftover after parsing attributes in process `syz.3.7246'. [ 825.472450][ T486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7253'. [ 825.594141][ T497] netlink: 'syz.1.7257': attribute type 1 has an invalid length. [ 825.703160][ T504] bond1: (slave ip6gretap1): making interface the new active one [ 825.713272][ T504] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 825.770182][ T509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7259'. [ 825.867771][ T512] netlink: 'syz.0.7260': attribute type 10 has an invalid length. [ 825.896105][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7260'. [ 825.937701][ T509] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 825.968172][ T509] bond4: (slave lo): Enslaving as an active interface with an up link [ 825.987143][ T509] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 826.016580][ T514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7260'. [ 826.043388][ T509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7259'. [ 826.059234][ T514] netlink: 'syz.0.7260': attribute type 12 has an invalid length. [ 826.068759][ T519] netlink: 'syz.1.7262': attribute type 1 has an invalid length. [ 826.128986][ T514] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 826.176336][ T527] SET target dimension over the limit! [ 826.336794][ T532] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7266'. [ 826.396062][ T543] openvswitch: netlink: IP tunnel dst address not specified [ 826.658413][ T559] macsec1: entered promiscuous mode [ 826.663789][ T559] bridge0: entered promiscuous mode [ 826.700981][ T559] macsec1: entered allmulticast mode [ 826.721824][ T559] bridge0: entered allmulticast mode [ 826.746392][ T559] bridge0: port 3(macsec1) entered blocking state [ 826.753223][ T559] bridge0: port 3(macsec1) entered disabled state [ 826.786335][ T559] bridge0: left allmulticast mode [ 826.797189][ T559] bridge0: left promiscuous mode [ 826.963725][ T574] erspan0: entered promiscuous mode [ 827.022263][ T582] xt_hashlimit: size too large, truncated to 1048576 [ 827.970073][ T631] wg1 speed is unknown, defaulting to 1000 [ 828.018123][ T642] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 828.075560][ T642] netlink: 'syz.0.7295': attribute type 1 has an invalid length. [ 828.094621][ T642] netlink: 'syz.0.7295': attribute type 2 has an invalid length. [ 828.170384][ T652] netlink: 'syz.4.7298': attribute type 1 has an invalid length. [ 828.275628][ T655] netlink: 'syz.0.7299': attribute type 1 has an invalid length. [ 828.561062][ T669] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 828.615422][ T669] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 828.698065][ T631] lo speed is unknown, defaulting to 1000 [ 828.934346][ T695] __nla_validate_parse: 12 callbacks suppressed [ 828.934366][ T695] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7309'. [ 829.225106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 829.233211][ C0] lec:lec_tx_timeout: lec0 [ 829.238446][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 829.447450][ T718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7316'. [ 829.477095][ T723] xt_hashlimit: overflow, rate too high: 0 [ 829.523027][ T725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7316'. [ 829.773324][ T738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7320'. [ 830.010581][ T752] ip6t_srh: unknown srh match flags 5F28 [ 830.085663][ T753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.139057][ T753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.216893][ T753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.252851][ T753] netlink: 'syz.4.7322': attribute type 1 has an invalid length. [ 830.325929][ T747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7322'. [ 832.400168][ T759] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 832.401259][ T753] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 832.565546][ T787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7328'. [ 832.613784][ T793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7328'. [ 832.898913][ T816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7339'. [ 833.161807][ T832] bond21: (slave bond_slave_1): Device is not bonding slave [ 833.185607][ T832] bond21: option active_slave: invalid value (bond_slave_1) [ 833.203735][ T832] bond21 (unregistering): Released all slaves [ 833.225575][ T838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7346'. [ 833.588290][ T862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7352'. [ 833.703044][ T868] veth1_to_bond: entered allmulticast mode [ 833.714600][ T865] veth1_to_bond: left allmulticast mode [ 834.135524][ T884] wg1 speed is unknown, defaulting to 1000 [ 834.245475][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 834.253632][ C0] lec:lec_tx_timeout: lec0 [ 834.259001][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 834.685892][T22338] Bluetooth: hci0: command 0x0401 tx timeout [ 834.703349][ T924] validate_nla: 1 callbacks suppressed [ 834.703369][ T924] netlink: 'syz.3.7373': attribute type 1 has an invalid length. [ 834.739174][ T925] erspan0: entered promiscuous mode [ 834.783080][ T924] __nla_validate_parse: 3 callbacks suppressed [ 834.783100][ T924] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7373'. [ 834.801156][ T927] netlink: 'syz.3.7373': attribute type 1 has an invalid length. [ 834.809197][ T927] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7373'. [ 834.879216][ T884] lo speed is unknown, defaulting to 1000 [ 834.997466][ T942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7375'. [ 835.110709][ T953] x_tables: unsorted entry at hook 2 [ 835.448389][ T974] netlink: 348 bytes leftover after parsing attributes in process `syz.0.7382'. [ 835.559569][ T961] ipvlan1: entered allmulticast mode [ 835.568198][ T961] veth0_vlan: entered allmulticast mode [ 835.889998][ T999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7390'. [ 835.899701][ T999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7390'. [ 835.901284][ T1001] sctp: [Deprecated]: syz.0.7386 (pid 1001) Use of int in max_burst socket option deprecated. [ 835.901284][ T1001] Use struct sctp_assoc_value instead [ 838.089578][ T955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 838.319187][ T1019] netlink: 'syz.3.7395': attribute type 1 has an invalid length. [ 838.412266][ T1019] 8021q: adding VLAN 0 to HW filter on device bond21 [ 838.511178][ T1025] bond21: (slave geneve3): making interface the new active one [ 838.539953][ T1025] bond21: (slave geneve3): Enslaving as an active interface with an up link [ 838.559963][T20146] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.587893][T20146] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.616656][T20146] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.637437][T20146] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 838.782762][ T1054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7402'. [ 838.822110][ T1069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7404'. [ 838.958675][ T1072] __bpf_mt_check_bytecode: 23 callbacks suppressed [ 838.958822][ T1072] xt_bpf: check failed: parse error [ 838.974540][ T1072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7405'. [ 838.984328][ T1072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7405'. [ 839.063374][ T1074] lo: entered promiscuous mode [ 839.071327][ T1074] tunl0: entered promiscuous mode [ 839.081055][ T1074] gre0: entered promiscuous mode [ 839.093092][ T1074] gretap0: entered promiscuous mode [ 839.105584][ T1074] erspan0: entered promiscuous mode [ 839.113494][ T1074] ip_vti0: entered promiscuous mode [ 839.123292][ T1074] ip6_vti0: entered promiscuous mode [ 839.132288][ T1074] sit0: entered promiscuous mode [ 839.150277][ T1074] ip6tnl0: entered promiscuous mode [ 839.157911][ T1074] ip6gre0: entered promiscuous mode [ 839.166609][ T1074] bridge0: entered promiscuous mode [ 839.173977][ T1074] vcan0: entered promiscuous mode [ 839.189981][T20146] bond0: (slave bond_slave_0): interface is now down [ 839.199452][ T1074] bond0: entered promiscuous mode [ 839.204650][ T1074] bond_slave_0: entered promiscuous mode [ 839.211612][T20146] bond0: (slave bond_slave_1): interface is now down [ 839.219289][ T1074] bond_slave_1: entered promiscuous mode [ 839.228895][ T1074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.243544][ T1087] sctp: [Deprecated]: syz.3.7409 (pid 1087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 839.243544][ T1087] Use struct sctp_sack_info instead [ 839.262042][ T1074] team0: entered promiscuous mode [ 839.275819][ T1074] team_slave_0: entered promiscuous mode [ 839.282713][ T1074] team_slave_1: entered promiscuous mode [ 839.289969][ T1074] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.299403][ T1074] dummy0: entered promiscuous mode [ 839.308934][ T1074] nlmon0: entered promiscuous mode [ 839.317848][ T1074] caif0: entered promiscuous mode [ 839.331809][ T1074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 839.370224][ T1078] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.378017][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.480099][ T1080] syzkaller0: entered promiscuous mode [ 839.488317][ T1080] syzkaller0: entered allmulticast mode [ 839.850557][ T1118] netlink: 'syz.4.7416': attribute type 11 has an invalid length. [ 839.864797][ T1118] __nla_validate_parse: 2 callbacks suppressed [ 839.864818][ T1118] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7416'. [ 839.984172][ T1123] netlink: 'syz.0.7418': attribute type 4 has an invalid length. [ 840.041132][ T1135] netlink: 'syz.1.7417': attribute type 1 has an invalid length. [ 840.049105][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 840.049138][ C0] lec:lec_tx_timeout: lec0 [ 840.058317][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 840.184300][ T1145] netlink: 276 bytes leftover after parsing attributes in process `syz.4.7423'. [ 840.533523][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7430'. [ 840.545922][ T1175] openvswitch: netlink: IPv6 tunnel dst address is zero [ 840.929492][ T1197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7439'. [ 840.954843][ T1197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7439'. [ 840.984841][ T1197] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7439'. [ 841.068705][ T1205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7441'. [ 841.081286][ T1208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7441'. [ 841.204134][ T1214] pimreg: entered allmulticast mode [ 841.264940][ T1217] netlink: 'syz.0.7445': attribute type 8 has an invalid length. [ 841.587011][ T1246] netlink: get zone limit has 4 unknown bytes [ 841.607325][ T1244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7454'. [ 841.727541][T20143] bond0: (slave bond_slave_0): interface is now down [ 841.735880][T20143] bond0: (slave bond_slave_1): interface is now down [ 841.769662][T20143] bond0: now running without any active interface! [ 841.825636][ T1252] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7455'. [ 841.907958][ T1259] netlink: 'syz.0.7459': attribute type 12 has an invalid length. [ 842.011035][ T1265] openvswitch: netlink: Flow key attr not present in new flow. [ 842.403350][ T1288] openvswitch: netlink: IP tunnel TTL not specified. [ 842.412734][ T1292] x_tables: duplicate underflow at hook 2 [ 842.523165][ T1296] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 842.862428][ T1317] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 842.882267][ T1311] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 842.894293][ T1311] bond6 (unregistering): Released all slaves [ 842.926600][ T1323] ip_vti0: entered promiscuous mode [ 843.478967][ T1344] sctp: [Deprecated]: syz.3.7486 (pid 1344) Use of int in maxseg socket option. [ 843.478967][ T1344] Use struct sctp_assoc_value instead [ 843.580967][ T1353] netlink: 'syz.4.7487': attribute type 1 has an invalid length. [ 845.085351][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 845.093467][ C0] lec:lec_tx_timeout: lec0 [ 845.098516][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 847.224879][ T1407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 847.480558][ T1438] syzkaller1: entered promiscuous mode [ 847.509864][ T1438] syzkaller1: entered allmulticast mode [ 847.670332][ T1459] __nla_validate_parse: 13 callbacks suppressed [ 847.670355][ T1459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7519'. [ 847.849843][ T1469] openvswitch: netlink: Multiple metadata blocks provided [ 848.124068][ T1485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7526'. [ 848.178228][ T1482] sch_fq: defrate 0 ignored. [ 848.561537][ T1511] pim6reg1: entered promiscuous mode [ 848.573368][ T1513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7533'. [ 848.583106][ T1511] pim6reg1: entered allmulticast mode [ 848.631495][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 848.785223][ T1520] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7538'. [ 848.820237][ T1520] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7538'. [ 848.957773][ T1530] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7540'. [ 849.013189][ T1529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7541'. [ 849.253092][ T1553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7548'. [ 849.266958][ T1542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.279510][ T1542] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.322964][ T1555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.444764][ T1542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.456842][ T1542] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.484051][ T1564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7553'. [ 849.558966][ T1542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.570057][ T1542] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.588007][ T1557] tipc: Enabled bearer , priority 0 [ 849.632853][ T1561] openvswitch: netlink: IP tunnel dst address not specified [ 849.662716][ T1562] syzkaller0: entered promiscuous mode [ 849.670462][ T1562] syzkaller0: entered allmulticast mode [ 849.677495][ T1562] tipc: Resetting bearer [ 849.717202][ T1542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 849.732656][ T1542] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.775287][ T1562] tipc: Resetting bearer [ 850.107611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 850.115827][ C0] lec:lec_tx_timeout: lec0 [ 850.121023][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 851.946848][ T1562] tipc: Disabling bearer [ 851.976259][ T1588] dvmrp0: left allmulticast mode [ 852.037573][T15978] tipc: Node number set to 852512223 [ 852.041578][ T1591] x_tables: duplicate underflow at hook 1 [ 852.093810][T20143] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.111793][T20143] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.243274][T20143] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.252445][T20143] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.282707][T20149] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.302110][T20149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.357099][ T1611] nbd: must specify at least one socket [ 852.394753][T20149] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.414292][T20149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.696517][ T1627] syzkaller0: entered promiscuous mode [ 852.712193][ T1627] syzkaller0: entered allmulticast mode [ 852.744116][ T1627] __nla_validate_parse: 9 callbacks suppressed [ 852.744138][ T1627] netlink: 766 bytes leftover after parsing attributes in process `syz.0.7571'. [ 852.802363][ T1644] Unsupported ieee802154 address type: 0 [ 852.837968][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7571'. [ 852.996580][ T1656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7576'. [ 853.179152][ T1672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7582'. [ 853.205516][ T1675] netlink: 'syz.2.7582': attribute type 7 has an invalid length. [ 853.235497][ T1675] netlink: 'syz.2.7582': attribute type 8 has an invalid length. [ 853.252143][ T1677] netlink: 'syz.0.7581': attribute type 3 has an invalid length. [ 853.482498][ T1689] macvtap1: entered promiscuous mode [ 853.493373][ T1689] macvtap1: entered allmulticast mode [ 853.501837][ T1689] veth1_vlan: entered allmulticast mode [ 853.518057][ T1692] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7588'. [ 853.564840][ T1691] wg1 speed is unknown, defaulting to 1000 [ 853.726215][ T1700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.925572][ T1711] syzkaller0: entered promiscuous mode [ 853.931221][ T1711] syzkaller0: entered allmulticast mode [ 853.960762][ T1711] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7592'. [ 854.022229][ T1691] lo speed is unknown, defaulting to 1000 [ 854.038586][ T1699] siw: device registration error -23 [ 854.221924][ T1719] delete_channel: no stack [ 854.493092][ T1734] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7600'. [ 854.630358][ T1746] SET target dimension over the limit! [ 854.676465][ T1749] netlink: 'syz.2.7605': attribute type 1 has an invalid length. [ 854.833124][ T1764] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7609'. [ 854.871981][ T1759] syzkaller0: entered promiscuous mode [ 854.877876][ T1759] syzkaller0: entered allmulticast mode [ 855.057141][ T1770] netlink: 'syz.1.7611': attribute type 1 has an invalid length. [ 855.135051][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 855.143261][ C0] lec:lec_tx_timeout: lec0 [ 855.148400][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 855.273217][ T1776] netlink: 'syz.4.7614': attribute type 16 has an invalid length. [ 855.281966][ T1776] netlink: 'syz.4.7614': attribute type 3 has an invalid length. [ 855.291903][ T1776] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7614'. [ 855.556235][ T1788] netlink: 'syz.1.7616': attribute type 1 has an invalid length. [ 855.632721][ T1801] [ 855.635229][ T1801] ====================================================== [ 855.642384][ T1801] WARNING: possible circular locking dependency detected [ 855.649802][ T1801] syzkaller #0 Not tainted [ 855.654264][ T1801] ------------------------------------------------------ [ 855.661358][ T1801] syz.4.7620/1801 is trying to acquire lock: [ 855.667377][ T1801] ffffffff8fd47a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_del_node+0x57d/0xbb0 [ 855.676764][ T1801] [ 855.676764][ T1801] but task is already holding lock: [ 855.684340][ T1801] ffff888055f3ef70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 855.693697][ T1801] [ 855.693697][ T1801] which lock already depends on the new lock. [ 855.693697][ T1801] [ 855.704307][ T1801] [ 855.704307][ T1801] the existing dependency chain (in reverse order) is: [ 855.713357][ T1801] [ 855.713357][ T1801] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 855.721744][ T1801] _raw_spin_lock_bh+0x36/0x50 [ 855.727101][ T1801] nr_rt_device_down+0x153/0x860 [ 855.732700][ T1801] nr_device_event+0x137/0x150 [ 855.738042][ T1801] notifier_call_chain+0x1be/0x400 [ 855.743891][ T1801] __dev_notify_flags+0x16d/0x310 [ 855.749721][ T1801] netif_change_flags+0xe8/0x1a0 [ 855.755309][ T1801] dev_change_flags+0x130/0x260 [ 855.760815][ T1801] dev_ioctl+0x7b4/0x1150 [ 855.765706][ T1801] sock_do_ioctl+0x23e/0x320 [ 855.770842][ T1801] sock_ioctl+0x5c6/0x7f0 [ 855.775711][ T1801] __se_sys_ioctl+0xfc/0x170 [ 855.780860][ T1801] do_syscall_64+0x14d/0xf80 [ 855.786105][ T1801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.792573][ T1801] [ 855.792573][ T1801] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 855.800421][ T1801] _raw_spin_lock_bh+0x36/0x50 [ 855.805742][ T1801] nr_rt_device_down+0xbe/0x860 [ 855.811150][ T1801] nr_device_event+0x137/0x150 [ 855.816481][ T1801] notifier_call_chain+0x1be/0x400 [ 855.822269][ T1801] __dev_notify_flags+0x16d/0x310 [ 855.827864][ T1801] netif_change_flags+0xe8/0x1a0 [ 855.833375][ T1801] dev_change_flags+0x130/0x260 [ 855.838796][ T1801] dev_ioctl+0x7b4/0x1150 [ 855.843783][ T1801] sock_do_ioctl+0x23e/0x320 [ 855.848930][ T1801] sock_ioctl+0x5c6/0x7f0 [ 855.853805][ T1801] __se_sys_ioctl+0xfc/0x170 [ 855.858945][ T1801] do_syscall_64+0x14d/0xf80 [ 855.864116][ T1801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.870611][ T1801] [ 855.870611][ T1801] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 855.878648][ T1801] __lock_acquire+0x15a5/0x2cf0 [ 855.884099][ T1801] lock_acquire+0xf0/0x2e0 [ 855.889147][ T1801] _raw_spin_lock_bh+0x36/0x50 [ 855.894486][ T1801] nr_del_node+0x57d/0xbb0 [ 855.899461][ T1801] nr_rt_ioctl+0xb34/0xf90 [ 855.904550][ T1801] sock_do_ioctl+0x101/0x320 [ 855.909720][ T1801] sock_ioctl+0x5c6/0x7f0 [ 855.914602][ T1801] __se_sys_ioctl+0xfc/0x170 [ 855.919763][ T1801] do_syscall_64+0x14d/0xf80 [ 855.925011][ T1801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.931468][ T1801] [ 855.931468][ T1801] other info that might help us debug this: [ 855.931468][ T1801] [ 855.942182][ T1801] Chain exists of: [ 855.942182][ T1801] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 855.942182][ T1801] [ 855.956421][ T1801] Possible unsafe locking scenario: [ 855.956421][ T1801] [ 855.964000][ T1801] CPU0 CPU1 [ 855.969408][ T1801] ---- ---- [ 855.974803][ T1801] lock(&nr_node->node_lock); [ 855.979683][ T1801] lock(nr_node_list_lock); [ 855.986824][ T1801] lock(&nr_node->node_lock); [ 855.994330][ T1801] lock(nr_neigh_list_lock); [ 855.999051][ T1801] [ 855.999051][ T1801] *** DEADLOCK *** [ 855.999051][ T1801] [ 856.007221][ T1801] 2 locks held by syz.4.7620/1801: [ 856.012365][ T1801] #0: ffffffff8fd47ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_del_node+0x253/0xbb0 [ 856.021927][ T1801] #1: ffff888055f3ef70 (&nr_node->node_lock){+...}-{3:3}, at: nr_del_node+0x2a9/0xbb0 [ 856.031667][ T1801] [ 856.031667][ T1801] stack backtrace: [ 856.037623][ T1801] CPU: 1 UID: 0 PID: 1801 Comm: syz.4.7620 Not tainted syzkaller #0 PREEMPT(full) [ 856.037648][ T1801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.037661][ T1801] Call Trace: [ 856.037670][ T1801] [ 856.037680][ T1801] dump_stack_lvl+0xe8/0x150 [ 856.037709][ T1801] print_circular_bug+0x2e1/0x300 [ 856.037738][ T1801] check_noncircular+0x12e/0x150 [ 856.037766][ T1801] __lock_acquire+0x15a5/0x2cf0 [ 856.037799][ T1801] lock_acquire+0xf0/0x2e0 [ 856.037819][ T1801] ? nr_del_node+0x57d/0xbb0 [ 856.037846][ T1801] ? nr_del_node+0x247/0xbb0 [ 856.037872][ T1801] ? nr_del_node+0x57d/0xbb0 [ 856.037907][ T1801] _raw_spin_lock_bh+0x36/0x50 [ 856.037931][ T1801] ? nr_del_node+0x57d/0xbb0 [ 856.037955][ T1801] nr_del_node+0x57d/0xbb0 [ 856.037983][ T1801] nr_rt_ioctl+0xb34/0xf90 [ 856.038012][ T1801] ? kasan_quarantine_put+0xbb/0x1f0 [ 856.038029][ T1801] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 856.038064][ T1801] ? apparmor_capable+0x137/0x1a0 [ 856.038093][ T1801] ? capable+0x88/0xe0 [ 856.038115][ T1801] ? nr_ioctl+0x1b1/0x3b0 [ 856.038138][ T1801] sock_do_ioctl+0x101/0x320 [ 856.038157][ T1801] ? __pfx_sock_do_ioctl+0x10/0x10 [ 856.038173][ T1801] ? do_futex+0x333/0x420 [ 856.038210][ T1801] sock_ioctl+0x5c6/0x7f0 [ 856.038228][ T1801] ? __pfx_sock_ioctl+0x10/0x10 [ 856.038245][ T1801] ? __fget_files+0x2a/0x420 [ 856.038268][ T1801] ? __fget_files+0x3a0/0x420 [ 856.038290][ T1801] ? __fget_files+0x2a/0x420 [ 856.038315][ T1801] ? bpf_lsm_file_ioctl+0x9/0x20 [ 856.038335][ T1801] ? __pfx_sock_ioctl+0x10/0x10 [ 856.038350][ T1801] __se_sys_ioctl+0xfc/0x170 [ 856.038369][ T1801] do_syscall_64+0x14d/0xf80 [ 856.038395][ T1801] ? trace_irq_disable+0x3b/0x150 [ 856.038419][ T1801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.038436][ T1801] ? clear_bhb_loop+0x40/0x90 [ 856.038456][ T1801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.038473][ T1801] RIP: 0033:0x7f71ccf9c629 [ 856.038490][ T1801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.038506][ T1801] RSP: 002b:00007f71cde18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 856.038526][ T1801] RAX: ffffffffffffffda RBX: 00007f71cd215fa0 RCX: 00007f71ccf9c629 [ 856.038539][ T1801] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000006 [ 856.038551][ T1801] RBP: 00007f71cd032b39 R08: 0000000000000000 R09: 0000000000000000 [ 856.038562][ T1801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.038573][ T1801] R13: 00007f71cd216038 R14: 00007f71cd215fa0 R15: 00007ffe18490058 [ 856.038594][ T1801] [ 856.339676][ T1801] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7620'. [ 860.155086][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 860.163278][ C0] lec:lec_tx_timeout: lec0 [ 860.168217][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 865.175346][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 865.183622][ C0] lec:lec_tx_timeout: lec0