last executing test programs: 3.69011182s ago: executing program 2 (id=1523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x970}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x80}, @IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x970}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x80}, @IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x44}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x101, @loopback, 0xaa8}}, 0x24) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macvlan1\x00', 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.59584147s ago: executing program 3 (id=1525): r0 = socket$inet6(0xa, 0x2, 0x80000004) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x31, 0x4, 0x0, 0x1, 0xc4, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}, @lsrr={0x83, 0x1f, 0x48, [@multicast2, @rand_addr=0x64010101, @local, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010102, @broadcast]}, @timestamp_prespec={0x44, 0x4c, 0xa6, 0x3, 0x0, [{@private=0xa010101, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfffffffd}, {@loopback, 0x8}, {@local, 0x68}, {@multicast1, 0x10}, {@broadcast, 0x5}, {@remote, 0x7}, {@multicast2, 0x80}, {@remote, 0x3}]}, @generic={0x94, 0xa, "90922bd0eca3bc68"}, @rr={0x7, 0x1f, 0xd4, [@empty, @multicast1, @loopback, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0x8, 0x95, 0x0, 0x6, [0x3]}, @generic={0x86, 0xa, "10742b376316be41"}]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x22c, 0x12, 0x200, 0x70bd28, 0x25dfdbfc, {0x8, 0xff, 0x7d, 0x8, {0x4e20, 0x4e24, [0x9, 0x40, 0x7501, 0x7], [0x3, 0x7], r2, [0xffffffc0, 0x9]}, 0x401, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "87f84bca485bc7d8f603619b049317a71fd871d4a6b79769da9e3fd553002084e15f2afe915afc168c1f9eaa259e492ab1756bbe5d6a454b7204f52d76525b0487348ee47661c979f70d51bb76f1b69be154337d664f6fe26cfa18b714cc1b6b49cfc7b97dce5d8186a11b0295ed646a04f0e6df85c4f82a1dc66286f73f07a71761ca048988f643"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "8b53c81cf9b82ce0e25e2323441d294699adfef97937587dccbb84af227c30237f939630ecf02ebef00ef5a48f133e3b93f78ecf58cff279f54d513770f9019546e0881eab3daa8f61bc7da4e16aced0ae192d1c3f8444a1edd390bb5717636c1789e77d5993da4100"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "6222003b8cf4405c171630207573fa8056b86062ae787a64df08cd23a04ee6bbc377ed83335cfb293ed66a9ceb2e22852ca1c3d99648860b90134d9cc9ff462e5edd9d33074d81a173d090f38f347664e47b7a98e797abc262adf0a5ba696ab7ccca4a75be33341f6437c16258b6e3ba17037fb1f516d3a9054146e18d6a59d62d70253d37b690fdce6d08ec88b106b49f92b73cc616999c7ca4ffa1488125e12cb38ac51ada5b00883a4cf4a8d7191d08bd274e3bfce8d912d41105894f365d0ac4e0392e44336354880b7abb737cb122d4aec0c1ad6a6f182d7faa90"}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @local}}}}) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2=0xe0000001}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000140)="970800000000000000008cc5fffff982", 0x10}, {&(0x7f0000000000)="74145fdae5ca0070777c079c", 0xc}], 0x2, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010104}}}], 0x20}, 0x4044040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'pim6reg0\x00', @multicast}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x59f8, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0x10, 0x3, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000100)={0x5, 0xb}) sendto$inet6(r6, &(0x7f0000000380)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37abcda1a297e0099c5ac0020c5b068030046d323456536016466fcb78dcaaf6c3efed495a46215be0000760636c035b1000000000000ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fb6e9aa241731ae9e0b39072", 0x91, 0x8000, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x88, 0x2b, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) sendto$inet6(r0, &(0x7f00000002c0)="8d", 0x1, 0x80001, 0x0, 0x0) 3.477441366s ago: executing program 1 (id=1527): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r3, 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000380)={0x0, 0x5, 0x9, 0x1ff}, 0x10) (async, rerun: 32) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x6, 0x100}, 0xc) (async, rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r6) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) (async, rerun: 64) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r5, 0x2, 0x8, 0x9ef, 0x69a, 0x5}, 0x14) 3.138041694s ago: executing program 2 (id=1530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="600008000700000000031400000045f0801600000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00822100a5fb"], 0xfdef) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'vlan0\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="600008000700000000031400000045f0801600000000002f907800000000ffffffffa20022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="00822100a5fb"], 0xfdef) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x2}, 0x28) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) 2.936226501s ago: executing program 1 (id=1531): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x5c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa0304907812f8183f2500000000000000000100007f0000017f00000100186371ae9b1c037847d644d83858ab28ccd578e7efaff1"], 0x0) 2.638754117s ago: executing program 4 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0xc4, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x1c}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID]}]}]}, 0xc4}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe2cc80907c40414}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x4001) 2.561851576s ago: executing program 3 (id=1536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c000000000006a0780a210106ac1414aa890fe9e0000002ac1414bbe0000002070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c20800090780000"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)={0x4a4, r3, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5c2}, @NL80211_ATTR_FRAME={0x44b, 0x33, @probe_response={{{}, {0x6}, @broadcast, @broadcast, @from_mac=@broadcast, {0x9, 0x55}}, 0x79, @random=0x4, 0x2002, @void, @val={0x1, 0x6, [{0x44}, {0x60}, {0x36, 0x1}, {0x16}, {0x3c}, {0x36}]}, @void, @void, @val={0x6, 0x2, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4}}, [{0xdd, 0x7f, "e5f0a3a38dff92b73c5a131e608b031e6e572fe9f24088a09edba7dd4bb35bf7a9bdeca7a5c886c6111e65e25aa431944fd029d801118e386664e0d8f738a21ec368bb4b4793a05130e23b3e5856e590f459882952df2a8ca3925e85ac578438902c6e8cb11db9efcb54933377001c6db9f9cd59d9855b5ab20522005714f2"}, {0xdd, 0xd4, "768ed38f0cdacdab6f1fb26e19466b68cdf45ab3bb05e6a718c03b370ef61a1948a82998442595a2f5492f8ef2b5d3de998ce2de95c6f24e9fa5fffd3f608219aeab24eb374a896313d91c64a0fc22b457b06f1745ec3814547c5d514a4f1ae39a90515644ecaea24ea86b4219024a30b4718cfd0eed1bcaa5f978574faf87fcff6945a43f6ca8be01651abde444e27888a92c293facd892c781bb9acecdf4964f45a4e8bf04a9f97b531cfaad090fac51580ab35df91bd13d3134952c7d436de020bfcff6bc4d31f65f2588b433e1c8a24b1cec"}, {0xdd, 0x1f, "a59cdf67f1794acc79b92634832d251077985b5989a4992e8482359b93a3ab"}, {0xdd, 0x5b, "fe85c5d72e0cd4f201e456b0b3963ddd26bf3cab347227fd9d4657ece43d552c297f39ab919fa085a96c120f14a0d7c68fd69552e0b7da5c1d3025ed395e428e9fefcd7267c7372e8ab4d48d1bb3267c704f751a084f833024eaf0"}, {0xdd, 0xdc, "6a42a929870a2e6b2533980b18bffe70d63eee2553bf1bf13973c7172f494867d14bf8ff0cb9df25334b5d55162d4808ed2a653bbd6c905b0a5ad4049c4ddf5317b88e9c5357952f6263d930ec5d3ffa033c28209689a9ecd76adcdfc3503e824888584f684651ac539e2ea4b11a4bb002d926cc3ec143effae3636d18d911565de9b724e0839924846b304aaea3e0a1d1c4fd6a6a10e7a2fb62ac66bd24cb01b754e30eb5804d561a2c27fd2259b5ca8806e6a3b65a26ff36adf412738f17177616d55f625a6f9d2d734430e6a81cc77994848064caa0ea28cad889"}, {0xdd, 0xd5, "a7fe5c73e75acde20d25660d3bea15b88df27506a00c3b2c609590070f0f2f4020d626d48541f1f7e7c61204b3f7ca52612c8af41743ce7596391a8e4cc61ea6a589967926344ada343ae29c605c54dfeb5c1b7a87f1c28cbdbec02e3beadc2096a79229627b1eeea909b57fc03be6d64267f0d5f33d5079498713d3f176d996534e809a796ae5a48d8767bc3323afffe0d0f1f39a686b908261c42a2cb39e351555fc527d1ced493fef642908ac8581cf57c3047508246511ad2e985a8a5b7c7368537f973937057ef240069425c2cdc57c0b70de"}, {0xdd, 0x7a, "faa87236db5a1c758608ba3a7bcf349e93e0576dc30930dc480ed63b5d13963b373f798f30d42d66c26458fb76f9af9619a44efe5cb6bcaf2a3f5ab6fc8cf4fb678f5a02a1de9538dc18f0fbcc773b48005396755ec0c2c57efefde6103076631fe463585b9fdc08a78d550a2ec3d46e161ce287a05cdbbe7e6c"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x148}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x49}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x4a4}, 0x1, 0x0, 0x0, 0x40800}, 0x11) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket(0x10, 0x803, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003e"], 0x17) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025647a31010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x0) 2.388810739s ago: executing program 1 (id=1537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)=""/218, 0xda}, {&(0x7f0000000400)=""/168, 0xa8}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/219, 0xdb}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/70, 0x46}], 0x6}, 0x40000101) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x400c4c5}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000080)=0x2, 0x4) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1440, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r8, 0x400454ce, 0xa) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r1) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe8, r10, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "c83903b64aac31a9ed5201fdcd8273f40f6e40c0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x49, 0x3, "019841576fbd06af630c868dfd8c85b94cb5f56cc6ed6580410f764893e964283943300d9df381f9b216103a3a356ebd0f9f01764d3889ef91caad14c09b5c8eeb6ea4af34"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "3c55317657340e69108f209943646e51cf3eec618b3056709dffe730"}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20008890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.282688592s ago: executing program 2 (id=1538): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x23010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_WEIGHT={0x8, 0xf, 0x8}]}, 0x3c}}, 0xc404) socket(0xa, 0x4, 0x9) 2.197837141s ago: executing program 4 (id=1539): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000300)='ns/ipc\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff036bd9a3d0392eb005ead97f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86fb4e44162ce027423efa0cf942", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000000)={r11, 0xb5}, 0x8) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$PPPIOCATTCHAN(r12, 0x40047438, &(0x7f00000001c0)) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2518000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040002050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.936153029s ago: executing program 4 (id=1541): socket$rxrpc(0x21, 0x2, 0xa) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x110, 0x7, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000300)=0x2, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [0xff, 0x62dbc8e9243d710, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xff], 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x3a, 0x1, 0x0, 0xbd}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x20, "9258b98e7064aaedc3fe1dc58f70350b5c6c6fca3c737e8aa9d6c60d8d62"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2e8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) socket$inet(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) 1.729568446s ago: executing program 3 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x2b}, 0x94) 1.722517221s ago: executing program 0 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a0000000008000540000000020900020073797a31000000013100e9d2aa71888e9f5cd6887e37a20008000a40fffffffc3c00a7af3bdcbeea6104e7927ae9a0b900000c0a010100000000000000000a0000070900020073797a310000000009008b0073797a3100000000100003800c0000"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendto(r0, &(0x7f0000000000)="f41474c0d333a21d3e16f9cb252f9d1ae0d3c0564f3f02f7d238bb96a00848b963dc3d5d013c301f9f1036418389cbdfbdb0727b21fc7fd0a61a127b575ca12756923cbf6db825a78e70fe78584743052c85", 0x52, 0x20000891, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x3, @private0, 0x80000000}, 0x80) close(r0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) 1.658580124s ago: executing program 2 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000413b66953170a44981e4e62eeca1ee00000000000080000000000000", @ANYBLOB="c9371476fa02b459c46d37e692cadc1e55ae11c1c464c36c05667b4612c7c0175e345614a183b423a4957fc9a77a9616e615e27512debdfd9280243adf36135f59da", @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYBLOB="df7b70e3ab707b937e1e2e6b504cb4e6e31330d03e860b9f0fc1dbcec4fad0213d3d06902a0bb24506a9c920abb8a8f2bdfddc1aa48c777e8516a55eac34652178c651953adeb58f5580b8913126e9a9d58b2f34c474450f91238d36f46a46ddfcf90ecdb93e3347d10178b0d301994941af30832737ceae7931372d2cab86dd", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00NI\x00\x00\x00\x00\x00\x007\x00\x00\x00\x00\x00#i\x00\x00\x00'], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x34, 0x0, 0x0, 0x80000}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x34, 0x0, 0x0, 0x80000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) close(r2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001ec0)={&(0x7f0000000d00)="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", &(0x7f0000001d00)=""/141, &(0x7f00000000c0)="8699b2672fca4dff29fce830c5d109650e0fbf832551a2b4e0779ee951062a10ce380e770f09e9e161999d8bbc2e878a1e51734d24fdbad969355955d5f8963b1525c178054e949776ea22cd3b1464f48153aa0e71fabc64c0a6493d8095f2ecb93ee361a1fd8bce0e3354e117131d9ec656f8ff85", &(0x7f0000000240)="a54e3aa40913203edc536bbf18bd156c2e3fcfc8c47c8336a1b2186b83d24e8d6b02f13ceb", 0x914a, r4, 0x4}, 0x38) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f0000000080)={0x1, 0x100000000, 0xa, 0xbede, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000c9be77100c42", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000c9be77100c42", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="17000000000000000000000000000000611800000000000018110000", @ANYRES32=r9, @ANYBLOB="00000000000000001508020000000000180000000d0000000000000009000000bfa200000000000007020000f8ffffff85000000010000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000280)={0x0, 0x4, 0x100000000, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000280)={0x0, 0x4, 0x100000000, 0x1}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r11, @ANYBLOB="06006178"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x800000000080002, 0x6) (async) r12 = socket(0x10, 0x800000000080002, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000940)=r3, 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000940)=r3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r12, 0x89f8, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000880)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x881, 0x1, {{0xb, 0x4, 0x1, 0x6, 0x2c, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @loopback, {[@lsrr={0x83, 0x17, 0x3f, [@loopback, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x4001012, r6, 0x965ab000) 1.601766641s ago: executing program 4 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd28, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f000000af40)={@mcast1, 0x1f, r5}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x81, 0x9, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x20, 0x6116, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f0000000000)={0x1d, r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r14, @ANYBLOB="0000020000004fdec86069"], 0x28}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @dev}, &(0x7f0000000240)=0xc) r15 = socket$kcm(0x11, 0x3, 0x0) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r15, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r15, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r17, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)={0xf0, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ef48e36991dd"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4c}, @NL80211_ATTR_PMKID={0x14, 0x55, "e9d64d7e34ae15916024a556700ad9c5"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 1.557732169s ago: executing program 1 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 1.375615576s ago: executing program 0 (id=1547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)=@newqdisc={0x468, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x0, 0xfff1}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x718f74469d39a148}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x1, 0x0, 0xf8, 0x7, 0x5, 0x9, 0x8, 0x2, 0xdda, 0x9, 0x2, 0x2, 0x2, 0x716f2847, 0x7, 0x7f, 0x401, 0x3, 0x7, 0x7, 0xd59b, 0xfffffff8, 0x0, 0x8001, 0x7f, 0x5, 0x3, 0x3, 0x101, 0x2, 0x4, 0x0, 0x401, 0x70, 0xff, 0x0, 0x10d, 0x5, 0x1, 0x4f0, 0x6, 0x6f, 0x8, 0xfffffede, 0x3, 0xab, 0x80000000, 0x0, 0x2, 0x6, 0xdd, 0x7f, 0x8a3, 0x7c93, 0x503d, 0x3, 0x5, 0x4, 0x446432a7, 0x6, 0xfffffb86, 0x1, 0x2, 0x2c39, 0x3ff, 0xfffff8a3, 0x80000001, 0xfffff838, 0x5, 0x6, 0x5, 0xd, 0x1, 0x81, 0x80000000, 0x2, 0x9, 0x9, 0x0, 0x3, 0x9, 0x2, 0x8, 0x10000, 0x3, 0x0, 0x4, 0x40, 0x6, 0xc, 0x7, 0x6, 0xbc3, 0x1, 0x8, 0x7, 0x2, 0x7b37, 0x3, 0xfffffff7, 0x7, 0x4, 0xa0, 0x3, 0x58, 0xffffffff, 0x5, 0xffffffc0, 0x6, 0xff, 0xfd9, 0x3, 0x101, 0x4, 0xfffffffc, 0xf, 0xba, 0x4, 0x10, 0x0, 0x6, 0x1, 0x7fffffff, 0xfffffffe, 0x8, 0xa, 0x80000000, 0x7ff, 0x6, 0xca, 0xfffffffc, 0xfffffffc, 0x24e8, 0xb, 0x0, 0x80000001, 0x80000000, 0x3, 0x10000, 0x8, 0xfffffff7, 0x0, 0x6, 0x949, 0x7, 0x1, 0x7, 0x5, 0x40, 0x10001, 0x7fff, 0x1, 0x4, 0x8, 0x0, 0x2, 0xff, 0x9, 0x5b1, 0x5d19, 0x81, 0xffff, 0x97c2, 0x2, 0x751a, 0x7, 0x3, 0x3, 0x1, 0x4, 0x9, 0x4, 0x5, 0x2, 0x3, 0x6, 0x4, 0x1, 0x9b9, 0x9, 0x4, 0x7, 0x1ff, 0x0, 0x100, 0x10, 0xab, 0x3, 0x1000, 0xffffffff, 0x4, 0x1, 0x200, 0xfffffff9, 0x3, 0x8, 0x5, 0x1, 0x10, 0x3, 0x427a, 0x81, 0x2e78c44d, 0x5, 0x4, 0x2260, 0x4, 0x2, 0x40, 0x5, 0x80000001, 0x8001, 0xe, 0x5, 0x0, 0x4, 0x5, 0x9, 0xfffffffc, 0x1, 0x7, 0x3, 0x5, 0x8, 0x3832, 0x8, 0x21f3, 0x7, 0x7, 0x0, 0xe, 0x4, 0x8000000, 0x6, 0x2, 0xc, 0xffffffff, 0xb3, 0x101, 0x9, 0x8, 0x7, 0xffffffff, 0x1, 0x104, 0x7, 0x2a06, 0x10000, 0x9, 0xb, 0x4, 0x7f, 0xfffffffe, 0x101, 0x10]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfa, 0x1, 0xac, 0xd, 0x3, 0x7f}, {0xa, 0x1, 0x7, 0x9, 0x4, 0xff}, 0x5, 0x4, 0x15b7}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x22d26, 0x1cdb5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x22d26, 0x1cdb5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) 1.294268826s ago: executing program 3 (id=1548): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x28) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x56}, &(0x7f00000003c0)=0x90) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @empty}, 0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1000, 0x4}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x50}}, 0x4004081) 1.169735037s ago: executing program 2 (id=1549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000580)={@ethernet={0x6, @local}, {&(0x7f0000000380)=""/217, 0xd9}, &(0x7f0000000480), 0x80}, 0xa0) connect$can_j1939(r3, &(0x7f00000001c0)={0x1d, r4, 0x0, {0x1, 0xff, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0xe}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040080}, 0x20000050) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f00000004c0)) r6 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x11, 0x484, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x3809a1c4b76b3c0}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1e3124f9c08aaf448bf153c7c57ab697"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "878c60d70aca0197f081cd989b68adaa"}, @NL80211_ATTR_PMK={0x14, 0xfe, "157d43c2e9ef388b7b924950d359c5a0"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='\x00', 0x80100, &(0x7f0000000040)={@_ha_fsid={[0x0, 0xff]}, {0x8, 0x9, 0x2, 0x2}}, 0xac, &(0x7f0000000100), &(0x7f0000000140)=0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_udp_int(r10, 0x11, 0x66, &(0x7f00000001c0)=0x428, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffd8c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.065273129s ago: executing program 1 (id=1550): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB="d0db135458695a"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB="d0db135458695a"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000000000006110a0000000000063013800000000009500090000000000d1a115e5429a6dfbb925ef66ce735cc5055bc8a41a9fef855d2f211e2f88ee0992534dd820c6b8a55fa6296a8703e21644821641e3a76b6dd6bfacc84f4fb4defc0c4f5ab7e45f639b34127995d5dafb5120c2f3dda5c165514610b4abfe352da72e3a7b9279ce2bfe84d61a188bba40760f3f8770522e582dc0515115fd4b55962e67fcd7fc16555cec18e656eb48eaab85755edc2d4bd7a55465"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000000000006110a0000000000063013800000000009500090000000000d1a115e5429a6dfbb925ef66ce735cc5055bc8a41a9fef855d2f211e2f88ee0992534dd820c6b8a55fa6296a8703e21644821641e3a76b6dd6bfacc84f4fb4defc0c4f5ab7e45f639b34127995d5dafb5120c2f3dda5c165514610b4abfe352da72e3a7b9279ce2bfe84d61a188bba40760f3f8770522e582dc0515115fd4b55962e67fcd7fc16555cec18e656eb48eaab85755edc2d4bd7a55465"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) sendto$inet6(r1, 0x0, 0xa, 0x40054, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x18, 0x8}, 0x20) r3 = socket$rxrpc(0x21, 0x2, 0xa) socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000001824", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x7}, 0x240088d4) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4080000}, 0x45) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4080000}, 0x45) bind$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xb}}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES64=r1, @ANYRES64=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000101000000000000000fcffffff00000000000000"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES64=r1, @ANYRES64=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000101000000000000000fcffffff00000000000000"], 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r7, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x800}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x4}]}, 0x54}}, 0x200440c2) socket$igmp6(0xa, 0x3, 0x2) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r8, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x0}, 0x20) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r10, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r10, &(0x7f0000000340)="07000000010000", 0x7) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, &(0x7f0000000340)={'geneve0\x00', {0x2, 0x0, @empty}}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x40000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080)='/\x00', 0x400401, &(0x7f0000000100)={@align=0xfffffffffffffffe, {0x7, 0x2800, 0xffff}}, 0x7fff, &(0x7f0000000140), &(0x7f0000000180)=0xfffffff9}) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'vxcan1\x00', 0x1000}) 1.05180066s ago: executing program 0 (id=1551): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000040)={0x6, 0xd1}) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x61b, @private2, 0x800}}, 0x24) 922.002256ms ago: executing program 3 (id=1552): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @loopback, 0xff000000, 0xff, 'vlan0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x2f, 0x2, 0xb}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "18d4de7eb006f52902428be6e538a57d8bc2e9b7f753bdf0458cccc2787a"}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x2, 0x82b5, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r2 = openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x0, 0x93, 0xce, &(0x7f00000007c0)="4ba18e3604e97bbf61461a4dddc24c3bc3eee0cfb6a2d50c77139c7570eef6c1c52db677a330c11175908baef25d2569fcec7f7c3079011011ff9e9251d17d52db4b7c55a0141e23672056fba1f570089a4f77a512a908ffb91e7ead1269e79c904afe05e0bda51f7a0965458d628186f2ea907bf6983a5d0f3e3128bc3cbbca859463e0dc87c8c54dd91eebb74f320d2ddd72", &(0x7f0000000880)=""/206, 0x8c9a, 0x0, 0x2b, 0x70, &(0x7f0000000980)="816eeb144631ce935e67b8d0d2a5ae9bde5a720b616170a4343bfc250fe2eb7fd52926e472fa94dd643de8", &(0x7f00000009c0)="4027a2973d34f3ee257b353351f3e8c0360e6186863ceb95d1c44344e68c7cf9f3db290b978b00f49d96f0a0c9b16cc869cc89b1cfa5d4cc49169f3c43dfb3a063734967aa576e602f019a11dcd2bc93b3342619c17aa0fda42c2627a9b493e86cf2765896cfa6958fa8eb22a88600b9", 0x1, 0x0, 0x2b29c5a7}, 0x50) sendfile(r4, r0, &(0x7f0000000040)=0x9, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pread64(r0, &(0x7f0000000240)=""/215, 0xd7, 0xa7) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) 731.067793ms ago: executing program 0 (id=1553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000070000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000440004800c000180080001006c6f6700340001800b0001007470726f787900002400028008000140000000000800014000000000080003"], 0xf8}}, 0x40014) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x1, 0x5, 0x4, 0x2, 0x16, 0x4}}]}}]}, 0x150}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4090) socket(0x400000000010, 0x3, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ffff", 0x5aa}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 714.199337ms ago: executing program 4 (id=1554): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 286.802385ms ago: executing program 0 (id=1555): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000007000000080000000800000000000000", @ANYRES32, @ANYBLOB="00f1000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 281.007559ms ago: executing program 3 (id=1556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff54, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x20080000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100001042abd8d000000000000000000", @ANYRES32=0x0, @ANYBLOB="cc81000000000000300012800b000100697036746e6c00002000028006000f000000000014000200fe8000000000000000000000000000171400030068"], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x8) socket$nl_generic(0x11, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4000001) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 216.778071ms ago: executing program 2 (id=1557): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2, 0x800}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @mcast2, 0x800}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) (async) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x4}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 170.012346ms ago: executing program 1 (id=1558): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) readv(r3, &(0x7f0000000280), 0x37) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="5a656b23a1e8ee3cd25097a2f3ab78abf3321ee88519201d8669622d47cac707135deae147ffe1eeee20f09b273d31e5c3bf413bedd0eb220163d4414211cb649a9006ccd7d8c6d0a5832f8747f965a9fd8a57c5da6ae50ac791928658dc20a5395405b7ff13ca68b6fa8d9a82f735919d96e96d53089d1552845c83d9cdb65a437f", 0x82}, 0x1, 0x0, 0x0, 0x20004090}, 0x20008c1) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, 0x0, &(0x7f0000000580)) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x5, &(0x7f0000000440)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x33, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x1, 0x3, 0x6}], 0x10, 0x3ff}, 0x94) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000200)={r5}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x70, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x48841}, 0x4010) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) 65.145297ms ago: executing program 4 (id=1559): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000140)={r1, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x6, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000040)='syzkaller\x00', 0x366, 0xde, &(0x7f0000000700)=""/222, 0x41000, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0xb, 0x98a3, 0xfffffffa}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000880)=[r2], &(0x7f00000008c0)=[{0x2, 0x5, 0x2, 0xb}, {0x2, 0x5, 0x10, 0x3}, {0x0, 0x3, 0x7}, {0x5, 0x2, 0x2, 0x5}, {0x4, 0x4, 0x5}, {0x3, 0x4, 0x7, 0x9}, {0x1, 0x3, 0x8, 0x2}], 0x10, 0x1}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={r5, r6, 0x18, 0x0, @val=@tracing={r7, 0x80000000}}, 0x20) 0s ago: executing program 0 (id=1560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x4}, @void}}]}]}], {0x14}}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}}, 0x0) kernel console output (not intermixed with test programs): 2: unexpected cc 0x0c38 length: 249 > 2 [ 82.334819][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.348463][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.354102][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.385472][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.197235][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.198304][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.198761][ T5615] bridge_slave_0: entered allmulticast mode [ 84.200959][ T5615] bridge_slave_0: entered promiscuous mode [ 84.277804][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.277914][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.278050][ T5615] bridge_slave_1: entered allmulticast mode [ 84.280092][ T5615] bridge_slave_1: entered promiscuous mode [ 84.313229][ T5626] Bluetooth: hci0: command tx timeout [ 84.392649][ T5626] Bluetooth: hci2: command tx timeout [ 84.458150][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.473049][ T5626] Bluetooth: hci3: command tx timeout [ 84.488540][ T5626] Bluetooth: hci4: command tx timeout [ 84.488559][ T52] Bluetooth: hci1: command tx timeout [ 84.537034][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.573841][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.574022][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.574177][ T5622] bridge_slave_0: entered allmulticast mode [ 84.575593][ T5622] bridge_slave_0: entered promiscuous mode [ 84.581987][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.582191][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.583370][ T5622] bridge_slave_1: entered allmulticast mode [ 84.587382][ T5622] bridge_slave_1: entered promiscuous mode [ 84.630648][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.630864][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.631212][ T5620] bridge_slave_0: entered allmulticast mode [ 84.637953][ T5620] bridge_slave_0: entered promiscuous mode [ 84.650151][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.650413][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.650755][ T5619] bridge_slave_0: entered allmulticast mode [ 84.660260][ T5619] bridge_slave_0: entered promiscuous mode [ 84.711071][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.711307][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.711765][ T5620] bridge_slave_1: entered allmulticast mode [ 84.718667][ T5620] bridge_slave_1: entered promiscuous mode [ 84.726939][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.727158][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.729645][ T5619] bridge_slave_1: entered allmulticast mode [ 84.737394][ T5619] bridge_slave_1: entered promiscuous mode [ 84.789856][ T5615] team0: Port device team_slave_0 added [ 84.834225][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.836195][ T5615] team0: Port device team_slave_1 added [ 84.862827][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.884298][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.914334][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.917060][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.917490][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.917630][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.917809][ T5621] bridge_slave_0: entered allmulticast mode [ 84.919380][ T5621] bridge_slave_0: entered promiscuous mode [ 84.971715][ T5622] team0: Port device team_slave_0 added [ 84.990087][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.010242][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.010319][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.010407][ T5621] bridge_slave_1: entered allmulticast mode [ 85.012108][ T5621] bridge_slave_1: entered promiscuous mode [ 85.050145][ T5622] team0: Port device team_slave_1 added [ 85.052058][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.052071][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.052098][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.138785][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.138806][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.138830][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.199645][ T5619] team0: Port device team_slave_0 added [ 85.203470][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.225097][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.225112][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.225132][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.227764][ T5620] team0: Port device team_slave_0 added [ 85.228402][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.228415][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.228442][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.231085][ T5619] team0: Port device team_slave_1 added [ 85.239668][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.257932][ T5620] team0: Port device team_slave_1 added [ 85.389805][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.389825][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.389858][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.468393][ T5615] hsr_slave_0: entered promiscuous mode [ 85.469198][ T5615] hsr_slave_1: entered promiscuous mode [ 85.470771][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.470784][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.470808][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.472442][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.472455][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.475294][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.488436][ T5621] team0: Port device team_slave_0 added [ 85.579396][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.579415][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.579443][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.626939][ T5621] team0: Port device team_slave_1 added [ 85.688316][ T5622] hsr_slave_0: entered promiscuous mode [ 85.689187][ T5622] hsr_slave_1: entered promiscuous mode [ 85.690018][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 85.690118][ T5622] Cannot create hsr debugfs directory [ 85.767807][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.767830][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.767853][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.812439][ T5620] hsr_slave_0: entered promiscuous mode [ 85.819695][ T5620] hsr_slave_1: entered promiscuous mode [ 85.828742][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 85.828772][ T5620] Cannot create hsr debugfs directory [ 85.861247][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.861281][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.861310][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.884801][ T5619] hsr_slave_0: entered promiscuous mode [ 85.888098][ T5619] hsr_slave_1: entered promiscuous mode [ 85.890766][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 85.890828][ T5619] Cannot create hsr debugfs directory [ 86.139278][ T5621] hsr_slave_0: entered promiscuous mode [ 86.140051][ T5621] hsr_slave_1: entered promiscuous mode [ 86.140579][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 86.140599][ T5621] Cannot create hsr debugfs directory [ 86.392857][ T5626] Bluetooth: hci0: command tx timeout [ 86.473094][ T5626] Bluetooth: hci2: command tx timeout [ 86.512944][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.519825][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.521351][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.546929][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.559964][ T5626] Bluetooth: hci4: command tx timeout [ 86.560002][ T5626] Bluetooth: hci3: command tx timeout [ 86.566393][ T52] Bluetooth: hci1: command tx timeout [ 86.591684][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.601611][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.628307][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.631756][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.700745][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.712161][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.716433][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.729859][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.745129][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.748824][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.751930][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.766237][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.857424][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.874946][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.890954][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.905066][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.906173][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.912735][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.918235][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.943670][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.132219][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.145920][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.164861][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.176314][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.209050][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.223846][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.225327][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.230069][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.259935][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.408801][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.440998][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.441128][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.442359][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.459972][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.481318][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.491921][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.511334][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.521531][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.530943][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.531017][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.551168][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.561410][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.581920][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.669357][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.687041][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.715551][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.715632][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.761519][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.761596][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.781290][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.841971][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.842048][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.860247][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.860321][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.883771][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.968380][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.010934][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.011027][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.045679][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.045784][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.119576][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.275747][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.342195][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.342306][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.421855][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.421968][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.477316][ T52] Bluetooth: hci0: command tx timeout [ 88.564113][ T52] Bluetooth: hci2: command tx timeout [ 88.632953][ T52] Bluetooth: hci1: command tx timeout [ 88.632990][ T52] Bluetooth: hci3: command tx timeout [ 88.633014][ T52] Bluetooth: hci4: command tx timeout [ 89.112108][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.351605][ T5615] veth0_vlan: entered promiscuous mode [ 89.392972][ T5615] veth1_vlan: entered promiscuous mode [ 89.497704][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.510479][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.571501][ T5615] veth0_macvtap: entered promiscuous mode [ 89.617584][ T5615] veth1_macvtap: entered promiscuous mode [ 89.694214][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.720528][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.760814][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.806366][ T5622] veth0_vlan: entered promiscuous mode [ 89.880535][ T5622] veth1_vlan: entered promiscuous mode [ 89.966533][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.995388][ T5619] veth0_vlan: entered promiscuous mode [ 90.044431][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.086652][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.086679][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.099613][ T5619] veth1_vlan: entered promiscuous mode [ 90.168029][ T5622] veth0_macvtap: entered promiscuous mode [ 90.191524][ T5622] veth1_macvtap: entered promiscuous mode [ 90.200821][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.200842][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.224837][ T5621] veth0_vlan: entered promiscuous mode [ 90.225188][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.226944][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.227536][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.305789][ T5621] veth1_vlan: entered promiscuous mode [ 90.325890][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.331977][ T5619] veth0_macvtap: entered promiscuous mode [ 90.362110][ T5615] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.403771][ T5619] veth1_macvtap: entered promiscuous mode [ 90.430816][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.448011][ T5620] veth0_vlan: entered promiscuous mode [ 90.507506][ T5620] veth1_vlan: entered promiscuous mode [ 90.532368][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.553258][ T5626] Bluetooth: hci0: command tx timeout [ 90.581112][ T5621] veth0_macvtap: entered promiscuous mode [ 90.593874][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.634525][ T5626] Bluetooth: hci2: command tx timeout [ 90.635416][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.641050][ T5621] veth1_macvtap: entered promiscuous mode [ 90.693967][ T975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.694279][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.723050][ T5626] Bluetooth: hci4: command tx timeout [ 90.723084][ T5626] Bluetooth: hci3: command tx timeout [ 90.723107][ T5626] Bluetooth: hci1: command tx timeout [ 90.764009][ T5817] netlink: 'syz.0.7': attribute type 3 has an invalid length. [ 90.768765][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 90.804514][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.837434][ T5817] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 90.859874][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.861740][ T5817] team0: Port device netdevsim1 added [ 90.883694][ T5817] netlink: 'syz.0.7': attribute type 10 has an invalid length. [ 90.891809][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.898853][ T975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.898996][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.899036][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.903353][ T975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.959831][ T5620] veth0_macvtap: entered promiscuous mode [ 90.962816][ T1174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.002262][ T5620] veth1_macvtap: entered promiscuous mode [ 91.090342][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.090368][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.120075][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 91.144569][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.144590][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.215121][ T1174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.222443][ T975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.222465][ T975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.240284][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.295563][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.295872][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.296139][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.296345][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.296503][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.362767][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.420493][ T5823] syzkaller1: entered promiscuous mode [ 91.420521][ T5823] syzkaller1: entered allmulticast mode [ 91.434992][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.519406][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.519429][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.552990][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.652043][ T5828] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 91.678470][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.678497][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.709962][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.712027][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.841138][ T5834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 91.999082][ T975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.999105][ T975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.024559][ T25] cfg80211: failed to load regulatory.db [ 92.216806][ T5848] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 92.230302][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.230322][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.118189][ T5886] netlink: 'syz.1.24': attribute type 8 has an invalid length. [ 93.121396][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 93.159252][ T5883] netlink: 92 bytes leftover after parsing attributes in process `syz.0.21'. [ 93.277535][ T5890] netlink: 193 bytes leftover after parsing attributes in process `syz.2.25'. [ 93.384853][ T5896] xt_l2tp: missing protocol rule (udp|l2tpip) [ 93.385012][ T5896] raw_sendmsg: syz.0.28 forgot to set AF_INET. Fix it! [ 93.430254][ T5900] netlink: 108 bytes leftover after parsing attributes in process `syz.1.27'. [ 93.497758][ T5894] netlink: 'syz.3.26': attribute type 39 has an invalid length. [ 93.737763][ T5909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33'. [ 93.825365][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35'. [ 93.892716][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 94.032729][ T5918] syzkaller0: entered promiscuous mode [ 94.032754][ T5918] syzkaller0: entered allmulticast mode [ 94.147395][ T1162] IPVS: starting estimator thread 0... [ 94.234054][ T5931] IPVS: using max 25 ests per chain, 60000 per kthread [ 94.540893][ T5947] gtp0: entered promiscuous mode [ 94.540917][ T5947] gtp0: entered allmulticast mode [ 95.006446][ T5968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.054174][ T5967] Bluetooth: MGMT ver 1.23 [ 95.194056][ T5976] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.342231][ T5984] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 95.342256][ T5984] netlink: 'syz.0.58': attribute type 7 has an invalid length. [ 95.342271][ T5984] netlink: 'syz.0.58': attribute type 8 has an invalid length. [ 95.342302][ T5984] NCSI netlink: No device for ifindex 65584 [ 95.378739][ T5984] Zero length message leads to an empty skb [ 95.530272][ T5999] xt_policy: neither incoming nor outgoing policy selected [ 95.731246][ T6005] syzkaller1: entered promiscuous mode [ 95.731272][ T6005] syzkaller1: entered allmulticast mode [ 95.945656][ T6016] __nla_validate_parse: 7 callbacks suppressed [ 95.945678][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 96.034288][ T6015] dvmrp8: entered allmulticast mode [ 96.128923][ T6021] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.192102][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 96.270952][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 96.278590][ T1162] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.284576][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.284691][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.284774][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.418711][ T6031] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 96.546294][ T6035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.674536][ T6035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.725395][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 96.907381][ T6053] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.907572][ T6053] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 96.949210][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 96.949465][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 96.949653][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 96.949862][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 96.950055][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 96.950250][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 97.125740][ T6065] netlink: 'syz.2.80': attribute type 2 has an invalid length. [ 97.133251][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.133301][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.146998][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.147128][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.283127][ T6080] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 98.599568][ T6159] netlink: 'syz.0.106': attribute type 4 has an invalid length. [ 98.622888][ T6159] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 98.764075][ T6162] openvswitch: netlink: Key type 327 is out of range max 32 [ 99.170335][ T6170] netlink: 'syz.4.109': attribute type 21 has an invalid length. [ 99.170361][ T6170] netlink: 'syz.4.109': attribute type 22 has an invalid length. [ 99.170375][ T6170] netlink: 'syz.4.109': attribute type 23 has an invalid length. [ 99.170389][ T6170] netlink: 'syz.4.109': attribute type 25 has an invalid length. [ 99.170403][ T6170] netlink: 'syz.4.109': attribute type 26 has an invalid length. [ 99.309941][ T6178] bond0: invalid NS target :: specified for addition [ 99.309974][ T6178] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 99.357775][ T6178] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 99.420078][ T6176] ip_tables: iptables: counters copy to user failed while replacing table [ 99.458507][ T6179] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 99.592064][ T6189] macsec1: entered promiscuous mode [ 99.615015][ T6192] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 99.644399][ T6192] bond2: option all_slaves_active: invalid value (179) [ 99.646175][ T6192] bond2 (unregistering): Released all slaves [ 99.988395][ T6208] netlink: 'syz.1.120': attribute type 3 has an invalid length. [ 100.040957][ T6208] ip_tables: iptables: counters copy to user failed while replacing table [ 100.098612][ T6208] xt_LOG: prefix is not null-terminated [ 100.582116][ T6237] netlink: 'syz.2.126': attribute type 64 has an invalid length. [ 101.195303][ T6265] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 101.195344][ T6265] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 101.195386][ T6265] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 101.199408][ T6265] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.288344][ T6265] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.361964][ T6266] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.787162][ T6292] __nla_validate_parse: 43 callbacks suppressed [ 101.787185][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 101.788239][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 101.789478][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 101.791420][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 101.791629][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 102.061106][ T6308] batman_adv: batadv0: Adding interface: syz_tun [ 102.061126][ T6308] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.061156][ T6308] batman_adv: batadv0: Interface activated: syz_tun [ 102.119342][ T6308] lo: entered promiscuous mode [ 102.135347][ T6308] validate_nla: 3 callbacks suppressed [ 102.135374][ T6308] netlink: 'syz.4.145': attribute type 2 has an invalid length. [ 102.135391][ T6308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.180389][ T6318] netlink: 'syz.4.145': attribute type 2 has an invalid length. [ 102.180412][ T6318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.238633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 102.466800][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.467108][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.467396][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.467680][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.467977][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.496825][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.497111][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.497381][ T6330] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 102.573615][ T6340] netlink: 68 bytes leftover after parsing attributes in process `syz.1.148'. [ 102.770805][ T6336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.148'. [ 102.826922][ T6347] tipc: Enabling of bearer rejected, failed to enable media [ 102.846056][ T6347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 102.850685][ T6347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 102.850949][ T6347] netlink: 16 bytes leftover after parsing attributes in process `syz.3.149'. [ 103.248617][ T6361] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.330435][ T6373] block nbd0: Unsupported socket: should be TCP or UNIX. [ 103.385420][ T6374] tipc: Enabling of bearer rejected, media not registered [ 103.423387][ T6377] tipc: Enabling of bearer rejected, media not registered [ 103.541403][ T6370] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 103.541754][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.596103][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.669925][ T6392] tipc: Started in network mode [ 103.669964][ T6392] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 103.670017][ T6392] tipc: Enabling of bearer rejected, failed to enable media [ 103.764173][ T6392] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 103.764207][ T6392] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 104.100920][ T6413] syz_tun: entered promiscuous mode [ 104.189911][ T6420] ipt_ECN: cannot use operation on non-tcp rule [ 104.726642][ T6448] warning: `syz.2.179' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.200132][ T6482] IPv6: sit1: Disabled Multicast RS [ 105.541141][ T6499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 105.618293][ T6495] bond1: (slave veth0_to_bond): making interface the new active one [ 105.641936][ T6495] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.733419][ T6497] macvlan2: entered promiscuous mode [ 105.733444][ T6497] macvlan2: entered allmulticast mode [ 105.768542][ T6497] bond1: entered promiscuous mode [ 105.768567][ T6497] veth0_to_bond: entered promiscuous mode [ 105.784246][ T6497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.785214][ T6497] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 105.786328][ T6497] bond1: left promiscuous mode [ 105.786347][ T6497] veth0_to_bond: left promiscuous mode [ 105.909556][ T6500] macvlan2: entered promiscuous mode [ 105.909581][ T6500] macvlan2: entered allmulticast mode [ 105.926532][ T6500] bond1: entered promiscuous mode [ 105.926556][ T6500] veth0_to_bond: entered promiscuous mode [ 105.927421][ T6500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.929744][ T6500] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 105.929840][ T6500] bond1: left promiscuous mode [ 105.929855][ T6500] veth0_to_bond: left promiscuous mode [ 106.143411][ T6515] block nbd296: server does not support multiple connections per device. [ 106.157079][ T6515] block nbd296: shutting down sockets [ 106.439196][ T6539] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.600735][ T6543] pim6reg: entered allmulticast mode [ 106.623318][ T6543] pim6reg: left allmulticast mode [ 106.658803][ T6556] openvswitch: netlink: Message has 8 unknown bytes. [ 106.666554][ T6557] nft_compat: unsupported protocol 5 [ 106.837213][ T6563] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 106.865386][ T6565] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 106.980003][ T6574] syzkaller1: entered promiscuous mode [ 106.980029][ T6574] syzkaller1: entered allmulticast mode [ 107.055371][ T6578] xt_socket: unknown flags 0xc [ 107.370268][ T6589] tipc: Started in network mode [ 107.370312][ T6589] tipc: Node identity ac14142f, cluster identity 4711 [ 107.400308][ T6589] tipc: Enabled bearer , priority 10 [ 107.402017][ T6589] __nla_validate_parse: 77 callbacks suppressed [ 107.402039][ T6589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.214'. [ 107.443774][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 107.600633][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 107.625905][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 107.980551][ T6611] netlink: 44 bytes leftover after parsing attributes in process `syz.1.218'. [ 107.993011][ T6610] netlink: 44 bytes leftover after parsing attributes in process `syz.1.218'. [ 108.266116][ T6627] sctp: [Deprecated]: syz.0.223 (pid 6627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.266116][ T6627] Use struct sctp_sack_info instead [ 108.535155][ T5725] tipc: Node number set to 2886997039 [ 108.611474][ T6656] ip6erspan0: entered allmulticast mode [ 109.809450][ T6689] syzkaller0: entered promiscuous mode [ 109.809476][ T6689] syzkaller0: entered allmulticast mode [ 110.227562][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'. [ 110.823400][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.250'. [ 111.110771][ T6732] validate_nla: 64 callbacks suppressed [ 111.110795][ T6732] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 111.317113][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.254'. [ 111.358682][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 111.469749][ T6751] ip_tables: iptables: counters copy to user failed while replacing table [ 111.679541][ T6759] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 112.220149][ T6781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.294039][ T6782] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 112.297586][ T6782] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 112.407808][ T6781] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 112.561479][ T6785] __nla_validate_parse: 7 callbacks suppressed [ 112.561508][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 112.561556][ T6785] netlink: 52 bytes leftover after parsing attributes in process `syz.4.268'. [ 113.076384][ T6816] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 113.357049][ T6825] netlink: 240 bytes leftover after parsing attributes in process `syz.4.279'. [ 113.399769][ T6828] netlink: NAT attribute has 4 unknown bytes [ 113.399816][ T6828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.931525][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 114.428787][ T6886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.506039][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 114.539994][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.032401][ T6903] ip_tables: iptables: counters copy to user failed while replacing table [ 115.097254][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.293'. [ 115.194921][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 115.557228][ T6915] tipc: Enabling of bearer rejected, media not registered [ 115.576921][ T6915] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 115.639310][ T6920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.300'. [ 115.842298][ T6927] ip_tables: iptables: counters copy to user failed while replacing table [ 115.879308][ T6927] netlink: 256 bytes leftover after parsing attributes in process `syz.4.301'. [ 115.937939][ T6927] Cannot find del_set index 4 as target [ 115.973186][ T6927] netlink: 224 bytes leftover after parsing attributes in process `syz.4.301'. [ 116.161926][ T6934] openvswitch: netlink: Flow key attr not present in new flow. [ 116.556192][ T6946] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 116.597846][ T6946] team0: Device wg2 is of different type [ 117.137018][ T6966] netlink: 'syz.0.310': attribute type 1 has an invalid length. [ 117.206974][ T6954] syzkaller0: entered promiscuous mode [ 117.208195][ T6954] syzkaller0: entered allmulticast mode [ 117.274394][ T6966] bond1: entered promiscuous mode [ 117.275229][ T6966] bond1: entered allmulticast mode [ 117.275738][ T6966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.309122][ T6968] erspan1: entered allmulticast mode [ 117.321406][ T6968] bond1: (slave erspan1): making interface the new active one [ 117.321432][ T6968] erspan1: entered promiscuous mode [ 117.337084][ T6968] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 117.364467][ T6973] block nbd0: Unsupported socket: should be TCP or UNIX. [ 117.672344][ T6979] __nla_validate_parse: 4 callbacks suppressed [ 117.672368][ T6979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'. [ 117.855650][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 118.097397][ T6995] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.881202][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 120.531138][ T7012] netlink: 108 bytes leftover after parsing attributes in process `syz.3.322'. [ 120.548280][ T7012] netlink: 108 bytes leftover after parsing attributes in process `syz.3.322'. [ 120.548324][ T7012] netlink: 84 bytes leftover after parsing attributes in process `syz.3.322'. [ 120.565660][ T7005] batman_adv: batadv0: Adding interface: syz_tun [ 120.565699][ T7005] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.565785][ T7005] batman_adv: batadv0: Interface activated: syz_tun [ 120.952527][ T7029] netlink: 'syz.3.326': attribute type 2 has an invalid length. [ 121.026323][ T7029] : entered promiscuous mode [ 121.080558][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 121.278440][ T7031] batman_adv: batadv0: Adding interface: gretap1 [ 121.278462][ T7031] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.278498][ T7031] batman_adv: batadv0: Interface activated: gretap1 [ 121.492888][ T7039] syzkaller0: entered promiscuous mode [ 121.492913][ T7039] syzkaller0: entered allmulticast mode [ 121.816339][ T7060] netpci0: entered promiscuous mode [ 121.816575][ T7060] netpci0: entered allmulticast mode [ 121.978836][ T7063] Driver unsupported XDP return value 0 on prog (id 153) dev N/A, expect packet loss! [ 122.110640][ T7068] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 122.666654][ T7055] Bluetooth: hci0: unsupported parameter 5161 [ 122.666678][ T7055] Bluetooth: hci0: unsupported parameter 8192 [ 122.666696][ T7055] Bluetooth: hci0: unsupported parameter 5161 [ 122.666710][ T7055] Bluetooth: hci0: unsupported parameter 8192 [ 122.859338][ T7074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.279501][ T7045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.281587][ T7051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.330'. [ 124.682335][ T7091] netlink: 72 bytes leftover after parsing attributes in process `syz.0.338'. [ 124.853418][ T7094] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 125.525329][ T7104] netlink: 'syz.4.343': attribute type 1 has an invalid length. [ 125.761433][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 125.806433][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'. [ 125.867764][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 126.130895][ T7110] bond1: (slave bridge2): making interface the new active one [ 126.156706][ T7110] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 126.231705][ T7132] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.346'. [ 126.244164][ T7126] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 126.248265][ T7132] syzkaller1: entered promiscuous mode [ 126.248288][ T7132] syzkaller1: entered allmulticast mode [ 126.465850][ T1162] IPVS: starting estimator thread 0... [ 126.468856][ T7140] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 126.471773][ T7141] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 126.472304][ T7138] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 126.502288][ T7140] rdma_rxe: Failed to create IPv4 UDP tunnel [ 126.553026][ T7139] IPVS: using max 27 ests per chain, 64800 per kthread [ 126.592232][ T7138] wg1 speed is unknown, defaulting to 1000 [ 126.609610][ T7113] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 126.667216][ T7138] wg1 speed is unknown, defaulting to 1000 [ 126.697108][ T7138] wg1 speed is unknown, defaulting to 1000 [ 126.866451][ T7145] netlink: 'syz.0.350': attribute type 8 has an invalid length. [ 126.866476][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 126.881444][ T7145] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.886498][ T7145] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.919379][ T7146] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.842821][ T52] Bluetooth: hci0: command 0x0c20 tx timeout [ 127.972114][ T976] wg1 speed is unknown, defaulting to 1000 [ 127.984187][ T7138] infiniband syz2: set active [ 127.984209][ T7138] infiniband syz2: added wg1 [ 128.027964][ T7184] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 128.076871][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.361'. [ 128.192842][ T7138] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 128.203486][ T7138] infiniband syz2: Couldn't open port 1 [ 128.203739][ T7138] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 128.203770][ T7138] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 128.203812][ T7138] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 128.337995][ T7138] RDS/IB: syz2: added [ 128.347719][ T7138] smc: adding ib device syz2 with port count 1 [ 128.347872][ T7138] smc: ib device syz2 port 1 has no pnetid [ 128.349585][ T5742] wg1 speed is unknown, defaulting to 1000 [ 128.415317][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 128.419666][ T7138] wg1 speed is unknown, defaulting to 1000 [ 128.662448][ T7195] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 128.666198][ T7195] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 128.666592][ T7196] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 128.701043][ T52] Bluetooth: hci2: Unexpected cc 0x2753 with no status [ 129.270267][ T7206] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 129.452192][ T7220] xt_TCPMSS: Only works on TCP SYN packets [ 129.529148][ T7206] bond2: entered promiscuous mode [ 129.536060][ T7206] bond2: entered allmulticast mode [ 129.547123][ T7206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.858061][ T7138] wg1 speed is unknown, defaulting to 1000 [ 130.632924][ T7237] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 130.689306][ T7237] team0: Port device dummy0 added [ 130.987519][ T7244] netlink: Invalid conntrack timeout [ 130.987561][ T7244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.991142][ T7138] wg1 speed is unknown, defaulting to 1000 [ 131.035390][ T7247] netlink: Invalid conntrack timeout [ 131.035426][ T7247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.217268][ T7254] netlink: 104 bytes leftover after parsing attributes in process `syz.0.378'. [ 131.668014][ T7264] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 131.736810][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 131.755780][ T7268] xt_cgroup: invalid path, errno=-2 [ 131.759224][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.759416][ T7264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.760242][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.760392][ T7264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.817716][ T7265] netlink: 'syz.1.381': attribute type 12 has an invalid length. [ 131.874938][ T7264] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 131.917535][ T7269] bridge_slave_1: left allmulticast mode [ 131.917572][ T7269] bridge_slave_1: left promiscuous mode [ 131.917849][ T7269] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.971904][ T7269] bridge_slave_0: left allmulticast mode [ 131.971937][ T7269] bridge_slave_0: left promiscuous mode [ 131.972187][ T7269] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.052436][ T7269] bond0: (slave bridge0): Releasing backup interface [ 132.436640][ T7138] wg1 speed is unknown, defaulting to 1000 [ 132.932924][ T7290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.961674][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.152541][ T7306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 133.184927][ T7312] netlink: 'syz.1.390': attribute type 10 has an invalid length. [ 133.220400][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.222387][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.362408][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.362811][ T7312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.363708][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.364117][ T7312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.442943][ T7312] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 133.447788][ T7314] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.486736][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 133.487033][ T7320] bridge_slave_1: left promiscuous mode [ 133.487273][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.520040][ T7320] bridge_slave_0: left allmulticast mode [ 133.520070][ T7320] bridge_slave_0: left promiscuous mode [ 133.520319][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.680718][ T7320] bond0: (slave bridge0): Releasing backup interface [ 133.800460][ T7138] wg1 speed is unknown, defaulting to 1000 [ 134.082270][ T7323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.256416][ T7329] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 134.540752][ T7339] tap0: tun_chr_ioctl cmd 2148553947 [ 134.562970][ T7339] tap0: tun_chr_ioctl cmd 2148553947 [ 134.566367][ T7342] tap0: tun_chr_ioctl cmd 1074025673 [ 134.981862][ T7360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.403'. [ 135.299585][ T7372] syzkaller0: entered promiscuous mode [ 135.299612][ T7372] syzkaller0: entered allmulticast mode [ 135.336291][ T7372] tipc: Started in network mode [ 135.336326][ T7372] tipc: Node identity eac35498fdbe, cluster identity 4711 [ 135.336575][ T7372] tipc: Enabled bearer , priority 0 [ 135.339837][ T7377] syz_tun: entered allmulticast mode [ 135.384816][ T7370] tipc: Resetting bearer [ 135.439811][ T7370] tipc: Disabling bearer [ 135.509062][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 135.828310][ T7390] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 136.269726][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 136.421039][ T7409] Cannot find del_set index 4 as target [ 136.497815][ T7415] syzkaller0: entered promiscuous mode [ 136.497842][ T7415] syzkaller0: entered allmulticast mode [ 136.804451][ T7425] netlink: 32 bytes leftover after parsing attributes in process `syz.3.420'. [ 136.824696][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 136.824747][ T7425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.420'. [ 136.933673][ T7205] IPVS: starting estimator thread 0... [ 136.935595][ T7426] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.042795][ T7430] IPVS: using max 24 ests per chain, 57600 per kthread [ 137.057824][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'. [ 137.060120][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 137.071611][ T7426] netlink: 83 bytes leftover after parsing attributes in process `syz.2.419'. [ 137.247489][ T7435] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 137.483956][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.485008][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.488730][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.489792][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.490826][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.552083][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.553144][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.554573][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.557355][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.559742][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.565180][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.635923][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.643258][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.645023][ T7444] vcan0: tx address claim with broadcast sa [ 137.690054][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.691190][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.692181][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.697734][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.710144][ T7443] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 137.800802][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 138.259460][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.433'. [ 138.259488][ T7471] openvswitch: netlink: Key type 13575 is out of range max 32 [ 138.378086][ T7475] ip_tables: iptables: counters copy to user failed while replacing table [ 138.425686][ T7475] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.426387][ T7475] tipc: Enabled bearer , priority 10 [ 138.562954][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.691044][ T7492] sctp: [Deprecated]: syz.1.440 (pid 7492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.691044][ T7492] Use struct sctp_sack_info instead [ 138.714097][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.727149][ T7492] netlink: 'syz.1.440': attribute type 21 has an invalid length. [ 138.852744][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.992888][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.132580][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.136965][ T7501] ip_tables: iptables: counters copy to user failed while replacing table [ 139.422798][ T976] tipc: Node number set to 394089624 [ 140.157564][ T7543] xt_hashlimit: invalid interval [ 140.160203][ T7543] xt_hashlimit: invalid interval [ 140.160337][ T7543] xt_hashlimit: invalid interval [ 140.166808][ T7543] xt_hashlimit: invalid interval [ 140.167136][ T7543] xt_hashlimit: invalid interval [ 140.167425][ T7543] xt_hashlimit: invalid interval [ 140.169017][ T7543] xt_hashlimit: invalid interval [ 140.169601][ T7543] xt_hashlimit: invalid interval [ 140.169883][ T7543] xt_hashlimit: invalid interval [ 140.173890][ T7543] xt_hashlimit: invalid interval [ 140.261096][ T7535] can: request_module (can-proto-0) failed. [ 140.503530][ T7554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.313139][ T7576] __nla_validate_parse: 137 callbacks suppressed [ 141.313315][ T7576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.460'. [ 141.366337][ T7578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.460'. [ 141.371964][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.401692][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.602153][ T7549] gtp0: left promiscuous mode [ 141.602188][ T7549] gtp0: left allmulticast mode [ 141.616727][ T7549] netpci0: left promiscuous mode [ 141.616755][ T7549] netpci0: left allmulticast mode [ 141.619494][ T7549] bond1: left promiscuous mode [ 141.619514][ T7549] erspan1: left promiscuous mode [ 141.619894][ T7549] bond1: left allmulticast mode [ 141.632057][ T7549] erspan1: left allmulticast mode [ 141.647892][ T7549] bond2: left promiscuous mode [ 141.647915][ T7549] bond2: left allmulticast mode [ 141.667629][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 141.674495][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.677617][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.678041][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.678920][ T7207] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.967564][ T7587] xt_TCPMSS: Only works on TCP SYN packets [ 141.994815][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 142.372707][ T7609] netlink: 'syz.3.468': attribute type 11 has an invalid length. [ 142.372734][ T7609] netlink: 'syz.3.468': attribute type 11 has an invalid length. [ 142.372749][ T7609] netlink: 228 bytes leftover after parsing attributes in process `syz.3.468'. [ 142.472594][ C0] net_ratelimit: 6 callbacks suppressed [ 142.472620][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.636451][ T7609] netlink: 'syz.3.468': attribute type 3 has an invalid length. [ 142.636476][ T7609] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 142.636490][ T7609] netlink: 224 bytes leftover after parsing attributes in process `syz.3.468'. [ 142.680665][ T7609] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 143.005349][ T7628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.334004][ T7639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 143.382350][ T7643] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 143.382381][ T7643] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 143.466448][ T7645] tipc: Enabling of bearer rejected, failed to enable media [ 143.503744][ T52] Bluetooth: hci2: ISO packet for unknown connection handle 2723 [ 143.512636][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.566849][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 143.581634][ T7647] hsr_slave_0: left promiscuous mode [ 143.608931][ T7647] hsr_slave_1: left promiscuous mode [ 144.029936][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 144.127892][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 144.254005][ T7666] syzkaller0: entered promiscuous mode [ 144.254034][ T7666] syzkaller0: entered allmulticast mode [ 144.464971][ T7671] ip6t_rt: address list match requested but addrnr is 0 [ 144.552791][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.012514][ T31] audit: type=1804 audit(1791414586.101:2): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.488" name="/newroot/90/cgroup.controllers" dev="tmpfs" ino=479 res=1 errno=0 [ 145.019937][ T31] audit: type=1800 audit(1791414586.111:3): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.488" name="cgroup.controllers" dev="tmpfs" ino=479 res=0 errno=0 [ 145.105950][ T7687] netlink: 'syz.2.489': attribute type 2 has an invalid length. [ 145.603115][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.642169][ T7712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.830414][ T7724] TCP: TCP_TX_DELAY enabled [ 145.852086][ T7710] veth0: entered promiscuous mode [ 145.868928][ T7705] veth0: left promiscuous mode [ 146.164801][ T7731] : renamed from bond_slave_0 (while UP) [ 146.262631][ T31] audit: type=1804 audit(1791414587.351:4): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.504" name="/newroot/102/cgroup.controllers" dev="tmpfs" ino=535 res=1 errno=0 [ 146.264012][ T31] audit: type=1800 audit(1791414587.361:5): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.504" name="cgroup.controllers" dev="tmpfs" ino=535 res=0 errno=0 [ 146.322759][ T52] Bluetooth: hci1: command tx timeout [ 146.332332][ T7737] __nla_validate_parse: 8 callbacks suppressed [ 146.332353][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.505'. [ 146.430030][ T7739] syzkaller1: entered promiscuous mode [ 146.430058][ T7739] syzkaller1: entered allmulticast mode [ 146.606145][ T7741] netlink: 'syz.3.506': attribute type 1 has an invalid length. [ 146.632672][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.748131][ T7747] bond4: (slave bridge3): making interface the new active one [ 146.749069][ T7747] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 146.868533][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.506'. [ 146.925689][ T7747] netlink: 'syz.3.506': attribute type 9 has an invalid length. [ 146.925715][ T7747] netlink: 23 bytes leftover after parsing attributes in process `syz.3.506'. [ 147.449874][ T7778] tipc: Started in network mode [ 147.449907][ T7778] tipc: Node identity 2ef141a30463, cluster identity 4711 [ 147.450442][ T7778] tipc: Enabled bearer , priority 0 [ 147.477624][ T7770] syzkaller0: entered promiscuous mode [ 147.477652][ T7770] syzkaller0: entered allmulticast mode [ 147.524602][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.515'. [ 147.550392][ T7787] ip_tables: iptables: counters copy to user failed while replacing table [ 147.560909][ T7784] tipc: Resetting bearer [ 147.620021][ T7768] tipc: Resetting bearer [ 147.621681][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 147.678367][ T7768] tipc: Disabling bearer [ 147.683266][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.721912][ T7786] syzkaller1: entered promiscuous mode [ 147.721939][ T7786] syzkaller1: entered allmulticast mode [ 148.080851][ T7800] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 [ 148.249381][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 148.316965][ T7813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'. [ 148.317309][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'. [ 148.534852][ T7822] xt_cluster: node mask cannot exceed total number of nodes [ 148.712706][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.913850][ T7831] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.019551][ T7833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.529'. [ 149.070675][ T7841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.071093][ T7844] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.111005][ T7833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.529'. [ 149.182173][ T7847] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 149.431383][ T7852] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.752662][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.800736][ T7862] vlan0: entered promiscuous mode [ 150.067892][ T7873] openvswitch: netlink: IPv4 tun info is not correct [ 150.792641][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.873285][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.975177][ T7908] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 151.086341][ T7916] bond5: Unable to set up delay as MII monitoring is disabled [ 151.111060][ T7916] bond5 (unregistering): Released all slaves [ 151.347621][ T7926] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 151.425044][ T7929] __nla_validate_parse: 4 callbacks suppressed [ 151.425069][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 151.464652][ T7932] netlink: 108 bytes leftover after parsing attributes in process `syz.3.557'. [ 151.487687][ T7926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.582797][ T7926] netlink: 'syz.0.556': attribute type 27 has an invalid length. [ 151.636691][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.554'. [ 151.758991][ T7939] xt_hashlimit: size too large, truncated to 1048576 [ 151.900904][ T7929] bond3: (slave bridge0): making interface the new active one [ 151.928504][ T7929] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 152.006700][ T7946] netlink: 676 bytes leftover after parsing attributes in process `syz.3.559'. [ 152.418608][ T7954] sctp: [Deprecated]: syz.3.562 (pid 7954) Use of int in maxseg socket option. [ 152.418608][ T7954] Use struct sctp_assoc_value instead [ 152.465362][ T7954] block nbd3: not configured, cannot reconfigure [ 152.583877][ T7962] syzkaller0: entered promiscuous mode [ 152.583903][ T7962] syzkaller0: entered allmulticast mode [ 152.693279][ T7967] netlink: 52 bytes leftover after parsing attributes in process `syz.3.568'. [ 152.815660][ T7974] netlink: 56 bytes leftover after parsing attributes in process `syz.0.570'. [ 152.819629][ T7972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.570'. [ 152.882532][ C0] net_ratelimit: 2 callbacks suppressed [ 152.882562][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.195090][ T7989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.569'. [ 153.200989][ T7989] netlink: 112 bytes leftover after parsing attributes in process `syz.4.569'. [ 153.433993][ T7994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.574'. [ 153.461771][ T7996] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.488114][ T7990] veth0_macvtap: entered allmulticast mode [ 153.488262][ T7990] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 153.912633][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.914046][ T7999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.552310][ T8026] syzkaller1: entered promiscuous mode [ 154.552336][ T8026] syzkaller1: entered allmulticast mode [ 154.692037][ T8032] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 154.821808][ T8032] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.887626][ T8033] bond1: (slave veth0_to_bond): Releasing active interface [ 154.952724][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.979016][ T8033] bond5: (slave veth0_to_bond): making interface the new active one [ 154.992935][ T8033] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.075175][ T8034] bond5: entered promiscuous mode [ 155.075202][ T8034] veth0_to_bond: entered promiscuous mode [ 155.075422][ T8034] bond5: entered allmulticast mode [ 155.075437][ T8034] veth0_to_bond: entered allmulticast mode [ 155.885792][ T8071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.886849][ T8071] bond0: option ad_select: unable to set because the bond device is up [ 155.993790][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.251258][ T8082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.780968][ T8101] macvlan0: entered promiscuous mode [ 157.032572][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.121083][ T8117] __nla_validate_parse: 7 callbacks suppressed [ 157.121113][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 157.449093][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.4.612'. [ 157.750875][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 157.750915][ T8139] netlink: 'syz.2.618': attribute type 30 has an invalid length. [ 157.773005][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'. [ 157.773042][ T8137] netlink: 'syz.2.618': attribute type 30 has an invalid length. [ 157.821963][ T8141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.971984][ T8149] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 158.072781][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.278435][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 158.278459][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 158.278761][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 158.278778][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 158.351822][ T8153] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 158.371094][ T8153] bond1 (unregistering): Released all slaves [ 158.421616][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 158.468774][ T8154] bond6: (slave gretap1): making interface the new active one [ 158.469968][ T8154] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 158.657162][ T8171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.625'. [ 158.935830][ T8182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.112559][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.152551][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.866583][ T8144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.899441][ T8187] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 160.899600][ T8188] netlink: 'syz.4.630': attribute type 1 has an invalid length. [ 161.192535][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.266928][ T8206] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 161.293381][ T8216] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 161.416944][ T8218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.488296][ T8225] xt_IDLETIMER: label is empty or not nul-terminated [ 161.616347][ T8231] ip_tables: iptables: counters copy to user failed while replacing table [ 162.230409][ T8257] __nla_validate_parse: 3 callbacks suppressed [ 162.230431][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 162.248243][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.363272][ T8262] erspan0: entered promiscuous mode [ 162.425965][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 162.425997][ T8259] erspan0: left promiscuous mode [ 162.655223][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 162.661982][ T8282] 8021q: VLANs not supported on ip_vti0 [ 162.716584][ T8284] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 162.809812][ T8284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.877663][ T8284] ip_tables: iptables: counters copy to user failed while replacing table [ 163.272538][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.822382][ T8324] batadv_slave_0: entered promiscuous mode [ 163.909386][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 164.072050][ T8331] syzkaller0: entered promiscuous mode [ 164.072083][ T8331] syzkaller0: entered allmulticast mode [ 164.154983][ T8323] batadv_slave_0: left promiscuous mode [ 164.236852][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'. [ 164.257098][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'. [ 164.322624][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.368038][ T8345] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 164.403519][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 164.403544][ T8331] netlink: 2 bytes leftover after parsing attributes in process `syz.4.665'. [ 164.505183][ T8349] netlink: 'syz.1.670': attribute type 1 has an invalid length. [ 164.555061][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.671'. [ 164.635499][ T8357] netlink: 'syz.2.675': attribute type 6 has an invalid length. [ 164.662175][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.671'. [ 165.352636][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.384090][ T8406] netlink: 'syz.3.684': attribute type 9 has an invalid length. [ 166.392648][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.459120][ T8409] ip_tables: iptables: counters copy to user failed while replacing table [ 166.642994][ T8416] netlink: 'syz.4.685': attribute type 39 has an invalid length. [ 166.668695][ T8411] syzkaller0: entered promiscuous mode [ 166.668720][ T8411] syzkaller0: entered allmulticast mode [ 166.672134][ T8407] netlink: 'syz.3.684': attribute type 9 has an invalid length. [ 166.816499][ T987] smc: removing ib device syz2 [ 167.042106][ T987] smbdirect: ib_dev[syz2] removed [ 167.432560][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.531934][ T5810] infiniband syz2: ib_query_port failed (-19) [ 168.472535][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.695049][ T8455] netlink: 'syz.1.695': attribute type 13 has an invalid length. [ 168.782272][ T8453] netlink: 'syz.0.696': attribute type 11 has an invalid length. [ 168.782300][ T8453] netlink: 'syz.0.696': attribute type 4 has an invalid length. [ 168.782315][ T8453] __nla_validate_parse: 4 callbacks suppressed [ 168.782328][ T8453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.696'. [ 169.138171][ T8459] Bluetooth: MGMT ver 1.23 [ 169.257900][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 169.259979][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 169.467992][ T8467] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 169.473777][ T8468] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 169.512601][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.248034][ T8483] netlink: 288 bytes leftover after parsing attributes in process `syz.3.705'. [ 170.349337][ T8487] trusted_key: syz.2.706 sent an empty control message without MSG_MORE. [ 170.421370][ T8490] veth0: entered promiscuous mode [ 170.421626][ T8495] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 3, id = 0 [ 170.425478][ T8491] veth0: left promiscuous mode [ 170.426264][ T8492] lo: entered promiscuous mode [ 170.426657][ T8492] netlink: 'syz.0.707': attribute type 2 has an invalid length. [ 170.426693][ T8492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.552547][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.762984][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.709'. [ 170.763008][ T8500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.709'. [ 171.207213][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 171.264096][ T8511] : renamed from bond_slave_0 (while UP) [ 171.285448][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 171.285486][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 171.602538][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.640542][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 171.784737][ T8524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.601951][ T8544] sctp: [Deprecated]: syz.2.721 (pid 8544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.601951][ T8544] Use struct sctp_sack_info instead [ 172.632917][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.672608][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.858873][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.732'. [ 174.321501][ T8605] netlink: 104 bytes leftover after parsing attributes in process `syz.4.737'. [ 174.712654][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.944235][ T8632] IPVS: length: 239 != 24 [ 174.958431][ T8628] netlink: Unknown conntrack attr (type=1031, max=9) [ 174.958471][ T8628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.008563][ T8628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 175.307596][ T8644] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 175.596512][ T8655] ovs-dp0: entered promiscuous mode [ 175.752536][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.218872][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 176.335610][ T8689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 176.459794][ T8695] ip_tables: iptables: counters copy to user failed while replacing table [ 176.561646][ T8697] x_tables: duplicate underflow at hook 1 [ 176.792598][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.923832][ T8706] bond3: option xmit_hash_policy: invalid value (128) [ 176.965966][ T8714] netlink: 'syz.3.766': attribute type 12 has an invalid length. [ 176.966664][ T8706] bond3 (unregistering): Released all slaves [ 176.999451][ T8714] netlink: 'syz.3.766': attribute type 12 has an invalid length. [ 176.999474][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 177.105487][ T987] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.108997][ T987] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.109047][ T987] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.109088][ T987] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.301927][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 177.302169][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 177.401453][ T8733] netlink: 'syz.4.772': attribute type 3 has an invalid length. [ 177.419259][ T8733] openvswitch: netlink: Duplicate or invalid key (type 0). [ 177.421058][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 177.421079][ T8733] netlink: 176 bytes leftover after parsing attributes in process `syz.4.772'. [ 177.421132][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.4.772'. [ 177.832546][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.274675][ T8768] xt_connbytes: Forcing CT accounting to be enabled [ 178.274902][ T8768] set match dimension is over the limit! [ 178.410419][ T8776] dvmrp0: entered allmulticast mode [ 178.467961][ T8778] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 178.553763][ T8777] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 178.628957][ T8777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.830707][ T8781] bond2: (slave veth0_to_bond): making interface the new active one [ 178.855149][ T8781] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 178.872548][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.882295][ T8771] __nla_validate_parse: 1 callbacks suppressed [ 178.882315][ T8771] netlink: 224 bytes leftover after parsing attributes in process `syz.1.785'. [ 178.956808][ T8777] bond2: entered promiscuous mode [ 178.956834][ T8777] veth0_to_bond: entered promiscuous mode [ 178.957997][ T8777] bond2: entered allmulticast mode [ 178.958015][ T8777] veth0_to_bond: entered allmulticast mode [ 179.322783][ T8798] syzkaller0: entered promiscuous mode [ 179.322810][ T8798] syzkaller0: entered allmulticast mode [ 179.383887][ T8811] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.383974][ T8811] gretap1: entered promiscuous mode [ 179.383990][ T8811] gretap1: entered allmulticast mode [ 179.427773][ T8799] syzkaller1: entered promiscuous mode [ 179.427983][ T8799] syzkaller1: entered allmulticast mode [ 179.464817][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 179.471087][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 179.616415][ T8820] netlink: 'syz.3.797': attribute type 1 has an invalid length. [ 179.912738][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.990299][ T8830] bond3: option lp_interval: invalid value (0) [ 179.990325][ T8830] bond3: option lp_interval: allowed values 1 - 2147483647 [ 179.992263][ T8830] bond3 (unregistering): Released all slaves [ 180.097340][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 180.166012][ T8843] netlink: 'syz.2.804': attribute type 15 has an invalid length. [ 180.234054][ T8845] syzkaller0: entered promiscuous mode [ 180.234086][ T8845] syzkaller0: entered allmulticast mode [ 180.346782][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 180.952988][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.023514][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 181.103449][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 181.103483][ T8887] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 181.619442][ T8899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.817'. [ 182.002679][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.072701][ T5626] Bluetooth: hci0: command 0x0c20 tx timeout [ 182.656548][ T8926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.826'. [ 182.656859][ T8926] unsupported nlmsg_type 40 [ 182.843604][ T8934] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 182.986505][ T8943] Cannot find add_set index 0 as target [ 182.989855][ T8943] Cannot find add_set index 0 as target [ 183.601256][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.836'. [ 183.827266][ T8965] ip_tables: iptables: counters copy to user failed while replacing table [ 183.916227][ T8982] Bluetooth: MGMT ver 1.23 [ 184.008886][ T8991] sit0: entered promiscuous mode [ 184.033162][ T8991] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 184.033187][ T8991] netlink: 1 bytes leftover after parsing attributes in process `syz.4.841'. [ 184.543978][ T9008] x_tables: duplicate underflow at hook 1 [ 184.607469][ T9015] IPVS: set_ctl: invalid protocol: 21 172.30.1.5:18 [ 184.651047][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 184.747505][ T9017] sit1: entered promiscuous mode [ 184.747720][ T9017] sit1: entered allmulticast mode [ 184.990380][ T9027] block nbd0: not configured, cannot reconfigure [ 185.139995][ T9030] netlink: 'syz.2.853': attribute type 3 has an invalid length. [ 185.333653][ T9034] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20002 [ 185.459956][ T9040] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 185.459982][ T9040] netlink: 200 bytes leftover after parsing attributes in process `syz.3.857'. [ 185.891051][ T9064] syzkaller0: entered promiscuous mode [ 185.891076][ T9064] syzkaller0: entered allmulticast mode [ 186.051964][ T9076] netlink: 52 bytes leftover after parsing attributes in process `syz.2.866'. [ 186.134466][ T9080] syzkaller0: left promiscuous mode [ 186.134674][ T9080] syzkaller0: left allmulticast mode [ 186.169055][ T9080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.399439][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 186.399464][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 187.203254][ T9113] Bluetooth: hci0: unsupported parameter 5161 [ 187.203282][ T9113] Bluetooth: hci0: unsupported parameter 8192 [ 187.203297][ T9113] Bluetooth: hci0: unsupported parameter 5161 [ 187.203311][ T9113] Bluetooth: hci0: unsupported parameter 8192 [ 187.440425][ T9117] netlink: 'syz.0.877': attribute type 1 has an invalid length. [ 187.790628][ T9127] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 187.791914][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 187.931163][ T9131] Bluetooth: hci0: unsupported parameter 5135 [ 187.931191][ T9131] Bluetooth: hci0: unsupported parameter 8192 [ 187.931205][ T9131] Bluetooth: hci0: unsupported parameter 5135 [ 187.931219][ T9131] Bluetooth: hci0: unsupported parameter 8192 [ 187.982874][ T9129] netlink: 'syz.0.880': attribute type 10 has an invalid length. [ 187.983287][ T9129] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 188.008888][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 188.345947][ T9145] tipc: Enabled bearer , priority 10 [ 188.347262][ T9141] syzkaller1: entered promiscuous mode [ 188.347283][ T9141] syzkaller1: entered allmulticast mode [ 188.388449][ T9145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.886'. [ 188.460147][ T9147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.388641][ T5626] Bluetooth: hci3: unexpected event 0x0e length: 0 < 3 [ 189.542089][ T9191] ip_tables: iptables: counters copy to user failed while replacing table [ 189.684326][ T5725] tipc: Node number set to 714228131 [ 189.687612][ T9192] netlink: 196 bytes leftover after parsing attributes in process `syz.0.899'. [ 190.146099][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 190.205649][ T9210] netlink: 92 bytes leftover after parsing attributes in process `syz.4.904'. [ 190.718815][ T9225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.910'. [ 190.719052][ T9225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.910'. [ 190.924521][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 190.924557][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 191.311564][ T9255] netlink: Unknown conntrack attr (0) [ 191.892035][ T9273] netlink: 'syz.2.923': attribute type 21 has an invalid length. [ 192.001819][ T9270] tc_dump_action: action bad kind [ 192.969522][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'. [ 192.992599][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 192.992639][ T9420] netlink: 'syz.4.935': attribute type 30 has an invalid length. [ 193.079418][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 193.079458][ T9424] netlink: 'syz.4.935': attribute type 30 has an invalid length. [ 193.702801][ T9451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.001087][ T9460] bridge_slave_1: default FDB implementation only supports local addresses [ 194.009211][ T9462] bridge_slave_1: default FDB implementation only supports local addresses [ 194.381951][ T9470] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.478600][ T9470] ip_tables: iptables: counters copy to user failed while replacing table [ 194.844725][ T9490] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 194.844749][ T9490] __nla_validate_parse: 3 callbacks suppressed [ 194.844761][ T9490] netlink: 756 bytes leftover after parsing attributes in process `syz.2.954'. [ 194.852404][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 195.190574][ T9495] : renamed from bond0 (while UP) [ 195.225840][ T9495] netlink: 32 bytes leftover after parsing attributes in process `syz.2.957'. [ 195.691614][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.965'. [ 195.810875][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 195.838812][ T9520] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 195.860608][ T9520] ip6gretap0: entered promiscuous mode [ 195.860639][ T9520] ip6gretap0: entered allmulticast mode [ 196.034095][ T9535] tipc: Enabled bearer , priority 0 [ 196.035928][ T9531] syzkaller0: entered promiscuous mode [ 196.035950][ T9531] syzkaller0: entered allmulticast mode [ 196.070842][ T9531] tipc: Resetting bearer [ 196.076145][ T9530] tipc: Resetting bearer [ 196.152199][ T9530] tipc: Disabling bearer [ 196.511793][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 196.597604][ T9556] netlink: 52 bytes leftover after parsing attributes in process `syz.2.974'. [ 196.628270][ T9555] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 196.848465][ T9573] sctp: [Deprecated]: syz.4.977 (pid 9573) Use of int in maxseg socket option. [ 196.848465][ T9573] Use struct sctp_assoc_value instead [ 197.095646][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 197.164822][ T9580] syzkaller1: entered promiscuous mode [ 197.164849][ T9580] syzkaller1: entered allmulticast mode [ 197.235219][ T9589] netlink: 9 bytes leftover after parsing attributes in process `syz.2.983'. [ 197.290297][ T9596] netlink: 5 bytes leftover after parsing attributes in process `syz.2.983'. [ 197.334541][ T9589] gretap0: entered promiscuous mode [ 197.402200][ T9596] 0ªî{X¹¦: renamed from gretap0 [ 197.436944][ T9596] 0ªî{X¹¦: left promiscuous mode [ 197.436971][ T9596] 0ªî{X¹¦: entered allmulticast mode [ 197.492090][ T9596] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 197.514799][ T9598] tipc: Enabled bearer , priority 0 [ 197.602743][ T9601] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.878212][ T9590] syzkaller0: entered promiscuous mode [ 197.878247][ T9590] syzkaller0: entered allmulticast mode [ 197.879133][ T9590] tipc: Resetting bearer [ 197.923347][ T9588] tipc: Resetting bearer [ 198.123148][ T5626] Bluetooth: hci1: connection err: -111 [ 200.393424][ T9588] tipc: Disabling bearer [ 200.667495][ T976] tipc: Node number set to 1 [ 201.104671][ T9647] netlink: 104 bytes leftover after parsing attributes in process `syz.0.993'. [ 201.239215][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 201.358925][ T9644] netlink: 44 bytes leftover after parsing attributes in process `syz.0.993'. [ 201.358953][ T9644] netlink: 43 bytes leftover after parsing attributes in process `syz.0.993'. [ 201.358971][ T9644] netlink: 43 bytes leftover after parsing attributes in process `syz.0.993'. [ 201.703169][ T9660] ip6erspan0: entered allmulticast mode [ 201.988488][ T9673] Cannot find set identified by id 4 to match [ 201.990991][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.998'. [ 201.991027][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.998'. [ 202.110368][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 202.120903][ T9675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1001'. [ 202.226336][ T9675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1001'. [ 202.367397][ T9681] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 202.623203][ T9690] 8021q: VLANs not supported on ip6tnl0 [ 203.078173][ T9719] Cannot find del_set index 0 as target [ 203.796302][ T9756] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20000 [ 203.822113][ T9756] x_tables: duplicate underflow at hook 1 [ 204.269502][ T9774] syzkaller0: entered promiscuous mode [ 204.269530][ T9774] syzkaller0: entered allmulticast mode [ 204.774500][ T9795] netlink: 'syz.2.1033': attribute type 3 has an invalid length. [ 205.726723][ T9835] netlink: zone id is out of range [ 205.726746][ T9835] netlink: zone id is out of range [ 205.726755][ T9835] netlink: zone id is out of range [ 205.726764][ T9835] netlink: zone id is out of range [ 205.726772][ T9835] netlink: zone id is out of range [ 205.726781][ T9835] netlink: zone id is out of range [ 205.727135][ T9835] netlink: zone id is out of range [ 205.727146][ T9835] netlink: zone id is out of range [ 205.727156][ T9835] netlink: zone id is out of range [ 205.727165][ T9835] netlink: zone id is out of range [ 206.044236][ T9846] vlan3: entered allmulticast mode [ 206.044259][ T9846] bridge1: entered allmulticast mode [ 206.712672][ T5633] Bluetooth: hci0: command 0x0c20 tx timeout [ 206.712769][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 206.712812][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 206.712854][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 206.863770][ T9872] __nla_validate_parse: 7 callbacks suppressed [ 206.863790][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 207.461482][ T9361] IPVS: starting estimator thread 0... [ 207.659361][ T9893] IPVS: Scheduler module ip_vs_mh not found [ 207.659455][ T9905] IPVS: using max 28 ests per chain, 67200 per kthread [ 208.065891][ T9903] syzkaller0: entered promiscuous mode [ 208.065921][ T9903] syzkaller0: entered allmulticast mode [ 209.316741][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 209.422336][ T9967] tipc: Enabled bearer , priority 9 [ 209.457957][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 209.996398][ T9327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.996429][ T9327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.259980][T10005] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1088'. [ 210.378946][T10012] xt_REDIRECT: bad rangesize 26624. [ 210.473898][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'. [ 210.570965][T10019] sctp: [Deprecated]: syz.1.1092 (pid 10019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.570965][T10019] Use struct sctp_sack_info instead [ 210.806942][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 210.806969][T10021] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1091'. [ 211.271551][T10037] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1096'. [ 211.403615][T10043] Bluetooth: hci0: load_link_keys: too big key_count value 65281 [ 211.412216][T10047] netlink: 'syz.3.1100': attribute type 1 has an invalid length. [ 211.666437][T10047] 8021q: adding VLAN 0 to HW filter on device bond9 [ 211.756031][T10048] bond5: (slave veth0_to_bond): Releasing active interface [ 211.756063][T10048] veth0_to_bond: left promiscuous mode [ 211.756299][T10048] veth0_to_bond: left allmulticast mode [ 211.811599][T10048] bond9: (slave veth0_to_bond): making interface the new active one [ 211.827168][T10048] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 211.899375][T10052] bond9: entered promiscuous mode [ 211.899400][T10052] veth0_to_bond: entered promiscuous mode [ 211.900563][T10052] bond9: entered allmulticast mode [ 211.900580][T10052] veth0_to_bond: entered allmulticast mode [ 212.014046][ T31] audit: type=1804 audit(1791414653.111:6): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1101" name="/newroot/211/cgroup.controllers" dev="tmpfs" ino=1093 res=1 errno=0 [ 212.016094][ T31] audit: type=1800 audit(1791414653.111:7): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1101" name="cgroup.controllers" dev="tmpfs" ino=1093 res=0 errno=0 [ 212.264529][T10070] net_ratelimit: 496 callbacks suppressed [ 212.264552][T10070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.417734][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 212.609166][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1105'. [ 212.661661][T10077] ip_vti0: entered promiscuous mode [ 212.661855][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 212.908084][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 213.185025][T10100] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20004 [ 213.191160][T10102] team0: No ports can be present during mode change [ 213.236595][T10107] netlink: set zone limit has 4 unknown bytes [ 213.344060][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1114'. [ 213.446598][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 213.446638][T10118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.504181][T10116] netlink: 'syz.4.1117': attribute type 32 has an invalid length. [ 213.504207][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 213.667431][T10116] bond3: option coupled_control: invalid value (192) [ 213.680993][T10116] bond3 (unregistering): Released all slaves [ 213.970494][T10136] netlink: 'syz.2.1121': attribute type 10 has an invalid length. [ 213.971617][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.971940][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.028798][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.028938][T10136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.029259][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.029395][T10136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.084998][T10109] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 214.087391][T10136] : (slave bridge0): Enslaving as an active interface with an up link [ 214.145433][T10141] smbdirect: ib_dev[syz1] removed [ 214.209225][T10143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.270869][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 214.270962][T10136] bridge_slave_1: left allmulticast mode [ 214.270984][T10136] bridge_slave_1: left promiscuous mode [ 214.271367][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.309613][T10136] bridge_slave_0: left allmulticast mode [ 214.309641][T10136] bridge_slave_0: left promiscuous mode [ 214.309949][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.349282][T10136] : (slave bridge0): Releasing backup interface [ 215.432860][ T5616] Bluetooth: hci1: command 0x0401 tx timeout [ 219.998207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.380065][T10164] netlink: 'syz.1.1125': attribute type 7 has an invalid length. [ 273.440468][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 273.528751][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 274.306234][T10210] netlink: 'syz.4.1138': attribute type 29 has an invalid length. [ 274.854754][T10227] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1140'. [ 274.861420][T10229] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1140'. [ 274.893813][T10227] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1140'. [ 275.755717][T10265] sock: sock_set_timeout: `syz.0.1149' (pid 10265) tries to set negative timeout [ 275.829384][T10264] netlink: 344 bytes leftover after parsing attributes in process `syz.0.1149'. [ 275.854762][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'. [ 276.162143][T10292] ip_tables: iptables: counters copy to user failed while replacing table [ 276.171334][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 276.913825][T10313] syzkaller0: entered promiscuous mode [ 276.913852][T10313] syzkaller0: entered allmulticast mode [ 276.921829][T10313] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.186259][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 277.186297][T10303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 277.253115][ T9291] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.253289][ T9291] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.253452][ T9291] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.253582][ T9291] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.832944][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 278.737324][T10271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.080109][T10336] netlink: 'syz.4.1161': attribute type 3 has an invalid length. [ 279.172338][T10339] x_tables: duplicate underflow at hook 2 [ 279.202316][T10339] __nla_validate_parse: 2 callbacks suppressed [ 279.202337][T10339] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1163'. [ 279.733249][T10367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1167'. [ 279.734202][T10368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1167'. [ 280.348922][T10383] netlink: 'syz.4.1172': attribute type 11 has an invalid length. [ 281.295073][T10425] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1180'. [ 281.458172][T10431] ip6t_frag: unknown flags 6 [ 281.812678][T10443] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1183'. [ 281.813463][T10443] netlink: 'syz.3.1183': attribute type 7 has an invalid length. [ 281.813482][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1183'. [ 281.813519][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 281.917322][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1183'. [ 282.321469][T10452] openvswitch: netlink: Missing key (keys=40, expected=100) [ 282.353326][T10452] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1186'. [ 282.353359][T10452] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1186'. [ 282.392657][ T52] Bluetooth: hci0: command 0x0c20 tx timeout [ 282.392724][ T5616] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 282.919760][T10477] ip_tables: iptables: counters copy to user failed while replacing table [ 283.042140][T10473] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.338186][T10496] xt_l2tp: missing protocol rule (udp|l2tpip) [ 284.758136][T10543] netlink: NAT attribute has 4 unknown bytes [ 284.758175][T10543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.829735][T10541] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 285.037786][T10549] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.054395][T10549] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.095636][T10549] block nbd3: not configured, cannot reconfigure [ 285.270425][T10554] ÿÿÿÿÿÿ4: renamed from vlan1 (while UP) [ 285.728021][T10573] __nla_validate_parse: 3 callbacks suppressed [ 285.728042][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1218'. [ 285.986180][T10585] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1223'. [ 286.144133][T10587] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1224'. [ 286.523093][T10605] openvswitch: netlink: IPv4 tunnel dst address is zero [ 286.745184][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 286.745350][T10608] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 288.840362][T10591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1226'. [ 289.077632][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 289.540820][T10627] netlink: 'syz.3.1237': attribute type 18 has an invalid length. [ 289.914175][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 290.237869][T10659] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1243'. [ 290.275868][T10649] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 290.316503][T10652] syzkaller1: entered promiscuous mode [ 290.316531][T10652] syzkaller1: entered allmulticast mode [ 290.466171][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 290.837025][T10678] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20004 [ 290.918043][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 290.921230][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 290.958188][T10691] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1251'. [ 291.059088][T10694] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 291.122155][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 291.125691][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 291.175416][T10688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 291.208280][T10688] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 292.004397][T10711] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 292.260538][T10719] openvswitch: netlink: Missing key (keys=40, expected=100) [ 292.269819][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1260'. [ 292.304757][T10719] netlink: 412 bytes leftover after parsing attributes in process `syz.1.1259'. [ 293.079786][T10751] netlink: 'syz.3.1270': attribute type 2 has an invalid length. [ 293.235538][T10751] openvswitch: netlink: Flow actions attr not present in new flow. [ 293.666900][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 293.811154][T10775] x_tables: duplicate underflow at hook 1 [ 293.976236][T10773] team0: Device xfrm0 is of different type [ 294.289879][T10786] syzkaller0: entered promiscuous mode [ 294.289907][T10786] syzkaller0: entered allmulticast mode [ 294.969663][T10817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1284'. [ 296.071418][T10869] __nla_validate_parse: 2 callbacks suppressed [ 296.071443][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 296.498580][T10870] dvmrp0: entered allmulticast mode [ 296.693127][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 297.580412][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 297.592937][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 299.159080][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 299.159119][T11000] netlink: 'syz.1.1314': attribute type 30 has an invalid length. [ 299.249780][T11001] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 299.249823][T11001] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 299.249844][T11001] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 299.687443][T11027] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.1318'. [ 299.723923][ T9408] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.724008][ T9408] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.724048][ T9408] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.724087][ T9408] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.177873][T11047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 300.182142][T11047] xt_cgroup: invalid path, errno=-2 [ 300.355738][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 300.464864][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1323'. [ 300.917978][T11073] sctp: [Deprecated]: syz.4.1326 (pid 11073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.917978][T11073] Use struct sctp_sack_info instead [ 300.967643][T11076] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 300.967670][T11076] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 300.969924][T11076] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 300.969946][T11076] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 301.091534][T11078] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 301.091561][T11078] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 301.106368][T11080] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 301.106424][T11080] netlink: 'syz.0.1328': attribute type 2 has an invalid length. [ 301.322696][T11100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1331'. [ 301.357008][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 301.631663][T11094] syzkaller1: entered promiscuous mode [ 301.631689][T11094] syzkaller1: entered allmulticast mode [ 302.158824][T11124] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20001 [ 302.325994][T11132] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1334'. [ 303.844832][T11162] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1342'. [ 304.256641][T11171] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1345'. [ 304.657694][T11187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1348'. [ 304.663568][T11187] netlink: 'syz.0.1348': attribute type 16 has an invalid length. [ 304.663617][T11187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1348'. [ 304.663693][T11187] veth0_macvtap: entered allmulticast mode [ 305.192730][T11213] netlink: 'syz.4.1351': attribute type 83 has an invalid length. [ 305.433957][T11223] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1352'. [ 305.573139][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 305.829844][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1354'. [ 306.432671][T11263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.939135][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 306.939165][T11285] netlink: 'syz.2.1366': attribute type 3 has an invalid length. [ 307.019757][T11287] ip6t_rt: too many addresses specified [ 307.215271][T11293] team0: Device ipvlan0 failed to register rx_handler [ 307.561887][T11302] IPVS: dh: FWM 3 0x00000003 - no destination available [ 307.561988][ C0] IPVS: dh: FWM 3 0x00000003 - no destination available [ 307.703611][T11305] netlink: 524 bytes leftover after parsing attributes in process `syz.1.1372'. [ 307.861672][T11309] netlink: 'syz.4.1374': attribute type 2 has an invalid length. [ 307.862581][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 308.066722][T11316] netlink: 'syz.0.1379': attribute type 3 has an invalid length. [ 308.089064][T11318] ¾x9ÿ: renamed from bridge_slave_0 [ 308.150878][T11323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 308.408634][T11334] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1381'. [ 308.677826][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1382'. [ 308.730215][T11337] veth4: entered promiscuous mode [ 308.730242][T11337] veth4: entered allmulticast mode [ 309.760134][T11377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1394'. [ 309.760288][T11376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1394'. [ 309.955660][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 310.030853][T11356] syz.0.1389 (11356) used greatest stack depth: 15968 bytes left [ 310.035696][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 310.456752][T11410] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 310.472155][T11410] netlink: 'syz.0.1401': attribute type 1 has an invalid length. [ 310.678665][T11419] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 311.438675][T11448] : (slave bond_slave_0): Releasing backup interface [ 311.472692][T11448] : (slave bond_slave_1): Releasing backup interface [ 311.588259][T11448] team0: Port device team_slave_0 removed [ 311.620100][T11448] team0: Port device team_slave_1 removed [ 311.622316][T11448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.622340][T11448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.641223][T11448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.641295][T11448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.711190][T11459] veth0: mtu less than device minimum [ 311.800900][T11459] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 311.800941][T11459] veth0_vlan: entered allmulticast mode [ 311.801262][T11459] veth0_vlan: left promiscuous mode [ 311.835923][T11459] team0: Device veth0_vlan failed to register rx_handler [ 312.041828][T11473] __nla_validate_parse: 4 callbacks suppressed [ 312.041852][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1413'. [ 312.051191][T11474] netlink: 'syz.4.1414': attribute type 5 has an invalid length. [ 312.142810][T11476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1414'. [ 312.643234][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'. [ 312.738481][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 312.738507][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 312.826029][T11493] netlink: 'syz.3.1420': attribute type 11 has an invalid length. [ 312.888476][T11493] netlink: Setting conntrack mark requires 'commit' flag. [ 312.888513][T11493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.075515][T11495] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 313.157953][T11495] bond2: entered promiscuous mode [ 313.158509][T11495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.159830][T11511] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 313.182077][T11511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.214414][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1421'. [ 313.340434][T11514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1424'. [ 316.225216][T11525] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1427'. [ 316.230911][T11529] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1427'. [ 316.544404][T11549] netlink: 'syz.3.1431': attribute type 4 has an invalid length. [ 316.600914][T11554] netlink: 'syz.3.1431': attribute type 4 has an invalid length. [ 316.787618][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1432'. [ 316.977056][T11569] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 316.995462][T11570] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 317.108279][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 317.108323][T11572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.182630][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1435'. [ 317.182673][T11576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.585251][T11593] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 317.642697][T11592] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 317.666843][T11596] sock: sock_set_timeout: `syz.0.1441' (pid 11596) tries to set negative timeout [ 317.699642][T11592] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 318.161016][T11618] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 318.410888][T11618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.590926][T11618] macvtap0: entered allmulticast mode [ 318.739744][T11642] Bluetooth: hci0: unsupported parameter 5135 [ 318.739769][T11642] Bluetooth: hci0: unsupported parameter 8192 [ 318.739783][T11642] Bluetooth: hci0: unsupported parameter 5135 [ 318.739795][T11642] Bluetooth: hci0: unsupported parameter 8192 [ 318.781999][T11630] bond3: (slave geneve2): making interface the new active one [ 318.809292][T11630] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 318.963105][T11644] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 319.567004][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 319.712844][T11662] bond3: entered promiscuous mode [ 319.712870][T11662] bond3: entered allmulticast mode [ 320.468935][T11688] syzkaller0: entered promiscuous mode [ 320.468961][T11688] syzkaller0: entered allmulticast mode [ 320.939129][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 321.481079][T11723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1464'. [ 321.554216][T11723] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1464'. [ 322.933991][T11759] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 323.425019][T11779] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 323.426843][T11779] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 323.428872][T11779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1482'. [ 323.562915][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1484'. [ 323.795690][T11793] netlink: 'syz.0.1486': attribute type 1 has an invalid length. [ 324.015374][T11788] syzkaller0: entered promiscuous mode [ 324.015403][T11788] syzkaller0: entered allmulticast mode [ 324.123131][T11798] tipc: Enabled bearer , priority 0 [ 324.147788][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 324.183805][T11793] bond4: (slave bridge3): making interface the new active one [ 324.187796][T11793] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 324.188030][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 324.334904][T11817] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1491'. [ 324.359851][T11817] netlink: 'syz.4.1491': attribute type 4 has an invalid length. [ 324.359876][T11817] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1491'. [ 324.497362][T11819] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 324.551844][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1492'. [ 324.611809][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 325.582955][T11830] netlink: 'syz.4.1495': attribute type 10 has an invalid length. [ 326.935204][T11811] tipc: Resetting bearer [ 326.941356][T11814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.942209][T11814] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1490'. [ 326.967069][T11819] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 326.985078][T11783] tipc: Resetting bearer [ 327.049304][T11783] tipc: Disabling bearer [ 327.270882][T11830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.353989][T11840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'. [ 327.354036][T11840] openvswitch: netlink: Flow key attr not present in new flow. [ 327.421606][ T5616] Bluetooth: hci3: unexpected event 0x0e length: 315 > 255 [ 327.421646][ T5616] Bluetooth: hci3: unexpected event for opcode 0x1924 [ 328.592826][T11898] __nla_validate_parse: 3 callbacks suppressed [ 328.592852][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 328.878914][T11911] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1513'. [ 329.568827][T11940] netlink: 'syz.3.1522': attribute type 2 has an invalid length. [ 330.301400][T11976] vlan0: entered allmulticast mode [ 330.301426][T11976] veth0_vlan: entered allmulticast mode [ 330.417302][T11986] openvswitch: netlink: Duplicate or invalid key (type 0). [ 330.730503][T11980] bond2: left promiscuous mode [ 330.730662][T11980] veth0_to_bond: left promiscuous mode [ 330.749625][T11980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 330.768162][T11980] bond3: left promiscuous mode [ 330.768730][T11980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.792104][T11993] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1535'. [ 330.935480][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 331.167312][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'. [ 331.419433][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'. [ 331.673847][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1543'. [ 331.875360][T12031] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 331.875833][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 332.320945][T12043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 332.405493][T12043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1549'. [ 333.269828][T12076] h: entered promiscuous mode [ 333.309252][T12076] sctp: [Deprecated]: syz.3.1556 (pid 12076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.309252][T12076] Use struct sctp_sack_info instead [ 333.377823][T12067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.415267][ T7207] ------------[ cut here ]------------ [ 333.415285][ T7207] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 333.415304][ T7207] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: kworker/u8:13/7207 [ 333.441768][ T7207] Modules linked in: [ 333.445827][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 333.455547][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.465687][ T7207] Workqueue: nbd-del nbd_dev_remove_work [ 333.472122][ T7207] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 333.478293][ T7207] Code: 07 8c 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 333.498192][ T7207] RSP: 0018:ffffc9000789f9d0 EFLAGS: 00010206 [ 333.504389][ T7207] RAX: 1ffffd1ffff926c5 RBX: 0000607edafcc540 RCX: dffffc0000000000 [ 333.512663][ T7207] RDX: 0000000000000001 RSI: ffffffff8e41699f RDI: 00000000ffffffff [ 333.520684][ T7207] RBP: ffffe8ffffc93540 R08: ffffffff907a657f R09: 1ffffffff20f4caf [ 333.528969][ T7207] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: ffff88804f2a8000 [ 333.537089][ T7207] R13: 0000000000000000 R14: ffffe8ffffc93628 R15: 1ffffffff1cdd5de [ 333.545196][ T7207] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 333.556618][ T7207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.563311][ T7207] CR2: 00002000000004c4 CR3: 000000005cd6c000 CR4: 00000000003526f0 [ 333.571623][ T7207] Call Trace: [ 333.575041][ T7207] [ 333.578137][ T7207] blk_mq_free_tag_set+0x617/0x790 [ 333.583410][ T7207] ? process_scheduled_works+0x97a/0x1630 [ 333.589192][ T7207] nbd_dev_remove_work+0x4f/0xe0 [ 333.594323][ T7207] process_scheduled_works+0xc3d/0x1630 [ 333.599969][ T7207] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.606105][ T7207] ? assign_work+0x3cf/0x5d0 [ 333.610780][ T7207] worker_thread+0xa47/0xfb0 [ 333.615540][ T7207] kthread+0x38b/0x480 [ 333.619658][ T7207] ? __pfx_worker_thread+0x10/0x10 [ 333.624864][ T7207] ? __pfx_kthread+0x10/0x10 [ 333.629493][ T7207] ret_from_fork+0x514/0xb70 [ 333.634212][ T7207] ? __pfx_ret_from_fork+0x10/0x10 [ 333.639367][ T7207] ? __switch_to+0xc89/0x1420 [ 333.644230][ T7207] ? __pfx_kthread+0x10/0x10 [ 333.648876][ T7207] ret_from_fork_asm+0x1a/0x30 [ 333.653802][ T7207] [ 333.656879][ T7207] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 333.664196][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 333.673776][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.683864][ T7207] Workqueue: nbd-del nbd_dev_remove_work [ 333.689548][ T7207] Call Trace: [ 333.692863][ T7207] [ 333.695824][ T7207] vpanic+0x56d/0xa60 [ 333.699858][ T7207] ? __pfx__printk+0x10/0x10 [ 333.704526][ T7207] ? __pfx_vpanic+0x10/0x10 [ 333.709101][ T7207] ? is_bpf_text_address+0x292/0x2b0 [ 333.714459][ T7207] ? is_bpf_text_address+0x26/0x2b0 [ 333.719727][ T7207] panic+0xc5/0xd0 [ 333.723511][ T7207] ? __pfx_panic+0x10/0x10 [ 333.728017][ T7207] ? ret_from_fork_asm+0x1a/0x30 [ 333.733018][ T7207] __warn+0x315/0x4c0 [ 333.737056][ T7207] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 333.742414][ T7207] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 333.747776][ T7207] __report_bug+0x276/0x570 [ 333.752353][ T7207] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 333.757691][ T7207] ? __pfx___report_bug+0x10/0x10 [ 333.762778][ T7207] ? do_raw_spin_lock+0x12b/0x2f0 [ 333.767871][ T7207] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 333.773303][ T7207] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 333.778633][ T7207] report_bug+0x16b/0x220 [ 333.783026][ T7207] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 333.788436][ T7207] ? cleanup_srcu_struct+0x3d8/0x8b0 [ 333.793759][ T7207] handle_bug+0x9c/0x200 [ 333.798043][ T7207] exc_invalid_op+0x1a/0x50 [ 333.802585][ T7207] asm_exc_invalid_op+0x1a/0x20 [ 333.807480][ T7207] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 333.813523][ T7207] Code: 07 8c 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 333.833178][ T7207] RSP: 0018:ffffc9000789f9d0 EFLAGS: 00010206 [ 333.839330][ T7207] RAX: 1ffffd1ffff926c5 RBX: 0000607edafcc540 RCX: dffffc0000000000 [ 333.847344][ T7207] RDX: 0000000000000001 RSI: ffffffff8e41699f RDI: 00000000ffffffff [ 333.855360][ T7207] RBP: ffffe8ffffc93540 R08: ffffffff907a657f R09: 1ffffffff20f4caf [ 333.863372][ T7207] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: ffff88804f2a8000 [ 333.871393][ T7207] R13: 0000000000000000 R14: ffffe8ffffc93628 R15: 1ffffffff1cdd5de [ 333.879443][ T7207] blk_mq_free_tag_set+0x617/0x790 [ 333.884617][ T7207] ? process_scheduled_works+0x97a/0x1630 [ 333.890386][ T7207] nbd_dev_remove_work+0x4f/0xe0 [ 333.895374][ T7207] process_scheduled_works+0xc3d/0x1630 [ 333.901005][ T7207] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.907079][ T7207] ? assign_work+0x3cf/0x5d0 [ 333.911740][ T7207] worker_thread+0xa47/0xfb0 [ 333.916416][ T7207] kthread+0x38b/0x480 [ 333.920575][ T7207] ? __pfx_worker_thread+0x10/0x10 [ 333.925743][ T7207] ? __pfx_kthread+0x10/0x10 [ 333.930378][ T7207] ret_from_fork+0x514/0xb70 [ 333.935021][ T7207] ? __pfx_ret_from_fork+0x10/0x10 [ 333.940175][ T7207] ? __switch_to+0xc89/0x1420 [ 333.944907][ T7207] ? __pfx_kthread+0x10/0x10 [ 333.949540][ T7207] ret_from_fork_asm+0x1a/0x30 [ 333.954383][ T7207] [ 333.958031][ T7207] Kernel Offset: disabled [ 333.962378][ T7207] Rebooting in 86400 seconds..