last executing test programs: 5.19486275s ago: executing program 2 (id=5873): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x800) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x1d, 0x381a, 0x8, 0x6, 0xff}) 5.144221525s ago: executing program 2 (id=5874): readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000080)=""/144, 0x90}, {&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/191, 0xbf}, {&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/116, 0x74}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f00000005c0)=""/38, 0x26}], 0x9) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x390, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x374, 0x3, 0x0, 0x1, [@nested={0x2b8, 0x1, 0x0, 0x1, [@nested={0x2b1, 0x12f, 0x0, 0x1, [@nested={0x260, 0x3, 0x0, 0x1, [@typed={0x8, 0x13c, 0x0, 0x0, @fd=r2}, @typed={0x55, 0x36, 0x0, 0x0, @binary="df68d4855819b84bbbe49356b2af5fdbf9a95d335aa9b701dd51bae1ba6962a1aab5977b9a680943a22ce910588c6bfad9d61324dd837956b1c3ce25a1276c4443f39414b9950bb4b47ed01aedfdddf326"}, @typed={0xc, 0x5d, 0x0, 0x0, @u64=0xf0b}, @nested={0x1a0, 0x102, 0x0, 0x1, [@typed={0x14, 0xd3, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xb9}, @generic="815d3b94ec245215455134815be68f48e234e8827ad2c5d6b45f71ddd2c0baaaf8a1184d0954e95403a720c0442fdb6382c12fb9490fff91634c14fb61f99de5d8508a3ea8778396a3f36d5545894d9adcfcd4ec80b577d44bb989b94dff5997d87e1f55aede25fe2ca7028656f9ef187c35440c6ec6716f5d340bb4d1c1207569618a5defe2f6ab8733530ead35111fa12b14140139431c40d602ee7789229ba49ff865959dd2ecfd9985a67480d15eb68dcb2e6b53ba8cc424ded7ec30e78f3bb5cd01", @generic="d2f127684d2b78e4420fe8b3878eb6ab6354806b4d6929b81f4eacb4135153b28de1bef5cb4b538a960ed6d705d442e5a5f33f07cada5e524f0edd8264d038515eaab9c2ec14b05a39ec18581128beafb6ecc88a6c51ff1135be1900f0ccc60c32d4ddee65bcc17db73d13f0bf70f2d1da178cb71f3b140dced815c8af4e4af0cadd54420cfc2340fe23999311bc1f77f988d12195fd6d13222bd95a9a4cd9740fe7773da13c57a2457818f3b2d2dbf9ab24f858", @nested={0x4, 0x129}, @generic, @typed={0x6, 0x5c, 0x0, 0x0, @str='-\x00'}]}, @generic="84b6165b7de7aa22889b8af120f4b27fe814fcfd6bdf4c462550296509cf8f4df72b6ca974b2acff7f30b654046ce8546e18bdb2620a85a0874347d4d5179cb99fb464df708c1dbde30df81fc133bab6"]}, @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x4c}, @typed={0x8, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05a33f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0xb, 0x65, 0x0, 0x0, @str='+)\xa8.\xb4$\x00'}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) 3.278150298s ago: executing program 2 (id=5880): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05042bbd7000fedbdf2501000000080001004303d94aeb0874be9bd15edd07506900a7ac184bf026f39f1e8d909517f34fee7288a2379edc474dc667d716e82d73e9fe5e3119a2a88d12cd32d929d2cdee70d5e2239d781b32355da4a5211f818d975d952099acc9467c5fe11d0d5c328b9a29ed515b66d72388756b4bef5b431dc72f41910cee2595d5400e60f62710d8fa4c44ddde732d0ad193377ebba2ff48a7196b925a21734f715099e1049dbf70", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000003000008000600", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x7f, r6}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x5, 0x1, 0x1, @loopback, @remote, 0x7800, 0x40, 0x0, 0x7}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x10, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x38, 0x2b, 0x5, 0x42, @local, @remote, 0x10, 0x8000, 0x8, 0x9}}) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r15, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r14], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r13, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b", 0x44, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r15, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) getpeername$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x100000ca, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x5, 0x9, 0x21, @empty, @loopback, 0x21, 0x7800, 0x8, 0xf6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000001300)=ANY=[@ANYBLOB="5c050000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYRESDEC, @ANYRES32=r3, @ANYBLOB="b800028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400400000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="000102804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400df085c0b0700000006000302030000000000060002000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000d00000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r11, @ANYBLOB="780202804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400018005000100010005000400026000000000a0028000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040005000000"], 0x55c}, 0x1, 0x0, 0x0, 0x2400c090}, 0x14008891) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES8=r8], 0x0) 2.667691381s ago: executing program 2 (id=5889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x19, 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000110087d44a372eaf541d000a07000000", @ANYRES32=r2], 0x44}}, 0x2000800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) (async) r3 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000540)) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r5, 0x89e1, &(0x7f0000000600)={@multicast1, @remote}) (async) r6 = socket$inet(0x10, 0x3, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_int(r7, 0x107, 0xa, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c001ff700", @ANYRES32=r8, @ANYBLOB="14000100fc0200"/20], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) (async) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) (async, rerun: 32) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0xe3, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (rerun: 32) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000580)={r9, 0x3, 0xe, 0x4}) setsockopt$XDP_TX_RING(r12, 0x11b, 0x3, &(0x7f00000005c0)=0x100, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 2.526134321s ago: executing program 2 (id=5892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000040)={@private1, @private0}) (async) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000040)={@private1, @private0}) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) 2.111814723s ago: executing program 2 (id=5898): socket$kcm(0x1e, 0x4, 0x0) (async) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) (async) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000040)=0x3) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xb}, 0x1c) listen(r6, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) (async) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0xd) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656e65766500000c000280060005000000000000b34176e6b2665ee9ba7bcac6c7a77e308bffeeb922cf87c09a78dbe39d7db6ba51dac5c8ef2084541e7f1713d2082a82e860472993f6d6a281998b34cedbb3aabc578936cd1f60a7d9e5dc8df2c4f1500943d68bfa3bdcf5e59ecfc56ec20f4f70599107183d55abf2accd9b9088b1ca138a78338e7446369ff7e7"], 0x3c}}, 0x404c840) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010067656e65766500000c000280060005000000000000b34176e6b2665ee9ba7bcac6c7a77e308bffeeb922cf87c09a78dbe39d7db6ba51dac5c8ef2084541e7f1713d2082a82e860472993f6d6a281998b34cedbb3aabc578936cd1f60a7d9e5dc8df2c4f1500943d68bfa3bdcf5e59ecfc56ec20f4f70599107183d55abf2accd9b9088b1ca138a78338e7446369ff7e7"], 0x3c}}, 0x404c840) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd24, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd24, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2.002886178s ago: executing program 4 (id=5899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000004c0)={0x117, {{0xa, 0x4e21, 0x2, @mcast1, 0x35}}}, 0x88) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000010025bd7000fadbdf2700000000", @ANYRES32=r2, @ANYBLOB="d380020000000200200012800f000100626f6e645f736c4e766500000c0005800600"], 0x40}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x300, 0x70bd29, 0x25dfdbfb, {{@in=@local, @in6=@mcast2, 0x4e22, 0x6, 0x4e20, 0xdc, 0xa, 0xa0, 0x80, 0xc}, 0x0, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000041) listen(r3, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0xa0}}, 0x0) 1.861617592s ago: executing program 4 (id=5903): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket(0x10, 0x3, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) read(r2, &(0x7f0000000540)=""/4096, 0x1000) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa) 1.321384393s ago: executing program 1 (id=5910): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000500)=""/92, 0x5c, 0x0, &(0x7f0000000580)=""/86, 0x56}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069109c000000000004000000000000008500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xae}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x6d, &(0x7f0000000180)=""/109, 0x40f00, 0x10, '\x00', r4, @cgroup_sysctl=0x12, r2, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xf, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f0000000300), 0x10, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000500)=""/92, 0x5c, 0x0, &(0x7f0000000580)=""/86, 0x56}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069109c000000000004000000000000008500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newtaction={0xf58, 0x30, 0x25, 0x0, 0x0, {}, [{0xf44, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}, [{}, {}, {}, {0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x100}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x8, 0xa, 0x9, 0xe5ad}, {0x2, 0xfd, 0x3, 0x7}]}]}, {0xa4, 0x6, "aef41341fdedc57514e9e6b7c9a7d6c6f2710911ea3f03808c1cd540f74547537bf4bd3de3af39a159c644fdacd41501de3816424920bd50948bb71277cbcb3af35a087dfca43335c1d1f7676239b2932026b5e5e0d02760eb4305f349000de9580b5ad411948e208801ff4e11df28aa70701228e871fa62bd8e1d2b3abd2494e13f35b5933263a1b9ee64b0161ef7cc4e38117db59c3db871f9eb7078642fdf"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xf58}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xae}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x10000, 0x6d, &(0x7f0000000180)=""/109, 0x40f00, 0x10, '\x00', r4, @cgroup_sysctl=0x12, r2, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xf, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f0000000300), 0x10, 0xf}, 0x94) (async) 1.246186042s ago: executing program 1 (id=5912): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x5, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r11 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r9, r12, 0x25, 0x0, @val=@netkit}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 1.144804158s ago: executing program 3 (id=5915): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000180)=@ethtool_eee={0x45, 0x5, 0x401, 0x7, 0x7, 0x7, 0xfffffffe, 0x6, [0x7, 0x1]}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "a9"}}}}}}}, 0x19) (async) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "a9"}}}}}}}, 0x19) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0800000000000000280012800b0001006272696467650000180002800a001400aaaaaaaaaabb00000800090000000000a6bcb1323dc3525c6fd2698d01676bedd3432a6ae119493defeed2f4863c1cb8c54eb88fc57d02ef619fdbaeb2e0425eeaeae1336b529c73e710d6e222ed2a237d4539c13f3355cbaafa36dc7e2a6cc89e03a999862fffffccaddeb699ba2ce3da6611a4cd860a6025963073c064b25c91dcb86fb2cc9923316a1d3ff94fd365c7ff650b9baae3f558ac0c06aefb79ef6f1cef738d6678e101362c7e730bb2cb3e3ff9d0707abc9f3bd373043c36e868bbf81af35374a7e718a0fcc57f51bc7baaaaad9dc4b28ab68fcdb8e7a1a51746ecbe4d4846eed3c1dbda4f0a4f7800"/286], 0x48}}, 0x0) 1.008738661s ago: executing program 0 (id=5916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newneigh={0x3c, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x0, r5, 0x80, 0x10, 0x3}, [@NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_MAC={0x5e, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @NDA_PROTOCOL={0x5, 0xc, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080001400000000008000240000000180900010073797a30000000000900020073797a3200"], 0x7c}}, 0x0) 955.299001ms ago: executing program 1 (id=5917): getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000340)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a030000000000000000000700000009"], 0xec}}, 0x0) 911.789478ms ago: executing program 4 (id=5918): socketpair(0x28, 0x5, 0x40, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002a000000180001801400020067656e65766530"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x700, 0x8000, 0x156e, 0xfffffff7, {{0x40, 0x4, 0x3, 0x8, 0x100, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @remote, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x5f, 0xffffffffffffffff, [{0x7, 0xf, "e8bd4a754077002392ae19571f"}, {0x0, 0x5, "f3e44f"}, {0x6, 0x5, "dfe6f4"}, {0x0, 0xb, "568d242abe196108a4"}, {0x7, 0xc, "0206fc16964e5abad8df"}, {0x6, 0x12, "f9462126448236041128299553e60166"}, {0x0, 0xf, "1778e0b6974527edef38a786ee"}, {0x0, 0x8, "49d01710ec9e"}]}, @rr={0x7, 0x23, 0x13, [@broadcast, @local, @broadcast, @multicast2, @broadcast, @multicast1, @empty, @private=0x7]}, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0x2, [{@multicast1, 0xe}, {@loopback, 0x6}, {@local, 0xa500}, {@broadcast, 0x55ca}, {@local}, {@remote, 0x6}, {@multicast1, 0x3}]}, @end, @rr={0x7, 0x27, 0x48, [@rand_addr=0x7, @loopback, @remote, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 857.499887ms ago: executing program 0 (id=5919): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000836186d3c9b8fe730acd9837a0b989d7fd5eb31401c7c18dbcdb22d5d3f497df", @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cb57000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080003008a000000"], 0x34}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001"], 0x254}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 770.690551ms ago: executing program 4 (id=5920): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x200}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) syz_emit_ethernet(0xd0, &(0x7f0000000080)={@local, @link_local, @void, {@llc_tr={0x11, {@llc={0xff, 0xfc, "5691", "1834e709fb1d50ece4c6ca772c4f7908fc80082039169738ae5b03aac1be8b7fa1b2686e89ae7393b2c0c8449c2d39b709ec5bc3abae38562e14da61fc87640eb1237a15d33dbf07c586f200e0b93695e27779acbc72695693eb8f01ad6eb6ffff77ec016a3beaa277bda9ec1492a5ecbe55f331c65f436650380646b56f50a9a305a0616d9349b7a14d0e7119ef9dee0f7e895f1006f7f9bcd62ba1169286b404e8e0816db73703dfdb3ca70bfe18d093b5206cafb522802e143d696a1e"}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@getroute={0x14, 0x1a, 0x602, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40811}, 0x8) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000240)="be8b6e23487c728972a6ce2af994b622e5e3adbd0fa40b211fe539fb93969a56f413620b6755f376af7d2eb2a4cb89183db87bde80fade34dc667eae461ec309ce70566b53f469171f92f0c99e857722dbbea6fd827e0d3d88afe89ad9070de3b4389bdfc919a7087e13143011ce1ca4364a032bcad4012d9ec9db", 0x7b, 0x40000, &(0x7f00000003c0)={0xa, 0x0, 0xae0e, @ipv4={'\x00', '\xff\xff', @empty}, 0x11e8, 0x2}, 0x20) 690.554501ms ago: executing program 4 (id=5921): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r3, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 662.565364ms ago: executing program 1 (id=5922): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x4}, 0x38) (async) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x400461f5, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x2, 0x1, 0x302, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x60044}, 0x20000004) (async) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="7b75baea81bd158b04eac6225d", 0xd}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x4000) 575.627455ms ago: executing program 0 (id=5923): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x58, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "f102dcf29e"}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @ptr={0x7, 0x0, 0x0, 0x2, 0xffffffff}, @volatile={0x2, 0x0, 0x0, 0x9, 0x5}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x1}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x5}]}, {0x0, [0x5f, 0x61, 0x30, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000580)=""/70, 0x64, 0x46, 0x1, 0x2, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0xffff, '\x00', r3, r4, 0x1, 0x0, 0x3}, 0x50) 574.05838ms ago: executing program 3 (id=5924): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000002900000004"], 0x30}}], 0x1, 0x4000084) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x13, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x35c}, 0x1, 0x0, 0x0, 0x6c10}, 0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 544.987127ms ago: executing program 0 (id=5925): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)={0x18, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 492.052574ms ago: executing program 1 (id=5926): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x80}, 0x0) 435.727457ms ago: executing program 3 (id=5927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd0000ffff080088"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000001500)={0x0, 0xd18c9b25, &(0x7f0000001480)=[{&(0x7f0000000100)="3b9412c40c2e6957c5744c831ff31b56b7fbb22604466e3872a4bc34c8d023547dbf8a45fed812bc866dfb19753ff22d6985694c35c1300cbc463e2989755b37a66f5a4838be6fb8d08dd2c32ef08a1c14c749d5e5fddbb1ea8f75c9ea6cbca39546f4eb6c45f30a580fde0a54e73f2a45581e7c9615910eb91d955215fdeae742a277bb533f0522907f3272"}, {&(0x7f00000002c0)="8c450d7d6752849b348fa46c846e88a43e5d0797446b72d2c8640ec61a545a1282bb85fe3941f4cee9c4ce33995e1c283c7835882bf67fefdb6339fbd0dcb67124e000dc51acd23818bd68104ab36b02608a78d13a91d78442bb5af66244fd1262c13fa7a6861f504d0e"}, {&(0x7f0000000340)="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"}, {&(0x7f0000001340)="865b4c39c3d8eeff37d4e743c6538d424a147012822f0bc5c8c7c8f72a11cff29c0e28750600fdf9d3bdd19204d96bd32f97844ca32595662511c673ef9612d74df91f9eb808d036827e8e6433b186835e9165a7129e887a834dfb5bccb1f47632bb41cd6e"}, {&(0x7f0000000080)="0189e509d107f9214980c68dc757fc995675fb700fe1a0f1db989b3795713c8995"}, {&(0x7f00000013c0)="89017d30440d742fba2b7624ab92"}, {&(0x7f0000001400)="7779a7f80a2767ea6d2497ec00ef59d3c0e746d4d45a8532faf5a1ae7f062e871a9e0872edcd69f1507836dd38fcfc44495eb07510be18d70912da44d0e642039d7f78434344aa171fb944fb737672c345203060c94c6d9f2c943ac0829bef38122ef741c18f7716ae1ec036397056b5c2598e4db1c83f74f1a236f8a7"}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) 417.701319ms ago: executing program 0 (id=5928): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x810) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 360.238752ms ago: executing program 1 (id=5929): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async, rerun: 32) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000100)) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 274.841074ms ago: executing program 3 (id=5930): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r0, 0x4652a000) 230.546292ms ago: executing program 4 (id=5931): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x19, @void}, 0x10) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x5, 0x9, 0x3, 0x8000000000000000}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) getpeername(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x80) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000180)={0x8, 'veth0_virt_wifi\x00', {'wg2\x00'}, 0x8000}) (async) ioctl$int_in(r0, 0x5421, &(0x7f00000001c0)) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x140d, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x400c1) (async) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)=0x8, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10012800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, 0x0, 0x1, 0x201, 0x0, 0x0, {0x6, 0x0, 0xa}, [@CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa18}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x7, 0x4c9]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x48000}, 0x804) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x101000, 0x0) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000540)) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000580), &(0x7f00000005c0)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000600)="5975b94160bff94db4d69316869c9225", 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x8014) (async) accept4$nfc_llcp(r2, &(0x7f0000000740), &(0x7f00000007c0)=0x60, 0x0) (async) socketpair(0xa, 0x800, 0x2, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000840)={0x1, 0x1}) (async) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000880)={0x802b, 0x3}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000020c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000000940)={0x1708, r7, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x94, 0x2a, [@challenge={0x10, 0x1, 0x8c}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x2, 0x4, @device_a, 0x9, 0x9, 0x1}}, @mesh_id={0x72, 0x6}, @random={0x7, 0x23, "1036f4f053269f243ffde3c8baf7aaafe07aa1f68f05324639a7843ce1a8c04d8c0bb8"}, @perr={0x84, 0x2f, {0x94, 0x3, [{{}, @device_a, 0x1, @void, 0x39}, {{0x0, 0x1}, @device_a, 0x41db, @value=@broadcast, 0x42}, {{}, @broadcast, 0x7, @void, 0x11}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x20, @val="68f5dd01b65d25eefd9e565c62689a00"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1034, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x27, 0x2, "571bfeffed11d7f66abf792801c586749f7fcd3664345234c05a1acc448343e88ee9cb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "463a3d40803571235e7b74e3d4a768681688b7799f20b16b78478a8c5747eba45ce2977a2258cb7b9fe9ed4f77ee514c39aea0068a2387d1c74c370d89a92f9908291c69c10c02cf40186c0c6ddca4dc9a258d0b4d3a943c2980a3759d1a58695851f1c29bbcf27b971e6d4d669beace6bccdd0bdbb4bc8179a6284ae78d8cba928993ce4d9908206ae5a8000f559374fac4b1a5095dd39b259617f9cb6b7a62fecedc20eaa18a9de348d453f7a78727f2b86ddfe3c2f0e112d09e8754259264ba35e67e33bb237d5dd09b414f7694368bc0ba96693bb9e18d0cddbcd255dce27657a9bf0801e5ba2be0bde47acd5a529387d48c5da59ddcb18c49836ecb603ee440f9d6690f205ecb16943af4730a2c88d3c5861db8236cd562f0684b36f1b04621bf758e9f02ca989606c0fc291a5ab0d5a81d155b828c8ecc48f3c825ff50f79e1283422a616dae2149003af801174ac3a405f0c6d3a7f23a8b02b92dc689625a54e7b51910441722c69d7f9931437df5d326d0c8b9234f5306bb01224f552a03fe096106c8d9e59a8c2a1e79daa32639ad2a9d979ae830a1d9985435f5b8b3f7a87a600107837ba0370d88d09dc09ca65319029261d82aef002d0ccc88a09d4b4d4eb3f74ec182384442869c93b7802f0dc546f2660fd7a9095dbe3dd4c7c207da75de47c8b18c2805fdbbca23bd2d49ffb2856ae43f6d5f03bc94945c62d1089fef2d8a4ceb813d839683364050b814900967f5f08853a9184a97196107cbde3028eeb8b93c1c6ff78cde3c5a48cc4521ad8665966d8912bf0785839dbad97e0b0d52688f43e6a9998d770c0d8d3ac2644187b5751f6f077d87a420d848518804253b62ea3122671d5fa92196dc1119d3f3086784898ca1ae1de46b3d8e25146ff67f9b43580c3ca37eaa526e8904cb09882de8d790251da815d44e13e3cd42a36e36a067da019cae4674f8118fde4102f5b5f53e31031e16d427e13af6128d68eed5f50ef9f7973c67c9f79bf36c7a5728037079c867ab832bd01357264013fd5a5f4e12d1f47faa18b352b2cf8c74ade3d3b2e3ed47a322d068352c228b096ae9540f07c88742b2fb631bbc4e1b3ee783b11d6c5fbb1fc4d8bb159afa869e93c4c58a734d59eeea67c12c4fecc886749964a79a4648f92bc9e2bb1fd1a0750529af6c20c14d47f63ad5dfd63141ae0a68b3ef4441cf302c0759d74af1cd3499cd50a7144035034171faaf4d601b170e21de5fcebf9313cf69969ad2ddfed18f61930b311d1f9361aa47ffc5ee63ce3285510228d225552f6ba3a9a36627174f4cb38e5685b26f1de20dd6655da67148933509475a148d9e67743b8273e93229b80fc5395553cabb956d5924b7ebe6b439b68e185d4cfe533d8a184dc6f76b84b82fcc495f63f4d6a1a5aab67d5fee3d9bf2f9374372ce17fe4ea80a66c634ee0de5db355e8d7fb1aba106f5c9c8de226c7cb6e832b78870bfc7ecbb599a688d9a7b00dfee9700624a744fcc1b299364d9b62b9a4af6634ca8a595f412f4a2fb53e12c59266f4ef6e69305784c1a9f288a9494ab8d2051048ace3142a739e19d37f300dac67e52c6b03d992803065e3e00c3412f67e94d4ed88b5cb7193f4b3ffdda979bea2f8ba0ada5f0e39e221f7f16c72978bb2fde9be62ee4ba9f6c6edb84eee1450f7cbee2a778b136dd298b59d60228aec68d30f7c203e61eb7e6aa9783f51f3a6ac132ed48890a17938dbd26311f944fc6f601e7a000abe74acb5adc34d5fae7249aef7dfd8ff9a1529101f4b1a1075c6f7c0b09abf0b88d83c0025c743b5ad438df20158cf75f38e9a7c92aa302230c397da353d88cdbfc075731cdf7628aafe0c9f3f03ab663e028d4f191900af4c9479a1a2b325ecb750d2e27eec328c9fc8ecaa07cfffa57648086a186ce06c419a1ca911e5f1bc028035584897c999b5d33d0d34c68a68b805de621644f555f5f96e5432a82c5d894aea29923038b368e8956d4b50f05db497f9fb4e5a3a574dde4e45a558268c5c1841427492e82e7eac603261870c60415fb4d76d78f743222143fa9c53c7ec2a30411c259a97d1668e3cacea1f27250473acef4cc75e2c3dfce7d909b83e35ce716641d1fb93c51b26f5a58ac2ea0c6994a18fde02d36fdcd0d79ca5b20a7335fc969e14ea740f88d0fde9aed1781561534f50896927d83b4e9c57e8889c779d3221bd0823a693c785f033939c131b193e8ee0b6a84867ae8fcde1c317a530329d79358aac15c54532c3b71bcd1dd1549d5fc6cc3e0bd5f0d6f5de19fcaa805be2bb574af6ba93c22a7207c3dbf65118af0e278f1053282ce14bc4192145461e41ac674bcdf4f344ef696478e9fd292f3be420672d92e258184eca37d5aa5f9ed3d219a08c6cffe9b4c32da41e888e112dc243cb1ddc22e750b1707b0e7a109ac4fddebaeca8f4ff9a167065903d5a7c5aa634fc31cebad7e523118a72d4e296986860ef2a60d7eae0e591e3e4173c7fb0a36e333e6e2b50ce14df53edb135a6605b8f482ce0f7b0d49cb5c71d3d2dd108855c2b750cfeebe1a3fd55cf1fe9f0dfcdf8d8c8bb1b7ed751bb2c71294df0c60df4102a1ceb8036f61ebd93a6c18fb5f43ca403f7e6d9f82ec5b1ac174f555bbd987094bc8b9c3cf37451cac896a9809d859e0ff3a9198ed90726e9629e0ee66f5df18b28fb675a04b7354c99b6219e121af6f5390e2629708ac7b48773489b80c5704c6d3197be811c27aec6b47a022e630ca9ba32bb44b2568a378b20a7973dfa8690e8ae9a066de50395da9b0e46761adb94b791f6145de646f577222669370413a032aeee5dee492881fdb6a56674486524e537936d527e628ac0897a8093a6bb1971bea629269aea0a707354b0f318012b6cdcd7b0f07666505e02856b47c9083f60131904cf29198ef9676e2224aae6c346738d289e8e1c8cf4145dadcf0ab026e4f90866b05b736ab6e7cf6717dfffa3ef280275dc70e1a79010563145d23f8763d4b7b194c487cc1f4d3bebf9c272e494356c9a269255d9d039f9f8e126eeb5d82ee7b5e6c19fc360ffd020a37771982ee081679d98434867b2e4a07ec8c33f6ce78de41b43a27ce4ca10c1d11b619611b2645b759cd935701b41d9c8ea91187fab09b112dc4324b7d71362fe88e13124aad90c0e21b109f6e33a1c7e052b3eccd47341e877079c3b8573c2d072c218a3878e57b2672325ab1ce28986eb7608174d4fe2378a441cea5f5d5caa342328195b637946daa97298819116f4ce25dd5e442d89317b84e070e8d78339f2b5a1245fad3f8534c956e975b2045720ecb57e2e58b03a18f0e16f8abcc60eae35210ecfd9edf8944f9aa7269862c55b1e5ddf4ff62755206e92dd3670b1c08dff207f24a954775be1c4f9f055b13815377fe3802700878c6165b3d119b7e1b9efa9c156f649710332b90151c5de24b3919e83bf2777764b3bfa19f778e8ed22ccbb2646dfbcb9dcefb9bc4a25ce5a41b02e11bdef67dfc767a1cc29abef5f56fa84b19929d2c849b5b5c2c6cd72b0f0040a3c8bf4edb3436e5ab028815c37750a643ce30de3dca02b9f1f8421048840bf3f4a4b461f63ea15e9da252f10fc9385204ad281f248b1c1cf4d81f69b4720c51bc6a351c16e5a70740d96d81721c062ed6f44688b6f8860fc1297520e975da2e85012bd9b78bdb6b70d9edc364ccc55d1ed119bbb2eaca3c17aea0b407cb9c7a6dfa4f90078d2aeb00dfbd79b7ac6767b3aa6f0f6adcb80cca56291b88ac8cd6f339829787d90eaeb2c58227a6c2ee88df370a8b59e9409558a117ed8c2a1e0d492d9bdb6a4f47df990d0c8edbe246780b69624f3f867e2cc0a7028bebb1caa308fddf8748131990ef6e8261f80cd3644637e48060a359137dbb6129d064e1cd2a3a95f1094580d26a592f760ea328822fabdf38276069bd61da4d90014faa4674bcad729377f2d10692056022ff9d6d0e1be96bbbc4d1f86052c0ef7fb8dac04cb5493a4de8be679a650e4f5143861f9b6afaf6fe32f54676747b3461c5d0f2fc1e29640f27714ac81966a22715966567fde6a7002abd361d3f0285321b2c46d1f2cf3c34562c98e20c836b584afd1d0f2432e3fdb225537319f12dc69a0a3c4cf6830326222bc01a57ce5dbbb3079f1cee0c7bead46e7d450ee6c799b58d466ac4c20d2de9f8568e046e78d86f7d2efa46cb7b64ae48f151039339e38dc7236c0bcbd8a24670ac0027b21e94caa3d195539226fd062f692ff5ca96e34c84d29d48a8ecf826b9b5518e57df446e5e7de39a9e2c023d7011e887b711c247bd11bd2122569dda1f0a5cd868db622e1a5daae2b7780f62738d95a8eeea053d017f89ed126768313eeebafa10b6e4ee6026dadf5275bee9431a93073c3a5e528429e85bb8d62a3517a149ff893eabb16c13c12cfd672f12e162420a29af2733098b091b5fdde5a1885bd86f30114f6a6d30f4fa12f3c750732071027538dd659bba87454049c8a4b9662de09a6449ccc8e131927f39fbac32ecea9077b7d296e28ca047c7c406c63fde5632d14b945e12ac17838075f8f8250f052fb9754475e9eb2949d6d3098e9949d10f7d4be64bf57bcedc1a35b55b523a032a433bca21a1970b18ea1aff0bb4e12fb11c7159d2d46309a7d402d638bc1257697ce30a637ca7aa7f76087b491c0a1ef41593f308bfc87a207162dd1c07e0b15f64548d2cd2235a8a69ff8c29f263fc180ae7f7d8a247b76d6e720ac245bcaa1c23e11ac5bc8b6070d05cba3fbbae74c27d4ade87d5b4d4c793e03694f2797c968f8b8d56f7e1cf6f9f90de21e4e7f5486b4baec5a118a7f3861aa1b799e9ad995eb0c9292bbae53d345fdc85b80d857f51c77c64843625813c3f7bbeeb30daa815fc2919bfc4ff5bf78e616df7fb0550329fcd69fb498a87eec7eec4fc5d1e58b80366c0a5e39ee6bfb4cc2490081b899a11c04292f90f5c2dd4852ee20d62c23c43e5f088417152e04058e01b6d91d187ffeed2c0bd861794d5ef6e89f9ef1579b626e6183f28ccb502ebce8f4a16c5e15552879276ee76fadab7c43a6e0eb22df920bb2c2cd446f913a84dc80708647df91f31fe6877edb16605bb922258c7afed337cab3f90605a6699c477974b01fc685078439f26ff9cd39a2b51a3362bd440929b9892d6f71e31bb569f4f51e472f1baa8b3a2c387e7aef252af7a8fe3327089b0442a06b95aef4ce0a554e3be4f439f2a4f069a38b2f34820a04c15c2baaf19018d6d91de576774935f342f64e6c0ad962d81f1fdc227a142d039052fff59d2d7f40565e964d469771fd5cd4e6a076ed4f199deb1da87043f45020a91c278775bfd193f4fa5f6783f940feefd278610aed2bad4f08cdbed8bcc06fd09895995d15e60054ddc9a9b2f4ce02bc1600d1538932fc2a841adfa11de947acf3b25ca3c72bbc0c54a0369500d0b7d8bfd13451637fb09ee7cae6ffa88cb314b9f481ac0c909816108b072b99dc1d4743808bf07dfb5e66562319f56d6cf00c8e506cccc20ee1e9c08181cb7356f974bbfc849526413b3475afb4dc23651aeb638ff1e8dcc0e2c2d8673d7e5b5ac929acb2a482bf7fc97742c65b1919d4f71079f69095bb6b0766b956d3303ce140f920c9837eeb6623425bf8efb670cdbcbbef07417a577fdf0908da1488529c581707bae1f73f09cf8eb03068b0260cc6e2bfe33319a8fd7d71311b60dbd4dca815c583edcfc92229b7b8f21b464706fb803fa50a0d073d116cc7fed48e486d25630a857c3"}]}, @NL80211_ATTR_BEACON_TAIL={0x91, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x94, 0x8}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random_vendor={0xdd, 0x77, "684dff2fa1ec94e21d388d5e430e641877bfdc57254422c545e084767e3859ad5b024916ca3eb52caf57311cf543fcde948c2f6a070d734287fea6f46a885cf2dbc6292928e8516d70efe14dfadcaf133e2f9884a70440e3d39f34cf818c5a53567ae49ab75dc03eb0ab1cca483a84d83f80f3f8ffb9a9"}]}, @NL80211_ATTR_BEACON_TAIL={0xe, 0xf, [@supported_rates={0x1, 0x2, [{0x60}, {0x24, 0x1}]}, @chsw_timing={0x68, 0x4, {0x5, 0x2800}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1ec, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xa2, 0x2, "c4a7e6cd5164ced8f3212f191e8c0256897b2fb7967fd14dc87f417e6c59b9a2ea349bbf55fae3f00a624d188d248be08c5856657674d1bde31210c65b4c6ef540df92d6882c99d9c41c605b9064232713e15f793b839dfdb0d2266bdcde4e375c4197820809b1c449625fdec41bbbcf08e774ff1903d4af1ce110ea62a3cf20d88af6bb718726d55bcafcd1e1fc8a5575c918fa2676a5048f0745cc2bdc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x8a, 0x3, "a950edbe237b1c00f828b036733cbc023b1879b72c5ae7cdf43f50ffac1cf198e234d4b44ea43c1beb6614f93ece38e8d974680a4c1765a8a4925374df2930555f356a82b88ce18480c84b2a2779f914311795a5f63a5da5c118f599d44360f6cc9e4ac082dd6cc0f0645ec412db4d5ecb42f55c7a3ca659dea0fd7e04a9ee1f538e6bd55353"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x12, 0x3, "f4a7171f9be20f80e41f6954e988"}, @NL80211_FTM_RESP_ATTR_LCI={0x7a, 0x2, "8035144f6846e0b005a79ef819c70d00e62ee794cc7fd6727a622377b3c80f69b3d615c214fe2afcb3b41e8c0ed21bee79d8e2309dca7044aa8032f06d7f4e2d6e5a315d9e03dc584d64bf7055aaea5564eb7fb5d6e48fa49649488bdcfcae03f859022aad0a39204d8e2cec560c22aabdec8c0bce6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1a, 0x2, "0496df30926fd13ce230b697ba0759a192c3516feb2d"}]}, @NL80211_ATTR_BEACON_TAIL={0xaf, 0xf, [@mic={0x8c, 0x18, {0x967, "274648e2b509", @long="1a09c6f3f0e02bd3d58ebe04aa01fbc8"}}, @rann={0x7e, 0x15, {{0x1, 0x53}, 0x0, 0x6, @device_a, 0x6, 0xb, 0x2}}, @mic={0x8c, 0x10, {0x1f6, "99f556349c70", @short="4e7ec428fe6f4b8c"}}, @challenge={0x10, 0x1, 0xa6}, @random={0x6, 0x4f, "2dae016a7677eb3af7261e73303d1e47ae8d09fa34713f32098dd60d90b8ac489aea51ae980f967120337c9d63c2bdf521d5bb1f52f0d380901489bac8269d7e95b2e07afe9935720a46e6c90fa6c8"}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7d, 0x61}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @challenge={0x10, 0x1, 0x80}]}, @NL80211_ATTR_IE_PROBE_RESP={0xb6, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x42}, 0x9, 0x0, @device_a, 0x1ff, 0x0, 0x6}}, @perr={0x84, 0x48, {0x5, 0x4, [{{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x2b}, {{}, @broadcast, 0xffffff55, @void, 0x37}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x1d}, {{0x0, 0x1}, @device_b, 0xfff, @value, 0x4}]}}, @random={0x8, 0x44, "b192488ec817c5817ebc8cb6ad90bb168c1d48e1264a0b5ecd0fb3ce6bf6104a9d0a306d7d2f9b5a7f7217604372f174cd5edc259e29bd6b0390990e4b18d7f0f599bd38"}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_FTM_RESPONDER={0xcc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xab, 0x3, "e4d95109452783fa8c80e6f252cf9bfff64e460c803ab9782451c4684dbb285018551bb8badb9730ffb25b30aed79008d5a1b073e5cd5843c69af4d722866d6c23cf3a3dec75a991d61ca23d5b1061e0c96ec94891e1d9789a7232f88891d8ff7fdc051cf5fc50c9d544545dfef1e2cdafccf10c426fb9264d9728e9c6747c880f2cd6d8ed1ac9354339aeb3bd213b0db1ce883cbc4229e298d9c74ef986ef29f4724e178d3ef5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x18, 0x2, "4f32a5d4c3e28b79ac2e00178d90ae4a879ec365"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x167, 0x80, [@ssid={0x0, 0xc, @random="9f40fa0818e7d3e218621806"}, @peer_mgmt={0x75, 0x14, {0x0, 0x2, @void, @void, @val="9f74cfcb18d9eee480ad4606d39c3d02"}}, @mic={0x8c, 0x18, {0xc2, "c63b4959b5ab", @long="5fb089b1176daaffd06c599e4f5e9dbf"}}, @measure_req={0x26, 0xfe, {0x3, 0x13, 0x2, "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"}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0xfffffffffffffff9, 0xa2, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x400, 0x4, 0x9}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x68}}]}]}, 0x1708}, 0x1, 0x0, 0x0, 0x4000}, 0x60008016) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002100)={'veth1_to_bridge\x00', @multicast}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000002500)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000024c0)={&(0x7f0000002180)={0x310, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x11}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x78}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a0, 0x11d, 0x0, 0x1, [{0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x21c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x401, 0x8, 0x9, 0x0, 0x7fff, 0xbd7, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4cd, 0x1, 0xfffc, 0xd6, 0x7, 0x6d, 0x99a, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x483b, 0x1ff, 0x8001, 0x4900, 0x352, 0x0, 0x85]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a81, 0x9, 0x971d, 0x2c3, 0x4, 0x6, 0xff2e, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x101, 0x8, 0x4, 0x9f3, 0x4, 0x33af]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff, 0x32, 0x8, 0xfc01, 0xa7d, 0x4, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x70, 0x100, 0xfff7, 0xe, 0x4, 0x6, 0xf21]}}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x30, 0xc, 0x18, 0x16, 0x1, 0x18, 0xb, 0x6, 0x9, 0x1b, 0x16, 0x30, 0xb, 0x18, 0x48, 0xb, 0x30, 0x18, 0x1, 0x1, 0x18, 0x12, 0x36, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x401, 0x2, 0x6, 0xff7f, 0x2, 0x8, 0x8]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x3}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x4}, {0x7, 0x5}, {0x0, 0xa}, {0x5, 0x1e}, {0x3, 0x3}, {0x2}, {0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x30, 0x3, 0x5, 0x3, 0x1, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x48, 0x24, 0x0, 0x3, 0x1, 0x69, 0x3, 0x2, 0x24, 0x3, 0x0, 0x1a, 0x16, 0x4, 0xc]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3}, {0x2, 0x4}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0x3}, {0x5}, {}, {0x6, 0x4}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {0x6}, {0x6, 0xa}, {0x4, 0x5}, {0x5, 0x6}, {0x5, 0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x3, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0xa}, {0x4, 0x8}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x4, 0x2}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0x9}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x2}, {0x3, 0x3}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xa, 0x7, 0xc0, 0x8, 0x5, 0x7, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x6, 0x48, 0x9, 0x1, 0x6c, 0x30, 0x6c, 0x6, 0x9, 0x30, 0x5, 0x12, 0x1b, 0x18, 0x3, 0x48, 0x16, 0x1b, 0x6, 0x12, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x2, 0x2, 0x2, 0x401, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x5, 0x8, 0x9, 0x7, 0xfaee, 0x8]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x4048084}, 0x24004088) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002540)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r8, 0x0, 0xbd, 0x57, &(0x7f0000002580)="d85bea14c7ab3160fc2116d142d411ac0ce4a96d765d1207289def3188b51cbf0823df49935b33358e8a212ff9694ff6f6007b585be8890141d1854332ec7963c75ee8145f066dcc4db1331ba9acbae42065ea0f1c1202d0129f0cff91f84c3e82919f3afc7ee06dca298dba0a87e3d01886d4aaea77a3307351221ef47b0341a91221b33c79d1eb759e24da5794c65365f4d6d019dd0ec5a86cd2e22e6cb11c86c334f43868c8fb70a0f22f24e28074907cd0e4a9d26a95180f4f1e9b", &(0x7f0000002640)=""/87, 0xb044, 0x0, 0x39, 0xb4, &(0x7f00000026c0)="8961210f7b29671477fc376b21f8243035da3376fdfdb252bc9b718e54adfd976d0a0afb46037627005e5f7647f8d0283ee90ab35551ea7751", &(0x7f0000002700)="93dd1060760d88fa4ce7c29e08e169434a0a29bffb2da9f631049f6f3fe25f9b2cc768a5d5ca50a43fbeee1ade22d5071c679475f4f30353158ff75fb1517dc2f3c00874e9538be54332ef89fde79d87f2d3206ae03de33f49c83c7dca23b0ea347054d71ea9314474b7182fac3f7c8e67f9580cd6c952f53c2a3dd35fd4af3d811798b8b4a2560eee4b6086fa32a3113f2d2063e5b3a02aeec881c9761759d36ec02eaa1b8c54c70953c61dcd285d05250a0ca7", 0x3}, 0x50) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000002840), &(0x7f0000002880)=0x4) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000002900), r5) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2aa00300}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008047}, 0x40040a0) 184.995647ms ago: executing program 0 (id=5932): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r4, 0x1, 0x2a, 0x0, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r3, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4044844) 107.45731ms ago: executing program 3 (id=5933): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) recvmmsg(r0, &(0x7f0000005b00)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001680)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000001440)=""/195, 0xc3}, {&(0x7f0000001540)=""/130, 0x82}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000001600)=""/76, 0x4c}], 0x9, &(0x7f0000005cc0)=""/169, 0xa9}, 0x1}, {{&(0x7f0000001800)=@phonet, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000001880)=""/174, 0xae}, {&(0x7f00000029c0)=""/133, 0x85}, {&(0x7f0000001740)=""/112, 0x70}, {&(0x7f0000001940)=""/34, 0x22}, {&(0x7f0000002b00)=""/180, 0xb4}], 0x6, &(0x7f0000002c40)=""/112, 0x70}}, {{&(0x7f0000002cc0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d40)=""/54, 0x36}, {&(0x7f0000002d80)=""/228, 0xe4}, {&(0x7f0000002e80)=""/169, 0xa9}], 0x3, &(0x7f0000002f80)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000003f80)=@can, 0x80, &(0x7f0000005100)=[{&(0x7f0000004000)=""/226, 0xe2}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x2, &(0x7f0000005140)=""/51, 0x33}, 0x3}, {{&(0x7f0000005180)=@isdn, 0x80, &(0x7f0000005380)=[{&(0x7f0000005200)=""/189, 0xbd}, {&(0x7f00000052c0)=""/170, 0xaa}], 0x2, &(0x7f00000053c0)=""/38, 0x26}}, {{&(0x7f0000005400)=@generic, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005480)=""/127, 0x7f}, {&(0x7f0000005500)=""/40, 0x28}, {&(0x7f0000005540)=""/23, 0x17}, {&(0x7f0000005580)=""/140, 0x8c}, {&(0x7f0000005640)=""/244, 0xf4}, {&(0x7f0000005740)=""/76, 0x4c}, {&(0x7f00000057c0)=""/171, 0xab}, {&(0x7f0000005880)=""/171, 0xab}, {&(0x7f0000005940)=""/249, 0xf9}], 0x9}, 0x7}], 0x6, 0x10002, &(0x7f0000005c80)={0x0, 0x989680}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r7, 0x0) ppoll(&(0x7f0000000280)=[{r7, 0x601}], 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000017c0)) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r8}, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r9, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, @remote}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 0s ago: executing program 3 (id=5934): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20}, 0x10}, 0x94) kernel console output (not intermixed with test programs): 2.967230][T19983] __nla_validate_parse: 25 callbacks suppressed [ 462.967258][T19983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3747'. [ 463.006036][T19989] bpq0: entered promiscuous mode [ 463.790124][T20001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3752'. [ 464.122744][T20013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3754'. [ 465.348408][T20017] syzkaller1: entered promiscuous mode [ 465.354042][T20017] syzkaller1: entered allmulticast mode [ 465.466978][T20023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.467397][T20021] tipc: Started in network mode [ 465.482310][T20021] tipc: Node identity 66813a0363e2, cluster identity 4711 [ 465.489907][T20021] tipc: Enabled bearer , priority 0 [ 465.499884][T20025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3758'. [ 465.531231][T20028] bond0: left allmulticast mode [ 465.536180][T20028] bond_slave_0: left allmulticast mode [ 465.547017][T20028] bond_slave_1: left allmulticast mode [ 465.557674][T20028] bond2: left promiscuous mode [ 465.583724][T20021] syzkaller0: entered promiscuous mode [ 465.590248][T20021] syzkaller0: entered allmulticast mode [ 465.673454][T20035] bond3: entered promiscuous mode [ 465.679425][T20035] bond3: entered allmulticast mode [ 465.685937][T20035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.694215][T20021] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3756'. [ 465.726877][T20021] tipc: Resetting bearer [ 465.750609][T20028] netlink: 'syz.1.3759': attribute type 29 has an invalid length. [ 465.798525][T20020] tipc: Resetting bearer [ 465.850755][T20020] tipc: Disabling bearer [ 465.867846][T20040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3762'. [ 465.893681][T20042] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3763'. [ 465.967570][T20042] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 465.996964][T20049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.015260][T20045] netlink: 'syz.2.3764': attribute type 83 has an invalid length. [ 466.896362][T20087] netlink: 'syz.4.3776': attribute type 21 has an invalid length. [ 466.942790][T20087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3776'. [ 467.059343][T20089] netlink: 'syz.1.3777': attribute type 1 has an invalid length. [ 467.077520][T20095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3778'. [ 467.085770][T20089] netlink: 'syz.1.3777': attribute type 2 has an invalid length. [ 467.318996][T20110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3781'. [ 467.351346][T20110] netlink: 'syz.0.3781': attribute type 21 has an invalid length. [ 467.400704][T20110] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 467.427518][T20110] bond3 (unregistering): Released all slaves [ 467.786775][T20138] openvswitch: netlink: Invalid VLAN frame [ 467.990940][T20147] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3789'. [ 468.003148][T20147] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3789'. [ 468.025274][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 468.034872][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3791'. [ 468.050148][T20147] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3789'. [ 468.518502][T20132] netlink: 'syz.0.3785': attribute type 29 has an invalid length. [ 468.533641][T20177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3797'. [ 468.584922][T20179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3797'. [ 468.822273][T20177] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 468.889560][T20177] bond0: (slave vcan1): Error -95 calling set_mac_address [ 468.912339][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3803'. [ 468.973172][T15681] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.974461][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3803'. [ 468.995545][T15681] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.036543][T15681] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.144587][T20209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3806'. [ 469.215128][T20216] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.223333][T20216] team0: Cannot enslave team device to itself [ 469.478720][T20227] netlink: 'syz.3.3811': attribute type 9 has an invalid length. [ 469.589550][T20230] IPVS: Scheduler module ip_vs_sip not found [ 470.052211][T20260] lo: Caught tx_queue_len zero misconfig [ 470.233397][T20267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.755486][T20299] mac80211_hwsim hwsim39 ÿ: renamed from wlan1 [ 471.296353][T20329] vlan0: Caught tx_queue_len zero misconfig [ 472.550973][T20397] netlink: 'syz.4.3856': attribute type 1 has an invalid length. [ 472.616233][T20397] netlink: 'syz.4.3856': attribute type 1 has an invalid length. [ 472.691338][T20397] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 472.881118][T20413] xt_limit: Overflow, try lower: 604147548/4200216962 [ 473.085818][T20428] __nla_validate_parse: 10 callbacks suppressed [ 473.085842][T20428] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3861'. [ 473.096417][T20430] netlink: 'syz.0.3863': attribute type 4 has an invalid length. [ 473.132084][T20430] netlink: 193176 bytes leftover after parsing attributes in process `syz.0.3863'. [ 473.455419][T20453] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3868'. [ 473.811287][T20479] netlink: 'syz.4.3874': attribute type 1 has an invalid length. [ 473.896783][T20483] netlink: 204272 bytes leftover after parsing attributes in process `syz.4.3874'. [ 473.919421][T20486] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 474.068971][T20492] : renamed from bond0 [ 474.186218][T20494] netlink: 'syz.1.3880': attribute type 30 has an invalid length. [ 474.427777][T20504] smc: removing ib device syz0 [ 474.568571][T20509] rdma_rxe: rxe_newlink: failed to add lo [ 474.969755][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 475.735380][T20553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3898'. [ 475.767687][T20553] nbd: illegal input index -8454144 [ 475.896797][T20563] netlink: 'syz.3.3894': attribute type 4 has an invalid length. [ 476.007726][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'. [ 476.167052][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3903'. [ 476.506062][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3906'. [ 476.595118][T20577] geneve2: entered promiscuous mode [ 477.032114][T20595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3912'. [ 477.351056][T20616] netlink: 'syz.1.3919': attribute type 83 has an invalid length. [ 478.257664][T20668] __nla_validate_parse: 8 callbacks suppressed [ 478.257686][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3929'. [ 478.373789][T20674] delete_channel: no stack [ 478.400120][T20668] ipvlan2: entered allmulticast mode [ 478.430554][T20668] batadv_slave_1: entered allmulticast mode [ 478.438906][T20668] batman_adv: batadv0: Adding interface: ipvlan2 [ 478.446513][T20668] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.501675][T20688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'. [ 478.502893][T20668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.532681][T20668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.548153][T20668] batman_adv: batadv0: Interface activated: ipvlan2 [ 478.646202][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 478.647445][T20687] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3932'. [ 478.668882][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 478.684570][T20679] delete_channel: no stack [ 478.869239][T20703] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3937'. [ 479.127707][T20721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3943'. [ 479.237769][T20731] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20004 [ 479.541668][T20743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.659612][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'. [ 479.677667][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'. [ 479.694442][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3954'. [ 479.825376][T20767] netlink: 'syz.4.3959': attribute type 4 has an invalid length. [ 480.472479][T20804] bond0: entered allmulticast mode [ 481.473359][T20857] netlink: 'syz.0.3981': attribute type 10 has an invalid length. [ 481.530277][T20857] team0 (unregistering): Port device team_slave_0 removed [ 481.552147][T20857] team0 (unregistering): Port device team_slave_1 removed [ 481.704069][T20876] netlink: 'syz.1.3987': attribute type 5 has an invalid length. [ 481.739426][T20872] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 481.795937][T20876] geneve2: entered promiscuous mode [ 481.819372][T20876] geneve2: entered allmulticast mode [ 481.843759][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 481.852934][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 481.908454][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 481.917135][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 482.025684][T20888] veth5: entered allmulticast mode [ 482.045669][T20899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.499263][T20906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.564007][T20937] wg1 speed is unknown, defaulting to 1000 [ 482.718413][T20947] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 482.727426][T20948] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 482.831870][T20949] bridge2: port 1(veth3) entered blocking state [ 482.839137][T20949] bridge2: port 1(veth3) entered disabled state [ 482.845745][T20949] veth3: entered allmulticast mode [ 482.854587][T20949] veth3: entered promiscuous mode [ 482.893316][T20951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.906567][T20951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.937054][T20955] bridge2: port 2(veth0_to_bond) entered blocking state [ 482.944689][T20955] bridge2: port 2(veth0_to_bond) entered disabled state [ 482.952224][T20955] veth0_to_bond: entered allmulticast mode [ 482.961408][T20955] veth0_to_bond: entered promiscuous mode [ 482.978339][T20949] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 483.033741][T20951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.045022][T20951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.089087][T20961] syzkaller0: entered promiscuous mode [ 483.095172][T20961] syzkaller0: entered allmulticast mode [ 483.243523][T20951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.262000][T20951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.380293][T20981] openvswitch: netlink: Key type 31 is not supported [ 483.637188][T20977] xt_CT: No such helper "pptp" [ 483.785176][T20995] __nla_validate_parse: 17 callbacks suppressed [ 483.785197][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 483.787178][T15685] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.820318][T15685] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.849297][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 483.873337][T21001] xt_ecn: cannot match TCP bits for non-tcp packets [ 483.885423][T21001] netlink: 'syz.1.4024': attribute type 1 has an invalid length. [ 483.918362][T20995] bond3: entered promiscuous mode [ 483.923883][T20995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.984457][T15685] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.992975][T15685] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.003056][T15685] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.013787][T15685] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.046803][T21014] ipt_REJECT: TCP_RESET invalid for non-tcp [ 484.047627][T21008] bond4: (slave gretap2): making interface the new active one [ 484.055271][T21015] ipt_REJECT: TCP_RESET invalid for non-tcp [ 484.062801][T21008] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 484.109253][ T55] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.117572][ T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.154891][T21020] netlink: 'syz.2.4027': attribute type 2 has an invalid length. [ 484.164667][T20995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.172991][T20995] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 484.185750][T20995] bond3: (slave sit1): Error -95 calling set_mac_address [ 484.216217][T21024] TCP: TCP_TX_DELAY enabled [ 484.269531][T21020] 9: entered promiscuous mode [ 484.520302][T21039] sctp: [Deprecated]: syz.4.4032 (pid 21039) Use of int in max_burst socket option. [ 484.520302][T21039] Use struct sctp_assoc_value instead [ 484.556223][T21042] wg1 speed is unknown, defaulting to 1000 [ 484.613441][T21046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4036'. [ 484.648807][T21046] bridge_slave_0 (unregistering): left allmulticast mode [ 484.658378][T21046] bridge_slave_0 (unregistering): left promiscuous mode [ 484.675764][T21046] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.719778][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4039'. [ 484.807387][T21054] No such timeout policy "syz0" [ 484.965962][T21059] pim6reg: entered allmulticast mode [ 484.980034][T21057] : renamed from bond0 [ 485.019871][T21062] pim6reg: left allmulticast mode [ 485.332733][T21082] syzkaller1: entered promiscuous mode [ 485.364257][T21082] syzkaller1: entered allmulticast mode [ 485.471563][T21095] pimreg: entered allmulticast mode [ 485.733513][T21116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4055'. [ 485.853939][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4056'. [ 485.920007][T21124] bridge_slave_0 (unregistering): left allmulticast mode [ 485.941321][T21124] bridge_slave_0 (unregistering): left promiscuous mode [ 485.953926][T21128] sctp: [Deprecated]: syz.1.4058 (pid 21128) Use of int in max_burst socket option. [ 485.953926][T21128] Use struct sctp_assoc_value instead [ 485.990370][T21124] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.236035][T21139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4060'. [ 486.882213][T21187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4073'. [ 486.901220][T21188] netlink: 'syz.3.4074': attribute type 1 has an invalid length. [ 486.912143][ T6690] lec:lec_start_xmit: lec0:No lecd attached [ 487.035006][T21195] netlink: 'syz.2.4075': attribute type 1 has an invalid length. [ 487.297637][T21214] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 487.298601][T21215] tipc: Enabled bearer , priority 0 [ 487.316786][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'. [ 487.317252][T21215] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 487.335546][T21215] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 487.336056][T21214] openvswitch: netlink: Flow key attr not present in new flow. [ 487.351642][T21217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4084'. [ 487.362184][T21215] tipc: Resetting bearer [ 487.563555][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 487.579104][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 487.599640][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 487.622018][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 487.657503][T21236] netlink: 'syz.4.4090': attribute type 3 has an invalid length. [ 487.837206][T21247] geneve2: entered promiscuous mode [ 488.248015][T21269] netlink: 'syz.1.4104': attribute type 21 has an invalid length. [ 488.351682][ T7159] tipc: Node number set to 90388995 [ 488.593085][T21321] bridge0: Caught tx_queue_len zero misconfig [ 488.719056][T21333] syzkaller0: entered promiscuous mode [ 488.726696][T21333] syzkaller0: entered allmulticast mode [ 488.751393][T21333] tipc: Enabled bearer , priority 0 [ 488.775551][T21332] tipc: Resetting bearer [ 488.804324][T21332] tipc: Disabling bearer [ 489.036451][T21350] xt_connbytes: Forcing CT accounting to be enabled [ 489.296796][T21368] __nla_validate_parse: 12 callbacks suppressed [ 489.296816][T21368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4123'. [ 489.313686][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4122'. [ 489.389326][T21371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.424881][T21371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.445092][T21371] bond0 (unregistering): Released all slaves [ 489.525468][T21382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4127'. [ 489.608516][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 489.664094][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 489.698569][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 489.719033][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 489.751413][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 489.770115][T21396] netlink: 'syz.0.4130': attribute type 1 has an invalid length. [ 489.791357][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 489.814926][T21391] wg1 speed is unknown, defaulting to 1000 [ 489.815257][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 489.875317][T21396] bond4: entered promiscuous mode [ 489.881799][T21396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.021422][T21401] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.029872][T21401] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 490.044134][T21401] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 490.059155][T21401] bond4: (slave vti1): making interface the new active one [ 490.066443][T21401] vti1: entered promiscuous mode [ 490.074755][T21401] bond4: (slave vti1): Enslaving as an active interface with an up link [ 490.234519][T21408] netlink: 'syz.4.4135': attribute type 11 has an invalid length. [ 490.258721][T21412] netlink: 'syz.2.4134': attribute type 2 has an invalid length. [ 490.294809][T21414] syzkaller0: entered promiscuous mode [ 490.308619][T21414] syzkaller0: entered allmulticast mode [ 490.362093][T21416] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 490.380369][T21416] netlink: 'syz.1.4137': attribute type 4 has an invalid length. [ 490.622565][T21428] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 490.651040][T21434] netlink: 'syz.3.4143': attribute type 10 has an invalid length. [ 490.698500][T21428] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 490.718622][T21428] gretap2: entered promiscuous mode [ 490.740282][T21428] gretap2: entered allmulticast mode [ 490.772054][T21434] veth1_macvtap: left promiscuous mode [ 490.787945][T21434] team0: Device veth1_macvtap failed to register rx_handler [ 491.039473][T21448] netlink: 'syz.1.4147': attribute type 21 has an invalid length. [ 491.267529][T21456] syzkaller0: entered promiscuous mode [ 491.273282][T21456] syzkaller0: entered allmulticast mode [ 491.295181][T21462] sit0: entered promiscuous mode [ 491.733394][T21475] lec:lec_atm_close: lec0: Shut down! [ 493.250166][T21479] bond4: (slave ip6gretap1): making interface the new active one [ 493.259550][T21479] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 493.459220][T21504] validate_nla: 3 callbacks suppressed [ 493.459243][T21504] netlink: 'syz.2.4159': attribute type 7 has an invalid length. [ 493.505917][T21503] tipc: Enabled bearer , priority 0 [ 493.514254][T21503] syzkaller0: entered promiscuous mode [ 493.520778][T21504] netlink: 'syz.2.4159': attribute type 8 has an invalid length. [ 493.539116][T21503] syzkaller0: entered allmulticast mode [ 493.555620][T21504] PKCS7: Unknown OID: [4] (bad) [ 493.561702][T21504] PKCS7: Only support pkcs7_signedData type [ 493.669417][T21514] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 493.689884][T21520] tipc: Enabling of bearer rejected, already enabled [ 493.722335][T21503] tipc: Resetting bearer [ 493.815713][T21499] tipc: Resetting bearer [ 493.827260][T21529] openvswitch: netlink: Invalid VLAN frame [ 493.870907][T21499] tipc: Disabling bearer [ 494.375413][T21572] netlink: 'syz.3.4179': attribute type 28 has an invalid length. [ 494.384412][T21572] netlink: 'syz.3.4179': attribute type 3 has an invalid length. [ 494.420894][T21572] __nla_validate_parse: 68 callbacks suppressed [ 494.420915][T21572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4179'. [ 494.518431][T21580] openvswitch: netlink: Flow actions attr not present in new flow. [ 494.633751][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4182'. [ 494.644648][T21584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4182'. [ 495.506143][T21604] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4186'. [ 496.351186][T21578] veth1_to_bond: entered allmulticast mode [ 496.374041][T17580] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.378027][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4182'. [ 496.419059][T21584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4182'. [ 496.462956][T21581] veth1_to_bond: left allmulticast mode [ 496.470297][T21315] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.499823][T21315] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.538137][T21315] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.771176][T21631] tc_dump_action: action bad kind [ 496.841012][T21629] wg1 speed is unknown, defaulting to 1000 [ 496.897162][T21639] tipc: Enabling of bearer rejected, already enabled [ 497.068144][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 497.076467][ C0] lec:lec_tx_timeout: lec0 [ 497.083097][T21649] bridge0: port 4(veth0_to_bridge) entered blocking state [ 497.091645][T21649] bridge0: port 4(veth0_to_bridge) entered disabled state [ 497.097207][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4197'. [ 497.100964][T21649] veth0_to_bridge: entered allmulticast mode [ 497.117791][T21649] veth0_to_bridge: entered promiscuous mode [ 497.161298][T21653] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.182985][T21658] netlink: 'syz.2.4199': attribute type 10 has an invalid length. [ 497.190380][T21653] netlink: 'syz.0.4197': attribute type 10 has an invalid length. [ 497.203656][T21655] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 497.214636][T21658] veth0_macvtap: left promiscuous mode [ 497.226143][T21658] team0: Device veth0_macvtap failed to register rx_handler [ 497.240087][T21653] batman_adv: batadv0: Adding interface: netdevsim0 [ 497.247068][T21653] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.270163][T21658] netlink: 'syz.2.4199': attribute type 10 has an invalid length. [ 497.273736][T21653] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 497.302469][T21655] bond5 (unregistering): (slave dummy0): Releasing backup interface [ 497.306357][T21658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4199'. [ 497.337640][T21655] bond5 (unregistering): Released all slaves [ 497.387336][T21664] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4201'. [ 497.441854][T21664] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 497.465689][T21667] netlink: 'syz.2.4202': attribute type 1 has an invalid length. [ 497.578733][T21667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.586819][T21662] netlink: 'syz.4.4201': attribute type 4 has an invalid length. [ 497.861238][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4208'. [ 497.935591][T21700] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 499.053047][T21757] netlink: 'syz.2.4223': attribute type 6 has an invalid length. [ 499.311507][T21767] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 499.479044][T21778] x_tables: duplicate underflow at hook 1 [ 499.843174][T21804] tipc: Enabling of bearer rejected, already enabled [ 499.872949][T21810] __nla_validate_parse: 6 callbacks suppressed [ 499.872980][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4238'. [ 500.170928][T21829] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4240'. [ 500.186714][T21820] bond4: Removing last ns target with arp_interval on [ 500.242925][T21834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4240'. [ 500.535988][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4245'. [ 500.663439][T21853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4247'. [ 500.913697][T21865] netlink: 'syz.1.4250': attribute type 1 has an invalid length. [ 501.168801][T21869] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 501.190204][T21869] bond6: (slave lo): Enslaving as an active interface with an up link [ 501.199790][T21869] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 501.221730][T21869] bond6: option mode: unable to set because the bond device has slaves [ 501.634851][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.647541][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 502.263451][T21930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4264'. [ 502.367650][T21937] netlink: 'syz.3.4266': attribute type 3 has an invalid length. [ 502.384148][T21937] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4266'. [ 502.538350][T21948] netlink: 'syz.3.4269': attribute type 21 has an invalid length. [ 502.650072][T21956] netlink: 'syz.4.4268': attribute type 1 has an invalid length. [ 502.817732][T21969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4270'. [ 502.906862][T21975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4273'. [ 503.123644][T21969] syzkaller0: entered promiscuous mode [ 503.143076][T21969] syzkaller0: entered allmulticast mode [ 503.247059][T21996] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4279'. [ 505.265098][T22019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4282'. [ 505.295556][T22019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4282'. [ 505.433376][T22038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 505.505327][T22038] bond5: entered promiscuous mode [ 505.515189][T22038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.559272][T22047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 505.584674][T22038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.592474][T22038] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 505.613331][T22038] bond5: (slave sit1): Error -95 calling set_mac_address [ 505.953323][T22072] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4297'. [ 505.959845][T22073] netlink: 'syz.1.4298': attribute type 10 has an invalid length. [ 506.010646][T22073] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 506.633433][T22122] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4310'. [ 506.863065][T22131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4313'. [ 507.051993][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4317'. [ 507.067955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 507.076125][ C0] lec:lec_tx_timeout: lec0 [ 507.216891][T22154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4322'. [ 507.325636][T22160] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4324'. [ 507.390209][T22165] netlink: 'syz.3.4326': attribute type 1 has an invalid length. [ 507.464618][T22164] syzkaller0: entered promiscuous mode [ 507.483132][T22164] syzkaller0: entered allmulticast mode [ 507.536861][T22172] netlink: 'syz.4.4329': attribute type 1 has an invalid length. [ 507.551616][T22172] netlink: 'syz.4.4329': attribute type 11 has an invalid length. [ 507.551949][T22175] netlink: 'syz.4.4329': attribute type 1 has an invalid length. [ 507.570607][T22175] netlink: 'syz.4.4329': attribute type 11 has an invalid length. [ 508.161102][T22206] veth0: entered promiscuous mode [ 508.172989][T22205] veth0: left promiscuous mode [ 508.234521][T22208] "syz.4.4341" (22208) uses obsolete ecb(arc4) skcipher [ 508.595703][T22234] xt_TPROXY: Can be used only with -p tcp or -p udp [ 508.741844][T22241] nbd: must specify a size in bytes for the device [ 508.841943][T22253] bond0: (slave gre0): Error: Device type is different from other slaves [ 508.891544][T18784] IPVS: starting estimator thread 0... [ 508.975983][T22259] bond0: entered promiscuous mode [ 508.982066][T22254] IPVS: using max 27 ests per chain, 64800 per kthread [ 508.989694][T22259] bond_slave_0: entered promiscuous mode [ 508.996672][T22259] bond_slave_1: entered promiscuous mode [ 509.011135][T22259] bond0: left promiscuous mode [ 509.043042][T22259] bond_slave_0: left promiscuous mode [ 509.090957][T22259] bond_slave_1: left promiscuous mode [ 509.139631][T22271] gre0: entered promiscuous mode [ 509.144648][T22271] gre0: entered allmulticast mode [ 509.170624][T22273] netlink: 'syz.3.4358': attribute type 30 has an invalid length. [ 509.288752][T22278] syzkaller0: entered promiscuous mode [ 509.294406][T22278] syzkaller0: entered allmulticast mode [ 509.600268][T22301] netlink: 'syz.4.4368': attribute type 19 has an invalid length. [ 509.649076][T22301] netlink: 'syz.4.4368': attribute type 19 has an invalid length. [ 509.763342][T22313] netlink: 'syz.1.4373': attribute type 10 has an invalid length. [ 510.111457][T22345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 510.330657][T22361] __nla_validate_parse: 23 callbacks suppressed [ 510.330681][T22361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4389'. [ 510.347159][T22361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4389'. [ 510.431177][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'. [ 510.513774][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4390'. [ 510.523844][T21315] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.543137][T21315] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.563197][T21315] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.575917][T21315] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.802401][T22385] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4396'. [ 511.245515][T22411] ip6tnl0: Caught tx_queue_len zero misconfig [ 511.360533][T22430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4406'. [ 511.383428][T22430] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4406'. [ 511.422102][T22430] xt_TPROXY: Can be used only with -p tcp or -p udp [ 511.445047][T22432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4409'. [ 511.665227][T22441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4413'. [ 511.672395][T22443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 511.815666][T22453] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4417'. [ 511.985851][T22461] xt_hashlimit: size too large, truncated to 1048576 [ 512.262191][T22478] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 512.289642][T22478] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 512.308333][T22478] gretap1: entered promiscuous mode [ 512.315009][T22478] gretap1: entered allmulticast mode [ 512.491442][T22486] x_tables: duplicate underflow at hook 3 [ 512.938862][T22516] netlink: 'syz.1.4434': attribute type 1 has an invalid length. [ 512.946657][T22516] netlink: 'syz.1.4434': attribute type 4 has an invalid length. [ 513.571201][T22541] x_tables: duplicate underflow at hook 1 [ 513.999781][T22438] udevd[22438]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 514.041102][T22562] tipc: Failed to remove unknown binding: 66,0,0/0:3411672101/3411672103 [ 514.095228][T22562] tipc: Failed to remove unknown binding: 66,0,0/0:3411672101/3411672102 [ 514.123943][T22561] tipc: Failed to remove unknown binding: 66,0,0/0:3411672101/3411672103 [ 514.147586][T22561] tipc: Failed to remove unknown binding: 66,0,0/0:3411672101/3411672102 [ 514.174538][T22561] tipc: Failed to remove unknown binding: 66,0,0/0:3411672101/3411672103 [ 514.182786][T22577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.184073][T22575] netlink: 'syz.2.4454': attribute type 1 has an invalid length. [ 514.200909][T22561] tipc: Failed to remove unknown binding: 66,0,0/0:3411672101/3411672102 [ 514.262153][T22575] 8021q: adding VLAN 0 to HW filter on device bond7 [ 514.422060][T22587] netlink: 'syz.2.4457': attribute type 5 has an invalid length. [ 514.424589][T22593] tipc: New replicast peer: 255.255.255.255 [ 514.446063][T22593] tipc: Enabled bearer , priority 10 [ 514.683179][T22606] tipc: Enabling of bearer rejected, failed to enable media [ 515.034602][T22630] netlink: 'syz.4.4469': attribute type 1 has an invalid length. [ 515.113102][T22630] bond0: entered promiscuous mode [ 515.142281][T22630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.164668][T22635] netlink: 'syz.2.4473': attribute type 83 has an invalid length. [ 515.773610][T22645] netlink: zone id is out of range [ 515.778982][T22645] netlink: zone id is out of range [ 515.786596][T22645] netlink: zone id is out of range [ 515.801355][T22645] netlink: zone id is out of range [ 515.813287][T22645] netlink: zone id is out of range [ 515.827994][T22645] netlink: zone id is out of range [ 515.833189][T22645] netlink: zone id is out of range [ 515.858452][T22645] netlink: set zone limit has 4 unknown bytes [ 515.914412][T22643] pimreg3: entered allmulticast mode [ 515.922564][ T7150] tipc: Node number set to 1453433366 [ 515.923520][T22645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.078066][T22655] __nla_validate_parse: 26 callbacks suppressed [ 516.078087][T22655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4478'. [ 516.135233][T22660] netlink: zone id is out of range [ 516.136359][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4478'. [ 516.256187][T22666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4482'. [ 516.276288][T22666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4482'. [ 516.334439][T22676] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4484'. [ 516.389018][T22677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4484'. [ 516.426425][T22679] delete_channel: no stack [ 516.483071][T22683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4487'. [ 516.496765][T22683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4487'. [ 516.576172][T22690] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 516.593725][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4490'. [ 516.624441][T22690] netlink: 'syz.3.4491': attribute type 10 has an invalid length. [ 516.653728][T22690] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 517.304598][T22733] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4501'. [ 517.408283][T22738] sctp: [Deprecated]: syz.4.4502 (pid 22738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.408283][T22738] Use struct sctp_sack_info instead [ 517.567780][T22747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.644671][T22750] netlink: 'syz.4.4507': attribute type 29 has an invalid length. [ 517.714282][T22752] syz.3.4508 uses old SIOCAX25GETINFO [ 517.834828][T22758] netlink: 'syz.1.4509': attribute type 10 has an invalid length. [ 517.885967][T22758] bridge_slave_1: left allmulticast mode [ 517.894371][T22758] bridge_slave_1: left promiscuous mode [ 517.906598][T22758] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.927628][T22758] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 518.332364][T22792] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 518.392772][T22795] tipc: Enabling of bearer rejected, failed to enable media [ 518.697221][T22811] FAULT_INJECTION: forcing a failure. [ 518.697221][T22811] name failslab, interval 1, probability 0, space 0, times 0 [ 518.725874][T22811] CPU: 0 UID: 0 PID: 22811 Comm: syz.3.4529 Not tainted syzkaller #0 PREEMPT(full) [ 518.725904][T22811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.725915][T22811] Call Trace: [ 518.725923][T22811] [ 518.725932][T22811] dump_stack_lvl+0xe8/0x150 [ 518.725963][T22811] should_fail_ex+0x412/0x560 [ 518.725997][T22811] should_failslab+0xa8/0x100 [ 518.726026][T22811] __kmalloc_cache_noprof+0x88/0x660 [ 518.726062][T22811] ? rtnl_newlink+0x136/0x1be0 [ 518.726089][T22811] rtnl_newlink+0x136/0x1be0 [ 518.726109][T22811] ? is_bpf_text_address+0x292/0x2b0 [ 518.726132][T22811] ? is_bpf_text_address+0x26/0x2b0 [ 518.726158][T22811] ? kernel_text_address+0xa5/0xe0 [ 518.726188][T22811] ? __pfx_rtnl_newlink+0x10/0x10 [ 518.726215][T22811] ? __lock_acquire+0x6b5/0x2cf0 [ 518.726242][T22811] ? __lock_acquire+0x6b5/0x2cf0 [ 518.726264][T22811] ? __lock_acquire+0x6b5/0x2cf0 [ 518.726293][T22811] ? unwind_next_frame+0xa5/0x23c0 [ 518.726325][T22811] ? unwind_next_frame+0xa5/0x23c0 [ 518.726353][T22811] ? is_bpf_text_address+0x26/0x2b0 [ 518.726385][T22811] ? __lock_acquire+0x6b5/0x2cf0 [ 518.726411][T22811] ? is_bpf_text_address+0x292/0x2b0 [ 518.726436][T22811] ? is_bpf_text_address+0x26/0x2b0 [ 518.726463][T22811] ? kernel_text_address+0xa5/0xe0 [ 518.726492][T22811] ? __kernel_text_address+0xd/0x30 [ 518.726518][T22811] ? unwind_get_return_address+0x4d/0x90 [ 518.726541][T22811] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 518.726570][T22811] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 518.726604][T22811] ? __pfx_rtnl_newlink+0x10/0x10 [ 518.726625][T22811] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 518.726650][T22811] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 518.726669][T22811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.726688][T22811] ? __lock_acquire+0x6b5/0x2cf0 [ 518.726722][T22811] netlink_rcv_skb+0x232/0x4b0 [ 518.726745][T22811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 518.726768][T22811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.726799][T22811] ? netlink_deliver_tap+0x2e/0x1b0 [ 518.726827][T22811] netlink_unicast+0x80f/0x9b0 [ 518.726864][T22811] ? __pfx_netlink_unicast+0x10/0x10 [ 518.726893][T22811] ? netlink_sendmsg+0x650/0xb40 [ 518.726910][T22811] ? skb_put+0x11b/0x210 [ 518.726936][T22811] netlink_sendmsg+0x813/0xb40 [ 518.726965][T22811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.726989][T22811] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.727019][T22811] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.727056][T22811] __sys_sendto+0x709/0x7a0 [ 518.727080][T22811] ? __pfx___sys_sendto+0x10/0x10 [ 518.727127][T22811] ? exc_page_fault+0x6a/0xc0 [ 518.727155][T22811] ? do_user_addr_fault+0xc7c/0x1360 [ 518.727182][T22811] __x64_sys_sendto+0xde/0x100 [ 518.727208][T22811] do_syscall_64+0x14d/0xf80 [ 518.727230][T22811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.727247][T22811] ? trace_irq_disable+0x37/0x100 [ 518.727269][T22811] ? clear_bhb_loop+0x40/0x90 [ 518.727291][T22811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.727309][T22811] RIP: 0033:0x7f130fd5cece [ 518.727327][T22811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 518.727343][T22811] RSP: 002b:00007f1310beae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 518.727365][T22811] RAX: ffffffffffffffda RBX: 00007f1310bec6c0 RCX: 00007f130fd5cece [ 518.727378][T22811] RDX: 0000000000000020 RSI: 00007f1310beb000 RDI: 0000000000000004 [ 518.727390][T22811] RBP: 0000000000000000 R08: 00007f1310beaf04 R09: 000000000000000c [ 518.727402][T22811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 518.727413][T22811] R13: 00007f1310beaf58 R14: 00007f1310beb000 R15: 0000000000000000 [ 518.727442][T22811] [ 519.270288][T22825] netlink: 'syz.2.4535': attribute type 2 has an invalid length. [ 519.279082][T22825] netlink: 'syz.2.4535': attribute type 2 has an invalid length. [ 519.398449][T22827] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 519.482986][T22827] bond5 (unregistering): Released all slaves [ 520.176823][T22892] netlink: 'syz.4.4548': attribute type 1 has an invalid length. [ 521.120330][T22941] bond5: ARP target 1.0.0.0 is already present [ 521.147671][T22941] bond5: option arp_ip_target: invalid value (1) [ 521.319296][T22941] bond5 (unregistering): Released all slaves [ 521.676643][T22987] __nla_validate_parse: 24 callbacks suppressed [ 521.676664][T22987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4570'. [ 521.961812][T23002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4574'. [ 522.110279][T23016] netlink: 'syz.3.4579': attribute type 10 has an invalid length. [ 522.119293][T23016] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 522.731725][T23064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4594'. [ 522.779869][T23066] netlink: 'syz.2.4595': attribute type 8 has an invalid length. [ 522.853709][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4596'. [ 522.863030][T23073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4596'. [ 522.865092][T23068] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 522.885213][T23068] bond5 (unregistering): Released all slaves [ 522.892511][T23076] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4597'. [ 522.926573][T23071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4597'. [ 523.106531][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4599'. [ 523.116006][T23086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4599'. [ 523.421701][T23101] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4606'. [ 523.657309][T23119] netlink: 'syz.1.4611': attribute type 1 has an invalid length. [ 523.673470][T23119] netlink: 'syz.1.4611': attribute type 3 has an invalid length. [ 523.682872][T23119] netlink: 'syz.1.4611': attribute type 7 has an invalid length. [ 523.691361][T23119] netlink: 'syz.1.4611': attribute type 8 has an invalid length. [ 523.704437][T23119] NCSI netlink: No device for ifindex 131092 [ 523.730613][T23123] netlink: 'syz.3.4610': attribute type 11 has an invalid length. [ 523.964844][T23134] xt_hashlimit: max too large, truncated to 1048576 [ 525.274282][T23129] netlink: 'syz.1.4613': attribute type 5 has an invalid length. [ 525.442161][T23144] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 525.797732][T23161] Bluetooth: MGMT ver 1.23 [ 525.941065][T23167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.024012][T23174] netlink: 'syz.2.4627': attribute type 10 has an invalid length. [ 526.041579][T23177] x_tables: duplicate entry at hook 3 [ 526.063046][T23174] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 526.683714][T23214] team0: No ports can be present during mode change [ 527.138808][T23238] net_ratelimit: 6 callbacks suppressed [ 527.138827][T23238] openvswitch: netlink: Missing key (keys=40, expected=80) [ 527.168700][T23237] openvswitch: netlink: Missing key (keys=40, expected=80) [ 527.196862][T23240] xt_TCPMSS: Only works on TCP SYN packets [ 527.197101][T23237] __nla_validate_parse: 3 callbacks suppressed [ 527.197115][T23237] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4643'. [ 527.203405][T23240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4644'. [ 527.251381][T23238] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4643'. [ 527.281326][T23246] syzkaller0: entered promiscuous mode [ 527.292545][T23246] syzkaller0: entered allmulticast mode [ 527.481737][T23253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4648'. [ 527.515231][T23256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4650'. [ 527.833817][T23268] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4653'. [ 527.891021][T23275] sctp: [Deprecated]: syz.4.4655 (pid 23275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.891021][T23275] Use struct sctp_sack_info instead [ 528.176923][T23284] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4658'. [ 528.251589][T23290] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4659'. [ 528.267111][T23290] syzkaller0: entered promiscuous mode [ 528.272732][T23290] syzkaller0: entered allmulticast mode [ 528.280548][T23290] tipc: Started in network mode [ 528.285545][T23290] tipc: Node identity ba81bfecfd64, cluster identity 4711 [ 528.293612][T23290] tipc: Enabled bearer , priority 0 [ 528.314480][T23286] tipc: Resetting bearer [ 528.350358][T23286] tipc: Disabling bearer [ 528.409051][T23296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4663'. [ 528.543614][T23306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4667'. [ 528.632856][T23303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 528.717583][T23313] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 528.998323][T23341] syz_tun: entered allmulticast mode [ 529.345080][T23366] netlink: 'syz.0.4679': attribute type 1 has an invalid length. [ 531.762691][T23331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.778826][T23361] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 531.856772][T23337] syz_tun: left allmulticast mode [ 532.072421][T23385] netlink: 'syz.3.4684': attribute type 25 has an invalid length. [ 532.225019][T23393] __nla_validate_parse: 11 callbacks suppressed [ 532.225039][T23393] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4684'. [ 532.291524][T23394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4686'. [ 532.640410][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4695'. [ 533.031354][T23442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4703'. [ 533.059142][T23442] netlink: 'syz.3.4703': attribute type 7 has an invalid length. [ 533.074695][T23442] netlink: 'syz.3.4703': attribute type 8 has an invalid length. [ 533.108132][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4703'. [ 533.339288][T23452] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 533.440165][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4707'. [ 533.465195][T23454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4707'. [ 533.482702][T23454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4707'. [ 533.493946][T23454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4707'. [ 533.823969][T23465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4711'. [ 533.851685][T23467] netlink: 'syz.2.4712': attribute type 1 has an invalid length. [ 534.570929][T23492] sctp: [Deprecated]: syz.1.4718 (pid 23492) Use of int in max_burst socket option. [ 534.570929][T23492] Use struct sctp_assoc_value instead [ 534.610938][T23494] sctp: [Deprecated]: syz.1.4718 (pid 23494) Use of int in max_burst socket option. [ 534.610938][T23494] Use struct sctp_assoc_value instead [ 535.225793][T23515] syzkaller0: entered promiscuous mode [ 535.238775][T23515] syzkaller0: entered allmulticast mode [ 535.249878][T23515] netlink: 'syz.0.4725': attribute type 11 has an invalid length. [ 535.258392][T23507] netlink: 'syz.3.4717': attribute type 1 has an invalid length. [ 535.270888][T23507] netlink: 'syz.3.4717': attribute type 11 has an invalid length. [ 535.462380][T23543] bond5: Unable to set up delay as MII monitoring is disabled [ 535.479620][T23543] bond5 (unregistering): Released all slaves [ 535.513920][T23547] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.526089][T23547] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.593950][T23554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.615618][T23547] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.632330][T23547] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.785558][T23547] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.803928][T23547] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.913004][T23547] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.933620][T23547] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.111740][T17580] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.136331][T17580] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.156995][T23579] openvswitch: netlink: Missing key (keys=40, expected=100) [ 536.201699][T21309] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.212200][T21309] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.326623][T15681] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.358552][T15681] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.366907][T15681] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.391572][T15681] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.586127][T23600] syzkaller1: entered promiscuous mode [ 536.592326][T23600] syzkaller1: entered allmulticast mode [ 536.710052][T23603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.027533][T23629] nbd: couldn't find a device at index 1 [ 537.070580][T23633] netlink: 'syz.3.4756': attribute type 1 has an invalid length. [ 537.130786][T23633] bond5: entered promiscuous mode [ 537.136282][T23633] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.155228][T23638] bond5: (slave bridge4): making interface the new active one [ 537.163111][T23638] bridge4: entered promiscuous mode [ 537.169958][T23638] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 537.202665][T23633] bond5: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 537.215740][T23633] bond5: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 537.245635][T23639] tun0: tun_chr_ioctl cmd 1074025675 [ 537.252456][T23638] __nla_validate_parse: 19 callbacks suppressed [ 537.252477][T23638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4756'. [ 537.279463][T23639] tun0: persist enabled [ 537.533010][T23662] netlink: 'syz.0.4764': attribute type 2 has an invalid length. [ 537.555461][T23662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4764'. [ 537.571710][T23660] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4765'. [ 537.602133][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4766'. [ 537.602420][T23660] syzkaller0: entered promiscuous mode [ 537.622940][T23660] syzkaller0: entered allmulticast mode [ 537.715293][T23674] team0: Port device team_slave_0 removed [ 537.875584][T23680] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 537.887718][T23680] bond6 (unregistering): Released all slaves [ 538.080434][T23697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.480829][T23726] netlink: 'syz.2.4784': attribute type 1 has an invalid length. [ 538.559571][T23732] netlink: 'syz.0.4788': attribute type 83 has an invalid length. [ 538.862905][T23748] netlink: 'syz.3.4793': attribute type 1 has an invalid length. [ 538.879914][T23752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 538.890307][T23748] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 538.914685][T23755] netlink: 'syz.2.4792': attribute type 1 has an invalid length. [ 539.037072][T23755] 8021q: adding VLAN 0 to HW filter on device bond9 [ 539.125013][T23758] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 539.160654][T23740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4790'. [ 539.211144][T23771] pim6reg527: entered allmulticast mode [ 539.219054][T23773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.243032][T23774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.352267][T23778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.375125][T23780] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 539.384922][T23780] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 539.395884][T23780] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 539.537079][T23797] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4804'. [ 539.546944][T23797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4804'. [ 539.654920][T23800] netlink: 'syz.1.4805': attribute type 8 has an invalid length. [ 539.714368][T23804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4807'. [ 539.725288][T23804] netlink: 'syz.0.4807': attribute type 7 has an invalid length. [ 539.734084][T23804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4807'. [ 539.847464][T23815] gre0: left promiscuous mode [ 539.852921][T23815] gre0: left allmulticast mode [ 539.891900][T23815] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 539.902024][T23815] vlan3: left promiscuous mode [ 539.908921][T23815] vlan3: left allmulticast mode [ 539.913918][T23815] hsr_slave_1: left allmulticast mode [ 539.936605][T23815] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 539.944237][T23815] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 539.977064][T23815] bond5: left promiscuous mode [ 539.982092][T23815] bridge4: left promiscuous mode [ 540.037754][T21315] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.056378][T21315] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 540.069653][T21315] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.091167][T21315] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 540.108113][T21315] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.127905][T21315] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 540.159738][T21315] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.178133][T21315] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 540.310806][T23827] netlink: 'syz.4.4814': attribute type 4 has an invalid length. [ 540.333420][T23827] netlink: 'syz.4.4814': attribute type 4 has an invalid length. [ 540.748846][T23848] netlink: 'syz.4.4822': attribute type 1 has an invalid length. [ 540.821027][T23847] ip6gre1: entered allmulticast mode [ 542.223030][T23942] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 542.570198][T23954] __nla_validate_parse: 8 callbacks suppressed [ 542.570221][T23954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4843'. [ 542.698903][T23964] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 542.937010][T23975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4849'. [ 542.951098][T23975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4849'. [ 542.998839][T23967] wg1 speed is unknown, defaulting to 1000 [ 543.264618][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4854'. [ 543.559652][T24008] syzkaller0: entered promiscuous mode [ 543.567290][T24008] syzkaller0: entered allmulticast mode [ 543.586100][T24010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4861'. [ 543.810405][T24016] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 543.898617][T24016] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 544.010531][T24029] nbd2: detected capacity change from 0 to 127 [ 544.025002][ T5139] block nbd2: Receive control failed (result -104) [ 544.041178][T24016] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 544.191435][T24016] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 544.254416][T24044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4870'. [ 544.389485][T21309] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 544.469479][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 544.497583][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 544.517557][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 544.681690][T24060] syzkaller0: entered promiscuous mode [ 544.687482][T24060] syzkaller0: entered allmulticast mode [ 544.900490][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4881'. [ 544.943551][T24080] validate_nla: 3 callbacks suppressed [ 544.943570][T24080] netlink: 'syz.4.4881': attribute type 30 has an invalid length. [ 544.991516][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4881'. [ 546.834354][T24114] syzkaller0: entered promiscuous mode [ 546.851027][T24114] syzkaller0: entered allmulticast mode [ 546.869438][T24115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'. [ 546.883132][T24115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4889'. [ 546.942419][T21309] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.962284][T21309] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.109720][T21309] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.139179][T21309] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.297088][T24146] netlink: 'syz.2.4895': attribute type 3 has an invalid length. [ 547.681038][T24167] __nla_validate_parse: 2 callbacks suppressed [ 547.681060][T24167] netlink: 210768 bytes leftover after parsing attributes in process `syz.0.4900'. [ 547.767278][T24167] bond0: left allmulticast mode [ 547.783282][T24167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.428925][T24177] netlink: 'syz.3.4905': attribute type 2 has an invalid length. [ 549.565963][T24191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4908'. [ 549.932306][T24221] bpq0: left promiscuous mode [ 550.026015][T24226] : renamed from hsr0 [ 550.184020][T24237] tipc: Enabled bearer , priority 0 [ 550.222026][T24243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4918'. [ 550.232972][T24237] tipc: Resetting bearer [ 550.266450][T24236] tipc: Disabling bearer [ 550.880429][T24276] ipt_rpfilter: unknown options [ 551.097709][T24284] 8021q: VLANs not supported on sit0 [ 551.181483][T24287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4932'. [ 551.247863][ T6690] lec:lec_start_xmit: lec0:No lecd attached [ 551.396807][T24298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'. [ 551.427236][T24298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.455657][T24298] batman_adv: batadv0: Removing interface: netdevsim0 [ 551.559393][T24310] netlink: 'syz.4.4939': attribute type 1 has an invalid length. [ 551.575414][T24310] xt_l2tp: missing protocol rule (udp|l2tpip) [ 551.575975][T24309] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4940'. [ 551.591399][T24310] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4939'. [ 551.596247][T24309] netlink: ct family unspecified [ 551.626249][T24310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4939'. [ 551.641169][T24310] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4939'. [ 551.650820][T24310] netlink: 'syz.4.4939': attribute type 2 has an invalid length. [ 551.680238][T24310] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4939'. [ 551.785121][T21307] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.796245][T21307] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.807379][T21307] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.818708][T21307] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.885935][T24327] tipc: Enabled bearer , priority 0 [ 551.940443][T24327] syzkaller0: entered promiscuous mode [ 551.945948][T24327] syzkaller0: entered allmulticast mode [ 551.953131][T24327] tipc: Resetting bearer [ 551.966520][T24328] tipc: Cannot configure node identity twice [ 551.990630][T24327] tipc: Cannot configure node identity twice [ 552.000134][T24326] tipc: Resetting bearer [ 552.076455][T24337] xt_SECMARK: invalid mode: 9 [ 552.170479][T24338] xt_SECMARK: invalid mode: 9 [ 553.623380][T24326] tipc: Disabling bearer [ 553.640360][T24343] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 553.651124][T24343] batman_adv: batadv0: Removing interface: ipvlan2 [ 553.672023][T24343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.706466][T24357] __nla_validate_parse: 5 callbacks suppressed [ 553.706486][T24357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4952'. [ 553.755880][ T7150] tipc: Node number set to 2966331872 [ 553.791929][T24359] netlink: 5496 bytes leftover after parsing attributes in process `syz.4.4953'. [ 553.982839][T24369] netlink: 5496 bytes leftover after parsing attributes in process `syz.4.4959'. [ 553.984242][T24366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4957'. [ 554.034718][T24367] team0: Caught tx_queue_len zero misconfig [ 554.041778][T24367] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 554.214895][T24386] netlink: 'syz.2.4963': attribute type 2 has an invalid length. [ 554.227254][T24386] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4963'. [ 554.285309][T24392] netlink: 'syz.3.4964': attribute type 1 has an invalid length. [ 554.495672][T24401] syzkaller1: entered promiscuous mode [ 554.511388][T24401] syzkaller1: entered allmulticast mode [ 554.784560][T24423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.202127][T24447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4979'. [ 555.239516][T24447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4979'. [ 555.256690][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4982'. [ 555.296701][T24452] veth0: Caught tx_queue_len zero misconfig [ 555.305097][T24452] netlink: 'syz.2.4983': attribute type 3 has an invalid length. [ 555.338558][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4982'. [ 555.496893][T24457] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4985'. [ 555.513681][T24460] netlink: 'syz.2.4986': attribute type 3 has an invalid length. [ 555.527241][T24460] netlink: 'syz.2.4986': attribute type 3 has an invalid length. [ 555.919497][T24500] tipc: Trying to set illegal importance in message [ 556.521618][T24531] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 556.784260][T24552] delete_channel: no stack [ 557.067942][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 557.076004][ C0] lec:lec_tx_timeout: lec0 [ 557.127173][T24138] udevd[24138]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 557.181836][T24565] vlan2: entered promiscuous mode [ 557.187423][T24565] geneve1: entered promiscuous mode [ 557.195010][T24565] vlan2: entered allmulticast mode [ 557.200865][T24565] geneve1: entered allmulticast mode [ 557.265604][T24576] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 557.307226][T24576] bond5: (slave lo): Enslaving as an active interface with an up link [ 557.329705][T24576] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 557.927485][T24618] xt_CONNSECMARK: invalid mode: 0 [ 558.023327][T24624] netlink: 'syz.0.5031': attribute type 21 has an invalid length. [ 558.116806][T24628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.156364][T24632] openvswitch: netlink: IP tunnel dst address not specified [ 558.663388][T24658] syzkaller1: entered promiscuous mode [ 558.670458][T24658] syzkaller1: entered allmulticast mode [ 558.810796][T24671] syzkaller1: entered promiscuous mode [ 558.816455][T24671] syzkaller1: entered allmulticast mode [ 558.937215][T24681] block nbd4: not configured, cannot reconfigure [ 559.279863][T24701] __nla_validate_parse: 14 callbacks suppressed [ 559.279884][T24701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5057'. [ 559.299550][T24703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5055'. [ 559.439197][T24712] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5060'. [ 559.897454][T24741] netlink: 'syz.1.5070': attribute type 1 has an invalid length. [ 559.939154][T24748] lo speed is unknown, defaulting to 1000 [ 559.964331][T24748] lo speed is unknown, defaulting to 1000 [ 560.002695][T24748] lo speed is unknown, defaulting to 1000 [ 560.094721][T24760] ip6t_REJECT: ECHOREPLY is not supported [ 560.275114][T24775] ip6t_REJECT: ECHOREPLY is not supported [ 560.314185][T24777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5077'. [ 560.323629][T24777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5077'. [ 560.373984][T24782] syzkaller0: entered promiscuous mode [ 560.378619][T24781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5080'. [ 560.379769][T24782] syzkaller0: entered allmulticast mode [ 560.404953][T24781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5080'. [ 560.441752][T24777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5077'. [ 560.458328][T24777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5077'. [ 560.503468][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5081'. [ 560.632885][T24748] infiniband syz0: set down [ 560.637574][ T7159] lo speed is unknown, defaulting to 1000 [ 560.669892][T24748] infiniband syz0: added lo [ 560.676847][T24748] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 560.684413][T24748] infiniband syz0: Couldn't open port 1 [ 560.733021][T24748] RDS/IB: syz0: added [ 560.737116][T24748] smc: adding ib device syz0 with port count 1 [ 560.764813][T24748] smc: ib device syz0 port 1 has no pnetid [ 560.860070][ T7159] lo speed is unknown, defaulting to 1000 [ 560.884214][T24748] lo speed is unknown, defaulting to 1000 [ 561.069961][T24797] netlink: 'syz.0.5084': attribute type 17 has an invalid length. [ 561.282439][T24748] lo speed is unknown, defaulting to 1000 [ 561.541984][T24829] SET target dimension over the limit! [ 561.767784][T24748] lo speed is unknown, defaulting to 1000 [ 562.010233][T24845] syzkaller1: entered promiscuous mode [ 562.016023][T24845] syzkaller1: entered allmulticast mode [ 562.146262][T24849] netlink: 'syz.0.5101': attribute type 1 has an invalid length. [ 562.176367][T24850] netlink: 'syz.0.5101': attribute type 1 has an invalid length. [ 562.232602][T24849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 562.283023][T24748] lo speed is unknown, defaulting to 1000 [ 562.824914][T24878] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.831461][T24881] openvswitch: netlink: IP tunnel TTL not specified. [ 562.855777][T24748] lo speed is unknown, defaulting to 1000 [ 562.950086][T24878] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.052651][T24878] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.080178][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.094825][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 563.213060][T24878] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.261072][T24891] tipc: Enabled bearer , priority 0 [ 563.270185][T24891] syzkaller0: entered promiscuous mode [ 563.275879][T24891] syzkaller0: entered allmulticast mode [ 563.306469][T24891] tipc: Resetting bearer [ 563.320418][T24890] tipc: Resetting bearer [ 563.346942][T24890] tipc: Disabling bearer [ 563.371275][T24748] lo speed is unknown, defaulting to 1000 [ 563.441788][T15685] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.555428][T15685] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.564463][T15685] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.651604][T21318] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.663415][T24901] syzkaller0: entered promiscuous mode [ 563.671220][T24901] syzkaller0: entered allmulticast mode [ 563.917805][T24748] lo speed is unknown, defaulting to 1000 [ 563.994548][T24920] tipc: Enabling of bearer rejected, failed to enable media [ 564.057191][T24921] netlink: 'syz.0.5124': attribute type 9 has an invalid length. [ 564.072155][T24921] netlink: 'syz.0.5124': attribute type 11 has an invalid length. [ 564.104463][T24926] netlink: 'syz.4.5125': attribute type 4 has an invalid length. [ 564.124222][T24921] netlink: 'syz.0.5124': attribute type 12 has an invalid length. [ 564.142332][T24927] netlink: 'syz.1.5123': attribute type 11 has an invalid length. [ 564.178236][T24927] netlink: 'syz.1.5123': attribute type 4 has an invalid length. [ 564.596227][T24949] netlink: zone id is out of range [ 564.602686][T24949] netlink: zone id is out of range [ 564.608162][T24949] netlink: zone id is out of range [ 564.613560][T24949] netlink: zone id is out of range [ 564.651472][T24949] netlink: zone id is out of range [ 564.662758][T24952] __nla_validate_parse: 43 callbacks suppressed [ 564.662777][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5133'. [ 564.711066][T24949] netlink: zone id is out of range [ 564.737533][T24949] netlink: zone id is out of range [ 564.747114][T24958] netlink: 'syz.1.5137': attribute type 10 has an invalid length. [ 564.757405][T24958] team0: Device ipvlan1 failed to register rx_handler [ 564.764810][T24949] netlink: zone id is out of range [ 565.082210][T24985] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.5144'. [ 565.161792][T24988] netlink: 'syz.2.5148': attribute type 1 has an invalid length. [ 565.278909][T24997] gretap1: entered promiscuous mode [ 565.314896][T24997] bond10: (slave gretap1): making interface the new active one [ 565.323861][T24997] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 565.424244][T24998] macvlan3: entered promiscuous mode [ 565.430001][T24998] macvlan3: entered allmulticast mode [ 565.436407][T24998] bond10: entered promiscuous mode [ 565.443737][T24998] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 565.454271][T24998] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.473091][T24998] bond10: left promiscuous mode [ 565.536902][T24988] macvlan3: entered promiscuous mode [ 565.559557][T24988] macvlan3: entered allmulticast mode [ 565.566409][T24988] bond10: entered promiscuous mode [ 565.574180][T24988] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 565.582787][T24988] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.605598][T24988] bond10: left promiscuous mode [ 565.639019][T25002] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5149'. [ 565.924443][T25033] tipc: Started in network mode [ 565.939643][T25033] tipc: Node identity e2908dd8126c, cluster identity 4711 [ 565.963901][T25033] tipc: Enabled bearer , priority 0 [ 565.990609][T25044] syzkaller0: entered promiscuous mode [ 566.007356][T25044] syzkaller0: entered allmulticast mode [ 566.073743][T25033] tipc: Resetting bearer [ 566.277615][T25066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5161'. [ 566.325853][T25067] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20002 [ 566.679138][T25027] tipc: Resetting bearer [ 566.712285][T25027] tipc: Disabling bearer [ 566.740739][T25088] netlink: 'syz.3.5166': attribute type 39 has an invalid length. [ 566.831974][T25094] tipc: New replicast peer: 255.255.255.255 [ 566.842773][T25094] tipc: Enabled bearer , priority 10 [ 566.849848][T25095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5167'. [ 567.056227][T25107] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5172'. [ 567.087745][T25112] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5172'. [ 567.379357][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5179'. [ 567.391130][T25132] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5176'. [ 567.407688][T25131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5179'. [ 567.433447][T25135] atomic_op ffff88805a3d4198 conn xmit_atomic 0000000000000000 [ 567.530979][T25140] netlink: 'syz.4.5182': attribute type 1 has an invalid length. [ 567.958672][ T7150] tipc: Node number set to 1206239212 [ 568.108476][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.116704][ C0] lec:lec_tx_timeout: lec0 [ 568.212914][T21309] bridge_slave_1: left allmulticast mode [ 568.221032][T21309] bridge_slave_1: left promiscuous mode [ 568.227934][T21309] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.281388][T21309] bridge_slave_0: left allmulticast mode [ 568.293698][T21309] bridge_slave_0: left promiscuous mode [ 568.337473][T21309] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.135741][T21309] bond6 (unregistering): (slave bridge5): Releasing active interface [ 569.257708][T21309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.272020][T21309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.284604][T21309] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 569.295512][T21309] bond0 (unregistering): Released all slaves [ 569.314067][T21309] bond1 (unregistering): Released all slaves [ 569.339356][T21309] bond2 (unregistering): Released all slaves [ 569.362359][T21309] bond3 (unregistering): Released all slaves [ 569.386392][T21309] bond4 (unregistering): Released all slaves [ 569.421527][T21309] bond5 (unregistering): Released all slaves [ 569.442956][T21309] bond6 (unregistering): Released all slaves [ 569.473010][T21309] bond7 (unregistering): Released all slaves [ 569.495184][T21309] bond8 (unregistering): (slave vxcan3): Releasing backup interface [ 569.506283][T21309] bond8 (unregistering): Released all slaves [ 569.539445][T21309] bond9 (unregistering): Released all slaves [ 569.731956][T21309] : left promiscuous mode [ 569.814114][T25215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 569.881728][T21309] : left promiscuous mode [ 570.002675][T21309] tipc: Disabling bearer [ 570.026704][T21309] tipc: Disabling bearer [ 570.055118][T21309] tipc: Left network mode [ 570.283817][T25235] __nla_validate_parse: 6 callbacks suppressed [ 570.283837][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5208'. [ 570.507103][T25247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5212'. [ 570.530673][T25249] netlink: 'syz.0.5211': attribute type 9 has an invalid length. [ 570.543901][T25247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5212'. [ 570.566562][T25247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5212'. [ 570.576077][T25247] net_ratelimit: 7 callbacks suppressed [ 570.576095][T25247] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 570.892642][T25262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5215'. [ 570.978663][T25272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5218'. [ 571.081311][T25277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.204065][T25285] netlink: 'syz.1.5222': attribute type 3 has an invalid length. [ 571.336303][T25292] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 571.351832][T25289] netlink: zone id is out of range [ 571.357201][T25289] netlink: get zone limit has 4 unknown bytes [ 571.392344][T25289] nbd: must specify at least one socket [ 571.607443][T25305] openvswitch: netlink: Unknown key attributes 2 [ 571.653378][T25303] erspan0: entered promiscuous mode [ 571.659864][T25303] erspan0: entered allmulticast mode [ 571.791810][T21309] hsr_slave_0: left promiscuous mode [ 571.805668][T21309] hsr_slave_1: left promiscuous mode [ 571.842530][T25311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.135146][T25319] netlink: 'syz.0.5233': attribute type 32 has an invalid length. [ 572.217690][T21309] team0 (unregistering): Port device team_slave_1 removed [ 572.255754][T21309] team0 (unregistering): Port device team_slave_0 removed [ 572.658779][T25327] netlink: 'syz.4.5234': attribute type 10 has an invalid length. [ 572.782101][T25333] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 572.814479][T25341] netlink: 'syz.2.5239': attribute type 11 has an invalid length. [ 572.838213][T25341] netlink: 'syz.2.5239': attribute type 4 has an invalid length. [ 572.846695][T25341] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.5239'. [ 573.058264][T25351] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5245'. [ 573.158586][T25346] bond8: option all_slaves_active: invalid value (222) [ 573.196989][T25346] bond8 (unregistering): Released all slaves [ 573.299150][T25367] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5244'. [ 573.336695][T25367] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5244'. [ 573.656014][T25382] nbd: must specify a device to reconfigure [ 574.055599][T25408] xt_hashlimit: size too large, truncated to 1048576 [ 574.126481][T25414] tipc: Enabling of bearer rejected, already enabled [ 574.278579][T25421] netlink: 'syz.4.5262': attribute type 3 has an invalid length. [ 574.595938][ T5202] block nbd2: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 30 seconds [ 574.611666][ T5202] block nbd2: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 30 seconds [ 574.624643][ T5202] block nbd2: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 30 seconds [ 574.636275][ T5202] block nbd2: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 30 seconds [ 574.748880][T25447] xt_l2tp: v2 doesn't support IP mode [ 575.139663][T25463] bond8: option mode: invalid value (27) [ 575.176518][T25463] bond8 (unregistering): Released all slaves [ 575.397575][T25475] netlink: 'syz.2.5277': attribute type 10 has an invalid length. [ 575.586512][T25486] __nla_validate_parse: 13 callbacks suppressed [ 575.586534][T25486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5279'. [ 575.645101][T25486] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5279'. [ 575.681307][T25486] netlink: 'syz.0.5279': attribute type 6 has an invalid length. [ 575.689324][T25486] netlink: 'syz.0.5279': attribute type 5 has an invalid length. [ 575.697115][T25486] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5279'. [ 575.967759][T25498] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 576.008600][T25498] bond6 (unregistering): Released all slaves [ 576.071883][T25515] netlink: 'syz.0.5284': attribute type 1 has an invalid length. [ 576.140237][T25512] netlink: 'syz.0.5284': attribute type 12 has an invalid length. [ 576.194346][T25512] gretap2: entered promiscuous mode [ 576.235031][T25520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5284'. [ 576.258217][ T29] audit: type=1804 audit(1771489852.461:8): pid=25523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5287" name="/newroot/413/cgroup.controllers" dev="tmpfs" ino=2123 res=1 errno=0 [ 576.273396][T25523] nbd: must specify at least one socket [ 576.308274][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5284'. [ 576.327141][T25514] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 576.342845][ T29] audit: type=1800 audit(1771489852.461:9): pid=25523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5287" name="cgroup.controllers" dev="tmpfs" ino=2123 res=0 errno=0 [ 576.374566][T25514] bond8 (unregistering): Released all slaves [ 576.380867][T25527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5288'. [ 576.578953][T25531] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 576.889724][T25537] netlink: 'syz.3.5292': attribute type 10 has an invalid length. [ 576.962488][T25538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 577.677663][T25536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.069625][T25529] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 579.079016][T25537] wlan1: mtu less than device minimum [ 579.107727][T25537] `: (slave wlan1): Error -22 calling dev_set_mtu [ 579.316427][T25546] netlink: 'syz.1.5297': attribute type 11 has an invalid length. [ 579.342289][T25546] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.5297'. [ 579.564754][T25564] bond6: entered promiscuous mode [ 579.570922][T25564] bond6: entered allmulticast mode [ 579.576511][T25564] 8021q: adding VLAN 0 to HW filter on device bond6 [ 579.585613][T25562] netlink: 'syz.0.5301': attribute type 14 has an invalid length. [ 579.616135][T25562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.073125][T25590] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5310'. [ 580.903943][T25590] dummy0 (unregistering): left allmulticast mode [ 580.911355][T25590] bridge0: port 3(dummy0) entered disabled state [ 581.149050][T25625] IPVS: length: 8 != 1152 [ 581.756457][T25648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5318'. [ 582.953595][T25652] openvswitch: netlink: Message has 8 unknown bytes. [ 582.991570][T25652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.076471][T25664] netlink: 'syz.4.5321': attribute type 15 has an invalid length. [ 583.093280][T25664] netlink: 'syz.4.5321': attribute type 17 has an invalid length. [ 583.106981][T25658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5323'. [ 583.124069][T25658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5323'. [ 583.232939][T25674] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 583.329612][T25658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5323'. [ 583.362769][T25658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5323'. [ 583.428949][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5328'. [ 583.441774][T25683] netlink: 'syz.0.5327': attribute type 11 has an invalid length. [ 583.453318][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5328'. [ 583.462986][T25683] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.5327'. [ 583.473627][T25681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5328'. [ 583.483915][T25680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5328'. [ 583.617543][T25692] netlink: 'syz.3.5330': attribute type 4 has an invalid length. [ 583.852721][T25706] netlink: 'syz.1.5334': attribute type 3 has an invalid length. [ 584.057474][T25720] netlink: zone id is out of range [ 584.075130][T25715] netlink: zone id is out of range [ 584.090575][T25715] netlink: zone id is out of range [ 584.101371][T25720] netlink: zone id is out of range [ 584.121012][T25711] netlink: set zone limit has 4 unknown bytes [ 584.142990][T25715] netlink: zone id is out of range [ 584.182841][T25720] netlink: zone id is out of range [ 584.228449][T25715] netlink: zone id is out of range [ 584.992229][T25753] syzkaller0: entered promiscuous mode [ 585.007916][T25753] syzkaller0: entered allmulticast mode [ 585.021684][T25761] netlink: 'syz.4.5351': attribute type 1 has an invalid length. [ 585.043658][T25761] netlink: 'syz.4.5351': attribute type 11 has an invalid length. [ 585.392797][T25779] veth3: entered allmulticast mode [ 585.456314][T25780] veth5: entered allmulticast mode [ 585.488882][T25785] syzkaller0: entered promiscuous mode [ 585.494764][T25785] syzkaller0: entered allmulticast mode [ 585.861690][T25824] netlink: 'syz.0.5367': attribute type 9 has an invalid length. [ 586.112676][T25839] smc: net device wlan0 applied user defined pnetid SYZ0 [ 586.320763][T25854] smc: net device wlan0 erased user defined pnetid SYZ0 [ 586.367263][T25850] syzkaller0: entered promiscuous mode [ 586.373674][T25850] syzkaller0: entered allmulticast mode [ 586.725872][T25870] tipc: Enabled bearer , priority 0 [ 586.751233][T25870] syzkaller0: MTU too low for tipc bearer [ 586.757137][T25870] tipc: Disabling bearer [ 586.820649][T25873] x_tables: unsorted underflow at hook 2 [ 586.852326][T25882] bond5: entered allmulticast mode [ 587.025878][T25895] __nla_validate_parse: 15 callbacks suppressed [ 587.025899][T25895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5386'. [ 587.144344][T25881] bond5: left allmulticast mode [ 587.309441][T25917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5393'. [ 587.620377][T25940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5398'. [ 587.678756][T25941] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5399'. [ 587.960720][T25960] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5406'. [ 588.048336][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 588.059485][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 588.077593][T25963] syzkaller1: entered promiscuous mode [ 588.084780][T25963] syzkaller1: entered allmulticast mode [ 588.113981][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 588.455576][T25980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5411'. [ 588.500756][T25980] netlink: 'syz.4.5411': attribute type 13 has an invalid length. [ 588.687452][T25980] lec:lec_start_xmit: lec0:No lecd attached [ 588.815503][T26000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5415'. [ 589.051306][T26015] bridge_slave_0: left allmulticast mode [ 589.057260][T26015] bridge_slave_0: left promiscuous mode [ 589.094099][T26012] net_ratelimit: 15 callbacks suppressed [ 589.094123][T26012] openvswitch: netlink: IPv4 tun info is not correct [ 589.119513][T26015] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.173989][T26015] bridge_slave_1: left allmulticast mode [ 589.188477][T26015] bridge_slave_1: left promiscuous mode [ 589.209549][T26015] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.239359][T26015] team0: Port device team_slave_0 removed [ 589.252243][T26015] team0: Port device team_slave_1 removed [ 589.274073][T26015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 589.489484][T26044] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 589.660692][T26056] netlink: 'syz.0.5432': attribute type 1 has an invalid length. [ 589.764584][T26063] bond8: (slave bridge7): making interface the new active one [ 589.774457][T26063] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 590.162358][T26082] syzkaller0: entered promiscuous mode [ 590.168652][T26082] syzkaller0: entered allmulticast mode [ 590.375872][T26093] netlink: 'syz.4.5445': attribute type 3 has an invalid length. [ 590.596717][T26096] geneve2: entered promiscuous mode [ 590.612651][T26096] geneve2: entered allmulticast mode [ 590.638180][T21316] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.647320][T21316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.677317][T21316] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.687518][T21316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.696883][T21316] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.708196][T21316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.718259][T21316] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.727247][T21316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.954225][T26119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.169833][T26141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.376535][T26152] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 591.393082][T26152] bond8: entered promiscuous mode [ 591.398863][T26152] bond8: entered allmulticast mode [ 591.404661][T26152] 8021q: adding VLAN 0 to HW filter on device bond8 [ 591.720607][T26177] syzkaller0: entered promiscuous mode [ 591.737621][T26177] syzkaller0: entered allmulticast mode [ 591.778806][T26184] netlink: 'syz.1.5468': attribute type 1 has an invalid length. [ 591.807709][T26184] netlink: 'syz.1.5468': attribute type 7 has an invalid length. [ 591.842502][T26184] netlink: 'syz.1.5468': attribute type 8 has an invalid length. [ 592.421069][T26223] __nla_validate_parse: 20 callbacks suppressed [ 592.421092][T26223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5480'. [ 592.495398][T26233] IPv6: NLM_F_CREATE should be specified when creating new route [ 592.556145][T26234] vlan2: entered allmulticast mode [ 592.568071][T26234] hsr0: entered allmulticast mode [ 592.586068][T26234] hsr_slave_0: entered allmulticast mode [ 592.631127][T26236] netlink: 'syz.4.5485': attribute type 2 has an invalid length. [ 592.726000][T26244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5487'. [ 592.869234][T26256] netlink: 'syz.3.5492': attribute type 11 has an invalid length. [ 593.016531][T26267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5497'. [ 593.032548][T26266] siw: device registration error -23 [ 593.103660][T26267] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 593.139120][T26272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5499'. [ 593.152557][T26272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5499'. [ 593.162614][T26272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5499'. [ 593.411844][T26285] nftables ruleset with unbound set [ 593.466104][T26289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5506'. [ 593.706192][T26304] netlink: 'syz.3.5511': attribute type 2 has an invalid length. [ 593.791421][T26307] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5513'. [ 593.882989][T26316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'. [ 593.939705][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'. [ 594.107284][T26328] openvswitch: netlink: Flow key attr not present in new flow. [ 594.131206][T26332] netlink: 'syz.1.5520': attribute type 2 has an invalid length. [ 594.174153][T26333] xt_HMARK: proto mask must be zero with L3 mode [ 594.316329][T26336] netlink: 'syz.3.5521': attribute type 4 has an invalid length. [ 594.427848][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 594.435945][ C0] lec:lec_tx_timeout: lec0 [ 594.442231][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 594.596827][T26352] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 594.680611][T26360] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 594.698950][T26360] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 594.945131][T26375] netlink: 'syz.3.5531': attribute type 6 has an invalid length. [ 594.970943][T26375] netlink: 'syz.3.5531': attribute type 6 has an invalid length. [ 594.981536][T26375] netlink: 'syz.3.5531': attribute type 6 has an invalid length. [ 594.990775][T26375] netlink: 'syz.3.5531': attribute type 6 has an invalid length. [ 595.003185][T26375] netlink: 'syz.3.5531': attribute type 6 has an invalid length. [ 595.012754][T26375] netlink: 'syz.3.5531': attribute type 6 has an invalid length. [ 595.014916][T26377] syz_tun: entered allmulticast mode [ 595.021724][T26375] netlink: 'syz.3.5531': attribute type 6 has an invalid length. [ 595.419069][T26399] tipc: Resetting bearer [ 595.576967][T26408] sctp: [Deprecated]: syz.4.5543 (pid 26408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.576967][T26408] Use struct sctp_sack_info instead [ 595.600665][T26408] sctp: [Deprecated]: syz.4.5543 (pid 26408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.600665][T26408] Use struct sctp_sack_info instead [ 595.953169][T26429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.172085][T26445] : entered promiscuous mode [ 596.896633][T26495] syzkaller0: entered promiscuous mode [ 596.904910][T26495] syzkaller0: entered allmulticast mode [ 597.034449][T26509] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 597.462405][T26531] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 597.857576][T26555] __nla_validate_parse: 10 callbacks suppressed [ 597.857599][T26555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5586'. [ 597.881687][T26554] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5587'. [ 598.020806][T26561] gtp1: entered promiscuous mode [ 598.025813][T26561] gtp1: entered allmulticast mode [ 598.059278][T26566] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5589'. [ 598.085422][T26565] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5589'. [ 598.197493][T26575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5593'. [ 598.213387][T26575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5593'. [ 598.247138][T26578] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5590'. [ 598.281775][T26575] gretap0: entered promiscuous mode [ 598.292445][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5594'. [ 598.319340][T26575] gretap0: left promiscuous mode [ 598.360356][T26579] bond0: entered promiscuous mode [ 598.366543][T26579] bond_slave_0: entered promiscuous mode [ 598.386301][T26579] bond_slave_1: entered promiscuous mode [ 598.399634][T26579] bond0: left promiscuous mode [ 598.404619][T26579] bond_slave_0: left promiscuous mode [ 598.411991][T26579] bond_slave_1: left promiscuous mode [ 598.459724][T26595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5598'. [ 598.487757][T26595] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 598.506225][T26595] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 598.542726][T26587] syzkaller0: entered promiscuous mode [ 598.564179][T26587] syzkaller0: entered allmulticast mode [ 598.594528][T26587] tipc: Enabled bearer , priority 0 [ 598.763474][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5604'. [ 598.803968][T26611] xfrm1: entered promiscuous mode [ 598.809244][T26611] xfrm1: entered allmulticast mode [ 598.994167][T26599] IPVS: Error connecting to the multicast addr [ 599.104259][T26629] syzkaller0: entered promiscuous mode [ 599.113175][T26629] syzkaller0: entered allmulticast mode [ 599.216850][T26633] xt_hashlimit: size too large, truncated to 1048576 [ 599.703090][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.713761][T26583] tipc: Resetting bearer [ 599.718554][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.730159][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.766149][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.769208][T26645] validate_nla: 66 callbacks suppressed [ 599.769225][T26645] netlink: 'syz.1.5614': attribute type 25 has an invalid length. [ 599.797614][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.827626][T26583] tipc: Disabling bearer [ 599.887221][ T5139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.902278][ T5139] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.919458][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.932156][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.966899][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.187861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 600.195959][ C0] lec:lec_tx_timeout: lec0 [ 600.341413][T26642] wg1 speed is unknown, defaulting to 1000 [ 600.380146][T26642] lo speed is unknown, defaulting to 1000 [ 600.469708][T26666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.970959][T26693] netlink: 'syz.0.5626': attribute type 32 has an invalid length. [ 600.978902][T26695] syzkaller0: entered promiscuous mode [ 600.978927][T26695] syzkaller0: entered allmulticast mode [ 600.981729][T26695] 0: reclassify loop, rule prio 0, protocol 800 [ 601.232133][T26707] netlink: zone id is out of range [ 601.237318][T26707] netlink: del zone limit has 4 unknown bytes [ 601.490341][T21318] veth0_to_bond: left allmulticast mode [ 601.515588][T21318] veth0_to_bond: left promiscuous mode [ 601.522786][T21318] bridge2: port 2(veth0_to_bond) entered disabled state [ 601.575335][T21318] veth3: left allmulticast mode [ 601.589769][T21318] veth3: left promiscuous mode [ 601.594965][T21318] bridge2: port 1(veth3) entered disabled state [ 601.749943][T21318] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 602.028112][ T5836] Bluetooth: hci3: command tx timeout [ 602.261834][T21318] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 602.331442][T21318] ` (unregistering): Released all slaves [ 602.341804][T21318] bond1 (unregistering): Released all slaves [ 602.357148][T21318] bond2 (unregistering): Released all slaves [ 602.372428][T21318] bond3 (unregistering): Released all slaves [ 602.395332][T21318]  (unregistering): Released all slaves [ 602.408368][T21318] bond0 (unregistering): Released all slaves [ 602.422327][T21318] bond4 (unregistering): Released all slaves [ 602.439469][T21318] bond5 (unregistering): Released all slaves [ 602.455447][T21318] bond6 (unregistering): Released all slaves [ 602.471639][T21318] bond7 (unregistering): Released all slaves [ 602.489323][T21318] bond8 (unregistering): Released all slaves [ 602.572945][T26744] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 602.586381][T26744] bond7 (unregistering): Released all slaves [ 602.658237][T21318] tipc: Disabling bearer [ 602.678468][T21318] tipc: Left network mode [ 602.862849][T26772] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 602.870932][T26642] chnl_net:caif_netlink_parms(): no params data found [ 602.923287][T26768] __nla_validate_parse: 12 callbacks suppressed [ 602.923309][T26768] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5646'. [ 602.926886][T26772] netlink: 'syz.1.5647': attribute type 29 has an invalid length. [ 602.958295][T26772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5647'. [ 603.156338][T26786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5649'. [ 603.177376][T26779] netlink: 'syz.1.5647': attribute type 29 has an invalid length. [ 603.188113][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5647'. [ 603.299289][T26793] netlink: 'syz.0.5650': attribute type 2 has an invalid length. [ 603.414554][T26642] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.422249][T26642] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.436946][T26642] bridge_slave_0: entered allmulticast mode [ 603.449452][T26642] bridge_slave_0: entered promiscuous mode [ 603.539093][T26642] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.546287][T26642] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.588164][T26642] bridge_slave_1: entered allmulticast mode [ 603.605845][T26811] Bluetooth: MGMT ver 1.23 [ 603.630762][T26642] bridge_slave_1: entered promiscuous mode [ 603.706694][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5653'. [ 603.758176][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5653'. [ 603.787998][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 603.853090][T26820] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5654'. [ 603.867393][T26820] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5654'. [ 603.887152][T26642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.945233][T26642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.110523][ T5836] Bluetooth: hci3: command tx timeout [ 604.151574][T26834] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5659'. [ 604.286671][T26834] bond9 (unregistering): Released all slaves [ 604.318129][T26642] team0: Port device team_slave_0 added [ 604.441306][T26642] team0: Port device team_slave_1 added [ 604.568962][T26859] netlink: 'syz.1.5664': attribute type 3 has an invalid length. [ 604.587277][T26863] netlink: 'syz.1.5664': attribute type 3 has an invalid length. [ 604.668421][ T5202] block nbd2: Possible stuck request ffff888026a38000: control (read@0,1024B). Runtime 60 seconds [ 604.679843][ T5202] block nbd2: Possible stuck request ffff888026a38200: control (read@1024,1024B). Runtime 60 seconds [ 604.702518][ T5202] block nbd2: Possible stuck request ffff888026a38400: control (read@2048,1024B). Runtime 60 seconds [ 604.715758][ T5202] block nbd2: Possible stuck request ffff888026a38600: control (read@3072,1024B). Runtime 60 seconds [ 604.795534][T26642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.805900][T26642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.839413][T26642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.901220][T26876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5666'. [ 604.936651][T26867] team_slave_1: Caught tx_queue_len zero misconfig [ 604.979413][T26642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.986421][T26642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.081924][T26642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.361749][T26642] hsr_slave_0: entered promiscuous mode [ 605.453533][T26642] hsr_slave_1: entered promiscuous mode [ 605.481620][T26642] debugfs: 'hsr0' already exists in 'hsr' [ 605.487407][T26642] Cannot create hsr debugfs directory [ 605.805171][T21318] hsr_slave_0: left promiscuous mode [ 605.849175][T21318] hsr_slave_1: left promiscuous mode [ 605.915038][T21318] pim6reg527 (unregistering): left allmulticast mode [ 606.188770][ T5836] Bluetooth: hci3: command tx timeout [ 606.291995][T21309] smc: removing ib device syz0 [ 606.381608][T26923] veth0_to_team: entered promiscuous mode [ 606.404104][T26923] veth0_to_team: left promiscuous mode [ 606.550402][T26939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.074564][T26956] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 607.083222][T26956] syzkaller1: Refused to change device type [ 607.678801][T26980] syzkaller0: entered promiscuous mode [ 607.695010][T26980] syzkaller0: entered allmulticast mode [ 607.706094][T26993] netlink: 'syz.4.5693': attribute type 13 has an invalid length. [ 607.714600][T26992] netlink: 'syz.2.5695': attribute type 10 has an invalid length. [ 607.736044][T26993] netlink: 'syz.4.5693': attribute type 27 has an invalid length. [ 608.036007][T26992] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 608.268461][ T5139] Bluetooth: hci3: command tx timeout [ 609.067900][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 609.076132][ C0] lec:lec_tx_timeout: lec0 [ 609.081074][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 610.348238][ T5139] Bluetooth: hci3: command 0x0405 tx timeout [ 610.609129][T26642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 610.947217][T26642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 611.135607][T27064] delete_channel: no stack [ 611.593419][T26642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 611.603558][T21318] IPVS: stop unused estimator thread 0... [ 611.635392][T26642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 611.892957][T27095] __nla_validate_parse: 7 callbacks suppressed [ 611.892976][T27095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5709'. [ 611.914175][T27092] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5708'. [ 611.939312][T26642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.013941][T26642] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.039345][T21318] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.046535][T21318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.130737][T21318] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.138067][T21318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.223051][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5711'. [ 612.256484][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5711'. [ 612.367430][T27120] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5714'. [ 612.425574][T27124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5715'. [ 612.478429][T27124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5715'. [ 612.498546][T27124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 612.687640][T27139] netlink: 'syz.1.5720': attribute type 1 has an invalid length. [ 612.907107][T26642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.965978][T27151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5724'. [ 613.044225][T27151] bond7: entered promiscuous mode [ 613.049955][T27151] 8021q: adding VLAN 0 to HW filter on device bond7 [ 613.075694][T26642] veth0_vlan: entered promiscuous mode [ 613.093399][T26642] veth1_vlan: entered promiscuous mode [ 613.141988][T26642] veth0_macvtap: entered promiscuous mode [ 613.176335][T26642] veth1_macvtap: entered promiscuous mode [ 613.264482][T26642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.301124][T26642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.346000][T15685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.371002][T15685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.405590][T15685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.464989][T15685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.818348][T27185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5728'. [ 614.001226][ T1206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.032276][ T1206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.087986][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 614.096080][ C0] lec:lec_tx_timeout: lec0 [ 614.124538][T27193] syzkaller0: entered promiscuous mode [ 614.140309][T27193] syzkaller0: entered allmulticast mode [ 614.200026][T21306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.228002][T21306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.330891][T27200] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5731'. [ 614.494042][T27208] IPVS: Error connecting to the multicast addr [ 614.861385][T27235] team0 (unregistering): Port device team_slave_0 removed [ 614.914438][T27235] team0 (unregistering): Port device team_slave_1 removed [ 614.992669][T27225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.510754][T27282] netlink: 'syz.1.5750': attribute type 6 has an invalid length. [ 616.656024][ T6690] lec:lec_start_xmit: lec0:No lecd attached [ 616.957115][T27347] __nla_validate_parse: 10 callbacks suppressed [ 616.957136][T27347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5765'. [ 617.036262][T27350] tipc: Started in network mode [ 617.049170][T27350] tipc: Node identity a2cc2e282c32, cluster identity 4711 [ 617.081641][T27350] tipc: Enabled bearer , priority 0 [ 617.191644][T27350] syzkaller0: MTU too low for tipc bearer [ 617.197433][T27350] tipc: Disabling bearer [ 617.723017][ T5188] udevd[5188]: worker [23592] /devices/virtual/block/nbd2 is taking a long time [ 617.748466][T27374] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 617.942648][T27393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5775'. [ 618.780355][T27422] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5782'. [ 618.804796][T27422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5782'. [ 618.856705][T27427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5783'. [ 618.866294][T27431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5783'. [ 619.288000][T27451] netlink: 'syz.0.5791': attribute type 11 has an invalid length. [ 619.304042][T27451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5791'. [ 619.320191][T27456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5794'. [ 619.353831][T27456] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5794'. [ 619.432751][T27456] veth7: entered promiscuous mode [ 619.761221][T27487] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 619.863827][T27475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5801'. [ 619.902224][T27500] netlink: 'syz.3.5807': attribute type 1 has an invalid length. [ 619.921371][T27496] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 619.932584][T27496] bond8 (unregistering): Released all slaves [ 620.012976][T27504] bond1 (unregistering): Released all slaves [ 620.038021][T27496] netlink: 'syz.1.5806': attribute type 1 has an invalid length. [ 620.753343][T27552] netlink: 'syz.1.5822': attribute type 9 has an invalid length. [ 620.785474][ T29] audit: type=1107 audit(1771489896.991:10): pid=27553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 620.793429][T27552] gtp0: entered promiscuous mode [ 620.893463][T27552] gtp0: entered allmulticast mode [ 620.932501][T27561] netlink: 'syz.3.5825': attribute type 83 has an invalid length. [ 621.304832][T27567] 8021q: adding VLAN 0 to HW filter on device bond9 [ 621.325948][T27568] 8021q: adding VLAN 0 to HW filter on device bond9 [ 621.333280][T27568] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 621.344801][T27568] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 621.490770][T27583] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 621.721479][T27592] netlink: 'syz.2.5833': attribute type 8 has an invalid length. [ 621.837542][T27600] netlink: 'syz.2.5835': attribute type 6 has an invalid length. [ 621.846297][T27600] netlink: 'syz.2.5835': attribute type 5 has an invalid length. [ 622.028179][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 622.036290][ C0] lec:lec_tx_timeout: lec0 [ 622.039561][T27619] __nla_validate_parse: 13 callbacks suppressed [ 622.039580][T27619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5840'. [ 622.041572][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 622.261802][T27633] netlink: 'syz.0.5845': attribute type 3 has an invalid length. [ 622.290475][T27637] openvswitch: netlink: IP tunnel dst address not specified [ 622.756238][T27666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5854'. [ 622.819317][T27671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5856'. [ 622.832287][T27675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5856'. [ 622.906725][T27679] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5858'. [ 623.067724][T27696] netlink: 'syz.0.5862': attribute type 24 has an invalid length. [ 623.080359][T27688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5859'. [ 623.201653][T27702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.270738][T27708] netlink: 'syz.3.5866': attribute type 1 has an invalid length. [ 623.294941][T27703] syzkaller0: entered promiscuous mode [ 623.301316][T27710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5863'. [ 623.301887][T27703] syzkaller0: entered allmulticast mode [ 623.326991][T27710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5863'. [ 623.332605][T27703] xt_ecn: cannot match TCP bits for non-tcp packets [ 623.342335][T27710] netlink: 'syz.1.5863': attribute type 12 has an invalid length. [ 623.359245][T27710] netlink: 'syz.1.5863': attribute type 11 has an invalid length. [ 623.384933][T27712] gretap1: entered promiscuous mode [ 623.399511][T27712] bond1: (slave gretap1): making interface the new active one [ 623.410757][T27712] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 623.435874][T27708] macvlan2: entered promiscuous mode [ 623.441556][T27708] macvlan2: entered allmulticast mode [ 623.450947][T27708] bond1: entered promiscuous mode [ 623.457383][T27708] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 623.467236][T27708] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 623.484090][T27708] bond1: left promiscuous mode [ 624.518617][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.531401][ T1296] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 625.601176][T27748] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 626.120388][T27783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5887'. [ 626.180688][T27775] openvswitch: netlink: IP tunnel dst address not specified [ 626.243998][T27788] syzkaller0: entered promiscuous mode [ 626.253685][T27788] syzkaller0: entered allmulticast mode [ 626.262551][T27788] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5888'. [ 626.490762][T27801] validate_nla: 1 callbacks suppressed [ 626.490771][T27806] netlink: 'syz.2.5892': attribute type 12 has an invalid length. [ 626.490783][T27801] netlink: 'syz.2.5892': attribute type 12 has an invalid length. [ 626.541898][T27801] bond11: option primary_reselect: invalid value (255) [ 626.554838][T27801] bond11 (unregistering): Released all slaves [ 626.643153][T27806] bond11: option primary_reselect: invalid value (255) [ 626.653985][T27806] bond11 (unregistering): Released all slaves [ 626.695943][T27812] bond0: entered promiscuous mode [ 626.712517][T27812] bond_slave_0: entered promiscuous mode [ 626.722989][T27812] bond_slave_1: entered promiscuous mode [ 626.733899][T27812] batadv0: entered promiscuous mode [ 626.740329][T27812] debugfs: 'hsr1' already exists in 'hsr' [ 626.746340][T27812] Cannot create hsr debugfs directory [ 626.754678][T27812] hsr1: entered promiscuous mode [ 626.762917][T27812] hsr1: entered allmulticast mode [ 626.768194][T27812] bond0: entered allmulticast mode [ 626.792649][T27812] bond_slave_0: entered allmulticast mode [ 626.802251][T27812] bond_slave_1: entered allmulticast mode [ 626.808981][T27812] batadv0: entered allmulticast mode [ 626.814937][T27812] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 626.824267][T27812] bond0: left promiscuous mode [ 626.830934][T27812] bond_slave_0: left promiscuous mode [ 626.837491][T27812] bond_slave_1: left promiscuous mode [ 626.845079][T27812] batadv0: left promiscuous mode [ 626.851987][T27822] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 626.972510][T27824] geneve3: entered promiscuous mode [ 627.009483][T15685] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 48858 - 0 [ 627.033305][T15685] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48858 - 0 [ 627.079343][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 627.087512][ C0] lec:lec_tx_timeout: lec0 [ 627.095603][T27836] __nla_validate_parse: 2 callbacks suppressed [ 627.095619][T27836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5902'. [ 627.125997][T27827] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.170414][T15685] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48858 - 0 [ 627.222277][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5904'. [ 627.247336][T27836] bond2: Invalid ad_actor_system MAC address. [ 627.254678][T27836] bond2: option ad_actor_system: invalid value (1) [ 627.267554][T27836] bond2 (unregistering): Released all slaves [ 627.384770][T27853] 8021q: VLANs not supported on sit0 [ 627.569382][T27861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5908'. [ 627.744059][T27871] netlink: 'syz.1.5912': attribute type 83 has an invalid length. [ 627.753198][T27871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5912'. [ 627.835946][T27876] netlink: 'syz.0.5914': attribute type 4 has an invalid length. [ 627.880525][T27878] netlink: 'syz.3.5915': attribute type 9 has an invalid length. [ 627.961685][T27883] pim6reg: entered allmulticast mode [ 627.970600][T27884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5916'. [ 627.972194][T27883] netlink: 'syz.1.5917': attribute type 33 has an invalid length. [ 627.988285][T27883] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5917'. [ 628.003057][T27883] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5917'. [ 628.013046][T27883] batman_adv: batadv0: Removing interface: dummy0 [ 628.211590][T27889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5919'. [ 628.361423][T27894] xt_hashlimit: size too large, truncated to 1048576 [ 628.628046][T27913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5928'. [ 628.683903][T27827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.704871][T27827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48858 - 0 [ 628.870662][T27827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.899370][T27827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48858 - 0 [ 628.938235][T27926] tipc: Enabling not permitted [ 628.943868][T27926] tipc: Enabling of bearer rejected, failed to enable media [ 628.988374][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.041301][T27827] ================================================================== [ 629.049424][T27827] BUG: KASAN: slab-use-after-free in mini_qdisc_pair_swap+0x68/0x190 [ 629.057526][T27827] Read of size 8 at addr ffff8880555d3000 by task syz.2.5898/27827 [ 629.065430][T27827] [ 629.067765][T27827] CPU: 1 UID: 0 PID: 27827 Comm: syz.2.5898 Not tainted syzkaller #0 PREEMPT(full) [ 629.067783][T27827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 629.067794][T27827] Call Trace: [ 629.067801][T27827] [ 629.067809][T27827] dump_stack_lvl+0xe8/0x150 [ 629.067832][T27827] print_report+0xba/0x230 [ 629.067849][T27827] ? mini_qdisc_pair_swap+0x68/0x190 [ 629.067865][T27827] kasan_report+0x117/0x150 [ 629.067887][T27827] ? mini_qdisc_pair_swap+0x68/0x190 [ 629.067905][T27827] mini_qdisc_pair_swap+0x68/0x190 [ 629.067922][T27827] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 629.067937][T27827] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 629.067961][T27827] tcf_block_put_ext+0x129/0x390 [ 629.067978][T27827] clsact_destroy+0x25e/0x820 [ 629.067994][T27827] ? __pfx_clsact_destroy+0x10/0x10 [ 629.068008][T27827] __qdisc_destroy+0x153/0x450 [ 629.068023][T27827] dev_shutdown+0x233/0x440 [ 629.068039][T27827] unregister_netdevice_many_notify+0x11a9/0x2370 [ 629.068066][T27827] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 629.068088][T27827] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 629.068105][T27827] ? lock_acquire+0x106/0x330 [ 629.068120][T27827] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 629.068141][T27827] unregister_netdevice_queue+0x31f/0x360 [ 629.068162][T27827] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 629.068185][T27827] nsim_destroy+0x1e5/0x680 [ 629.068209][T27827] __nsim_dev_port_del+0x14d/0x1b0 [ 629.068225][T27827] nsim_dev_reload_destroy+0x288/0x490 [ 629.068241][T27827] nsim_dev_reload_down+0x8a/0xc0 [ 629.068256][T27827] devlink_reload+0x1d1/0x8d0 [ 629.068279][T27827] ? __pfx_devlink_reload+0x10/0x10 [ 629.068296][T27827] ? apparmor_capable+0x137/0x1a0 [ 629.068312][T27827] ? bpf_lsm_capable+0x9/0x20 [ 629.068326][T27827] ? security_capable+0x7e/0x2c0 [ 629.068347][T27827] devlink_nl_reload_doit+0x9d4/0xc80 [ 629.068369][T27827] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 629.068388][T27827] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 629.068410][T27827] genl_family_rcv_msg_doit+0x22a/0x330 [ 629.068429][T27827] ? __asan_memcpy+0x40/0x70 [ 629.068445][T27827] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 629.068468][T27827] ? bpf_lsm_capable+0x9/0x20 [ 629.068481][T27827] ? security_capable+0x7e/0x2c0 [ 629.068500][T27827] genl_rcv_msg+0x61c/0x7a0 [ 629.068520][T27827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.068537][T27827] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 629.068554][T27827] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 629.068571][T27827] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 629.068593][T27827] netlink_rcv_skb+0x232/0x4b0 [ 629.068608][T27827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.068626][T27827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.068639][T27827] ? genl_rcv+0x19/0x40 [ 629.068660][T27827] ? down_read+0x272/0x2e0 [ 629.068679][T27827] ? genl_rcv+0xd/0x40 [ 629.068696][T27827] genl_rcv+0x28/0x40 [ 629.068712][T27827] netlink_unicast+0x80f/0x9b0 [ 629.068734][T27827] ? __pfx_netlink_unicast+0x10/0x10 [ 629.068754][T27827] ? netlink_sendmsg+0x650/0xb40 [ 629.068768][T27827] ? skb_put+0x11b/0x210 [ 629.068785][T27827] netlink_sendmsg+0x813/0xb40 [ 629.068803][T27827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.068818][T27827] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 629.068839][T27827] ? aa_sock_msg_perm+0xf1/0x1b0 [ 629.068858][T27827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.068878][T27827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.068892][T27827] ____sys_sendmsg+0xa68/0xad0 [ 629.068910][T27827] ? __might_fault+0xaf/0x130 [ 629.068928][T27827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.068954][T27827] ? import_iovec+0x73/0xa0 [ 629.068970][T27827] ___sys_sendmsg+0x2a5/0x360 [ 629.068987][T27827] ? __lock_acquire+0x6b5/0x2cf0 [ 629.069003][T27827] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.069032][T27827] ? __fget_files+0x2a/0x420 [ 629.069045][T27827] ? __fget_files+0x3a0/0x420 [ 629.069062][T27827] __x64_sys_sendmsg+0x1bd/0x2a0 [ 629.069080][T27827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.069097][T27827] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 629.069117][T27827] ? do_user_addr_fault+0xc7c/0x1360 [ 629.069137][T27827] do_syscall_64+0x14d/0xf80 [ 629.069154][T27827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.069169][T27827] ? trace_irq_disable+0x37/0x100 [ 629.069185][T27827] ? clear_bhb_loop+0x40/0x90 [ 629.069201][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.069215][T27827] RIP: 0033:0x7fb49059c629 [ 629.069229][T27827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.069242][T27827] RSP: 002b:00007fb49143a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.069259][T27827] RAX: ffffffffffffffda RBX: 00007fb490816180 RCX: 00007fb49059c629 [ 629.069270][T27827] RDX: 0000000000000030 RSI: 00002000000003c0 RDI: 0000000000000008 [ 629.069280][T27827] RBP: 00007fb490632b39 R08: 0000000000000000 R09: 0000000000000000 [ 629.069289][T27827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.069298][T27827] R13: 00007fb490816218 R14: 00007fb490816180 R15: 00007ffd097221e8 [ 629.069314][T27827] [ 629.069320][T27827] [ 629.566789][T27827] Allocated by task 27146: [ 629.571208][T27827] kasan_save_track+0x3e/0x80 [ 629.575979][T27827] __kasan_kmalloc+0x93/0xb0 [ 629.580570][T27827] __kmalloc_noprof+0x35c/0x760 [ 629.585424][T27827] sk_prot_alloc+0xe7/0x210 [ 629.589929][T27827] sk_alloc+0x3a/0x390 [ 629.594149][T27827] __netlink_create+0x65/0x260 [ 629.598945][T27827] netlink_create+0x3ca/0x590 [ 629.603636][T27827] __sock_create+0x4b2/0x9d0 [ 629.608228][T27827] __sys_socket+0xd6/0x1b0 [ 629.612644][T27827] __x64_sys_socket+0x7a/0x90 [ 629.617317][T27827] do_syscall_64+0x14d/0xf80 [ 629.621908][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.627980][T27827] [ 629.630391][T27827] Freed by task 1206: [ 629.634379][T27827] kasan_save_track+0x3e/0x80 [ 629.639233][T27827] kasan_save_free_info+0x46/0x50 [ 629.644429][T27827] __kasan_slab_free+0x5c/0x80 [ 629.649209][T27827] kfree+0x1c1/0x610 [ 629.653210][T27827] __sk_destruct+0x623/0x880 [ 629.657809][T27827] rcu_core+0x7cd/0x1070 [ 629.662076][T27827] handle_softirqs+0x22a/0x7c0 [ 629.666902][T27827] __irq_exit_rcu+0x5f/0x150 [ 629.671580][T27827] irq_exit_rcu+0x9/0x30 [ 629.675819][T27827] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 629.681449][T27827] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.687427][T27827] [ 629.689834][T27827] Last potentially related work creation: [ 629.695541][T27827] kasan_save_stack+0x3e/0x60 [ 629.700564][T27827] kasan_record_aux_stack+0xbd/0xd0 [ 629.705759][T27827] call_rcu+0xee/0x890 [ 629.709833][T27827] netlink_release+0x1709/0x1ad0 [ 629.714767][T27827] sock_close+0xc3/0x240 [ 629.719009][T27827] __fput+0x44f/0xa70 [ 629.723077][T27827] task_work_run+0x1d9/0x270 [ 629.727757][T27827] exit_to_user_mode_loop+0xed/0x480 [ 629.733041][T27827] do_syscall_64+0x32d/0xf80 [ 629.737633][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.743522][T27827] [ 629.745842][T27827] The buggy address belongs to the object at ffff8880555d3000 [ 629.745842][T27827] which belongs to the cache kmalloc-2k of size 2048 [ 629.759893][T27827] The buggy address is located 0 bytes inside of [ 629.759893][T27827] freed 2048-byte region [ffff8880555d3000, ffff8880555d3800) [ 629.773616][T27827] [ 629.775954][T27827] The buggy address belongs to the physical page: [ 629.782365][T27827] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x555d0 [ 629.791139][T27827] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 629.799726][T27827] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 629.807534][T27827] page_type: f5(slab) [ 629.811532][T27827] raw: 00fff00000000040 ffff88813fe9b000 dead000000000100 dead000000000122 [ 629.820129][T27827] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 629.828718][T27827] head: 00fff00000000040 ffff88813fe9b000 dead000000000100 dead000000000122 [ 629.837394][T27827] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 629.846063][T27827] head: 00fff00000000003 ffffea0001557401 00000000ffffffff 00000000ffffffff [ 629.854738][T27827] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 629.863661][T27827] page dumped because: kasan: bad access detected [ 629.870360][T27827] page_owner tracks the page as allocated [ 629.876067][T27827] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10934, tgid 10931 (syz.1.1322), ts 203876946621, free_ts 203858993851 [ 629.897425][T27827] post_alloc_hook+0x228/0x280 [ 629.902198][T27827] get_page_from_freelist+0x24dc/0x2580 [ 629.907754][T27827] __alloc_frozen_pages_noprof+0x18d/0x380 [ 629.913561][T27827] alloc_pages_mpol+0x232/0x4a0 [ 629.918412][T27827] allocate_slab+0x83/0x660 [ 629.922910][T27827] ___slab_alloc+0x150/0x6a0 [ 629.927493][T27827] __kmalloc_node_track_caller_noprof+0x304/0x7b0 [ 629.933908][T27827] pskb_expand_head+0x228/0x1320 [ 629.938862][T27827] netlink_trim+0x1b3/0x2c0 [ 629.943370][T27827] netlink_broadcast_filtered+0xd6/0x1020 [ 629.949092][T27827] nlmsg_notify+0xf0/0x1a0 [ 629.953589][T27827] register_netdevice+0x1952/0x1cf0 [ 629.958789][T27827] tun_set_iff+0x844/0xf00 [ 629.963205][T27827] __tun_chr_ioctl+0x7bb/0x1e10 [ 629.968151][T27827] __se_sys_ioctl+0xfc/0x170 [ 629.972743][T27827] do_syscall_64+0x14d/0xf80 [ 629.977419][T27827] page last free pid 15 tgid 15 stack trace: [ 629.983391][T27827] __free_frozen_pages+0xbf8/0xd70 [ 629.988502][T27827] __folio_put+0x414/0x4f0 [ 629.992920][T27827] page_to_skb+0x704/0x870 [ 629.997335][T27827] receive_buf+0x546/0x1900 [ 630.001836][T27827] virtnet_poll+0x21f0/0x2fe0 [ 630.006513][T27827] __napi_poll+0xae/0x340 [ 630.010927][T27827] net_rx_action+0x627/0xf70 [ 630.015516][T27827] handle_softirqs+0x22a/0x7c0 [ 630.020277][T27827] run_ksoftirqd+0x36/0x60 [ 630.024778][T27827] smpboot_thread_fn+0x541/0xa50 [ 630.029714][T27827] kthread+0x388/0x470 [ 630.033785][T27827] ret_from_fork+0x51e/0xb90 [ 630.038372][T27827] ret_from_fork_asm+0x1a/0x30 [ 630.043311][T27827] [ 630.045631][T27827] Memory state around the buggy address: [ 630.051255][T27827] ffff8880555d2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 630.059321][T27827] ffff8880555d2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 630.067485][T27827] >ffff8880555d3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 630.075645][T27827] ^ [ 630.079716][T27827] ffff8880555d3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 630.088039][T27827] ffff8880555d3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 630.096096][T27827] ================================================================== [ 630.112044][T27827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 630.119315][T27827] CPU: 0 UID: 0 PID: 27827 Comm: syz.2.5898 Not tainted syzkaller #0 PREEMPT(full) [ 630.128884][T27827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.139051][T27827] Call Trace: [ 630.142354][T27827] [ 630.145309][T27827] vpanic+0x1e0/0x670 [ 630.149332][T27827] panic+0xc5/0xd0 [ 630.153173][T27827] ? __pfx_panic+0x10/0x10 [ 630.157612][T27827] ? preempt_schedule_thunk+0x16/0x30 [ 630.163005][T27827] ? preempt_schedule_thunk+0x16/0x30 [ 630.168513][T27827] ? mini_qdisc_pair_swap+0x68/0x190 [ 630.173813][T27827] check_panic_on_warn+0x89/0xb0 [ 630.178771][T27827] ? mini_qdisc_pair_swap+0x68/0x190 [ 630.184136][T27827] end_report+0x6f/0x140 [ 630.188411][T27827] kasan_report+0x128/0x150 [ 630.192945][T27827] ? mini_qdisc_pair_swap+0x68/0x190 [ 630.198253][T27827] mini_qdisc_pair_swap+0x68/0x190 [ 630.203385][T27827] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 630.209465][T27827] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 630.215551][T27827] tcf_block_put_ext+0x129/0x390 [ 630.220504][T27827] clsact_destroy+0x25e/0x820 [ 630.225202][T27827] ? __pfx_clsact_destroy+0x10/0x10 [ 630.230415][T27827] __qdisc_destroy+0x153/0x450 [ 630.235293][T27827] dev_shutdown+0x233/0x440 [ 630.239825][T27827] unregister_netdevice_many_notify+0x11a9/0x2370 [ 630.246307][T27827] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 630.253105][T27827] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 630.258171][T27827] ? lock_acquire+0x106/0x330 [ 630.262864][T27827] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 630.267916][T27827] unregister_netdevice_queue+0x31f/0x360 [ 630.273669][T27827] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 630.279955][T27827] nsim_destroy+0x1e5/0x680 [ 630.284495][T27827] __nsim_dev_port_del+0x14d/0x1b0 [ 630.289640][T27827] nsim_dev_reload_destroy+0x288/0x490 [ 630.295127][T27827] nsim_dev_reload_down+0x8a/0xc0 [ 630.300177][T27827] devlink_reload+0x1d1/0x8d0 [ 630.304977][T27827] ? __pfx_devlink_reload+0x10/0x10 [ 630.310201][T27827] ? apparmor_capable+0x137/0x1a0 [ 630.315249][T27827] ? bpf_lsm_capable+0x9/0x20 [ 630.319942][T27827] ? security_capable+0x7e/0x2c0 [ 630.324908][T27827] devlink_nl_reload_doit+0x9d4/0xc80 [ 630.330313][T27827] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 630.336232][T27827] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 630.342582][T27827] genl_family_rcv_msg_doit+0x22a/0x330 [ 630.348135][T27827] ? __asan_memcpy+0x40/0x70 [ 630.352746][T27827] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 630.358910][T27827] ? bpf_lsm_capable+0x9/0x20 [ 630.363592][T27827] ? security_capable+0x7e/0x2c0 [ 630.368542][T27827] genl_rcv_msg+0x61c/0x7a0 [ 630.373076][T27827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.378114][T27827] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 630.384546][T27827] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 630.390456][T27827] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 630.396976][T27827] netlink_rcv_skb+0x232/0x4b0 [ 630.402261][T27827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.407288][T27827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.412655][T27827] ? genl_rcv+0x19/0x40 [ 630.416842][T27827] ? down_read+0x272/0x2e0 [ 630.421308][T27827] ? genl_rcv+0xd/0x40 [ 630.425398][T27827] genl_rcv+0x28/0x40 [ 630.429392][T27827] netlink_unicast+0x80f/0x9b0 [ 630.434178][T27827] ? __pfx_netlink_unicast+0x10/0x10 [ 630.439555][T27827] ? netlink_sendmsg+0x650/0xb40 [ 630.444492][T27827] ? skb_put+0x11b/0x210 [ 630.448738][T27827] netlink_sendmsg+0x813/0xb40 [ 630.453516][T27827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.458887][T27827] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 630.464295][T27827] ? aa_sock_msg_perm+0xf1/0x1b0 [ 630.469241][T27827] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.474535][T27827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.479829][T27827] ____sys_sendmsg+0xa68/0xad0 [ 630.484805][T27827] ? __might_fault+0xaf/0x130 [ 630.489512][T27827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.495064][T27827] ? import_iovec+0x73/0xa0 [ 630.499634][T27827] ___sys_sendmsg+0x2a5/0x360 [ 630.504416][T27827] ? __lock_acquire+0x6b5/0x2cf0 [ 630.509369][T27827] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.514681][T27827] ? __fget_files+0x2a/0x420 [ 630.519283][T27827] ? __fget_files+0x3a0/0x420 [ 630.523985][T27827] __x64_sys_sendmsg+0x1bd/0x2a0 [ 630.528940][T27827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.534406][T27827] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 630.540077][T27827] ? do_user_addr_fault+0xc7c/0x1360 [ 630.545382][T27827] do_syscall_64+0x14d/0xf80 [ 630.550007][T27827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.556352][T27827] ? trace_irq_disable+0x37/0x100 [ 630.561389][T27827] ? clear_bhb_loop+0x40/0x90 [ 630.566070][T27827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.572082][T27827] RIP: 0033:0x7fb49059c629 [ 630.576503][T27827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.596112][T27827] RSP: 002b:00007fb49143a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.604708][T27827] RAX: ffffffffffffffda RBX: 00007fb490816180 RCX: 00007fb49059c629 [ 630.612768][T27827] RDX: 0000000000000030 RSI: 00002000000003c0 RDI: 0000000000000008 [ 630.620743][T27827] RBP: 00007fb490632b39 R08: 0000000000000000 R09: 0000000000000000 [ 630.628715][T27827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.636773][T27827] R13: 00007fb490816218 R14: 00007fb490816180 R15: 00007ffd097221e8 [ 630.644932][T27827] [ 630.648487][T27827] Kernel Offset: disabled [ 630.652818][T27827] Rebooting in 86400 seconds..