last executing test programs: 14.103853422s ago: executing program 0 (id=8332): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000007c0)={{r0, &(0x7f0000000000)=':/\xba{)-@[\']\'-@\x00', 0x20000, &(0x7f0000000080)={@align=0x4, {0x8000, 0x2c8, 0x3, 0x5}}, 0x1ff, &(0x7f00000000c0), &(0x7f0000000100)=0xf}, 0x6, &(0x7f0000000700)=[{0x1, 0x1, &(0x7f0000000840)='veth0_vlan\x00', &(0x7f0000000180)="62602bb354ebfe1adbb5d5f2457639e8d1af3c59060111f12bf194ec92a42d2be74e40b601b6c1a3ee515737879ae6b45aaba5e23604f414a1c9aab38ac4471915723c2944be7ac150eb8b605e686f0feaa98d196108aaf6c64a9c5fd08a5d3849413ef29eb767e32b7ac4fb15a682786505dc1192fe46a2b9798cf027961f514e61a68471fb52ba635e832449ca8409d0e551e21dc16b9512b9acbb3bb8f7b89e84a50f639de668ba5eab0d8a0f8f055018a0d1473e7e21b567591ed9b49168eee6d8fe0cbf71dd308b15f94069f57b21436f137d0b528b59839bbcb5bb14b93bb8363850ba8d2de8", 0xe9, 0x12}, {0x3, 0x6, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="f42b86df5b15f0ac4efb6a1416f9764a03fc5fe82c04905d2f8667d62f784ddc10612d1ed742473c86764eded6e4c33003845efafd3eda76979ef28a686484f29061fd09ec6a84450378147bfabf844a21c7a5e1b8ae05791e18c1289c83c67ea71a003e16859c7108219be00b977f2892554fdaa0f402d94dad8cb7739385263183", 0x82, 0x2a}, {0x2, 0x2e, &(0x7f0000000380)='\x00', &(0x7f00000003c0)="729f08d3fcbc9c3c874138c7a15b573896cd83a1f744713a756fce3019f61e2b4d068d8ffb88f957ad4cd712c64711c0143a37f068a038c65366290289e91274207512003ae4b61c45c03cc2a45fa242a060579737855edf6144a4bfd867907d40dd3c69d5f61a0d2a5964c8984141a606281cf6385d7cab6b09b279c36cfb4033aa29e2cdb3f3787bcb2793220e7a293b487daaf3d89b448a29fd73416cbe636b478b9fbb4f0a18edeb093b281838", 0xaf, 0x38}, {0x1, 0x6, &(0x7f0000000480)='veth0_vlan\x00', &(0x7f00000004c0)="5a4517978d9df9b68873b0c4aa0fe19505dc57b6a5c79f04c43f0d7a3a81dc2889430b61f0fd2e0f3682acf1d3c475c7acab10e9effba93555ac3d5a8cce9291e0668d5a6965526f5b8d269abf8b790693f90f9f79f8", 0x56, 0x21}, {0x3, 0x7, &(0x7f0000000540)='veth0_vlan\x00', &(0x7f0000000580)="738dea024a5c370e536c07d3dfb587ccacf6206f13fd5fc167b4c23f28091bb642440f6e6e6794bd60aaaecefc6292a4c3f3cfcf9e93484aa0964d0118e459a70b319de5a1e62bf5e9d7ea0693bf04ad7d8a68af8c3507dfc95a5f34b7683146a898f8882d956fb1b2b130cf0a6968df193747fb9be1168f1a842e289facb7328b848b1dec856a0b6a1f5cc601dca6bdaa1d2cbcef", 0x95, 0x2}, {0x2, 0x20057eb, &(0x7f0000000640)=']\x00', &(0x7f0000000680)="b9296d28c3ff0a9b7fe615f3c850656812a90af606f6139b6956805ab18a0808bdd2d2d972bb01a7cfd0a76602ff628a01337bf30c4e2d14db53a788fce8ed2785b5d986", 0x44, 0x10}]}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xd1, &(0x7f0000000140)=0xfffffffb, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000e00)={0x6, 'veth0\x00', {0x8}, 0x21c1}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018000000010000000000af3a837238000000"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000440), &(0x7f0000000040)=@udp=r5}, 0x20) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, 0xffffffffffffffff, 0x35, 0x0, @val=@netfilter={0x3, 0x0, 0x0, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_FIOSETOWN(r4, 0x8901, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'wg1\x00', 0x81}) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000dc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f00000008c0)={0x4bc, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0xab6}, 0x8, 0x9, 0xfffe, 0x1, 0x28, 'syz0\x00', "432f70ac46d33ed534447255ffaaafd15c2a3451bba2ef8f082ff6279fff2e78", "712bbe73709e96a8881760338cee57d8d4d2c8f7c373d0f860dd3c71da9af6b0", [{0x9, 0x4, {0x3, 0x4}}, {0x3, 0x49, {0x3, 0xfff}}, {0x7, 0x6a8, {0x0, 0x2}}, {0x0, 0x6, {0x3, 0x9}}, {0x77, 0x1, {0x0, 0x7cd}}, {0x8, 0x0, {0x2, 0x3}}, {0x6, 0x6, {0x2, 0x1}}, {0x2, 0x6, {0x0, 0x7}}, {0xfff, 0x2, {0x2, 0x5}}, {0xcb, 0x8, {0x2, 0xe}}, {0x0, 0xb, {0x0, 0x1}}, {0x7, 0x8, {0x2, 0x2}}, {0x71c, 0xfffa, {0x1, 0x7}}, {0x3, 0x408, {0x2, 0x3}}, {0x9, 0x6, {0x0, 0x10000}}, {0x5, 0x9, {0x0, 0x7c11}}, {0xb7af, 0xffff, {0x0, 0x7fff}}, {0x7f80, 0x3, {0x4}}, {0x8000, 0xfff, {0x3, 0x3}}, {0x3634, 0xe, {0x2}}, {0x81, 0x6, {0x5bee82366b411242, 0x2008}}, {0x7ac, 0x4, {0x0, 0x3}}, {0x1, 0x6, {0x0, 0xbc1}}, {0x5415, 0x2, {0x2, 0x4}}, {0xf9e, 0xc10, {0x1, 0x8001}}, {0x85, 0x9, {0x3, 0x2}}, {0x8, 0x200, {0x3, 0x1}}, {0x52, 0x2, {0x1, 0x4}}, {0x3, 0x83, {0x3, 0x2}}, {0x6, 0x5, {0x3}}, {0x1, 0x5, {0x2, 0x32a}}, {0x6, 0x400, {0x3, 0xa}}, {0x4, 0x7fff, {0x0, 0x5}}, {0x9, 0x2, {0x2, 0xc493}}, {0x4, 0x6, {0x2, 0x3}}, {0x4, 0x7ff, {0x0, 0xe9e0}}, {0x5, 0xfff, {0x0, 0xf}}, {0xfff8, 0x2, {0x2, 0xfffffffc}}, {0x6, 0x4, {0x1, 0x8}}, {0x3319, 0x6, {0x0, 0xb}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x21, 0x8, 0x5, 0x5, 0x11, 'syz1\x00', "14e3edf402df90e07cff541907a49c7d0f79ac7ab1ee34f14e5e7f1fc31b407e", "c29d166048aed1a4ef5d6bb3e3dbf830144f231a1045220ee9808b3dbc55d7f9", [{0xfff1, 0xc, {0x3, 0x6f2}}, {0xc2, 0x3, {0x0, 0x1}}, {0x400, 0x5, {0x0, 0x72c}}, {0xc, 0x3, {0x0, 0xd10d}}, {0x5, 0x1c13, {0x0, 0x80}}, {0x8, 0x6, {0x1, 0x1}}, {0x2, 0xffff, {0x1, 0x1}}, {0xfec, 0x9, {0x1, 0x8c44}}, {0x1, 0xffff, {0x2, 0x10001}}, {0x1, 0x7, {0x1, 0xfffffe00}}, {0x8, 0x2, {0x1, 0x4}}, {0x0, 0x2, {0x2, 0xe}}, {0x4, 0x7f, {0x916c1de94f403c62, 0x6}}, {0x2, 0x1, {0x2, 0x9}}, {0x2, 0x7, {0x1, 0x10001}}, {0x0, 0x3, {0x1, 0xabea}}, {0x6, 0xb, {0x0, 0x4}}, {0x8, 0x4, {0x1, 0x1}}, {0xf, 0x7fff, {0x3, 0x3}}, {0xf, 0x7, {0x0, 0xf9}}, {0x4, 0x0, {0x2, 0x3}}, {0x9c4, 0xffc7, {0x3, 0x7f}}, {0xfff0, 0x1, {0x1, 0x4}}, {0x96, 0x8, {0x1, 0x3}}, {0x8, 0xe519, {0x1, 0xffffffff}}, {0x155c, 0x1b, {0x3, 0xff}}, {0x5, 0x0, {0x3, 0x7101}}, {0xffff, 0x0, {0x1, 0x2}}, {0x0, 0x1, {0x0, 0x6}}, {0x7, 0x9, {0x0, 0x721}}, {0x9, 0x7ff, {0x3, 0x5295}}, {0x6, 0x9, {0x0, 0xd6d}}, {0x1, 0x9, {0x2}}, {0x1, 0xd73, {0x3, 0x5}}, {0xfffe, 0x0, {0x2, 0x7}}, {0xf96, 0x4, {0x3}}, {0xfffb, 0x6f2}, {0x9, 0xdc, {0x1, 0xfffffffe}}, {0xfb, 0x3, {0x2, 0x5}}, {0x9, 0xf, {0x0, 0x5}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14.061835126s ago: executing program 0 (id=8335): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x7}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="f029d5888ce089503fba5b40000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf2505000000280001800d0001007564703a73797a32000000001400028008000200f6010000080001000b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 13.869490817s ago: executing program 0 (id=8340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000040)) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4885}, 0x40884) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c86b856310605008c280be4c1e2aecb000000000c00078008000800000000000500010006000000050005000200000005000400000000000900020073797a320000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) 13.75447978s ago: executing program 0 (id=8341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0xfffe, 0x4, 0x2, 0xd06, 0x6, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x6, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"U'], 0x50) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x2, 0x4, 0x3, 0x0, r8, 0xfffffffe, '\x00', 0x0, r10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r11}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r14, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r15 = socket(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 13.330616826s ago: executing program 4 (id=8347): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r2}) 922.114329ms ago: executing program 4 (id=8349): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x94, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x335) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="b71b0d50b52b2c4b55e5e80cfb116edb373b389bd86c40f5a85c991e959b1251cd009ee5593db832e6ae1ead02261f12af98546b55e48ab656469e454cec8c9ca5625c7b3ea8b5240ee2e9f7ee7a0d154cb84216d42286ee8ab975b0aba0729b5d042b79adfd900f804460f5614de90cc865acf6955d82aaebcac42373c41fbde49d926cdb75b70e3ebac1797dbbcfc23d2d788444", 0x95}], 0x1}}], 0x1, 0x4001c00) r2 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00'}) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000000), 0x4) 916.847434ms ago: executing program 4 (id=8351): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000002c0)={0x7, 'macvlan0\x00', {0x3}, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESDEC=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20004040) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xe0, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x80, 0xa9, @random="7397b42ef2036f57b379e9553f7a6693f8c28d841aa2041a280273012891e83d2332e0defc560307c39efa966730f7f56c63025114f510cd8534002650fbf96c82da78cfde7a8e7aaa0bfbc27934f92c249e9012de8cce957638f9ada8f50af5f36eb9b49c76da247031aebd39d85ba6d68047e894691d9266bab0ec"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) 915.771453ms ago: executing program 4 (id=8353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) 912.841635ms ago: executing program 4 (id=8355): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r4) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff0000000001fd3904cfa36658f3cd9c00aea9af77000000041774f3f65dcfe7081c964041f42472593706be6793fbdb21332bff41b18818196f192e7c534430a77a5166083d4189b6c9cf6fd3d49259e3b9dd0ec02b56dc00357f2b857e0fc2d2d87a158bb13832c4eaf01c40e7f6ff115ba762662d29ecb1223faf787ce4240a35e463347539111dfe86262b2697b4215307ef3791a2d1f9cd8942fd40ebf0c92b9e6438261313045b40bc270322927ccda9ea8aa349f9c1ba4edd96df0fde96"], 0x24}}, 0x20000000) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf25020000ea0700535394f070b5"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4844) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3a, r7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) r9 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000000)={r9}) r10 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r10, 0x8916, &(0x7f0000000000)) ioctl(r10, 0x8936, &(0x7f0000000000)) getsockopt$WPAN_WANTACK(r5, 0x0, 0x300, 0x0, &(0x7f0000000080)) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0xfea7, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, r11}, 0x94) 909.21801ms ago: executing program 0 (id=8357): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r0, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000ba000)={{0x0, 0x8, 0x5, 0x2, 0xfff, 0x0, 0x4, 0xdd, 0x8, 0x4, 0x8, 0xe, 0x8, 0x7, 0xfffffffffffffff7}}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000bb000)={{0x0, 0x8, 0x0, 0x1, 0x4, 0x6, 0xe77, 0x139, 0x6, 0x3, 0x1, 0x4, 0x37b, 0xffffffffffffff01, 0xff9}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000bc000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000bc200)={{0x0, 0x9, 0x7fffffff, 0x8, 0x1, 0x2, 0x7, 0x7, 0x5, 0x4, 0xc4ac, 0x6, 0x2, 0xa3, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000bd200)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "2cfccc1c586255"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000be200)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000be400)={0x7a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "988dfefdaeab2f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000bf400)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "b0d7afcf746180"}) (async, rerun: 32) r17 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) (async) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r17, 0x81f8943c, &(0x7f0000002840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r18, 0xd000943d, &(0x7f0000000840)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}], 0x6, "3a49461f15a47e"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000c0400)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) r26 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r26, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) (async) r27 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r26, 0x81f8943c, &(0x7f0000002840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r27, 0xd000943d, &(0x7f0000000840)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {r29}, {}, {}, {}, {}, {0x0, r22}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r30}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r30}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r29}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r30}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r28}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r28}], 0x6, "3a49461f15a47e"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000c0600)={0x0, 0x0, "15b085af0fb43eb10e708eae7615bc227fa8bc1c5dfc297b72f439b8434bfdd7a7aa322210e04034db1f22ff7a74c1e857e1c52e9c42577b2cda592c591589fcd4cdb664b1bf6101813dafb70f1882981b563514b8ab3fdea84f38959cc92f8c88a387db469510f68ca38fef2b287e1c26c4edecefa5ca49631ee04de759fde2169ed81f466fc71ab25c1fe2b08f911e72873b46b4f6528760c5ce835ea36dafd10dcb96d5470d877f1927968bb4dc8bf35125d0feb6feff1d98606362a1187ec55f7de851f274ab16c83fd9a0d00ed06b797fe97a31e4061a4105cf34c43ff56da97c461b2a78d28b3720968e2dc34a93efc54a2230452238d37e13dd5e60bd", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000c1600)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r2, r3}, {r4, r5}, {r8, r9}, {0x0, r16}, {r19, r25}, {r29, r31}], 0x10, "7dfce62ca7ad7a"}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r32 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r32, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r32, 0x400448e7, 0x0) (async) r33 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r33, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r33, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x2, 0x0) 907.958777ms ago: executing program 1 (id=8358): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINK_NETNSID={0x8}]}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000880)={r0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x104, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x48}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x416}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x141}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffd7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa476}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x4080001) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x2000800) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 902.228526ms ago: executing program 3 (id=8360): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000208}, 0xc, &(0x7f0000000680)={&(0x7f0000000040)={0x618, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x5a8, 0x8, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "242848cfcde5626d05ea5c0fb47a5fbb247caae1d3cd96bfaefa4c87bf15b070"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d9d1ec35b9824db5507facf429f8b21aa7dc2b4d3619688710d39670ec33ab7"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "09346c9dc1cbc8fc8f71e1c76141c864665b39e97dfa79900b167001cdf138ae"}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfffffffe, @empty, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xffffa2c4, @ipv4={'\x00', '\xff\xff', @loopback}, 0xca2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @mcast1, 0x40}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @mcast1, 0x6}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}]}, {0x4}, {0x374, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "00e61dc9ccca84d9e7eae6dc1c492eac8ea93064df68831dde5086bf11d1bac4"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e622a2ad5c027147a5864408c213614958f9e87c4355f2bb399d664860ec3178"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dad29a7d0dd545746594f8bf13758244982d41ced53aed053a673fe1ebc10843"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x618}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r5) 897.560182ms ago: executing program 4 (id=8361): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r2, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x5}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1860e8e10b9981c03f929e98a39d45", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 811.170066ms ago: executing program 1 (id=8362): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x20000030, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_address={0x0, 0x7, 0x2b, 0x80, 0x0, @in={0x2, 0x4e20, @loopback}}]}, 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001000010400000000000000000a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000043000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000002abd7000000000000200000000000000000000000c0008000800080000070000"], 0xfc}}, 0x4000) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYBLOB='\b'], 0x24}}, 0x0) 751.928063ms ago: executing program 0 (id=8363): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x34, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) 707.460746ms ago: executing program 3 (id=8365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'vlan0\x00', 0x81a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd25, 0x25dfdc01, {0x2, 0x0, 0x80, 0x8, 0xfc, 0x1, 0x0, 0x4, 0x300}, [@RTA_PRIORITY={0x8, 0x6, 0x23f}, @RTA_DST={0x8, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001d000800098004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r10, 0x1, 0x20, &(0x7f00000000c0)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="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", 0x1000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x40, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040858}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) 685.621308ms ago: executing program 1 (id=8366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYRESHEX=0x0], 0x6c}}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000001800)={0x100000001, 0x48, '\x00', 0x0, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000001740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040000000000000026740200000008000200", @ANYRES32=r5, @ANYBLOB="06000400ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r6 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0xf444, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000700e827122cf8491abfff2007000000000000000000005be92f7d80a9b96d7f0bcc000000002dcd1750"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000140)=""/6, 0x2}, 0x20) (async) recvmmsg(r7, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) 598.766158ms ago: executing program 1 (id=8368): ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x191082, 0x0) (async) syz_emit_ethernet(0xe4d, &(0x7f0000001180)={@local, @random="0000f000", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xe17, 0x0, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "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"}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) sendmsg$sock(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x30}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00006005bbbbbbbbbbbabbbbbbbbbbbb81006611"], 0x2a) 549.889076ms ago: executing program 2 (id=8369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402178006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x80, 0x1, 0xfffffffb, 0x7, {{0x2b, 0x4, 0x0, 0x4, 0xac, 0x67, 0x0, 0x5, 0x2d, 0x0, @remote, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x8}]}, @lsrr={0x83, 0x1b, 0x6b, [@rand_addr=0x64010101, @multicast1, @loopback, @multicast1, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0x3a, 0x1, 0x0, [{@multicast1, 0xd8}, {@empty, 0x193}, {@rand_addr=0x64010100}, {@loopback, 0x7f}, {@local, 0x3}, {@empty, 0x7ff}, {@local, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x3c, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x100}]}, @cipso={0x86, 0x29, 0x2, [{0x0, 0x3, "c7"}, {0x6, 0x7, "e2ffb3e638"}, {0x7, 0xb, "0bcc83b74dc9bc43c1"}, {0x5, 0x2}, {0x1, 0xc, "8cf14377b8c34b7eb002"}]}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0xae, 0xb4, 0x1, 0x21d24119d67b092e, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x9, 0x7, 0x22, @remote, @mcast2, 0x7800, 0x40, 0x6, 0x2}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x4000000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@local, 0x0}, &(0x7f0000000500)=0x14) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xed, 0x2, 0xe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r11, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) (async) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r15, {}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) r17 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r19, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@rand_addr, @multicast2, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000980)={&(0x7f0000000000), 0xc, &(0x7f0000000940)={&(0x7f0000000600)={0x304, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x50}, 0x60044) 478.834478ms ago: executing program 2 (id=8370): r0 = socket$kcm(0x10, 0x2, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000000c0)=0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x90) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) recvfrom$l2tp(r6, 0x0, 0x0, 0x100, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@ipv4_deladdr={0x44, 0x15, 0x1, 0x70bd2a, 0x400000, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x8, 0x1, @local}, @IFA_FLAGS={0x8, 0x8, 0x108}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LABEL={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48085}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) shutdown(r1, 0x1) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/159, 0x9f}], 0x1}, 0xfbfffffe}], 0x1, 0x40000002, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000880)=""/196, 0xc4}}], 0x1, 0x0, &(0x7f0000003700)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000140)=@assoc_value, &(0x7f0000000040)=0x8) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r11, 0x113, 0x4, 0x0, 0x0) 423.945518ms ago: executing program 3 (id=8371): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a802000018014000300000000000000000001020004"], 0x40}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) 388.974405ms ago: executing program 1 (id=8372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 370.289086ms ago: executing program 3 (id=8373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000fe1a2c0573fbc112ad000000851000000600000085100000040000006608000000000000180000000010000000f3ffffffffffff9400000000000000950000000000000085000000940000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3}, 0x14) (async) r4 = epoll_create1(0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r5 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704022080fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) epoll_pwait(r4, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002a000000180001801400020067656e65766530"], 0x2c}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) epoll_pwait(r4, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r9, &(0x7f0000000c40)=[{{&(0x7f0000000a00)={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="2e394532461a9aa6da11070b4b49668576d8b346f36e3dad58e029ef3dd14fd4430181ae3e37d479cbc8dbec41ed5760becb4f7dddd808cfa504bde7bc884e7b4e1ecaa6bdc024fad258d5a16a5eb42438261b7699aa7c3e242f08c5d37d23cbcf5527a1b1aedf34", 0x68}, {&(0x7f0000000240)="9ab486e301c3ab04325687c8b7bb", 0xe}, {&(0x7f00000003c0)="acdb980b586563f161c99309dc38b231766633648a08dc756227891cab2e1af352752016cb73331dc0d029f83665986433f66aaca71279ca579e2f6848543f5b0bd163da0f0708799f9f8888b50f2c8a417a6d70f99d", 0x56}, {&(0x7f0000000500)="9b08d75d49cba6656715a4e2dea1603d1046e8f8e6ba9271bc1c9a0fc87c44ec8da424ee368479ab6b8b4bf69b1baf9b713e2c50a1730d0d04f31f7b866906fea2cf7e5fd73845f9eabffadc6183108cd0e9a67020c2c3f5db894ae1a51fbde4866ad809eadf72c29b3153990fb0d11151d563c6d05ba2db153d8d8ad6a30e23dac087b0d1e143521343aec19a59c0971e202ccf65bc705e2eeef5a8dda3e1d6c8ccf6d32dca1302bee583c54b6398cda51040c3821e14e6230b264234a9a45dbd2a4cd66c93bb88a20ecc797612c8e1aae155a051a038efc232d22465fc398e3a51b4eba0edad66f9258d6db78b63cc404e60036c06", 0xf6}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1400000000000000290000004300000004000000000000001400000000000000290000000800000000000080000000001400000000000000290000000b00000000000008000000001400000000000000290000003400000009000000001200001400000000000000290000004300000005000000000000001400000000000000290000003e0000000b0000000000000013ffffffe700000029000000080000000200000000000000"], 0xa8}}, {{&(0x7f00000006c0)={0xa, 0x4e22, 0x5, @mcast1, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000700)="ede8650a9c620e4a8499e92fe103c1dd5e19e5e7e90e76d930d389229a4d2eb773325b927543656f841caa659bb3453af7b4fdc30184723939e310fc73c48cda51b5393e8cf8c19f58ff6295057e6bc7cf08e928bd819b98b8dc2c8db998b98675e14d2ed4cb790cf954fa41ae0331f62a8be118ab4297beae1a0c005a1ea34f15c84171d675b5448069db9d359e5a440dda666582b7fca5ac0dfe1a3dc746f295ec", 0xa2}, {&(0x7f00000007c0)="e90685a81774b5138e02284b06aee86d6e9d86f93aa2334afbe83872e9e2eb94f80a6a70c3b2acf210babcc93c607d3944424d30ad922cefea79dd9948f69c5e35e1ec7e751398c101de7e3f256acc30b7986e2856e50cb4c85d49fa112e", 0x5e}, {&(0x7f0000000840)="dc6c0341216cd045835caa6788049324181e770fda639d52fc5f7afd1080f0c16cc0a4d639f1373f2f0d58d4706cd95e3b4b2a168d668235c20eb63ca08b672673a9beb38e7b88bfbb28f60050aa7db9486212650c678825faf130d6078bf83be073d0fdd6164db4751a0a856d1d187a3c9acebd49d6cbf8e5d616e7706883834b819e21dca832adb8", 0x89}, {&(0x7f0000000900)="da9346393b86a02244f1dac32830e71cfd41260968ce87f060115deb88e14b5583ca938ab96b411976a3a40837e0cb2cdd76b46442cb510c3d6019cdc1339c0bb788fbd4bb8c8985a9d5b81853ee656e9a1da7861baee1ec35353abb64efef6229a17eb4d6338cb765d6cb9425437b79b4a41ee4a2395bd5bddf32413514d45edd6f6b648c4972d49b26ce27abce5b5e0dc36aa8a2943b3ccb6152720ecff3efd22ab6ae25ee82c7782303424b38b754da2fcee1ed2dfd4060a91bb8b608e43510c11f7eea59bf5920faefdd61a8105b0bed0c8c03ccfcfc95ee6b4a02580b16bdf0996f1511", 0xe6}, {&(0x7f0000000a00)}], 0x5}}, {{&(0x7f0000000ac0)={0xa, 0x4e23, 0x7, @empty, 0xc56c}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="8565ae1d506cbf8809683825668b08d8948503b84970458af839d045bbc2c1a120aab37e1aaa1672fdc2998457950d97b2bf3c5b24a6d5ff616bad4589b94c23f1e55e0c987fbc1cd6fcdd7c8dfdb0193bf56422df74125d60c9cbd31cd5a42cc7bcdf0673fc80adf9db9bd5878a843a7f4b016d7864cdbc704a29622113bb6a9b73fd0907db1b7aa8feb749726775cffd0c24818d3689e3740bbbdb4707acf5d241cd68ba4bcb4fa817ea8b3160979aa36395603925e2c18b5d21210a", 0xbd}], 0x1, &(0x7f0000000c00)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r3}}}], 0x28}}], 0x3, 0x84) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x4000200d}) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$AUDIT_GET(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3e8, 0x800, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r10) 275.895177ms ago: executing program 1 (id=8374): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000cc0)=0x2300, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@caif=@rfm={0x25, 0xffffffff, "c54af3a49ea4b707db7a7426ffdcdef3"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="f4000900062b2b25fe800000209ea3b56ab19e67c2f82201dbb44f00000000dc8b850f238466cc00006a000000ad6f911b51430437121d3ca71d5315d209", 0x3e}], 0x1}, 0x20008060) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x1404, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x48048) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x800, 0x1) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) 274.772273ms ago: executing program 2 (id=8375): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @empty}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8fff5c8bb539e2ffb332c99223a7dfe50900000000000000fd2a36b1", 0x23}], 0x2}, 0x20008b88) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000006900010000000000000000000500000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140100000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x88}}, 0x840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000000000001a01000001000000080000"], 0x28}, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) openat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xa, r9}, 0x10) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0x1, r9, 0x0, r7}, 0x10) 223.650553ms ago: executing program 3 (id=8376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="7a0a00739df453fab1476c91751091000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r6, 0x25, 0x0, @void}, 0x25) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffe00}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x35}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x1f7d, 0x16, &(0x7f0000000940)=""/22, 0x41000, 0x38, '\x00', r6, 0x18, r8, 0x8, &(0x7f0000000980)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xd, 0x1, 0x8}, 0x10, 0x8c0f, r3, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000240), &(0x7f00000002c0)=r9}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', r1, 0x4000, r2}, 0x18) (async) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r10, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000600), 0x3) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 135.437778ms ago: executing program 2 (id=8377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="0201000000000000140003006e657464657673696d3000000000000034001680300001802c"], 0x68}}, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="cb2da763bb3282b121692bc43eb4105000000003080106000240000000002c"], 0x50}}, 0x0) r0 = socket(0x1e, 0x1, 0x0) accept$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 75.374694ms ago: executing program 3 (id=8378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) 59.292539ms ago: executing program 2 (id=8379): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x14, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r4, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='Ua\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r3, 0x8, 0x3, 0x3, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64110102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x400c086) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=8380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x30018}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0xf7, 0xd4, 0x1ffe0000, 0x20, @private1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7, 0x700, 0x8, 0x1}}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x40, 0x40, 0x1, 0xfff, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @loopback, {[@end, @ssrr={0x89, 0x1f, 0xa1, [@dev={0xac, 0x14, 0x14, 0x40}, @loopback, @local, @rand_addr=0x64010102, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x9d, [@broadcast, @private=0xa010100]}, @rr={0x7, 0x7, 0x90, [@remote]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) r7 = accept$unix(r6, &(0x7f0000000100), &(0x7f0000000000)=0x6e) socket$inet_udplite(0x2, 0x2, 0x88) (async) connect$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) kernel console output (not intermixed with test programs): 63] erspan0: left allmulticast mode [ 621.848966][ T63] erspan0: left promiscuous mode [ 621.864390][ T63] bridge1: port 1(erspan0) entered disabled state [ 622.170917][T27413] Bluetooth: hci0: command tx timeout [ 622.438804][ T63] dvmrp0 (unregistering): left allmulticast mode [ 622.513484][ T63] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 622.596765][ T63] team0: Port device bridge2 removed [ 622.773004][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.785227][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.795110][ T63] bond0 (unregistering): Released all slaves [ 622.804982][ T63] bond1 (unregistering): Released all slaves [ 622.820519][ T63] bond2 (unregistering): Released all slaves [ 622.833909][ T63] bond3 (unregistering): Released all slaves [ 622.854136][ T63] bond4 (unregistering): Released all slaves [ 622.867163][ T63] bond5 (unregistering): Released all slaves [ 622.880148][ T63] bond6 (unregistering): Released all slaves [ 622.895410][ T63] bond7 (unregistering): Released all slaves [ 622.914816][ T63] bond8 (unregistering): Released all slaves [ 622.930549][ T63] bond9 (unregistering): Released all slaves [ 622.943894][ T63] bond10 (unregistering): Released all slaves [ 622.956720][ T63] bond11 (unregistering): Released all slaves [ 622.971739][ T63] bond12 (unregistering): Released all slaves [ 622.986911][ T63] bond13 (unregistering): Released all slaves [ 623.178568][ T63] : left promiscuous mode [ 623.262794][ T63] tipc: Left network mode [ 623.472478][T29639] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.480494][T29639] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.669753][T29639] tipc: Resetting bearer [ 623.698664][T29639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.717198][T29639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.935780][T29660] macvlan2: entered promiscuous mode [ 623.946736][T29660] macvlan2: entered allmulticast mode [ 623.967102][T14016] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.978867][T14016] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.071446][ T128] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.098631][T14016] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.139194][T29675] netlink: 'syz.2.6325': attribute type 8 has an invalid length. [ 624.258146][T27413] Bluetooth: hci0: command tx timeout [ 624.264457][T29680] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6326'. [ 624.315322][T29682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6328'. [ 624.358550][T29678] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 624.654865][T29490] chnl_net:caif_netlink_parms(): no params data found [ 625.269116][T29490] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.293572][T29490] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.316316][T29490] bridge_slave_0: entered allmulticast mode [ 625.336785][T29751] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 625.361217][T29490] bridge_slave_0: entered promiscuous mode [ 625.419500][T29490] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.427202][T29490] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.464434][T29490] bridge_slave_1: entered allmulticast mode [ 625.504018][T29490] bridge_slave_1: entered promiscuous mode [ 625.531450][T29760] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 625.864405][T29490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.911531][T29490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.933546][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 626.049027][T29490] team0: Port device team_slave_0 added [ 626.073127][T29490] team0: Port device team_slave_1 added [ 626.189948][T29782] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6345'. [ 626.204246][T29780] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 626.329443][T27413] Bluetooth: hci0: command tx timeout [ 626.355948][ T63] hsr_slave_1: left promiscuous mode [ 626.398813][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.430818][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.449338][ T63] batman_adv: batadv0: Removing interface: 26±ÿ [ 626.783798][ T63] team0 (unregistering): Port device team_slave_1 removed [ 626.807656][ T63] team0 (unregistering): Port device team_slave_0 removed [ 626.966421][T29490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.978445][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.006209][T29490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.066852][T29490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.083656][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.136510][T29490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.302603][T29490] hsr_slave_0: entered promiscuous mode [ 627.322944][T29490] hsr_slave_1: entered promiscuous mode [ 627.341340][T29490] debugfs: 'hsr0' already exists in 'hsr' [ 627.347387][T29490] Cannot create hsr debugfs directory [ 627.395418][T29820] xt_cgroup: xt_cgroup: no path or classid specified [ 627.606125][ T5910] hid-generic 0005:04F3:5508.0002: item fetching failed at offset 0/3 [ 627.615789][ T5910] hid-generic 0005:04F3:5508.0002: probe with driver hid-generic failed with error -22 [ 627.644996][T29774] vxcan1 speed is unknown, defaulting to 1000 [ 627.738427][T29838] team0: No ports can be present during mode change [ 628.072525][T29856] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6361'. [ 628.111852][T29862] sctp: [Deprecated]: syz.4.6362 (pid 29862) Use of int in max_burst socket option. [ 628.111852][T29862] Use struct sctp_assoc_value instead [ 628.127590][T29856] netlink: Unknown conntrack attr (0) [ 628.193918][T14014] smc: removing ib device syz0 [ 628.208607][ T128] smc: removing ib device syz2 [ 628.492426][T29880] Bluetooth: MGMT ver 1.23 [ 628.711547][T29892] openvswitch: netlink: Flow actions attr not present in new flow. [ 628.733619][T29893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6369'. [ 628.849990][T29898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6371'. [ 628.875078][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6370'. [ 629.091877][T29904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6373'. [ 630.098104][T29490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 630.144478][T29490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 630.223984][T29490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 630.286027][T29490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 630.666180][T29490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.694925][T29966] netlink: 'syz.2.6383': attribute type 3 has an invalid length. [ 630.721169][T29966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6383'. [ 630.738575][T29968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6384'. [ 630.753670][T29490] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.791043][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.798262][ T9899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.846792][T14026] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.854100][T14026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.447976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 631.456110][ C0] lec:lec_tx_timeout: lec0 [ 631.461254][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 631.987448][T29490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.154429][T29490] veth0_vlan: entered promiscuous mode [ 632.211830][T30022] netlink: 'syz.0.6392': attribute type 21 has an invalid length. [ 632.220553][T30022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6392'. [ 632.251954][T30022] siw: device registration error -23 [ 632.260658][T29490] veth1_vlan: entered promiscuous mode [ 632.345996][T30024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6393'. [ 632.435994][T29490] veth0_macvtap: entered promiscuous mode [ 632.483710][T30029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6395'. [ 632.497700][T29490] veth1_macvtap: entered promiscuous mode [ 632.530722][T30029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6395'. [ 632.566788][T29490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.587125][T29490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.776214][T30032] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 632.794923][T14026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.816843][T14026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.847583][T14026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.915059][T14026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.967225][T30046] netlink: 'syz.4.6398': attribute type 12 has an invalid length. [ 633.034246][T30041] syzkaller0: entered promiscuous mode [ 633.040539][T30041] syzkaller0: entered allmulticast mode [ 633.212955][T30050] #ÿ: renamed from bond_slave_0 (while UP) [ 633.465233][T30053] syzkaller0: entered promiscuous mode [ 633.486440][T30053] syzkaller0: entered allmulticast mode [ 636.170352][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.195992][ T63] IPVS: stop unused estimator thread 0... [ 636.222649][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.335921][T30091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.345807][T14016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.362295][T14016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.488710][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 636.496888][ C0] lec:lec_tx_timeout: lec0 [ 637.071258][T30135] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6415'. [ 637.108890][T30125] netlink: 'syz.4.6412': attribute type 1 has an invalid length. [ 637.141686][T30125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6412'. [ 637.179448][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 637.193280][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 637.202704][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 637.211259][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 637.225030][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 637.236274][T30132] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6415'. [ 638.345851][T30192] netlink: 'syz.1.6427': attribute type 1 has an invalid length. [ 638.368666][T30192] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6427'. [ 638.403164][T30198] netlink: 'syz.2.6429': attribute type 4 has an invalid length. [ 638.632402][T30139] chnl_net:caif_netlink_parms(): no params data found [ 638.894774][T30215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6433'. [ 639.011225][T30221] pim6reg: entered allmulticast mode [ 639.069138][T30139] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.076755][T30139] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.114939][T30139] bridge_slave_0: entered allmulticast mode [ 639.123347][T30139] bridge_slave_0: entered promiscuous mode [ 639.132703][T30139] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.140401][T30139] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.148284][T30139] bridge_slave_1: entered allmulticast mode [ 639.156531][T30139] bridge_slave_1: entered promiscuous mode [ 639.228347][T30227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6436'. [ 639.259737][T30139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.287775][T30139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.307225][T27413] Bluetooth: hci1: command tx timeout [ 639.407231][T30139] team0: Port device team_slave_0 added [ 639.429900][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6441'. [ 639.441894][T30139] team0: Port device team_slave_1 added [ 639.552134][T30139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.563272][T30139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.635798][T30139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.674621][T30139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.687483][T30139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.717677][T30139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.777181][T30258] netlink: 'syz.1.6446': attribute type 1 has an invalid length. [ 639.794629][T30139] hsr_slave_0: entered promiscuous mode [ 639.801972][T30139] hsr_slave_1: entered promiscuous mode [ 639.809589][T30139] debugfs: 'hsr0' already exists in 'hsr' [ 639.815614][T30139] Cannot create hsr debugfs directory [ 639.908605][T30265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6450'. [ 639.953370][T30265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6450'. [ 640.017096][T30272] FAULT_INJECTION: forcing a failure. [ 640.017096][T30272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.032339][T30273] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 640.040163][T30272] CPU: 0 UID: 0 PID: 30272 Comm: syz.1.6453 Not tainted syzkaller #0 PREEMPT(full) [ 640.040186][T30272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 640.040195][T30272] Call Trace: [ 640.040212][T30272] [ 640.040218][T30272] dump_stack_lvl+0xe8/0x150 [ 640.040247][T30272] should_fail_ex+0x412/0x560 [ 640.040275][T30272] _copy_from_user+0x2d/0xb0 [ 640.040302][T30272] ___sys_sendmsg+0x1c6/0x360 [ 640.040324][T30272] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.040372][T30272] ? __fget_files+0x2a/0x420 [ 640.040392][T30272] ? __fget_files+0x3a0/0x420 [ 640.040422][T30272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 640.040439][T30272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.040462][T30272] ? __pfx_ksys_write+0x10/0x10 [ 640.040521][T30272] do_syscall_64+0x14d/0xf80 [ 640.040539][T30272] ? trace_irq_disable+0x3b/0x150 [ 640.040560][T30272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.040577][T30272] ? clear_bhb_loop+0x40/0x90 [ 640.040596][T30272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.040612][T30272] RIP: 0033:0x7ff937f9c799 [ 640.040626][T30272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.040642][T30272] RSP: 002b:00007ff938ee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.040660][T30272] RAX: ffffffffffffffda RBX: 00007ff938215fa0 RCX: 00007ff937f9c799 [ 640.040672][T30272] RDX: 0000000000048884 RSI: 0000200000000180 RDI: 0000000000000003 [ 640.040681][T30272] RBP: 00007ff938ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 640.040692][T30272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.040702][T30272] R13: 00007ff938216038 R14: 00007ff938215fa0 R15: 00007ffdde57fbd8 [ 640.040726][T30272] [ 640.068157][T30273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.321718][T30291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6458'. [ 640.480222][T30299] bond1 (unregistering): Released all slaves [ 640.512977][T30301] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 640.560685][T30301] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 640.572090][T30301] team0: Failed to send options change via netlink (err -105) [ 640.581974][T30301] team0: Port device batadv1 added [ 640.681081][T30318] FAULT_INJECTION: forcing a failure. [ 640.681081][T30318] name failslab, interval 1, probability 0, space 0, times 1 [ 640.694306][T30318] CPU: 0 UID: 0 PID: 30318 Comm: syz.1.6464 Not tainted syzkaller #0 PREEMPT(full) [ 640.694331][T30318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 640.694342][T30318] Call Trace: [ 640.694349][T30318] [ 640.694356][T30318] dump_stack_lvl+0xe8/0x150 [ 640.694385][T30318] should_fail_ex+0x412/0x560 [ 640.694411][T30318] should_failslab+0xa8/0x100 [ 640.694474][T30318] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 640.694499][T30318] ? __alloc_skb+0x186/0x7d0 [ 640.694579][T30318] ? __alloc_skb+0x1d0/0x7d0 [ 640.694599][T30318] ? __local_bh_enable_ip+0xd0/0x130 [ 640.694649][T30318] __alloc_skb+0x1d0/0x7d0 [ 640.694677][T30318] netlink_sendmsg+0x5d4/0xb40 [ 640.694762][T30318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.694788][T30318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 640.694860][T30318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.694883][T30318] ____sys_sendmsg+0x972/0x9f0 [ 640.694909][T30318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.694935][T30318] ? import_iovec+0x73/0xa0 [ 640.695005][T30318] ___sys_sendmsg+0x2a5/0x360 [ 640.695028][T30318] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.695079][T30318] ? __fget_files+0x2a/0x420 [ 640.695102][T30318] ? __fget_files+0x3a0/0x420 [ 640.695133][T30318] __x64_sys_sendmsg+0x1bd/0x2a0 [ 640.695153][T30318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.695180][T30318] ? __pfx_ksys_write+0x10/0x10 [ 640.695209][T30318] do_syscall_64+0x14d/0xf80 [ 640.695226][T30318] ? trace_irq_disable+0x3b/0x150 [ 640.695248][T30318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.695267][T30318] ? clear_bhb_loop+0x40/0x90 [ 640.695288][T30318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.695305][T30318] RIP: 0033:0x7ff937f9c799 [ 640.695322][T30318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.695337][T30318] RSP: 002b:00007ff938ee5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.695357][T30318] RAX: ffffffffffffffda RBX: 00007ff938215fa0 RCX: 00007ff937f9c799 [ 640.695377][T30318] RDX: 0000000000048884 RSI: 0000200000000180 RDI: 0000000000000003 [ 640.695388][T30318] RBP: 00007ff938ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 640.695399][T30318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.695409][T30318] R13: 00007ff938216038 R14: 00007ff938215fa0 R15: 00007ffdde57fbd8 [ 640.695438][T30318] [ 641.024439][ T9345] tipc: Subscription rejected, illegal request [ 641.036108][T30324] netlink: 'syz.3.6465': attribute type 21 has an invalid length. [ 641.075108][T30324] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 641.155286][T30324] bond4 (unregistering): Released all slaves [ 641.341462][T30139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 641.373243][T27413] Bluetooth: hci1: command tx timeout [ 641.394268][T30139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 641.434668][T30139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 641.508838][T30139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 641.562221][T30359] FAULT_INJECTION: forcing a failure. [ 641.562221][T30359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.580204][T30359] CPU: 1 UID: 0 PID: 30359 Comm: syz.4.6477 Not tainted syzkaller #0 PREEMPT(full) [ 641.580228][T30359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 641.580238][T30359] Call Trace: [ 641.580245][T30359] [ 641.580251][T30359] dump_stack_lvl+0xe8/0x150 [ 641.580279][T30359] should_fail_ex+0x412/0x560 [ 641.580305][T30359] _copy_from_iter+0x1d3/0x1670 [ 641.580332][T30359] ? rcu_is_watching+0x15/0xb0 [ 641.580390][T30359] ? __pfx__copy_from_iter+0x10/0x10 [ 641.580420][T30359] ? netlink_sendmsg+0x650/0xb40 [ 641.580442][T30359] ? skb_put+0x11b/0x210 [ 641.580468][T30359] netlink_sendmsg+0x6c0/0xb40 [ 641.580497][T30359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.580521][T30359] ? aa_sock_msg_perm+0xf1/0x1b0 [ 641.580544][T30359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.580577][T30359] ____sys_sendmsg+0x972/0x9f0 [ 641.580601][T30359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.580622][T30359] ? import_iovec+0x73/0xa0 [ 641.580650][T30359] ___sys_sendmsg+0x2a5/0x360 [ 641.580671][T30359] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.580714][T30359] ? __fget_files+0x2a/0x420 [ 641.580736][T30359] ? __fget_files+0x3a0/0x420 [ 641.580765][T30359] __x64_sys_sendmsg+0x1bd/0x2a0 [ 641.580782][T30359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.580807][T30359] ? __pfx_ksys_write+0x10/0x10 [ 641.580831][T30359] do_syscall_64+0x14d/0xf80 [ 641.580844][T30359] ? trace_irq_disable+0x3b/0x150 [ 641.580863][T30359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.580876][T30359] ? clear_bhb_loop+0x40/0x90 [ 641.580891][T30359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.580903][T30359] RIP: 0033:0x7f242c39c799 [ 641.580918][T30359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.580931][T30359] RSP: 002b:00007f242d1ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.580949][T30359] RAX: ffffffffffffffda RBX: 00007f242c615fa0 RCX: 00007f242c39c799 [ 641.580961][T30359] RDX: 0000000000048884 RSI: 0000200000000180 RDI: 0000000000000003 [ 641.580971][T30359] RBP: 00007f242d1ea090 R08: 0000000000000000 R09: 0000000000000000 [ 641.580980][T30359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.580990][T30359] R13: 00007f242c616038 R14: 00007f242c615fa0 R15: 00007ffd0006f6d8 [ 641.581017][T30359] [ 641.909399][T30365] û: renamed from ip_vti0 (while UP) [ 641.967419][T30139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.995017][T30139] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.022863][T14026] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.031206][T14026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.061113][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.068886][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.149238][T30370] syzkaller0: entered promiscuous mode [ 642.156226][T30370] syzkaller0: entered allmulticast mode [ 642.229494][T30378] netlink: 'syz.4.6484': attribute type 2 has an invalid length. [ 642.238581][T30378] __nla_validate_parse: 69 callbacks suppressed [ 642.238598][T30378] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6484'. [ 642.489140][T30389] FAULT_INJECTION: forcing a failure. [ 642.489140][T30389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.543339][T30391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6489'. [ 642.550617][T30396] sctp: [Deprecated]: syz.1.6490 (pid 30396) Use of int in maxseg socket option. [ 642.550617][T30396] Use struct sctp_assoc_value instead [ 642.624043][T30389] CPU: 0 UID: 0 PID: 30389 Comm: syz.3.6488 Not tainted syzkaller #0 PREEMPT(full) [ 642.624068][T30389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 642.624078][T30389] Call Trace: [ 642.624085][T30389] [ 642.624188][T30389] dump_stack_lvl+0xe8/0x150 [ 642.624220][T30389] should_fail_ex+0x412/0x560 [ 642.624254][T30389] _copy_from_iter+0x1d3/0x1670 [ 642.624281][T30389] ? rcu_is_watching+0x15/0xb0 [ 642.624310][T30389] ? __pfx__copy_from_iter+0x10/0x10 [ 642.624341][T30389] ? netlink_sendmsg+0x650/0xb40 [ 642.624364][T30389] ? skb_put+0x11b/0x210 [ 642.624392][T30389] netlink_sendmsg+0x6c0/0xb40 [ 642.624422][T30389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.624447][T30389] ? aa_sock_msg_perm+0xf1/0x1b0 [ 642.624472][T30389] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.624493][T30389] ____sys_sendmsg+0x972/0x9f0 [ 642.624520][T30389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.624548][T30389] ? import_iovec+0x73/0xa0 [ 642.624577][T30389] ___sys_sendmsg+0x2a5/0x360 [ 642.624601][T30389] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.624653][T30389] ? __fget_files+0x2a/0x420 [ 642.624680][T30389] ? __fget_files+0x3a0/0x420 [ 642.624714][T30389] __x64_sys_sendmsg+0x1bd/0x2a0 [ 642.624735][T30389] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.624760][T30389] ? __pfx_ksys_write+0x10/0x10 [ 642.624788][T30389] do_syscall_64+0x14d/0xf80 [ 642.624806][T30389] ? trace_irq_disable+0x3b/0x150 [ 642.624828][T30389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.624845][T30389] ? clear_bhb_loop+0x40/0x90 [ 642.624865][T30389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.624880][T30389] RIP: 0033:0x7f080c19c799 [ 642.624898][T30389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.624913][T30389] RSP: 002b:00007f080d12a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.624932][T30389] RAX: ffffffffffffffda RBX: 00007f080c415fa0 RCX: 00007f080c19c799 [ 642.624943][T30389] RDX: 0000000000048884 RSI: 0000200000000180 RDI: 0000000000000003 [ 642.624954][T30389] RBP: 00007f080d12a090 R08: 0000000000000000 R09: 0000000000000000 [ 642.624964][T30389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.624974][T30389] R13: 00007f080c416038 R14: 00007f080c415fa0 R15: 00007fff15c183f8 [ 642.625000][T30389] [ 642.939293][T30402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6492'. [ 642.973523][T30402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.006139][T30402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.084536][T30139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.241311][T30139] veth0_vlan: entered promiscuous mode [ 643.279394][T30139] veth1_vlan: entered promiscuous mode [ 643.353926][T30139] veth0_macvtap: entered promiscuous mode [ 643.390294][T30139] veth1_macvtap: entered promiscuous mode [ 643.447461][T30139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.464359][T27413] Bluetooth: hci1: command tx timeout [ 643.478550][T30440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.509964][T30139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.549302][ T128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.549779][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6504'. [ 643.584871][T30444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6505'. [ 643.588225][T30446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6504'. [ 643.614342][ T128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.626545][ T128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.647621][T14008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.676113][T30450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6506'. [ 643.741184][T30450] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6506'. [ 643.807010][T30450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6506'. [ 643.830756][T14008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.869574][T14008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.870053][T30450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.940441][T30461] netlink: 'syz.4.6509': attribute type 2 has an invalid length. [ 643.967993][T14016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.992060][T14016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.444226][T30494] netlink: 'syz.4.6515': attribute type 23 has an invalid length. [ 644.709463][T30517] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20003 [ 644.828923][T30523] netlink: 348 bytes leftover after parsing attributes in process `syz.3.6522'. [ 645.171222][T30551] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 645.387351][T30568] tipc: Enabling of bearer rejected, failed to enable media [ 645.494062][T30576] netlink: 'syz.1.6538': attribute type 1 has an invalid length. [ 645.536415][T27413] Bluetooth: hci1: command tx timeout [ 645.764745][T30601] gre0: entered promiscuous mode [ 645.772519][T30601] gre0: entered allmulticast mode [ 645.817206][T30603] sctp: [Deprecated]: syz.0.6545 (pid 30603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.817206][T30603] Use struct sctp_sack_info instead [ 646.187535][T30621] xfrm1: entered promiscuous mode [ 646.215255][T30621] xfrm1: entered allmulticast mode [ 646.234827][T30627] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 646.541089][T30598] Can't find ip_set type [ 646.778056][T30641] netlink: 'syz.4.6554': attribute type 1 has an invalid length. [ 646.973346][T30664] netlink: 'syz.2.6559': attribute type 1 has an invalid length. [ 646.999997][T30662] bond1 (unregistering): Released all slaves [ 647.091900][T30641] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 647.104682][T30641] bond1 (unregistering): Released all slaves [ 647.139169][T30664] bond1: entered promiscuous mode [ 647.145317][T30664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.210984][T30673] bond1: (slave bridge2): making interface the new active one [ 647.238282][T30673] bridge2: entered promiscuous mode [ 647.246499][T30673] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 647.369125][T27413] Bluetooth: hci0: command tx timeout [ 647.388237][T30677] bond1: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 647.415386][T30677] bond1: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 647.453551][T30679] __nla_validate_parse: 3 callbacks suppressed [ 647.453608][T30679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6561'. [ 647.481730][T30679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6561'. [ 647.495327][T30679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.712857][T30696] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6565'. [ 647.870865][T30708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6568'. [ 647.948487][T30715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6571'. [ 648.118608][T30724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6571'. [ 648.128714][T30722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6573'. [ 648.517449][T30737] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.6576'. [ 648.701951][T30745] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 648.713777][T30745] bond4: option packets_per_slave: allowed values 0 - 65535 [ 648.724491][T30745] bond4 (unregistering): Released all slaves [ 648.730350][T30749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6580'. [ 648.746079][T30749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6580'. [ 648.846605][ T9345] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.888259][ T9345] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.993600][T30758] x_tables: duplicate underflow at hook 2 [ 649.025035][ T9345] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.093006][ T9345] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.122434][T30768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.130595][T30768] IPv6: NLM_F_CREATE should be set when creating new route [ 649.156725][T30760] syzkaller0: entered promiscuous mode [ 649.165522][T30759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.183440][T30760] syzkaller0: entered allmulticast mode [ 649.313961][T30777] Bluetooth: MGMT ver 1.23 [ 649.655871][T30790] netlink: 'syz.4.6593': attribute type 1 has an invalid length. [ 649.672661][T30794] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20000 [ 649.704833][T30795] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20000 [ 650.036153][ T128] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.059347][ T128] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.092298][ T128] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.133851][ T128] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.212302][T30827] netlink: 'syz.0.6604': attribute type 12 has an invalid length. [ 650.292914][T30833] unsupported nlmsg_type 40 [ 650.420112][T30843] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 650.431965][T30843] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 650.443659][T30843] gretap1: entered promiscuous mode [ 650.449675][T30843] gretap1: entered allmulticast mode [ 650.718336][T30858] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 650.731691][T30858] team0: Port device batadv1 added [ 652.917187][T30808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.393200][T30905] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 653.419323][T30905] bond0: (slave gre0): Error -95 calling set_mac_address [ 653.443996][T30905] __nla_validate_parse: 10 callbacks suppressed [ 653.444016][T30905] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6626'. [ 653.632635][T30927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6631'. [ 653.646352][T30928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.662315][T30927] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 653.671681][T30927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6631'. [ 653.681672][T30927] openvswitch: netlink: nsh attr 16383 is out of range max 3 [ 653.779558][T19435] page_pool_release_retry() stalled pool shutdown: id 149, 1 inflight 60 sec [ 653.936502][T30950] syzkaller1: entered promiscuous mode [ 653.942880][T30950] syzkaller1: entered allmulticast mode [ 654.077655][T30961] netlink: 'syz.4.6641': attribute type 15 has an invalid length. [ 654.085748][T30961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6641'. [ 654.106283][ T63] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 654.106423][T30961] netlink: 'syz.4.6641': attribute type 15 has an invalid length. [ 654.118055][ T63] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 654.147896][T30961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6641'. [ 654.167631][ T63] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 654.178870][ T63] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 654.273030][T30968] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.6644'. [ 654.273794][T30964] syzkaller0: create flow: hash 2976991605 index 1 [ 654.285551][T14016] syzkaller0: tun_net_xmit 76 [ 654.306632][T14016] syzkaller0: tun_net_xmit 48 [ 654.312292][T19435] syzkaller0: tun_net_xmit 76 [ 654.365472][T30970] syzkaller0: delete flow: hash 2976991605 index 1 [ 654.478618][T30975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6646'. [ 655.202521][T30980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.270471][T30981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.358442][T30982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.433152][T30984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.728958][T30995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6653'. [ 656.753527][T30998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6655'. [ 656.759819][T30997] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6654'. [ 657.039642][T31022] x_tables: duplicate underflow at hook 1 [ 657.137490][T31028] veth1_macvtap: left promiscuous mode [ 657.168338][T31028] macsec0: entered promiscuous mode [ 657.187980][T31028] macsec0: entered allmulticast mode [ 657.208447][T31035] macsec0: left promiscuous mode [ 657.213552][T31035] macsec0: left allmulticast mode [ 657.250503][T31036] netlink: 'syz.2.6664': attribute type 3 has an invalid length. [ 657.407596][T31047] netlink: 'syz.3.6668': attribute type 29 has an invalid length. [ 657.420076][T31047] netlink: 'syz.3.6668': attribute type 29 has an invalid length. [ 657.431933][T31047] netlink: 'syz.3.6668': attribute type 29 has an invalid length. [ 657.442177][T31047] netlink: 'syz.3.6668': attribute type 29 has an invalid length. [ 657.460801][T31047] netlink: 'syz.3.6668': attribute type 29 has an invalid length. [ 657.477715][T31051] openvswitch: netlink: Flow key attr not present in new flow. [ 657.720725][T31075] tipc: Started in network mode [ 657.729131][T31075] tipc: Node identity d22d94797afc, cluster identity 4711 [ 657.759954][T31075] tipc: Enabled bearer , priority 0 [ 657.787014][T31071] syzkaller0: entered promiscuous mode [ 657.841691][T31071] syzkaller0: entered allmulticast mode [ 657.966191][T31071] tipc: Resetting bearer [ 658.035733][T31071] tipc: Disabling bearer [ 658.368872][T31118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 658.413825][T31122] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 658.736461][T31148] __nla_validate_parse: 9 callbacks suppressed [ 658.736471][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6695'. [ 658.736476][T31148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6695'. [ 658.736494][T31148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6695'. [ 659.195623][T31174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6702'. [ 659.285846][T31181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6704'. [ 659.354253][T31185] syzkaller0: entered promiscuous mode [ 659.365407][T31185] syzkaller0: entered allmulticast mode [ 659.439931][T31190] bridge_slave_0: left allmulticast mode [ 659.456548][T31190] bridge_slave_0: left promiscuous mode [ 659.474192][T31190] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.494569][T31190] bridge_slave_1: left allmulticast mode [ 659.525110][T31190] bridge_slave_1: left promiscuous mode [ 659.526096][T31198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6712'. [ 659.539334][T31190] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.625601][T31202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6709'. [ 659.640059][T31190] bond0: (slave bond_slave_0): Releasing backup interface [ 659.661830][T31190] bond0: (slave bond_slave_1): Releasing backup interface [ 659.696186][T31190] team0: Port device team_slave_0 removed [ 659.713731][T31190] team0: Port device team_slave_1 removed [ 659.722326][T31190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.732252][T31190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.743062][T31190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.755628][T31190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.766397][T31190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 660.640618][T31247] macvtap1: entered allmulticast mode [ 660.655814][T31248] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.6725'. [ 660.658404][T31247] veth0_macvtap: entered allmulticast mode [ 660.674027][T31248] netlink: 'syz.1.6725': attribute type 1 has an invalid length. [ 660.781197][T31248] bond1: entered promiscuous mode [ 660.806139][T31248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 660.884171][T31252] bond1: (slave bridge1): making interface the new active one [ 660.892139][T31252] bridge1: entered promiscuous mode [ 660.901286][T31252] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 661.566882][T31292] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6736'. [ 661.704144][T31303] tipc: Resetting bearer [ 661.774288][T31312] Cannot find set identified by id 3 to match [ 661.866541][T31319] netlink: 'syz.4.6746': attribute type 32 has an invalid length. [ 661.905347][T31319] netlink: 776 bytes leftover after parsing attributes in process `syz.4.6746'. [ 662.178193][T31343] netlink: 'syz.4.6753': attribute type 1 has an invalid length. [ 662.229349][T31343] netlink: 'syz.4.6753': attribute type 1 has an invalid length. [ 662.302344][T31343] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 662.670573][T31369] netdevsim netdevsim4 : renamed from netdevsim0 [ 663.539292][T31418] validate_nla: 1 callbacks suppressed [ 663.539310][T31418] netlink: 'syz.1.6774': attribute type 64 has an invalid length. [ 663.593127][T31419] xt_hashlimit: invalid interval [ 663.690938][T31426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.805005][T31428] __nla_validate_parse: 5 callbacks suppressed [ 663.805025][T31428] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6776'. [ 663.858123][T31428] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 663.943394][T31440] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6778'. [ 664.290519][T31453] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 664.311799][T31453] bond2 (unregistering): Released all slaves [ 664.917085][T31500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6791'. [ 666.078685][T31564] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 666.097786][T31564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.414249][T31591] netlink: 'syz.4.6807': attribute type 9 has an invalid length. [ 666.438975][T31592] netlink: 'syz.4.6807': attribute type 9 has an invalid length. [ 666.630593][T31597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.635091][T31607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6809'. [ 666.705231][T31597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6809'. [ 666.778344][T31613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6811'. [ 666.879439][T31615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6812'. [ 667.027110][T31628] nftables ruleset with unbound set [ 667.176641][T31632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6817'. [ 667.327277][T31641] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 667.412364][T31645] netlink: 'syz.3.6821': attribute type 10 has an invalid length. [ 667.415755][T31647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 667.448814][T31647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6820'. [ 667.469964][T31645] bridge_slave_1: left allmulticast mode [ 667.493699][T31645] bridge_slave_1: left promiscuous mode [ 667.503540][T31645] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.529355][T31645] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 668.079305][T31697] tc_dump_action: action bad kind [ 668.670547][T31715] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.678266][T31715] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.044943][T31741] __nla_validate_parse: 8 callbacks suppressed [ 669.044963][T31741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6852'. [ 669.157008][T31744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6853'. [ 669.235769][T31715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.274448][T31715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.739473][T31749] syzkaller0: entered promiscuous mode [ 669.745057][T31749] syzkaller0: entered allmulticast mode [ 669.796548][T14008] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.812456][T14008] netdevsim netdevsim4 : unset [0, 1] type 1 family 0 port 2816 - 0 [ 669.838232][T14008] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.855584][T14008] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.875486][T14008] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 669.895495][T14008] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.034883][T31771] netlink: 'syz.4.6858': attribute type 10 has an invalid length. [ 672.035502][T14008] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.068540][T14008] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 672.079668][T14008] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.106260][T14008] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.115818][T14008] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 672.131281][T14008] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.155513][T31774] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.6859'. [ 672.161538][T31771] bond0: (slave ): Enslaving as an active interface with an up link [ 672.271697][T31783] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6863'. [ 672.340381][T31788] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6866'. [ 672.385941][T31789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6866'. [ 672.423758][T31789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6866'. [ 672.428579][T31799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6865'. [ 672.601269][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6867'. [ 672.669575][T31815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6872'. [ 672.821951][T31815] bond2: entered promiscuous mode [ 672.833431][T31815] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.458885][T31879] netlink: 'syz.3.6889': attribute type 15 has an invalid length. [ 673.476062][T14030] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 673.485258][T14030] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 673.494449][T31879] netlink: 'syz.3.6889': attribute type 15 has an invalid length. [ 673.503541][T14030] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 673.533704][T14030] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 673.768029][T31890] sctp: [Deprecated]: syz.4.6894 (pid 31890) Use of int in max_burst socket option. [ 673.768029][T31890] Use struct sctp_assoc_value instead [ 673.894264][T31881] netlink: 'syz.0.6890': attribute type 2 has an invalid length. [ 674.189050][T31928] IPVS: length: 24 != 984 [ 674.223131][T31928] netlink: 'syz.1.6902': attribute type 1 has an invalid length. [ 674.303769][T31928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.490309][T31955] __nla_validate_parse: 10 callbacks suppressed [ 674.490331][T31955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6911'. [ 674.514363][T31955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6911'. [ 674.542254][T31955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6911'. [ 674.579280][T31962] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6911'. [ 674.588262][T31963] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 674.672952][T31963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.841334][T31980] netlink: 'syz.2.6917': attribute type 8 has an invalid length. [ 674.844278][T31969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6915'. [ 675.258678][T32003] netlink: 'syz.4.6926': attribute type 8 has an invalid length. [ 675.295822][T32007] 8021q: VLANs not supported on vcan0 [ 675.308952][T32008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6927'. [ 675.408566][T32017] netlink: 'syz.0.6931': attribute type 2 has an invalid length. [ 675.657386][T32038] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6938'. [ 675.673194][T32043] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6938'. [ 675.692592][T32040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.788857][ T63] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 675.799786][ T63] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.827240][ T63] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.849999][ T63] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.028117][T32061] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6944'. [ 676.682197][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6956'. [ 677.104393][T32131] x_tables: duplicate underflow at hook 2 [ 677.279716][T32141] openvswitch: netlink: Flow key attr not present in new flow. [ 677.304156][T32145] openvswitch: netlink: IP tunnel dst address not specified [ 677.322896][T32144] nbd: socks must be embedded in a SOCK_ITEM attr [ 677.558977][T32160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.570076][T32160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.597123][T32160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.636512][T32160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.776577][T32176] netlink: 'syz.1.6980': attribute type 9 has an invalid length. [ 677.799396][T32176] netlink: 'syz.1.6980': attribute type 6 has an invalid length. [ 677.865894][T32176] netlink: 'syz.1.6980': attribute type 4 has an invalid length. [ 678.005993][T32188] netlink: 'syz.1.6984': attribute type 10 has an invalid length. [ 678.043446][T32193] netlink: 'syz.3.6985': attribute type 32 has an invalid length. [ 678.305058][T32213] netlink: 'syz.1.6991': attribute type 12 has an invalid length. [ 678.377986][T32217] syzkaller0: entered promiscuous mode [ 678.383761][T32217] syzkaller0: entered allmulticast mode [ 678.476689][T32217] netlink: 'syz.4.6993': attribute type 10 has an invalid length. [ 678.505260][T32217] dummy0: entered promiscuous mode [ 678.546146][T32217] bridge0: port 3(dummy0) entered blocking state [ 678.563445][T32217] bridge0: port 3(dummy0) entered disabled state [ 678.580837][T32217] dummy0: entered allmulticast mode [ 678.597134][T32217] bridge0: port 3(dummy0) entered blocking state [ 678.603684][T32217] bridge0: port 3(dummy0) entered forwarding state [ 679.267127][T32300] openvswitch: netlink: Flow actions attr not present in new flow. [ 679.278298][T32300] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 679.416284][T32312] netlink: 'syz.2.7019': attribute type 1 has an invalid length. [ 679.499772][T32314] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 679.513725][T32314] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 679.525604][T32314] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 679.568707][T32322] syzkaller0: entered promiscuous mode [ 679.574328][T32322] syzkaller0: entered allmulticast mode [ 679.748940][T32340] __nla_validate_parse: 13 callbacks suppressed [ 679.748960][T32340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7025'. [ 679.846323][T32348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.664567][T32335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.686775][T32356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7026'. [ 682.840559][T32377] netlink: 'syz.4.7031': attribute type 64 has an invalid length. [ 683.036480][T32394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7038'. [ 683.151138][T32407] openvswitch: netlink: IP tunnel dst address not specified [ 683.168319][T32410] netlink: 'syz.2.7040': attribute type 2 has an invalid length. [ 683.176515][T32410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7040'. [ 685.465987][T32416] kthread_run failed with err -4 [ 685.738706][T32447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7050'. [ 685.748395][T32447] nbd: must specify a size in bytes for the device [ 685.807489][T32454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7052'. [ 685.829864][T32454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7052'. [ 685.982261][T32465] netlink: 7 bytes leftover after parsing attributes in process `syz.0.7057'. [ 685.994824][T32467] netlink: 'syz.2.7056': attribute type 2 has an invalid length. [ 686.009312][T32469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7058'. [ 686.136180][T32477] xt_NFQUEUE: number of total queues is 0 [ 686.147639][T32479] netlink: 'syz.3.7062': attribute type 17 has an invalid length. [ 686.171268][T32479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7062'. [ 686.183063][T32479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7062'. [ 686.229825][T32479] gretap0: entered promiscuous mode [ 686.249406][T32479] gretap0: left promiscuous mode [ 686.327761][T32496] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7065'. [ 686.547324][T32509] IPv6: sit1: Disabled Multicast RS [ 686.640335][T32517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7072'. [ 686.662604][T32509] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7070'. [ 686.733731][T32523] openvswitch: netlink: IP tunnel dst address not specified [ 686.929641][T32534] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 686.947431][T32534] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 686.958040][T32534] gretap1: entered promiscuous mode [ 686.963374][T32534] gretap1: entered allmulticast mode [ 687.373365][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 687.400794][T32571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 687.408107][T32571] IPv6: NLM_F_CREATE should be set when creating new route [ 687.415362][T32571] IPv6: NLM_F_CREATE should be set when creating new route [ 687.500397][T32581] netlink: 'syz.4.7093': attribute type 21 has an invalid length. [ 687.555878][T32581] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 687.599840][T32581] bond3 (unregistering): Released all slaves [ 687.693791][T32598] netlink: 'syz.0.7096': attribute type 1 has an invalid length. [ 687.748339][T32594] block nbd3: server does not support multiple connections per device. [ 687.753558][T32598] bond4: entered promiscuous mode [ 687.769445][T32594] block nbd3: shutting down sockets [ 687.835711][T32598] 8021q: adding VLAN 0 to HW filter on device bond4 [ 687.907001][T32609] netlink: 'syz.1.7102': attribute type 5 has an invalid length. [ 687.917576][T32602] bond4: (slave bridge3): making interface the new active one [ 687.964615][T32602] bridge3: entered promiscuous mode [ 687.987312][T32602] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 688.007414][T32624] block nbd0: NBD_DISCONNECT [ 688.015545][T32624] block nbd0: Send disconnect failed -32 [ 688.026067][T32624] block nbd0: shutting down sockets [ 688.065903][T32594] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 688.118312][T32594] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 688.299423][T32636] netlink: 'syz.3.7106': attribute type 21 has an invalid length. [ 688.305869][ T63] veth11: left allmulticast mode [ 688.320496][ T63] veth11: left promiscuous mode [ 688.325765][ T63] bridge7: port 1(veth11) entered disabled state [ 688.354307][T32640] netlink: 'syz.3.7106': attribute type 21 has an invalid length. [ 688.573320][ T63] erspan0 (unregistering): left promiscuous mode [ 688.597250][ T63] gretap0 (unregistering): left promiscuous mode [ 688.844344][ T63] bond9 (unregistering): (slave bridge0): Removing an active aggregator [ 688.862057][ T63] bond9 (unregistering): (slave bridge0): Releasing backup interface [ 688.871678][ T63] bond9 (unregistering): (slave bridge0): the permanent HWaddr of slave - 46:61:2a:27:d0:f9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 688.892426][ T63] bridge0 (unregistering): left promiscuous mode [ 688.899124][ T63] bridge0 (unregistering): left allmulticast mode [ 688.962113][ T63] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 688.973839][ T63] bridge5 (unregistering): left promiscuous mode [ 688.982996][ T63] bridge5 (unregistering): left allmulticast mode [ 689.172969][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.184164][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.195682][ T63] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 689.205744][ T63] bond0 (unregistering): Released all slaves [ 689.219601][ T63] bond1 (unregistering): Released all slaves [ 689.233464][ T63] bond2 (unregistering): Released all slaves [ 689.246123][ T63] bond3 (unregistering): Released all slaves [ 689.261508][ T63] bond4 (unregistering): Released all slaves [ 689.282683][ T63] bond5 (unregistering): Released all slaves [ 689.301623][ T63] bond6 (unregistering): (slave veth5): Releasing active interface [ 689.315740][ T63] bond6 (unregistering): Released all slaves [ 689.330898][ T63] bond7 (unregistering): (slave veth7): Releasing active interface [ 689.340909][ T63] bond7 (unregistering): Released all slaves [ 689.354204][ T63] bond8 (unregistering): Released all slaves [ 689.366942][ T63] bond9 (unregistering): Released all slaves [ 689.384293][ T63] bond10 (unregistering): Released all slaves [ 689.403696][ T63] bond11 (unregistering): (slave veth9): Releasing active interface [ 689.414707][ T63] bond11 (unregistering): Released all slaves [ 689.427620][ T63] bond12 (unregistering): Released all slaves [ 689.443819][ T63] bond13 (unregistering): Released all slaves [ 689.458623][T32644] netlink: 'syz.4.7107': attribute type 3 has an invalid length. [ 689.528226][T32659] tipc: Enabling of bearer rejected, failed to enable media [ 689.646870][T32679] tipc: Enabling not permitted [ 689.674857][T32679] tipc: Enabling of bearer rejected, failed to enable media [ 689.758562][ T63] tipc: Disabling bearer [ 689.815254][ T63] tipc: Disabling bearer [ 689.863308][ T63] tipc: Left network mode [ 689.864163][T32689] netlink: 'syz.2.7118': attribute type 5 has an invalid length. [ 690.333819][T32722] netlink: 'syz.4.7128': attribute type 1 has an invalid length. [ 690.569982][T32722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 690.622386][T32726] bond3: (slave geneve3): making interface the new active one [ 690.661882][T32726] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 690.715585][T14008] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 690.750506][T14016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.823714][T14016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.845905][T14016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.944928][T32756] syzkaller1: entered promiscuous mode [ 690.960047][T32756] syzkaller1: entered allmulticast mode [ 690.974758][T32767] __nla_validate_parse: 16 callbacks suppressed [ 690.974776][T32767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7137'. [ 691.161649][ T63] vlan0: left allmulticast mode [ 691.162922][ T305] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 691.185909][ T63] veth0_vlan: left allmulticast mode [ 691.186603][ T310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7141'. [ 691.193950][ T63] vlan0: left promiscuous mode [ 691.470620][ T327] netlink: 'syz.3.7143': attribute type 2 has an invalid length. [ 691.927963][ T63] team0 (unregistering): Port device batadv0 removed [ 692.044824][ T346] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7145'. [ 692.111186][ T63] team0 (unregistering): Port device team_slave_1 removed [ 692.144600][ T63] team0 (unregistering): Port device team_slave_0 removed [ 692.481441][ T361] tls_set_device_offload_rx: netdev not found [ 692.497964][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 692.507015][ C0] lec:lec_tx_timeout: lec0 [ 692.513319][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 692.640173][ T369] netlink: 'syz.2.7153': attribute type 1 has an invalid length. [ 692.773929][ T369] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 692.781919][ T378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7157'. [ 692.787271][ T63] IPVS: stop unused estimator thread 0... [ 692.820971][ T379] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 693.151449][ T411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7166'. [ 693.171192][ T408] netlink: 'syz.1.7163': attribute type 9 has an invalid length. [ 693.198506][ T415] netlink: 'syz.0.7167': attribute type 3 has an invalid length. [ 693.212169][ T413] netlink: 4240 bytes leftover after parsing attributes in process `syz.1.7163'. [ 693.269649][ T419] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7168'. [ 693.283025][ T419] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.7168'. [ 693.365186][ T419] syzkaller0: entered promiscuous mode [ 693.372494][ T419] syzkaller0: entered allmulticast mode [ 693.683565][ T457] netlink: 'syz.0.7180': attribute type 2 has an invalid length. [ 693.806846][T14014] tipc: Subscription rejected, illegal request [ 693.807279][ T466] netlink: 'syz.3.7183': attribute type 1 has an invalid length. [ 694.027066][ T477] netlink: 'syz.4.7185': attribute type 12 has an invalid length. [ 694.064625][ T477] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7185'. [ 694.272869][ T498] netlink: 'syz.1.7190': attribute type 10 has an invalid length. [ 694.275508][ T501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7192'. [ 694.335647][ T498] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 694.583633][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 694.635910][ T517] netlink: 'syz.2.7195': attribute type 21 has an invalid length. [ 694.644619][ T517] netlink: 'syz.2.7195': attribute type 22 has an invalid length. [ 694.653229][ T517] netlink: 'syz.2.7195': attribute type 23 has an invalid length. [ 694.662335][ T517] netlink: 'syz.2.7195': attribute type 25 has an invalid length. [ 695.004536][ T534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.177316][ T545] syzkaller0: entered promiscuous mode [ 695.208669][ T545] syzkaller0: entered allmulticast mode [ 695.317762][ T564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.437156][ T571] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 697.528009][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 697.536239][ C0] lec:lec_tx_timeout: lec0 [ 697.644107][ T578] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 697.690687][ T578] bond4 (unregistering): Released all slaves [ 697.765294][ T595] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 697.918497][ T609] __nla_validate_parse: 4 callbacks suppressed [ 697.918515][ T609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7226'. [ 698.120048][ T620] bridge0: port 3(dummy0) entered disabled state [ 698.137647][ T620] dummy0: left allmulticast mode [ 698.147766][ T620] dummy0: left promiscuous mode [ 698.167238][ T620] bridge0: port 3(dummy0) entered disabled state [ 698.195062][ T620] team0: Port device dummy0 added [ 698.298949][ T634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7232'. [ 698.362553][ T637] syzkaller0: entered promiscuous mode [ 698.375929][ T637] syzkaller0: entered allmulticast mode [ 698.396151][ T640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7235'. [ 698.406638][ T641] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.7235'. [ 698.420848][ T642] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 698.496631][ T647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.509664][ T647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7237'. [ 698.860724][ T675] validate_nla: 3 callbacks suppressed [ 698.860745][ T675] netlink: 'syz.1.7244': attribute type 1 has an invalid length. [ 698.875052][ T675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7244'. [ 698.884649][ T675] netlink: 658 bytes leftover after parsing attributes in process `syz.1.7244'. [ 698.900237][ T675] netlink: 'syz.1.7244': attribute type 1 has an invalid length. [ 701.017218][ T685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 701.168711][ T696] netlink: 'syz.3.7249': attribute type 1 has an invalid length. [ 701.305916][ T707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7251'. [ 701.402152][ T705] bond4: Removing last ns target with arp_interval on [ 701.641417][ T740] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7264'. [ 701.806950][ T750] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 701.834218][ T760] netlink: 'syz.2.7270': attribute type 13 has an invalid length. [ 701.856850][ T750] syzkaller0: entered promiscuous mode [ 701.862942][ T750] syzkaller0: entered allmulticast mode [ 701.874768][ T760] veth0_macvtap: left promiscuous mode [ 701.880741][ T760] macvtap0: entered allmulticast mode [ 701.891730][ T760] macvtap0: refused to change device tx_queue_len [ 701.943428][ T770] netlink: 'syz.1.7265': attribute type 1 has an invalid length. [ 702.059165][ T772] netlink: 'syz.2.7272': attribute type 13 has an invalid length. [ 702.067208][ T772] netlink: 'syz.2.7272': attribute type 27 has an invalid length. [ 702.713588][ T787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7275'. [ 702.734556][ T787] netlink: 'syz.4.7275': attribute type 3 has an invalid length. [ 704.782942][ T753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.954973][ T797] __nla_validate_parse: 1 callbacks suppressed [ 704.954994][ T797] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7276'. [ 705.011284][ T802] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7276'. [ 705.090782][ T797] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 705.130202][ T797] bond5 (unregistering): Released all slaves [ 705.188961][ T816] bond5 (unregistering): Released all slaves [ 705.257524][ T825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7286'. [ 705.293299][ T825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7286'. [ 705.327281][ T825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7286'. [ 705.529402][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.537377][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.578531][ T835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 705.711691][ T847] veth0: entered promiscuous mode [ 705.727740][ T846] veth0: left promiscuous mode [ 705.851612][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7297'. [ 705.862408][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7297'. [ 705.893809][ T865] netlink: 'syz.3.7299': attribute type 1 has an invalid length. [ 705.903001][ T866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7298'. [ 706.136725][ T881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.156083][ T881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.183187][ T881] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7303'. [ 706.302864][T14016] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.319338][T14016] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.343371][T14016] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.362930][T14016] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.400154][T14016] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.418141][T14016] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.437004][T14016] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.456705][T14016] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.490506][ T898] netlink: 788 bytes leftover after parsing attributes in process `syz.1.7310'. [ 706.737768][ T937] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:32789 [ 707.473313][ T984] veth3: entered allmulticast mode [ 707.516961][ T984] netlink: 'syz.0.7331': attribute type 1 has an invalid length. [ 708.433411][ T1026] netlink: 'syz.1.7341': attribute type 75 has an invalid length. [ 708.838451][ T1041] tipc: Enabling of bearer rejected, failed to enable media [ 709.097743][ T1077] ±ÿ: renamed from lo [ 709.503213][ T1098] xt_hashlimit: overflow, try lower: 3/0 [ 709.579625][T14016] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.594179][T14016] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.615020][T14016] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.639381][T14016] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.737615][ T1109] netlink: 'syz.2.7360': attribute type 1 has an invalid length. [ 709.941401][T27413] Bluetooth: hci5: command 0x0406 tx timeout [ 709.983893][ T1123] IPv6: NLM_F_REPLACE set, but no existing node found! [ 710.253024][ T1139] __nla_validate_parse: 15 callbacks suppressed [ 710.253042][ T1139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7371'. [ 710.434712][ T1141] bridge_slave_0: left allmulticast mode [ 710.454037][ T1141] bridge_slave_0: left promiscuous mode [ 710.490586][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.519665][ T1147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7374'. [ 710.519842][ T1141] bridge_slave_1: left allmulticast mode [ 710.551883][ T1141] bridge_slave_1: left promiscuous mode [ 710.560401][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.583188][ T1141] bond0: (slave bond_slave_0): Releasing backup interface [ 710.591216][ T1151] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7375'. [ 710.607235][ T1141] bond0: (slave bond_slave_1): Releasing backup interface [ 710.629602][ T1141] team0: Port device team_slave_0 removed [ 710.641987][ T1141] team0: Port device team_slave_1 removed [ 710.652551][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.662136][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.673818][ T1141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.741491][ T1148] team0: Mode changed to "loadbalance" [ 710.761222][ T1166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7377'. [ 710.799368][ T1166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7377'. [ 710.926944][T14014] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.943906][ T1175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7380'. [ 710.962864][ T1173] tipc: Started in network mode [ 710.968823][ T1173] tipc: Node identity ac14140f, cluster identity 4711 [ 710.976642][ T1173] tipc: New replicast peer: 255.255.255.255 [ 711.002058][ T1173] tipc: Enabled bearer , priority 10 [ 711.169988][ T1193] netlink: 'syz.3.7386': attribute type 6 has an invalid length. [ 711.176071][ T1195] syzkaller0: entered promiscuous mode [ 711.183731][ T1195] syzkaller0: entered allmulticast mode [ 711.199776][ T1193] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7386'. [ 711.269009][ T1193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.297589][ T1193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.317652][ T1193] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 711.335013][ T1193] bond0 (unregistering): Released all slaves [ 711.351983][ T1208] netlink: 'syz.1.7390': attribute type 1 has an invalid length. [ 711.535249][ T1216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7393'. [ 711.575125][ T1216] hsr_slave_1 (unregistering): left promiscuous mode [ 711.642890][ T1227] sctp: [Deprecated]: syz.0.7396 (pid 1227) Use of int in max_burst socket option deprecated. [ 711.642890][ T1227] Use struct sctp_assoc_value instead [ 711.960772][ T1251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7403'. [ 711.973733][ T1251] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7403'. [ 711.985627][ T1253] openvswitch: netlink: Message has -2 unknown bytes. [ 712.137979][ T10] tipc: Node number set to 2886997007 [ 712.260439][ T1271] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 712.346926][ T1275] syzkaller0: entered allmulticast mode [ 712.379096][ T1284] syzkaller0: left allmulticast mode [ 712.516688][ T1290] sctp: [Deprecated]: syz.3.7416 (pid 1290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.516688][ T1290] Use struct sctp_sack_info instead [ 712.746805][ T1310] netlink: 'syz.3.7422': attribute type 10 has an invalid length. [ 712.865029][ T1320] ip6gre1: entered allmulticast mode [ 712.893824][ T1318] netlink: 'syz.3.7425': attribute type 11 has an invalid length. [ 712.931576][ T63] tipc: Subscription rejected, illegal request [ 713.335227][ T1354] bond0: entered promiscuous mode [ 713.341434][ T1354] #ÿ: entered promiscuous mode [ 713.347532][ T1354] bond_slave_1: entered promiscuous mode [ 713.354417][ T1354] netdevsim netdevsim4 : entered promiscuous mode [ 713.364567][ T1354] bond0: entered allmulticast mode [ 713.370185][ T1354] #ÿ: entered allmulticast mode [ 713.391408][ T1354] bond_slave_1: entered allmulticast mode [ 713.404520][ T1354] netdevsim netdevsim4 : entered allmulticast mode [ 713.426763][ T1354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.536939][ T1359] veth0_macvtap: left allmulticast mode [ 713.602767][T14008] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 713.616165][ T1355] syzkaller1: entered promiscuous mode [ 713.623047][ T1355] syzkaller1: entered allmulticast mode [ 713.654878][T14008] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 713.671444][T14008] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 713.730383][T14008] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 713.734619][ T1369] netlink: 'syz.4.7439': attribute type 2 has an invalid length. [ 713.752086][ T1369] netlink: 'syz.4.7439': attribute type 8 has an invalid length. [ 713.766077][ T1367] syzkaller0: entered promiscuous mode [ 713.773222][ T1367] syzkaller0: entered allmulticast mode [ 713.859221][ T1377] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 713.928326][ T1377] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 714.091399][T19435] page_pool_release_retry() stalled pool shutdown: id 149, 1 inflight 120 sec [ 714.107306][ T1400] netlink: 'syz.2.7448': attribute type 1 has an invalid length. [ 714.352026][ T1410] bridge6: entered promiscuous mode [ 714.378018][ T1410] bridge6: entered allmulticast mode [ 715.052965][ T1452] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 715.108278][ T1455] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 715.283442][ T1460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.393333][ T1463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.419661][ T1462] syzkaller0: entered promiscuous mode [ 715.426578][ T1462] syzkaller0: entered allmulticast mode [ 715.468756][ T1466] __nla_validate_parse: 13 callbacks suppressed [ 715.468774][ T1466] netlink: 211456 bytes leftover after parsing attributes in process `syz.2.7464'. [ 715.469644][ T1467] netlink: 211456 bytes leftover after parsing attributes in process `syz.2.7464'. [ 715.498681][ T1468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.602569][ T1477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7466'. [ 715.611977][ T1476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.623829][ T1477] netlink: 196244 bytes leftover after parsing attributes in process `syz.2.7466'. [ 715.639660][ T1477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7466'. [ 716.712389][ T1487] xt_TPROXY: Can be used only with -p tcp or -p udp [ 716.733735][ T1487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7468'. [ 717.938847][ T1500] x_tables: duplicate underflow at hook 1 [ 717.947293][ T1500] sctp: [Deprecated]: syz.2.7470 (pid 1500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.947293][ T1500] Use struct sctp_sack_info instead [ 718.072630][ T1508] netlink: 'syz.1.7474': attribute type 1 has an invalid length. [ 718.120930][ T1508] 8021q: adding VLAN 0 to HW filter on device bond5 [ 718.421455][ T1515] bond5: (slave geneve2): making interface the new active one [ 718.432329][ T1515] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 719.076253][ T1567] netlink: 'syz.0.7490': attribute type 9 has an invalid length. [ 719.088278][ T1567] netlink: 'syz.0.7490': attribute type 11 has an invalid length. [ 719.096958][ T1567] netlink: 'syz.0.7490': attribute type 12 has an invalid length. [ 719.105576][ T1567] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.7490'. [ 719.119203][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7491'. [ 719.129935][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7491'. [ 719.153716][ T1569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7491'. [ 719.381263][ T1583] netlink: 'syz.4.7497': attribute type 12 has an invalid length. [ 719.395967][ T1583] netlink: 'syz.4.7497': attribute type 29 has an invalid length. [ 719.407376][ T1583] netlink: 'syz.4.7497': attribute type 2 has an invalid length. [ 719.416871][ T1583] netlink: 'syz.4.7497': attribute type 3 has an invalid length. [ 719.602077][ T1601] netlink: 'syz.0.7502': attribute type 2 has an invalid length. [ 719.623757][ T1601] netlink: 'syz.0.7502': attribute type 2 has an invalid length. [ 720.179321][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 720.217122][ T1650] bond0: option resend_igmp: invalid value (32767) [ 720.223935][ T1650] bond0: option resend_igmp: allowed values 0 - 255 [ 720.258547][ T1650] bond0 (unregistering): Released all slaves [ 720.516714][ T1674] tipc: Enabling of bearer rejected, failed to enable media [ 720.708122][ T1682] nbd: socks must be embedded in a SOCK_ITEM attr [ 720.812999][ T1693] __nla_validate_parse: 8 callbacks suppressed [ 720.813015][ T1693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7528'. [ 721.149546][ T1716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7536'. [ 721.242327][ T1533] udevd[1533]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 721.343288][ T1731] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7541'. [ 721.368425][ T1731] 8021q: VLANs not supported on ip6_vti0 [ 721.578812][ T1750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7546'. [ 721.615395][ T1750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7546'. [ 721.632949][ T1751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7547'. [ 721.741883][ T1760] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7550'. [ 721.781227][ T1762] openvswitch: netlink: Message has -2 unknown bytes. [ 721.791995][ T1766] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 721.820335][ T1768] siw: device registration error -23 [ 721.905670][ T1772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7556'. [ 721.971566][ T1772] syzkaller0: entered promiscuous mode [ 721.986910][ T1772] syzkaller0: entered allmulticast mode [ 722.054447][ T1780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7559'. [ 722.139074][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7562'. [ 722.614331][ T1832] sctp: [Deprecated]: syz.0.7572 (pid 1832) Use of int in maxseg socket option. [ 722.614331][ T1832] Use struct sctp_assoc_value instead [ 722.624953][ T1829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.678048][ T1829] vlan2: entered promiscuous mode [ 722.692307][ T1829] bond0: entered promiscuous mode [ 722.699506][ T1829] vlan2: entered allmulticast mode [ 722.705892][ T1829] bond0: entered allmulticast mode [ 722.733929][ T1833] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 722.774269][ T1833] bond0: (slave batadv2): making interface the new active one [ 722.800871][ T1833] batadv2: entered promiscuous mode [ 722.813618][ T1833] batadv2: entered allmulticast mode [ 722.821871][ T1833] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 722.834094][ T1841] --map-set only usable from mangle table [ 722.845426][ T1841] --map-set only usable from mangle table [ 722.963088][ T1842] team0 (unregistering): Port device team_slave_0 removed [ 723.114750][ T1858] validate_nla: 4 callbacks suppressed [ 723.114769][ T1858] netlink: 'syz.3.7578': attribute type 4 has an invalid length. [ 723.146428][ T1842] team0 (unregistering): Port device team_slave_1 removed [ 723.166819][ T1842] team0 (unregistering): Port device batadv1 removed [ 723.207464][ T1835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.461803][T27413] block nbd0: Receive control failed (result -107) [ 723.480805][ T1879] nbd0: detected capacity change from 0 to 127 [ 723.494528][ T1882] netlink: 'syz.4.7586': attribute type 1 has an invalid length. [ 723.499267][ T1533] block nbd0: Dead connection, failed to find a fallback [ 723.512115][ T1533] block nbd0: shutting down sockets [ 723.517711][ T1533] blk_print_req_error: 138 callbacks suppressed [ 723.517729][ T1533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.541658][ T1533] buffer_io_error: 138 callbacks suppressed [ 723.541676][ T1533] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.556107][ T1533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.567016][ T1533] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.576117][ T1533] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.588484][ T1533] Buffer I/O error on dev nbd0, logical block 2, async page read [ 723.621835][ T1533] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.632086][ T1533] Buffer I/O error on dev nbd0, logical block 3, async page read [ 723.640496][ T1533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.657365][ T1533] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.665978][ T1533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.676238][ T1533] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.690712][ T1533] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.709900][ T1889] netlink: 'syz.2.7588': attribute type 2 has an invalid length. [ 723.718717][ T1533] Buffer I/O error on dev nbd0, logical block 2, async page read [ 723.718797][ T1533] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.718820][ T1533] Buffer I/O error on dev nbd0, logical block 3, async page read [ 723.718872][ T1533] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.718893][ T1533] Buffer I/O error on dev nbd0, logical block 0, async page read [ 723.718928][ T1533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 723.718949][ T1533] Buffer I/O error on dev nbd0, logical block 1, async page read [ 723.719667][ T1533] ldm_validate_partition_table(): Disk read failed. [ 723.720059][ T1533] Dev nbd0: unable to read RDB block 0 [ 723.748795][ T1889] netlink: 'syz.2.7588': attribute type 1 has an invalid length. [ 723.824444][ T1533] nbd0: unable to read partition table [ 723.842165][ T1894] netlink: 'syz.2.7588': attribute type 2 has an invalid length. [ 723.854733][ T1533] ldm_validate_partition_table(): Disk read failed. [ 723.862010][ T1533] Dev nbd0: unable to read RDB block 0 [ 723.869441][ T1533] nbd0: unable to read partition table [ 723.876356][ T1894] netlink: 'syz.2.7588': attribute type 1 has an invalid length. [ 724.064869][ T1916] xt_bpf: check failed: parse error [ 724.334281][ T1935] netlink: 'syz.1.7595': attribute type 1 has an invalid length. [ 724.434084][ T1935] bond6: entered promiscuous mode [ 724.444820][ T1935] 8021q: adding VLAN 0 to HW filter on device bond6 [ 724.473872][ T1941] sctp: [Deprecated]: syz.3.7599 (pid 1941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.473872][ T1941] Use struct sctp_sack_info instead [ 724.517203][ T1942] ipvlan2: entered allmulticast mode [ 724.527415][ T1942] bond6: entered allmulticast mode [ 724.881592][ T1973] sctp: [Deprecated]: syz.4.7609 (pid 1973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.881592][ T1973] Use struct sctp_sack_info instead [ 724.899686][ T1973] sctp: [Deprecated]: syz.4.7609 (pid 1973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 724.899686][ T1973] Use struct sctp_sack_info instead [ 733.977535][ T2008] __nla_validate_parse: 8 callbacks suppressed [ 733.977556][ T2008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7619'. [ 733.986429][ T2009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7620'. [ 734.010333][ T2009] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 734.306893][ T2035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7625'. [ 734.489696][ T2045] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7628'. [ 734.500284][ T2045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7628'. [ 734.512125][ T2046] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7628'. [ 734.522091][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7628'. [ 734.564022][ T2048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7629'. [ 734.574656][ T2048] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7629'. [ 734.584074][ T2048] netlink: 'syz.3.7629': attribute type 5 has an invalid length. [ 734.594540][ T2048] netlink: 'syz.3.7629': attribute type 6 has an invalid length. [ 734.602805][ T2048] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7629'. [ 736.790843][ T1988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.937445][ T2067] netlink: 'syz.4.7637': attribute type 3 has an invalid length. [ 736.990558][ T2071] xt_connbytes: Forcing CT accounting to be enabled [ 737.451835][ T2107] bond4: option fail_over_mac: invalid value (16) [ 737.477524][ T2107] bond4 (unregistering): Released all slaves [ 737.701048][ T2128] netlink: 'syz.1.7652': attribute type 21 has an invalid length. [ 737.775415][ T2128] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 737.823262][ T2128] bond7 (unregistering): Released all slaves [ 738.895282][ T2146] kthread_run failed with err -4 [ 738.901798][ T2155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.920549][ T2156] syzkaller0: entered promiscuous mode [ 738.936082][ T2156] syzkaller0: entered allmulticast mode [ 739.028598][ T9345] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.040668][ T9345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.056806][ T9345] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.078320][ T9345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.087761][ T9345] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.107063][ T9345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.231368][ T9345] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.241381][ T9345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.273726][ T2189] netlink: 'syz.4.7664': attribute type 1 has an invalid length. [ 739.371435][ T2198] __nla_validate_parse: 5 callbacks suppressed [ 739.371456][ T2198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7669'. [ 739.396629][ T2200] netlink: 'syz.0.7668': attribute type 5 has an invalid length. [ 739.490675][ T2205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7672'. [ 739.514844][ T2205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7672'. [ 739.675262][ T2220] openvswitch: netlink: Multiple metadata blocks provided [ 739.685987][ T2220] netlink: 'syz.0.7677': attribute type 1 has an invalid length. [ 739.694555][ T2220] netlink: 'syz.0.7677': attribute type 4 has an invalid length. [ 739.708290][ T2220] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.7677'. [ 739.745391][ T2218] syzkaller0: entered promiscuous mode [ 739.751652][ T2218] syzkaller0: entered allmulticast mode [ 739.780857][ T2225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7679'. [ 739.939852][ T2232] netlink: 'syz.1.7680': attribute type 1 has an invalid length. [ 740.033170][ T2237] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7682'. [ 740.142662][ T2230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7679'. [ 742.209365][ T2242] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7683'. [ 742.447872][ T2258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7689'. [ 742.544473][ T2263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7690'. [ 742.745694][ T2267] vlan3: entered allmulticast mode [ 742.758837][ T2267] bridge_slave_0: entered allmulticast mode [ 743.382506][ T2309] netlink: 'syz.3.7702': attribute type 1 has an invalid length. [ 743.838266][ T2334] openvswitch: netlink: Flow actions attr not present in new flow. [ 743.981121][ T2341] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 744.487634][ T2368] ip6tnl1: entered allmulticast mode [ 744.540454][ T2369] __nla_validate_parse: 8 callbacks suppressed [ 744.540473][ T2369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7723'. [ 744.641128][ T2375] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7725'. [ 744.790737][ T2384] netlink: 'syz.2.7729': attribute type 4 has an invalid length. [ 744.815601][ T2384] netlink: 'syz.2.7729': attribute type 4 has an invalid length. [ 744.865570][ T2384] syzkaller0: entered promiscuous mode [ 744.882537][ T2384] syzkaller0: entered allmulticast mode [ 745.004470][ T2399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7734'. [ 745.021950][ T2397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7733'. [ 745.122991][ T2399] openvswitch: netlink: IP tunnel dst address not specified [ 745.292894][ T2414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.493027][ T2430] netlink: 'syz.4.7740': attribute type 2 has an invalid length. [ 745.543089][ T2430] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7740'. [ 745.568695][ T2422] netlink: 'syz.2.7739': attribute type 2 has an invalid length. [ 745.968065][ T2469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7748'. [ 745.991539][ T2468] openvswitch: netlink: IP tunnel dst address not specified [ 746.036886][ T2472] netlink: 'syz.2.7749': attribute type 1 has an invalid length. [ 746.045744][ T2471] netlink: 'syz.2.7749': attribute type 1 has an invalid length. [ 746.122340][ T2468] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7746'. [ 746.133752][ T2468] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7746'. [ 746.183020][ T2468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7746'. [ 746.362404][ T2500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7753'. [ 746.887474][ T2543] netlink: 'syz.2.7764': attribute type 21 has an invalid length. [ 747.027088][ T2547] netlink: 'syz.2.7766': attribute type 16 has an invalid length. [ 747.036782][ T2547] netlink: 'syz.2.7766': attribute type 17 has an invalid length. [ 747.171291][ T2547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 747.544134][ T2568] syzkaller0: entered promiscuous mode [ 747.557981][ T2568] syzkaller0: entered allmulticast mode [ 747.709998][ T2315] Set syz1 is full, maxelem 65536 reached [ 747.766986][ T2591] xt_hashlimit: size too large, truncated to 1048576 [ 748.092219][ T2610] IPv6: sit2: Disabled Multicast RS [ 748.196907][ T2630] netlink: 'syz.4.7788': attribute type 1 has an invalid length. [ 748.312595][ T2640] veth0_to_bridge: entered promiscuous mode [ 748.322084][ T2638] veth0_to_bridge: left promiscuous mode [ 748.466568][ T2655] openvswitch: netlink: Flow key attr not present in new flow. [ 748.482083][ T2655] bridge_slave_0: left allmulticast mode [ 748.491120][ T2655] bridge_slave_0: left promiscuous mode [ 748.497473][ T2655] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.573554][ T2659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.594034][ T2659] x_tables: unsorted underflow at hook 2 [ 748.602469][ T2660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.684141][ T2669] syzkaller0: left promiscuous mode [ 748.689742][ T2669] syzkaller0: left allmulticast mode [ 748.704123][ T2671] x_tables: duplicate entry at hook 1 [ 748.730198][ T2673] syzkaller0: entered promiscuous mode [ 748.746554][ T2673] syzkaller0: entered allmulticast mode [ 748.803710][ T2677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 748.824469][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 748.966662][ T2689] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20004 [ 749.632075][ T2765] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 749.671327][ T2769] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 749.690295][ T2765] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 749.702328][ T2769] veth7: entered allmulticast mode [ 749.788712][ T2777] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 750.055823][ T2800] xt_hashlimit: size too large, truncated to 1048576 [ 750.113900][ T2808] __nla_validate_parse: 15 callbacks suppressed [ 750.113920][ T2808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7830'. [ 750.119968][ T2812] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7829'. [ 750.148395][ T2804] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7829'. [ 751.033783][ T2823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7832'. [ 751.040190][ T2824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7832'. [ 751.059843][ T2823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7832'. [ 751.070095][ T2823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7832'. [ 751.082693][ T2825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7833'. [ 751.108143][ T2824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7832'. [ 751.121747][ T2825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7833'. [ 751.164803][ T2825] bond5: option xmit_hash_policy: invalid value (64) [ 751.183944][ T2825] bond5 (unregistering): Released all slaves [ 751.268490][ T2848] validate_nla: 5 callbacks suppressed [ 751.268509][ T2848] netlink: 'syz.3.7838': attribute type 1 has an invalid length. [ 751.291069][ T2846] vlan3: entered allmulticast mode [ 751.296760][ T2846] bridge5: entered allmulticast mode [ 751.335462][ T2854] block nbd0: Unsupported socket: should be TCP or UNIX. [ 751.344607][ T2846] bridge5: port 1(erspan0) entered blocking state [ 751.352254][ T2846] bridge5: port 1(erspan0) entered disabled state [ 751.360677][ T2846] erspan0: entered allmulticast mode [ 751.399027][ T2846] erspan0: entered promiscuous mode [ 751.482304][ T2860] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 751.508975][ T2860] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 751.565479][ T2860] bond4: (slave vcan0): making interface the new active one [ 751.617346][ T2860] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 752.585780][ T2964] gretap0: entered promiscuous mode [ 752.594195][ T2964] gretap0: left promiscuous mode [ 752.615275][ T63] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.624973][ T63] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.642550][ T63] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 752.668544][ T63] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.090723][ T2994] netlink: 'syz.0.7883': attribute type 1 has an invalid length. [ 753.520495][ T3021] netlink: 'syz.0.7893': attribute type 1 has an invalid length. [ 753.585576][ T3030] macvlan0: entered promiscuous mode [ 753.637892][ T3030] macvlan0: entered allmulticast mode [ 753.803214][ T3042] netlink: 'syz.0.7899': attribute type 1 has an invalid length. [ 753.811620][ T3042] netlink: 'syz.0.7899': attribute type 2 has an invalid length. [ 753.820501][ T3042] netlink: 'syz.0.7899': attribute type 1 has an invalid length. [ 754.049429][ T3058] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 754.097045][ T3058] : entered promiscuous mode [ 754.175514][ T3066] netlink: 'syz.1.7907': attribute type 2 has an invalid length. [ 754.233982][ T3068] netlink: 'syz.3.7908': attribute type 1 has an invalid length. [ 754.497885][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 754.506221][ C0] lec:lec_tx_timeout: lec0 [ 754.511198][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 754.683432][ T3106] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 754.822486][ T3126] pim6reg1: entered promiscuous mode [ 754.838085][ T3126] pim6reg1: entered allmulticast mode [ 755.065299][ T3133] netlink: 'syz.4.7925': attribute type 1 has an invalid length. [ 755.101286][ T3140] netlink: 'syz.1.7927': attribute type 2 has an invalid length. [ 755.121914][ T3140] __nla_validate_parse: 115 callbacks suppressed [ 755.121934][ T3140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7927'. [ 755.246297][ T10] IPVS: starting estimator thread 0... [ 755.368001][ T3147] IPVS: using max 33 ests per chain, 79200 per kthread [ 755.447233][ T3160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7936'. [ 755.581546][ T3176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7939'. [ 755.673163][ T3189] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 755.759358][ T3199] 8021q: adding VLAN 0 to HW filter on device bond7 [ 755.979742][ T3218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7947'. [ 755.981417][ T3211] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 756.027591][ T3215] bond8: (slave gretap2): making interface the new active one [ 756.049819][ T3215] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 759.517943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 759.526158][ C0] lec:lec_tx_timeout: lec0 [ 764.312748][ T128] bridge0 (unregistering): left allmulticast mode [ 764.526790][ T128] bond1 (unregistering): (slave veth3): Releasing active interface [ 764.541169][ T128] bond1 (unregistering): Released all slaves [ 764.559103][ T128] bond2 (unregistering): Released all slaves [ 764.582581][ T128]  (unregistering): Released all slaves [ 764.606490][ T128] bond3 (unregistering): Released all slaves [ 764.626057][ T128] bond0 (unregistering): Released all slaves [ 764.658296][ T128] bond4 (unregistering): (slave veth9): Releasing active interface [ 764.672457][ T128] bond4 (unregistering): Released all slaves [ 764.778871][ T128] : left promiscuous mode [ 764.830079][ T128] tipc: Left network mode [ 765.213699][ T128] hsr_slave_0: left promiscuous mode [ 765.220172][ T128] hsr_slave_1: left promiscuous mode [ 765.791784][ T128] IPVS: stop unused estimator thread 0... [ 766.940003][ T3242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.967734][ T3247] validate_nla: 5 callbacks suppressed [ 766.967752][ T3247] netlink: 'syz.4.7953': attribute type 4 has an invalid length. [ 767.018042][ T3247] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7953'. [ 767.018823][ T3252] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7952'. [ 767.060013][ T3259] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20005 [ 767.085628][ T3264] IPVS: set_ctl: invalid protocol: 7 224.0.0.2:20004 [ 767.105974][ T3252] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7952'. [ 767.348512][ T3280] netlink: 'syz.4.7962': attribute type 1 has an invalid length. [ 767.560158][ T3297] syzkaller0: entered promiscuous mode [ 767.567094][ T3297] syzkaller0: entered allmulticast mode [ 768.340709][ T3347] syzkaller0: entered promiscuous mode [ 768.346835][ T3347] syzkaller0: entered allmulticast mode [ 768.532632][ T3364] netlink: 'syz.3.7981': attribute type 1 has an invalid length. [ 768.560006][ T3364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7981'. [ 768.696208][ T3367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7982'. [ 768.793905][ T3375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7985'. [ 769.012679][ T3384] xt_cgroup: invalid path, errno=-2 [ 769.092054][ T3394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7989'. [ 769.171497][ T3403] netlink: 'syz.2.7991': attribute type 1 has an invalid length. [ 769.248270][ T3405] netlink: 'syz.2.7991': attribute type 29 has an invalid length. [ 769.273149][ T3403] netlink: 'syz.2.7991': attribute type 4 has an invalid length. [ 769.284986][ T3405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7991'. [ 769.324131][ T3403] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7991'. [ 769.497744][ T3412] block nbd0: reconnected socket [ 769.497766][T27413] block nbd0: Receive control failed (result -107) [ 769.833155][ T3437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8002'. [ 769.871241][ T3437] bond4: (slave vcan0): Releasing backup interface [ 769.906673][ T3437] bond4: Destroying bond [ 769.956736][ T3437] bond4 (unregistering): Released all slaves [ 770.417008][ T3467] netlink: 'syz.3.8007': attribute type 61 has an invalid length. [ 770.621292][ T3470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.644942][ T3470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.929900][ T3470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.943090][ T3470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.035218][ T3470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.046254][ T3470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.066642][ T3494] netlink: 'syz.0.8013': attribute type 21 has an invalid length. [ 771.075567][ T3494] IPv6: NLM_F_CREATE should be specified when creating new route [ 771.160677][ T3470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.212260][ T3470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.260433][ T3505] netlink: 'syz.4.8019': attribute type 12 has an invalid length. [ 771.346928][ T3505] bond7: option primary_reselect: invalid value (255) [ 771.378987][ T3505] bond7 (unregistering): Released all slaves [ 771.534338][T14030] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.563247][T14030] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.577263][ T3525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.628597][T14030] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.636913][T14030] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.692101][T14016] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.701040][T14016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.765735][T14016] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.774508][T14016] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.821999][ T3541] nbd: must specify an index to disconnect [ 772.048658][ T3556] __nla_validate_parse: 8 callbacks suppressed [ 772.048677][ T3556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8035'. [ 772.561532][ T3582] netlink: 'syz.2.8042': attribute type 12 has an invalid length. [ 772.751729][ T3597] netlink: 'syz.3.8046': attribute type 1 has an invalid length. [ 772.826289][ T3599] netlink: 'syz.2.8048': attribute type 5 has an invalid length. [ 772.830029][ T3601] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 772.842642][ T3603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8050'. [ 772.842875][ T3596] netlink: 'syz.2.8048': attribute type 5 has an invalid length. [ 772.862464][ T3601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.993067][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8053'. [ 773.004114][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8053'. [ 773.017196][ T3608] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8053'. [ 773.029098][ T3608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8053'. [ 773.053170][ T3608] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8053'. [ 773.246105][ T3628] netlink: 'syz.0.8058': attribute type 1 has an invalid length. [ 773.305759][ T3633] xt_l2tp: missing protocol rule (udp|l2tpip) [ 773.314732][ T3632] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8062'. [ 773.360009][ T3636] netlink: 'syz.4.8061': attribute type 3 has an invalid length. [ 773.368502][ T3636] netlink: 'syz.4.8061': attribute type 1 has an invalid length. [ 773.376639][ T3636] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8061'. [ 773.396118][ T3640] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 773.396907][ T3642] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.8064'. [ 773.416198][ T3642] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 773.526317][ T3645] syzkaller0: entered promiscuous mode [ 773.533723][ T3645] syzkaller0: entered allmulticast mode [ 773.914478][ T3661] dvmrp0: entered allmulticast mode [ 774.206421][ T3691] netlink: 'syz.3.8073': attribute type 1 has an invalid length. [ 774.314528][ T3695] bridge_slave_0: left allmulticast mode [ 774.325771][ T3695] bridge_slave_0: left promiscuous mode [ 774.334174][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.373442][ T3695] bridge_slave_1: left allmulticast mode [ 774.401035][ T3699] xt_recent: Unsupported userspace flags (000000b1) [ 774.408965][T19437] page_pool_release_retry() stalled pool shutdown: id 149, 1 inflight 181 sec [ 774.409585][ T3695] bridge_slave_1: left promiscuous mode [ 774.429200][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.444577][ T3695] bond0: (slave bond_slave_0): Releasing backup interface [ 774.455996][ T3695] bond0: (slave bond_slave_1): Releasing backup interface [ 774.475592][ T3695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 774.550543][ T3657] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 774.579207][ T3657] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 774.673120][ T3657] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 774.688913][ T3657] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 774.734932][ T3719] bridge_slave_1: left allmulticast mode [ 774.775296][ T3719] bridge_slave_1: left promiscuous mode [ 774.828766][ T3719] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.863838][ T3719] bridge_slave_0: left promiscuous mode [ 774.876162][ T3719] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.910977][ T3732] openvswitch: netlink: Flow actions attr not present in new flow. [ 774.933085][ T3738] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 775.028368][ T3657] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 775.059516][ T3657] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 775.259634][ T3657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 775.308134][ T3657] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 776.354067][T14030] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.393549][T19434] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.402687][T14030] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.509051][T19434] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 776.533223][ T3824] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 776.703708][ T3842] SET target dimension over the limit! [ 776.797659][ T3844] netlink: 'syz.2.8101': attribute type 1 has an invalid length. [ 776.950596][ T3855] bond0: (slave rose0): Error: Device can not be enslaved while up [ 777.200459][ T3873] __nla_validate_parse: 18 callbacks suppressed [ 777.200478][ T3873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8109'. [ 777.237977][ T3880] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8108'. [ 777.368267][T19437] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.428528][ T3893] pimreg3: entered allmulticast mode [ 777.470523][ T3881] delete_channel: no stack [ 777.609682][ T3899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8114'. [ 778.226316][ T3936] tipc: Started in network mode [ 778.232943][ T3936] tipc: Node identity a20057428323, cluster identity 4711 [ 778.266590][ T3936] tipc: Enabled bearer , priority 0 [ 778.308278][ T3944] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8125'. [ 778.520169][ T3935] tipc: Disabling bearer [ 778.573382][ T3968] netlink: 'syz.1.8130': attribute type 1 has an invalid length. [ 778.623569][ T3974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8133'. [ 778.682521][ T3968] 8021q: adding VLAN 0 to HW filter on device bond9 [ 778.728521][ T3966] bond9: (slave ip6erspan0): making interface the new active one [ 778.738519][ T3966] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 778.839787][ T3984] bond6: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 778.852797][ T3984] bond6: entered promiscuous mode [ 778.858656][ T3984] bond6: entered allmulticast mode [ 778.865813][ T3984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 779.371433][ T4023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8142'. [ 779.409434][ T4023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8142'. [ 779.516141][ T4023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8142'. [ 779.625234][ T4034] netlink: 'syz.4.8143': attribute type 25 has an invalid length. [ 779.969027][ T4049] tc_dump_action: action bad kind [ 779.994470][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8146'. [ 780.135451][ T4063] xt_hashlimit: size too large, truncated to 1048576 [ 780.225220][ T4073] netlink: 'syz.1.8153': attribute type 1 has an invalid length. [ 780.252454][ T4073] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.8153'. [ 780.408050][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.702994][ T4103] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 780.726817][ T4103] bond10: (slave lo): Enslaving as an active interface with an up link [ 780.736134][ T4103] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 780.898265][ T4108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.059986][ T4138] netlink: 'syz.4.8170': attribute type 16 has an invalid length. [ 781.069569][ T4138] netlink: 'syz.4.8170': attribute type 17 has an invalid length. [ 781.113192][ T4138] bridge5: port 1(erspan0) entered blocking state [ 781.120115][ T4138] bridge5: port 1(erspan0) entered forwarding state [ 781.190987][ T4138] bond0: left promiscuous mode [ 781.195914][ T4138] #ÿ: left promiscuous mode [ 781.201820][ T4138] bond_slave_1: left promiscuous mode [ 781.209800][ T4138] netdevsim netdevsim4 : left promiscuous mode [ 781.216901][ T4138] bond0: left allmulticast mode [ 781.223793][ T4138] #ÿ: left allmulticast mode [ 781.229877][ T4138] bond_slave_1: left allmulticast mode [ 781.235570][ T4138] netdevsim netdevsim4 : left allmulticast mode [ 781.245011][ T4138] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.261398][ T4138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 781.312834][ T4151] x_tables: duplicate entry at hook 3 [ 781.667413][ T4178] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 782.552724][ T4189] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 784.436429][ T4166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 784.670926][ T4200] __nla_validate_parse: 7 callbacks suppressed [ 784.670946][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8185'. [ 784.817922][ T4213] netlink: 277 bytes leftover after parsing attributes in process `syz.2.8188'. [ 785.003849][ T4232] netlink: 'syz.3.8191': attribute type 10 has an invalid length. [ 785.028663][ T4231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8192'. [ 785.089719][ T4232] team0 (unregistering): Port device team_slave_0 removed [ 785.132951][ T4232] team0 (unregistering): Port device team_slave_1 removed [ 785.154074][ T4232] team0 (unregistering): Port device batadv1 removed [ 785.244167][ T4236] veth11: entered allmulticast mode [ 785.573748][ T4266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8201'. [ 785.594825][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8201'. [ 785.662440][ T4268] netlink: 'syz.4.8202': attribute type 10 has an invalid length. [ 785.712465][ T4271] netlink: 'syz.0.8203': attribute type 1 has an invalid length. [ 785.744604][ T4272] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002 [ 785.811100][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8203'. [ 785.828246][ T4271] veth0_virt_wifi: entered promiscuous mode [ 785.933834][ T4294] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 786.043803][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8213'. [ 786.064045][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8213'. [ 786.085085][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8213'. [ 786.126774][ T4317] Bluetooth: MGMT ver 1.23 [ 786.156407][ T4318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8213'. [ 786.232277][ T4321] xt_connbytes: Forcing CT accounting to be enabled [ 786.347123][ T4327] syzkaller0: entered promiscuous mode [ 786.353463][ T4327] syzkaller0: entered allmulticast mode [ 786.435877][ T4332] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 786.456017][ T4332] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 786.721438][ T4349] xt_cgroup: invalid path, errno=-2 [ 787.048610][ T4376] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 787.079001][ T4381] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 787.122395][ T4389] Cannot find add_set index 1 as target [ 787.366804][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.771286][ T4437] netlink: 'syz.1.8247': attribute type 3 has an invalid length. [ 788.487972][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.812920][ T4491] netlink: 'syz.2.8263': attribute type 29 has an invalid length. [ 788.903801][ T4498] tipc: Enabling of bearer rejected, failed to enable media [ 788.969918][ T4495] bond11: option fail_over_mac: invalid value (16) [ 788.979588][ T4495] bond11 (unregistering): Released all slaves [ 789.202462][ T4523] : entered promiscuous mode [ 789.327745][ T4534] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 789.927578][ T4590] __nla_validate_parse: 17 callbacks suppressed [ 789.927601][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8287'. [ 790.020961][ T4596] IPVS: set_ctl: invalid protocol: 27178 0.0.0.0:20002 [ 790.173905][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8292'. [ 790.190760][ T4610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8292'. [ 790.375882][ T4563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8282'. [ 790.639250][ T4629] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 790.646948][ T4627] netlink: 'syz.3.8297': attribute type 3 has an invalid length. [ 790.726171][ T4632] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 790.806888][ T4634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8301'. [ 790.826511][ T4607] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8293'. [ 790.843817][ T4607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.950325][ T4636] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 790.972610][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8303'. [ 790.990005][ T4654] netlink: 'syz.1.8305': attribute type 8 has an invalid length. [ 791.002451][ T4654] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8305'. [ 791.211017][ T4670] openvswitch: netlink: Key type 50 is out of range max 32 [ 791.313387][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8311'. [ 791.372786][ T4680] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 791.532429][ T4688] bond4: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 791.553893][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8315'. [ 791.600610][ T4688] bond4: (slave 26±ÿ): Enslaving as an active interface with an up link [ 791.630784][ T4688] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 791.763086][ T4707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.005000][ T4722] bond11: entered promiscuous mode [ 792.176731][ T4737] x_tables: duplicate underflow at hook 1 [ 792.240983][ T4741] xt_l2tp: missing protocol rule (udp|l2tpip) [ 792.380887][ T4748] tipc: New replicast peer: 255.255.255.255 [ 792.387661][ T4748] tipc: Enabled bearer , priority 10 [ 793.282936][ T4809] syzkaller0: entered promiscuous mode [ 793.300260][ T4809] syzkaller0: entered allmulticast mode [ 793.413672][ T4819] nbd: must specify at least one socket [ 793.420742][ T4819] nbd: must specify an index to disconnect [ 793.508208][ T10] tipc: Node number set to 2832307321 [ 793.539402][ T4821] ip6gre3: entered promiscuous mode [ 805.128515][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 805.448615][ T4830] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 805.599275][ T4845] netlink: 'syz.2.8364': attribute type 1 has an invalid length. [ 805.775395][ T4865] openvswitch: netlink: Duplicate or invalid key (type 0). [ 805.789180][ T4865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.860491][ T4870] netlink: 'syz.2.8370': attribute type 10 has an invalid length. [ 805.876489][ T4870] __nla_validate_parse: 6 callbacks suppressed [ 805.876519][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8370'. [ 805.889837][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8371'. [ 805.941973][ T4874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8372'. [ 806.062746][ T4883] netlink: 'syz.1.8374': attribute type 1 has an invalid length. [ 806.092296][ T4883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8374'. [ 806.112075][ T4883] netlink: 'syz.1.8374': attribute type 1 has an invalid length. [ 806.126738][ T4883] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8374'. [ 806.199169][ T4895] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.8377'. [ 806.261636][ T4834] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 806.273462][ T4900] base_sock_release(ffff88803e2b4ac0) sk=ffff888029de7000 [ 806.274010][ T4834] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 806.290026][ T4834] CPU: 0 UID: 0 PID: 4834 Comm: syz.4.8361 Not tainted syzkaller #0 PREEMPT(full) [ 806.299327][ T4834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 806.309573][ T4834] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 806.315558][ T4834] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 69 b1 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 806.335661][ T4834] RSP: 0018:ffffc9000580f8e8 EFLAGS: 00010207 [ 806.341831][ T4834] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88807bf48000 [ 806.350009][ T4834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880603c3140 [ 806.358742][ T4834] RBP: ffff8880603c3140 R08: ffff88807bf48000 R09: 0000000000000008 [ 806.367337][ T4834] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 806.375693][ T4834] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000b01f3c [ 806.384385][ T4834] FS: 00007f242d1c96c0(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 806.393624][ T4834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.400220][ T4834] CR2: 00007f080c24eddd CR3: 00000000935c4000 CR4: 00000000003526f0 [ 806.408746][ T4834] Call Trace: [ 806.412289][ T4834] [ 806.415227][ T4834] ? __alloc_skb+0x4e5/0x7d0 [ 806.419837][ T4834] ? skb_put+0x11b/0x210 [ 806.424124][ T4834] rose_write_internal+0x1256/0x1b60 [ 806.430039][ T4834] ? lockdep_hardirqs_on+0x7a/0x110 [ 806.435534][ T4834] ? __pfx_rose_write_internal+0x10/0x10 [ 806.441635][ T4834] ? timer_delete+0x245/0x340 [ 806.446524][ T4834] rose_release+0x25b/0x510 [ 806.451124][ T4834] sock_close+0xc3/0x240 [ 806.455365][ T4834] ? __pfx_sock_close+0x10/0x10 [ 806.460744][ T4834] __fput+0x44f/0xa70 [ 806.464787][ T4834] task_work_run+0x1d9/0x270 [ 806.469406][ T4834] ? __pfx_task_work_run+0x10/0x10 [ 806.474632][ T4834] ? task_work_add+0x395/0x440 [ 806.479405][ T4834] ? __pfx_task_work_add+0x10/0x10 [ 806.484537][ T4834] get_signal+0x11eb/0x1330 [ 806.489232][ T4834] arch_do_signal_or_restart+0xbc/0x830 [ 806.494813][ T4834] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 806.500980][ T4834] exit_to_user_mode_loop+0x86/0x480 [ 806.506355][ T4834] ? rcu_is_watching+0x15/0xb0 [ 806.511172][ T4834] do_syscall_64+0x32d/0xf80 [ 806.515757][ T4834] ? trace_irq_disable+0x3b/0x150 [ 806.520951][ T4834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.527399][ T4834] ? clear_bhb_loop+0x40/0x90 [ 806.532353][ T4834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.538517][ T4834] RIP: 0033:0x7f242c39c799 [ 806.543123][ T4834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.563256][ T4834] RSP: 002b:00007f242d1c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 806.572029][ T4834] RAX: 0000000000000000 RBX: 00007f242c616090 RCX: 00007f242c39c799 [ 806.580633][ T4834] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d [ 806.588859][ T4834] RBP: 00007f242c432c99 R08: 0000000000000000 R09: 0000000000000000 [ 806.597013][ T4834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.605252][ T4834] R13: 00007f242c616128 R14: 00007f242c616090 R15: 00007ffd0006f6d8 [ 806.613238][ T4834] [ 806.616266][ T4834] Modules linked in: [ 806.621305][ T4834] ---[ end trace 0000000000000000 ]--- [ 806.648199][ T4834] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 806.654574][ T4834] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 69 b1 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 806.694654][ T4834] RSP: 0018:ffffc9000580f8e8 EFLAGS: 00010207 [ 806.701557][ T4834] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88807bf48000 [ 806.712179][ T4834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880603c3140 [ 806.720790][ T4834] RBP: ffff8880603c3140 R08: ffff88807bf48000 R09: 0000000000000008 [ 806.730790][ T4834] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 806.739771][ T4834] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000b01f3c [ 806.748506][ T4834] FS: 00007f242d1c96c0(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 806.758059][ T4834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 806.764848][ T4834] CR2: 00007f080c3e7158 CR3: 00000000935c4000 CR4: 00000000003526f0 [ 806.773361][ T4834] Kernel panic - not syncing: Fatal exception [ 806.779825][ T4834] Kernel Offset: disabled [ 806.784498][ T4834] Rebooting in 86400 seconds..