last executing test programs: 2.538542802s ago: executing program 3 (id=7644): r0 = socket(0x9, 0xa, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000140)) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) r3 = accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000180)={0x11, 0x1c, r2, 0x1, 0x1, 0x6, @multicast}, 0x33) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000600)=0x8, 0x4) r4 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) write(r0, &(0x7f00000010c0)="b0dbe91edc6cc7a4ae388de6b14bfb4937c722784c3eb26babe882f04e51ae0c7cfa1224aac1b59480000f693712c7876a5329b2c412f6375f8d335c4210e04a698495749133b4ff2d88eda8b81d85b5ffcfdf4676cbc3f2a03801a42fa15c2072ffb2e7ee68d1140c36d671bec1aca9157db09140e73b55488fbf60e6f5c06e73928460ffc1df153f15398d55ef108d4170f4e250c1a10704da26b6ff879bbd785e2e5a2475ce9c939872908354f0d3b8f709a3d7804eff0eda77019e87e6d7e3501371d3157de2d4360a4ad9e953069f237c", 0xd3) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.232373152s ago: executing program 3 (id=7648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004800}, 0x4004000) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f00000001c0)={0x0, 0x3, [0x6e, 0x6, 0x10000, 0x6, 0x7fffffffffffffff, 0x8]}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000300)={@pppoe={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'wg2\x00'}}, {&(0x7f0000000200)=""/185, 0xb9}, &(0x7f00000002c0), 0x43}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000540)={r5, &(0x7f0000000440)='wg2\x00', 0x102, &(0x7f0000000480)={@align=0xf, {0x7, 0xb75d, 0x5, 0x3da}}, 0x7d, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x2f}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x8811) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000700)={0x8021, 0x3}) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000740), &(0x7f0000000780)=0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000007c0)=0xfffffffd, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r10, 0xa, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x108c1}, 0x80) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r6) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4850}, 0x84) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r4) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xc4, r13, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffc0}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x100}, 0x4040) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r0) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r14, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x880) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000f40)={r9, &(0x7f0000000e40)='sip\x00', 0x80001, &(0x7f0000000e80)={@align=0x2, {0xa, 0x3, 0xe0, 0x7fff}}, 0x40, &(0x7f0000000ec0)={@_ha_fsid}, &(0x7f0000000f00)=0x9}) getsockname$qrtr(r15, &(0x7f0000000f80), &(0x7f0000000fc0)=0xc) sendto$inet(r15, &(0x7f0000001000)="2dc6574e89d222f5afc38167ee453865ce048d5fc08bab23c7d6fe1328a78ac3b6a3a60b214d3f06dc52653e9eecb316c2fd073a7617ebdb8b1c3e5a260fbcab91d0c7bfae623f5eeb305a4a9dd2b24b51574be5e5d913738990d8ab3c7fa041a935c9d203b3d9", 0x67, 0x40, 0x0, 0x0) 2.215392459s ago: executing program 0 (id=7650): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x2, 0x0, 0x25dfdc02, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@remote, {0x0, 0xb400, 0x2, 0xffff, 0x0, 0xffffffffffffffff}, {0x100, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r7, 0x9, 0x70bd25, 0x3, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001400190100000000000000002800"], 0x28}}, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r10, &(0x7f0000000440), &(0x7f0000000040)=@udp=r9}, 0x20) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x20, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x201, 0x0, 0x0, {0x8, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x2b28}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xfffffffd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.100515091s ago: executing program 3 (id=7651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @private}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) 2.00588663s ago: executing program 3 (id=7654): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x3c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480d8}, 0x20004804) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) (async) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000bc0)="c9"}, 0x50) (async) r14 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) connect(r8, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) setsockopt$inet6_udp_int(r14, 0x11, 0x67, &(0x7f0000000000)=0x828, 0x4) (async) sendmmsg$inet(r14, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000004040)="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", 0x400}, {&(0x7f0000000080)="a17d92cdd6424c5a2b80ab331197b50c21c4aa177e12ea96ef4b99143fee11af4c0f63f37512d86d87a940c9f921920de1c7dd50fff5dbf76abe4ec9a1e917a0e221bf39", 0x44}, {0x0}, {0x0}], 0x4}}], 0x1, 0x200040c4) 1.61710459s ago: executing program 1 (id=7658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) sendmmsg(r8, &(0x7f0000000340), 0x222874f4405e5c0, 0x40840) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x300, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.585219404s ago: executing program 3 (id=7659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r4, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x20, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r2, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 1.440326791s ago: executing program 2 (id=7661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3b}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r1 = socket$inet(0x2, 0xa, 0x5) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000140)='/\\\x00', 0x20c43, &(0x7f0000000180)={@align=0x2, {0x8001, 0x940d, 0x4, 0x2}}, 0xfffffff9, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xffffff68}, {[0x800, 0x4, 0x2, 0xd]}, 0x7f, 0xa8, &(0x7f0000000240)=""/168}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000380)={0x0, 0x6d1d, 0x3}, 0x8) r3 = socket(0x18, 0x80001, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r1, 0x2, 0x1, 0x647}) sendmsg$kcm(r4, &(0x7f0000002e80)={&(0x7f0000000400)=@isdn={0x22, 0xf, 0x10, 0x5e, 0x4}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000480)="4f5710dab6e7ba820ce954e332d43bb94c332dc34bc3564e6186a70c94cba6c398322ffd2a90ab7558117ae9c9728c387e7e83966129d2820f73e52d1ecaa657cf7a37fb733f2169b1beb40b9bde1b7867e69e96cedff0cce4d7fd1a70ad1f5e41fb11581002877519efa1c6455bb2712026ed5dedaa5de410a1763948638c506f0af99cb84272d138b1ebe63c14bdd8405462fcae9d99c4a65d", 0x9a}, {&(0x7f0000000540)="58dc75dab63ae13898cbb9209c4a7d3eebc4d6c67cef79faa0e0c65ac70c18d3a8d1f2568bc9331d5d39ca7456b4afbc0147119db8e7a72f", 0x38}, {&(0x7f0000000580)="d69f75fecdc014388b37aa50faff53fff5dfae22369e9859cb26c0ae9470d32968b0a75ea24d58b2ca0f5d903318387c197ba5bf1bf5e636c7d94c0266a723ac57c9803b1f85a568fa981bd26319e8f95b20271aa7da5dfbe1f6be14debc1cb13fcda46648830b6c93f5acaf98f8169e5bc3da8759ed16488a4d3da3c3db0ba26fa8d1f34e200efb49a646af83607201117acdcc1cd74a0d79030da264509b1def938981dd4d009e2eb365899944ec67232cfe12df0deda988b8ea007cdf3914f3eb975f62da542b184d7c8bf8a9f1eeaab0213731", 0xd5}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="0889cc873775a179ecfcaf8cc950156e22bcd0860538f615a9e73e8c13a753c747988812eee509953938cab32c4db09147152a57b813644cdd95b4822433d2e3220da60847383b44732decd1c844871df7b35a4d2c2bb527b7427f6fcd82136eb9738a54ac7fc63883f9e0b45790d874c6cb578421a86458c0802e4ee353f010f6993288209e50833e54c541e3808cc9faa0b7e5a85b1b1e79f41478b2e4", 0x9e}, {&(0x7f0000001740)="93f58415fb780a568047feef49e8431c536b1172b62aed75ddb8b2427312901bf2ee855a4f0189c4aeb481c20dac9847300de3208634b960684e415649a56bd46a1ecf5cb1eb5addf9ec83f67a0debdc1342a8d5f4516e1bc655d3e2df5b5a99dcc1209f789e049780fe4458c0f5f5298476f7c0d4326b43328a34ec41c13108168e2bd94bd0604a276110a92a30", 0x8e}, {&(0x7f0000001800)="770520ca044efb4175e9623aa474d301b184057b16dc7ef08657c6be09bb2c08746f5d520f2a1810dc0dbed0ab7f06d48309da0610b5de487caec61c67db1ae2f29b1f733933558a022f66fc42fe4f7c7619fbb1814f66cee9f20fb3ad9447d75ebd54eaa1d8bc580a966684ed19338dcd5e32ede3ced2b75c18e5e1a85d1e3fb9d2be752d7249e5631bbd52798996f08e45a09e4d8fd623108284283f36da37a2f0ac8735a53332f6c640cd395a10604c487178fbcb5960bd5a8a1b26590993d4a0d5f519c858a76d1d001ed6634ce4d1afd1b91ad055", 0xd7}, {&(0x7f0000001900)="5d1c0a9e59089f1403539682314d277cf01c2ca2184855a0a20ddbe4fc2e8a7b2e9cd55b77ccdbfa8c69bff44e6046f1856ed20a2032476ecff5c624511647cd12b3df4cbfadbe9408e67043973d74c6", 0x50}, {&(0x7f0000001980)="1144f890abe5ffccfc26c89da65ed33fce3cd75b8941d01cba9d1dd48f561ae4ae73a2f5e0802908726b1f3e2e7d178d8a1479d32f2d60fd5fe41b510d26e196cfa1eee0a6f58f2f1406a82ad3daeea1e5cc8edaf98ae8149a10512729", 0x5d}], 0x9, &(0x7f0000001ac0)=[{0xd0, 0x118, 0xfffffffa, "ab95c63f54ed74afee05f60e0f0471f4d5753935d00cbfc28ffc0a73f9f874d947cc9634fbc845f5a48c9674c06ed8703f7859b4edfe18e99b4d006f49a0a55d67e862f3b6b8f54466fca690ae0de97cc36fad2691488ef96304dc5a31e6cfea8a9cb574d2252b7527d6c63b4c4a6fe0c4d408aac6969b37ac78c49cee3ae43c6c925aae1e63da1c632063e2eba6ea2aad6d0e792880ce5d0ca7ea08c49582cc87b2668696baf0507f186b0f2fb1fc89e71f0447e5ca0234d411"}, {0x100, 0xff, 0x7fff, "a716ab847704b4e108a068218b608cc6fed8aa443d7b4f6a7318cc2f9dc2d8155e3ef805ba4825e3b5e8a3866ea8b95097b4009a9df3e38c00ed4602d46a45c244b3d98cb8033c6e59ffb6ee9416bbca07706170545ddcf8f780a78309810d2eca14ad30d5c6cb038eda5d34e5c9c1c82778e2875a682c1c86be51e7d577f3a7d1d65fc9bf4a55acbb62afe071f8e445fe96e2b38b7cb3be8f6ea502a6875d33383a8099a90f8d27ac0fb7c4f7c5d41f6e9ced23a11f9b0aa5f9fceb2e113d9a36702dc5401d435c58e45b42f6a693ef12acd67ef1b81925f64746b70c6781c795d1b1a32a1c56eb1272e9"}, {0x1010, 0x10d, 0x260, "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"}, {0xf0, 0x119, 0x43d96a13, "482b3cbdbb0b2f5addf6a891e3c797bd49b839eda1e26fd123e334c0654f1d995a7e95c04c578d5911a478b804056ad94fd11af53406f5509a84d69a87c7227836bfdd56163e66e1143af05b312dcf579b6118ccd113a7f856e6bac6975971e4c1545d1cc7ba4e9fa22b8fb1607aa7ef4047777cd9d4f19bf94926f585e04b294f04b6ad908d5ea32061f536b25a798c44e1645df1098f1b57d6defacc111cfc000929ee55ba661e3640facd63d47dfa6313013253e2f08e1301fa0614cc8430b0865a9a641d43be76f204ec546f7997136f857dcb0804271063777f46"}, {0x60, 0x107, 0x9, "0f8b845b7f10f15bd81b247be1a40fc79a4e4c6bb8bf1f8252e30450ee3481a20ac041d848f4b76f7adf21412356384a45e3fe86697a20cccf907959230f9bd15da86b1d5e1ff06202b24b"}, {0x68, 0x0, 0x7, "6864c3e780e5cc113c7ba3373323713f24fdf0ea3e90d55271a8ae57813fbde6bf085dd0a0f8632db7b7242365f3fd701a7aeafedaf6e4f2cb7861645fb7604d4fb1079c840291660a7d052bcd0a940476"}], 0x1398}, 0x20000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=@base={0x1f, 0x8, 0xe73, 0x1, 0xb022, 0x1, 0xd4, '\x00', 0x0, r4, 0x2, 0x5, 0x0, 0x0, @value=r4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003380)={r4, 0xe0, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000003100)=[0x0, 0x0, 0x0], &(0x7f0000003140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000003180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000031c0), &(0x7f0000003200), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000003240)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003440)={{r4, 0xffffffffffffffff}, &(0x7f00000033c0), &(0x7f0000003400)='%+9llu \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000034c0)={0xc, 0xf, &(0x7f0000002f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10aa}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002fc0)='syzkaller\x00', 0x400, 0x1d, &(0x7f0000003000)=""/29, 0x40f00, 0x1b, '\x00', 0x0, @fallback=0x2c, r3, 0x8, &(0x7f0000003040)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000003080)={0x4, 0x10, 0x5, 0x4}, 0x10, r8, r4, 0x0, &(0x7f0000003480)=[r2, r4, r9], 0x0, 0x10, 0x10001}, 0x94) openat$cgroup_type(r2, &(0x7f0000003580), 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003600)={0x1}, 0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000003640)={{0x0, 0xf, 0x7, 0x8, 0x4, 0x2, 0x6, 0x5, 0x2, 0x0, 0xffffffff, 0x6, 0xfff, 0x1aa, 0x800}, 0x10, [0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000036c0)=@base={0x11, 0x1000, 0x9, 0x9, 0x1, r5, 0x7e3, '\x00', r7, r2, 0x3, 0x1, 0x2}, 0x50) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003740)={r6}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003880)={@fallback=r1, 0x6, 0x0, 0x4, &(0x7f0000003780)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000037c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003800)=[0x0, 0x0], &(0x7f0000003840)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r15 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003900)={r10, r2, 0x16, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000038c0)={@fallback=r2, r12, 0x19, 0x2000, r4, @value=r15, @void, @void, @void, r14}, 0x20) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000003980), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x1c, r16, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48014}, 0x20000800) r17 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003ac0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000890}, 0x4000) r18 = syz_genetlink_get_family_id$fou(&(0x7f0000003bc0), r17) sendmsg$FOU_CMD_DEL(r13, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x1c, r18, 0x400, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x20040000) connect$inet(r3, &(0x7f0000003cc0)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r13, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)={0x68, r11, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x56}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004801}, 0x10) 1.43955676s ago: executing program 1 (id=7662): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/212, 0xd4}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000000140)=""/37, 0x25}], 0x4}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000640)={{r0, &(0x7f0000000040)='\'*^\x00', 0x10000, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0x82a5]}, {0x5d, 0x1, 0x5, 0x8}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000540)=0x2}, {[0x0, 0xffff0000, 0x5, 0x1]}, 0x2, 0xb8, &(0x7f0000000580)=""/184}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x40000) 1.393124631s ago: executing program 0 (id=7663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r3], 0x80}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0x8) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.272456041s ago: executing program 0 (id=7665): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x8, 0xffffffff, 0x8001, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x48, 0x0, 0x5, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@lsrr={0x83, 0x3, 0x78}]}}}}}) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, &(0x7f0000000000)=0x8f) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.270884191s ago: executing program 3 (id=7666): syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x5}, @device_b}, 0xa) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x1a, 0x200, 0x70bd2b, 0x25dfdbfe, {0x15}, [@generic="5dcfd839329eb044ea858e2b7ef0b9c876ee48e0f05e8d4c388f1b83c178dd6a60b9dc7df13b5ac884a0249c57be4a5db01698c8c265fba47c1c27c523453849fd40556a2ee54de8f54eb08a53eb3055afc0ee344448ae0a9a2f430276a0288013d6a30fb87ee5ea8a433b5d4aaab98b0c0c11065e3e7a6b334fa2d2b21a15ef998163627b3b52a82a77441c4b15f65a12ac1cac705e266177b7fa80eb1c39e9e288d5dca58e90d16ee85f5e5b4cd29f076f8ab24a", @generic="9b", @generic="a564d77eaa1935f3391cdc5a6907cfcf3a3c45b639b1ff3eb7957b67082b"]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) socketpair(0x6, 0x5, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0xb, 0x8) r3 = accept$alg(r1, 0x0, 0x0) r4 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000300)=r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000380)={'bond0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x4c010) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x124, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7d3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b48f103}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x654}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x124}}, 0x4040010) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r7, 0x1000, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000880)={0x18, 0x0, {0x2, @multicast, 'batadv0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000008c0)) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "06fdbe0f07f2ff47e892942c35f40bd2"}, @NL80211_ATTR_PMK={0x14, 0xfe, "a90371f06dec932fdeba2f75ac5c2f76"}, @NL80211_ATTR_PMK={0x14, 0xfe, "55f55c9884c95ba418b9420a9c6a51aa"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000a40)=0x1, 0x4) shutdown(r2, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000b80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000dc0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000e80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@getnexthop={0x34, 0x6a, 0x200, 0x87, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r9}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r10}, @NHA_GROUPS={0x4}]}, 0x34}}, 0x20080811) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x24, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}]}, 0x24}}, 0x40040c0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000001040)={0x120, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0xb6, 0x8, "df4a3b00c1678de5304e3ba5ee78252227ece57ad42318d6362256ac82ef7fd48d39d5f6ac4b8270d8dfca982285f80d9d8a35d8c013028d28bbe25699160bcac7e3a62f63ae33e9a7509f767e6ea9e1e790116dd132a64096ae1808c18bc5b2c5a8fa4efb02a2ac94e92632a7b62a9746b5a4a611ad1414755c3a1479d53d292d3d1b4847ee20799c111e7b0168eea14f755c636835d934ce2bcca193173bac88b506133e6c173fd2f999d2284ea4258b53"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x100}, 0x40000) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) nanosleep(&(0x7f0000001240)={r12, r13+10000000}, &(0x7f0000001280)) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000001380)={0x4, 0x5, 0xe4b, 0x1, 0x3}) 1.246562231s ago: executing program 1 (id=7667): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x8e, 0x0, 0x1, [@generic="976b6408686430"]}]}, 0x24}], 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2cc, 0x36, 0x100, 0x70bd29, 0x25dfdbfb, {0x2}, [@nested={0x4b, 0x25, 0x0, 0x1, [@nested={0x4, 0x4c}, @typed={0x5, 0xab, 0x0, 0x0, @str='\x00'}, @generic="7335bf816e", @typed={0x8, 0x63, 0x0, 0x0, @uid=r4}, @generic="dbe3eb67949dbd1704316cc74b57740a37d763abc9785385bff3def1d4c4087e7275b2a3acf725f9d66414e374c3"]}, @generic="a826904d087b373ae0e316a1aec0250f1acc2172dccbbc2cfe483f01365e230c426a736d6c584d1868350951871a299b011b7ca28097371529971839ae99d5c8fd4fa06df3272221eeb4515b0f3f333ae4688292e12df74dafa84daf590a53d00f844b1924b20f7304f5e750ed26", @typed={0x6, 0x64, 0x0, 0x0, @str='\xff\xff'}, @typed={0x8, 0x154, 0x0, 0x0, @u32=0x2}, @nested={0x167, 0x12d, 0x0, 0x1, [@nested={0x4, 0xa5}, @typed={0x6, 0x7, 0x0, 0x0, @binary='WC'}, @nested={0x4, 0x9c}, @generic="76385d12f651ad95473c0fa84895d22125be02d48582471aa3023f8846f5604050a642c8bae6c7165747a12c815c71dd", @nested={0x4, 0x2f}, @generic="6486440a8bcb192b00bdf168a65c0700c567cfcb6aeddb5b2d6878eef0bfc706962d427960dbbe00ec311dff9f1018ecf9adc48ab0a13ec0cb11394966f812eff900ff4d796d8eb7ff1a47", @generic="c107c5d417f4e709fa65b12a5e91e5ad1ae3a0482041052ff2bcd5d994f3864672083f0ea2a2e6f57a0374079ba9f9dc0f574fbd08c0330a075ee4ff2e17ad4f892d26edc22f85c4582482e675ee2e7e1794cfb7d038d1cd436a379bd50c1218d25e966914bc9d42ce482aa15470be8e52ab8f2a7cb6a5701c64b1c50d9d965c", @nested={0x4, 0x14}, @generic="f916b1abcf826e31e6b29e3a78c2ff98c202aecba9fc1d3c5778d8197247fb0764f60abc7245caed19c07a80082e58313d72ac19ab76651fdf584507f70a66ad4e9bf2b46bb4e095abaf5655", @nested={0x4, 0xf0}]}, @generic="87793fb6dcf27d01ecb1012c37006245ebb7f00b10ae7bdc86b3b2243e2c8cdc37de90674f7d8bbba1ebdc76c5b50d191432d29c3b5ca2d9192be04a57a0293c35274847014cd35fda3e485f29bd0f907c1ff1a91c4031f139ef67f7b65909d204ad856d223fd07177e27748d16eb9ff3c8d0478571b26ccc63d1d672a42259d53ee83b4f9bf"]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4000810}, 0x20008000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f0000000080)="c4fbe9da70d7e9f4563f69627a1893ba814ec8215c9ab66d331c6f9884cd99afd662bb50519f1e183f2b9c84ad90bd4b733d05cf3cea77ecd04b8c36744472ef543d1de9014f5a5fe9f4684f446e333855150dd9f2b0ea575919df54eb46ccc100149fbddb04e239d8d121f0268b9f6a6d2c1f43cbac5210053cf839fb2925575d72a76259a23739d76118b76e06e37468f01e6d9ff066cbdc8054c605ed50c5c2d966e1f0c48664e88e00125bb623faa03ed3056fe4647b420fe94b363a0abe2880c381ccf63ed008ffdc45c774fcd7d8a2", &(0x7f0000000200)=""/182}, 0x20) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)) 1.185941949s ago: executing program 4 (id=7668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640200000000800134000"], 0x64}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcb, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x80, 0x0, 0x5}}) r6 = accept(r2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r10, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x47) ppoll(&(0x7f0000000100)=[{r6, 0x3420}, {r9, 0x8187}, {r0, 0x80}], 0x3, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) 1.096636029s ago: executing program 2 (id=7669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x2b4, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5921852652d11f83}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xc2, 0x3, "34a812fc2453574480ae72c6439436907d9d555e103ea05a620a0872f915ba198cc9fd2bdf8e2738194365b54f5ab162345756e81cc1a40e4aa7b832f40b7569bd9fb73b2e40fa01fd482628380f6fc7bc996b4b05fcd2760c11821ed378a972d40beb5715d14779785a9f8b905587693b6e4f53230c244d5dc5e81d085cffef8cc13d3fa734a5f4576494802b4324db60adf0584d60555f30f9214b7b0d09def24e41075f559fd77198ebaac65531f48a58ace8f80ed5656c20f5d00bcd"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x23, 0x4, "5d78b9154fb57a7a4b9bdcd349cdfa3116f1cbe036173970e7ad79553a200b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "a42af8b2c757c607782847f1c04073dbf66e7a1b5d91c6fdba0f8194aab327b75eaa433e0ed8bb623cb10f213991ef2304ed329e5f62fa528a3419969107787026a6892bc5"}]}, @ETHTOOL_A_WOL_SOPASS={0xf2, 0x3, "b56005fe95f9dba5535b952e1ac440fc55d3f6faa1d6a31560aa6276b3412bbc7985df467e216114a90fefb9e7e9ea9c484c37630d36cd0b309d2938e29a0a4bab9dec96e9288d310c479fddbbb215222d0f8e29b28160be26733a69a52396d43c7619ac2626c59ef4c0a957cd06ea3911b33218ba7c8d5574c0ceda86042225b8d49b331aea525c6ff8863599b578a00a5aca540bd087e351bad849abd6cef1c168576c04374c5f15b490651a0b33830b8d104c98f0ecfe24a1e91fbddd9d2d2205c9ce5be81bf6ef9a7aef80f8381ea17dea9557d4bcc9f89c4552cde260270d2b4faabed04bce5fd4a37af135"}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x22, 0x3, "9112f27d1359975036a4ceb88650197511965ff19df2422545dea253f409"}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000190001090000000000000000021800400000fd010000000008000100ac1414cd908fc695d05626bcaf551241c99af201ec0d2fb16d006d4cf301932a6874230520fff38a062a29f4595f2bde234a97bed5653837855dfdf3f4223f44385e982f6cabdf0e3af807962f43df95815acbc7b5b94db234e1a30644739156ed11bf39670e0861b51a58e1435226e58b50a88c192c37cffbbcba00612b8e42463b92717c08b28a3b3378878f8885963a42dce0a2c895ecdb3b9ad48cfe14717f114b18732bb221b44286a45e8afa2a9e4b5f6fe3be27b7c979e4543ed131a9d9606a646c6c68eddd7925"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x80) 971.245377ms ago: executing program 4 (id=7670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x40, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r1, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 919.200029ms ago: executing program 1 (id=7671): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002100010000000000"], 0x1c}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0348000d"], 0xfdef) 874.108748ms ago: executing program 2 (id=7672): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8003, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', r0}, 0x94) 751.817907ms ago: executing program 4 (id=7673): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r3, &(0x7f0000000b40)={&(0x7f00000001c0), 0xc, &(0x7f0000000580)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/215, 0xd7}, {&(0x7f00000003c0)=""/233, 0xe9}, {&(0x7f0000000540)=""/50, 0x32}], 0x6, &(0x7f0000000640)=[{0x68, 0x0, 0x0, ""/84}, {0xc0, 0x0, 0x0, ""/170}, {0x60, 0x0, 0x0, ""/75}, {0x80, 0x0, 0x0, ""/105}, {0x38, 0x0, 0x0, ""/34}, {0x60, 0x0, 0x0, ""/73}, {0xf8, 0x0, 0x0, ""/230}, {0xa0, 0x0, 0x0, ""/143}, {0x70, 0x0, 0x0, ""/94}, {0x50, 0x0, 0x0, ""/58}], 0x4f8, 0x10040}, 0x38, 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x80d4}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x100010, r4, 0x63c7e000) 750.665969ms ago: executing program 2 (id=7674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11efe8a8dc60b4ab4d8605"], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 597.96008ms ago: executing program 2 (id=7675): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f00000001c0)=0x7f00, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x7, [@const={0x9, 0x0, 0x0, 0xa, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x5}, @fwd={0x10}, @typedef={0xb, 0x0, 0x0, 0x8, 0x2}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x1}}, @var={0x7, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x0, 0x0]}}, &(0x7f00000000c0)=""/48, 0x87, 0x30, 0x0, 0x7}, 0x28) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000200)={0x80}) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 546.774814ms ago: executing program 1 (id=7676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004e80)={&(0x7f0000004e40)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x904, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 417.97484ms ago: executing program 4 (id=7677): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r5}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[@ANYRES64=r2, @ANYBLOB="00feffff322ffa0a577f000000807f32a9b2248244", @ANYRESDEC=r2, @ANYRESOCT=r2], 0x434}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 332.127003ms ago: executing program 0 (id=7678): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0xa, 0x0, 0x7, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 268.910063ms ago: executing program 1 (id=7679): socket(0x10, 0x803, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000700000032490000ff"], 0x50) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000001000000000000003000000186b00000f000000000000000700000018420000fcffffff0000000000000000252bfeffffffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000000600000018530000071a000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x6877, 0x41, &(0x7f00000003c0)=""/65, 0x41100, 0x4c, '\x00', 0x0, @cgroup_sock=0x2, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x9, 0x0, 0x1}, 0x10, 0x0, r5, 0x1, &(0x7f0000000500)=[r0], &(0x7f0000000540)=[{0x2, 0x4, 0xa, 0x3}], 0x10, 0x3f5}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r4, r12, 0x0, 0x20000000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000640)="00008e66f5c27b98491fd72d5ec67a6544606e09a3c051c9e61e638c5e1710c28d198b02c3ab045d2b63fc86589be6f6d35982750509b6", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) r13 = syz_genetlink_get_family_id$tipc(0x0, r12) sendmsg$TIPC_CMD_GET_NODES(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r13, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000) 221.546652ms ago: executing program 2 (id=7680): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0x0, 0x0, 0xa, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f00)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bf28, 0x8003, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x2}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x220008e8}, 0x0) setsockopt$packet_int(r5, 0x107, 0x1a, &(0x7f0000000140)=0x7, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0x1a, &(0x7f0000000140)=0x7, 0x4) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) sendto(r1, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d", 0x5c, 0x4008044, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003a00)=ANY=[@ANYBLOB="0800080007000000000014000000456f0fc2006600000b11907864010101ac14141a4e204e210fae9078c0b9ca254120af100d4fa1258caf60f66ea5db8be35e26df3f8c075f5be3150f5a81b285ba8aaa3304ee4d380dc6b70b7d2d8866daa0a981305b01a55e2d28832bc31b3eaed9d8cc951fda77d54c037312db701eaab8c41f02067740ada21de8bc376dd6abe7fc9681f03cb24b4efd13aa006873cdccd76bab1369edf9ef2183056fb91a642472855d60d39e6efad88d9cce5dc6db89debffc5e6b57cc09c76964f210b1e547814b95d47e1fbbce1bba0aba2d257ef0467b894462634afab4ef9c8df71485ff3e043dd281638b02b9f943039d34cb4d8ecf1b3daba35c2dab699c80c7cfd162692e85ba773852c45f5212b5864f783e04dfe6b35a781970a25cfcd0e170a69b0ad4fcb3a4ce0bdd3978355be751a00de227dfe7186afe21fbd7d14311f1f5fd6327bfadd6111e921d2bb35ce1feb5edd3e23e225b0462ebd2ad874ec2f1aa257f4062f4a67bbfe323b11f26bd850bb1dec187547ac12706470f218621f4ca755a37fb54980f2fcf2535ed3f209af02f181aaac9032574bff3fdf1362846606dbe9a08ec817e1999836bf0348c03cc0be2332f7146129b91c8985373fec452e98b49ca5b707c7972956f8b5c69291552cd72f38c60d6b6289ab401ad0e35526e92fa7646a0f520e7a19765357bb862eef0fb62e90e1496c9f27f3c4d1102c4c7ac08a4f2f53dc362adcdc8b2eafaa5bb4092d36bc02c119a9b9d2dd896d4ccefae12011417a01cb01c4c666078f2b43b85bcb8f3c895038e01b4fe2f4a0ff0aea196ec076c37ba86ec3a7377e055d5a40ca78ede2ee207c9c614b4e58b4ce6538db0357bf8839f402272b610f26b08fab563aac31780e6beeae36bea4bfea5bac2ec102879077187fcb6b4fd120552f15599c302b3f3f344df7fb79fc4db259a631c08f70210eb2bca712b7a9d03e609eeeff50a92e0ac421dae2e0c733bdca5d8785309e81b5e9f05db73c391a87d17098d50419c1e1e975b52a6f833151112e84f622f3eab24b33b45b46a21dc0229d93d0de0349ae5416aa7061f4fdfddd4734e5c36877c0f6f578e4d9914ed8ba387a8660f49c2468acb12c0d863cf412707d667528a7bfb2c54a6575afe15c5126b38576478619ad19fb8da5e75fef1f240c28e3a575497bc8845b79c63155d7f7ebcd398abc86465ef89bb3a47b1b73ed29161051780a7671cd8ca3b35038aeb32736390f312f4429c1f429781980612ceb1174e92225d20361f3f523cec0c88e2a1d4299378286c5fcefac5ee0702b61815479914d185106f93dc989e7ac8f87ca13f64fc64fcbdd952bfed6b4729664a51e49c8651c3cff33dd5eb927eecbb665fcccdca0f21a6ae266195b75c1ed74e04e1e851cbed44cc4891c79323442a2c92186654b36a18b02d7bddb08149c0c3e22a8f5f4d3468ac5bdc93221cebbf08a2bfa248220ed708aa024c5d66d617ed5104d78bc335dcf9576f290279220f99fa63c72841a495e0565466905183570ce27ff85998483c6805ee5517d7ece2eda2ac9c4fee1e893cc492c99e28dd098822afc9d56e2a1233b73ba534ed6df8d0a6fd2132281b430449b1610f01f339fe34877a3010c3108f037fbb8a35d48cce87a5e0e395b15fd5354f89622d9bad1ecfa940604efe15a6d246da1bc3ac0e5da6f3757c1b9a4c25237867e485cd56a9b21d38e79ca51e2f8f63b1587342dec9f414fc1c6d0fadb25e2720ea3739afa7778846d43c971e5c6224749a0a4d7470110794dc4410ccc484e856a3b8bda746348a1a773fdf3589dba718e0978b38b0b9edbc6f0b8f51b1fc292ccefec1c3385baca7bda7c213b27c6e93f4da7ee0a43d93a0f5aa5a902ea050a23f148b0b5efc29a2734df4e0da95c07542927a5d941ac2b3923fd9b3e46e243d35f4ac60304ad933195e5e75188a5ea6b62acb64b1ef31f88c1cf9f625f3909f75761574ce38f8889d2d556fe95ba4b076d4135e72559800dccbe162c96962f5b97b27144f5dc2fd347b523aa48dd1b39fbfad196af2675408c5b4ed9f620c8d8bd2027fa0beac0bf62383b725ef5eae6b6f7000ca0c43114adbde423e7227e44a5f861090e142a71f7a8e46cdf1b1640cf6c01c517ca11bbffda8f6ed5728127c9dc06689b8ab1c6662557f5fa01c86d06bb13a498698867f73fdb98849c9126009fdd5899455740d32da828eecc7f9cebbba2822042977b6df4d713a141126f013b2cde58626e56ce2ee27d9bf67e3c6833eb89d77627e55de65a50e567270f68b533e40bfa92100c7a8860ec002465a21b4b402efec2256273566201ad6bc0d8d41b8b6b5c6bcbbc1f8f24e941d93199885af6e31ff21c942c335c53ec23401f92b2041f14df29825084968b7bf7acca65e15b7fbfa11eb52058ffe37566fdb7cc8353c19bb3dc333d8e7a5db07417af8cbd3259ee0de3311678701d6506eb05ea96f35528774210deb6d45bd2db1191feb549835c1263dd0d9637b1c7b1391a7a4dfecfabc0269bd134fc8333144d628ab1d0d7d2d273800ae7aa3d808010b9ec25aed66be802224922c48ebfa2186a2e7c7c99e9071e21de08ce1b60db131086b61a0ab4bfeb34efdaad35e89ac303e8723deed1b022a7cafb2abc1160a9c842b84ec2892d9bd3513ef81b56e520881c403f72d7b192d9018bf617610d0451be5ec10af97a9c9193be8e38eaecb978c6de6f64956bb67165226929e375ca7a4a3e4ab98d3726ebe239eca86b304c77b57c03b04a5e03271d9ecb88df5f56f78068e5f912f136f49c81e195dde0c9aa7e07a256d124859bc29fdda367b7db7906d9a0b1e267e0c898151e3a587c642c3bd1bc4ce52633f0370b4d7a8b2e62d41333ab15b32f6a28f0a7ef04ccf1ad33ec10ed1534fc5c81dabb3b1d5c0bd17d8a74cdcba88234bbbb8d46a028773707c9f8c673177095b0166d09e70d045810cb377a90c45b0eb7064ae7e931a1aa8f124bcde41c60afc5c44ea01fc710549f1a410db8a0981657ffb0f53c747e6764ebe740b85af114dbbee9b384bc8cf5b06564d984ca2894c0713a7ac286fdf8cff4408f139264e88178a75fdf4b49ede4959536c1c2fc29e553d2be6fa82fde0e55c415c0e162950d46431f43df6a9901aba977fe526a6a7daf7e8adbad34f16232c097e4bb3863ba5b0e939ef19ec9adc5f9730eb2ace0951af7891f8c994153d3fdccb0a3ff0c1cfbe468fa5da88c06ee4ff0d12c0ea89484dd86c96227f8c8b57eb36ab6d1e49a71e09b546bcab969c74fd288d9113f9a005518eb9163bb6e2abcdeabd98bc35b242b9aabb7037d219ebd4dfeea59916476eac8ecc22e9646c614cad6a328280c5d3dfcbfaa6acc24cd110b69a4330c810ab0d1d3341482ef50fb28d08b2458213fa9ee85bc8538539a8acdbc905d236dfe83787336c4f7243ce20ec29be84a72c94f55ebadaa0e7f761e4b33d38da9c86c15ed486a1e5dc666c3740871f593e4e08e8ecfc051f810b6a4969eee8d45e64c4e6e7638fff2b541eb1c5fbfe5336c09a595ebe8b196bfc103db815f57d9f768e9377e7bbb07807c255e186a791e45c784216c8547138b822eb749f7daeaee56d89cc42a9a204172f2003b2f2f25c62340666618c91f7921ab67c65bfdd6711c53766945357527716996a3ad5ead0229de0870936cdcb237cb7ec113ca445b604255f3282b3fb9035afa23152e59d86fc455541b2502b98a713a7e060d4128b43c414eb812b9d68abe06406600b4e74c35de2def05820d641ec6c162cfdfc3ae764a16fcf39cf24c510dd52d261d39cb086a75778ee5b26bb772d31d9aaf50bdb138879d482920bb33f2579483436e071c35b458bead6817747c2490884d83a5d5bb034e37c6d408075ce1900358f4d00fd31b032eb0581a2b7fe67844a5a49684681cd9d1818af040276df637e9429ec8c882c8699f9d15b2f72104946e721875e3c99c6355695f97ef98bc9ce83131762c7c3eb3abcbeaeae05295899cd544ae2c03ab0a3b5249b980230ecfa8317fbfe278080ed33b20e47859508df3b7f9b2fd8519d4c0b0bff48c12b01fd7404fd93cb39ba4222df8f42c2631cdc2dea5f68dc78c03fdb8283ddbf15feaa7c3095f90be846ab1660818330f51959ac53c55117f819a73acca32ca905d261b03ff3921f11a6a153bbf9a5ff82ece9a942493e53ca41dd5abc7269e25fb45a6fc9eaa60d2f2697cf631c6ada69aa1044e2ed8ef69c8dbae0e6340550748b8b98d2d945b7798768b516ec5b3fd4eb3615778488309effa52fd4a28ee0bcec2c77ee3ec6015c6e840f7a93b73faeba00045688c0122911630066099bb692698794ef0a745b42b94741c0df636de25f283347f9fec556c3168edb7074aa047c8f5a67ada8a04c531c9fc56154aef8ad8c7111ab72e6e230f8f5f508efcd2d27ec3bb4c1b1f72dc2d6042df674e83fdaafe3e28ecad574dbbf5a51ff92f5b456783f62f0c6c9680ab8d2f53900437ef265bc4268fc8d5f3f98222dfaecbe05dfe97c49334d5b4ec6e5cab7838f3de6aa1718b56553c4a2c5a232886a9cd652688970a5879e7f051a6c7502d01a494334c6e6b38d174121a9111a2a0680713a75f8850740cf6de6f4ae9022d2a11b7c7288c580377ab587b2578d7b26caae1135bfd3c5fe2cdfa98c5bcbea4bcfc0ba66e1375202c740d5de0090c3b9b83187e3f1e07519e3059e13e8e577aecbe4bf1642c1f24bbaa93ebe2688c136ae7c6d17ef7533442aaef842c99830926edc2f4ed7d9c2ad2f763e646ccba3c8d833127642b65d9d339f6d7c2ac950247a0017740e0ec312fe4bbe62196cfeabefffb10d5dc2fa44558ec1ae987e090005bb4e4e23cd8945b1007a0bbfdc6d8e3c303079757db741907c0d4d734b31747f81c7e51b6917780c9ff89ad1f0ca0045bb3ee41e1b1548308d7fe5e781c1cb2dfff22e9574d00e64164044f6eff9e08f2f47edb1f77bac99ff88cdc0719bae36768b93214b4b5957c8868d2f7b334e7ca6edde23c7b912578c5c2905128720254d9bfbde011d0351f62086e6173d532e2f7415d6aa22f90ff6666cad63ac2e9322db9827d3ce040f7f9358f4ce197cfe40704aaf149a38033331a7733c751d758268a42c66f9bb75c8ae9d719d3bbf732bc85bc6c61888af8be4c274e65e5a0787ed127b983e1db05cb0d17c91d2ecdb0d699e08fe18386e400405a3da4b6218d15fda40a5bbf809ac51d83d73ee7dab0938dda88a7a32e5fe5396aa853ec23c34debceb8729292873ad054368532142ada8b421cf2bc9703962cf9ffee63ee88496eec700a9df1ea5693f3f398153c0e1566b6df76496d8cd20f817ec28f9240d21ada9f35f773af83f21f0ed6c876c3c56750f6a7f99b4a58f6c58e6fec38c625104f6d82d0cd7f951fe5b8e7d23f677b5246b8489bb8357118dfce9e8579d71643afb8a38393b319f7787d8692da0ce97d31d2f149e71f67442e816a1bb977bb2f8102f4c14ed8ae68835ee633fcc87b82777f165259b1e5409685ce90b7f2d92aa9319c8dfc8856ae45338a0178c8f6adef3f0b121234f7099b6f33f9ed19b23ab60fb4ad3e2adfe2b8d6510f9de86e94e4f74e9e6a701ee1a716e055d59da580fb76a38aaa82463c0624e4d16f54eaa207248255cc995f0d8cf948dcd21fca39a7511907ae12098efed1965311a381444c02a9f3ec741912790d8fcecbed1abd0e207f1fbbb9b610e12fe464e8ddae1a71bd49a3d0ed03d566d001d40"], 0xfd0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 221.199177ms ago: executing program 4 (id=7681): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05004400000071117a0000df0000851000000200000085000000000000008e4f380395000000000700fc9400a505000000006f60fe6a2f707e965be516100000bcbc94b1efd2231dfaf78b0f92292e782c6ef49644c5ee40d8a5c2dea533c0cf1d95ccaaa05bc97f6ed4cb"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x7df9bd2ca29e3677}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x4, 0x0, 0x1bb, 0x4}}]}}}]}, 0x84}}, 0x0) 93.893019ms ago: executing program 0 (id=7682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x95}, 0x0) 31.092799ms ago: executing program 4 (id=7683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000228bd7000fedbdf25010000000e0001006e657464657673696d0000000700020000000064657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a3000000000ac7186aec49781cfd4dfe66d80da73801c1a7ce10428972600343fd79cf49c8e9dc067f7725eb76db7cef5d5c41ffb1b816929df3932d2c5e463ce1b7a0d4ad18500f3288d6b7264dd8613f24f3d9f9c67"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x8, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x3c0040d0}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000228bd7000fedbdf25010000000e0001006e657464657673696d0000000700020000000064657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a3000000000ac7186aec49781cfd4dfe66d80da73801c1a7ce10428972600343fd79cf49c8e9dc067f7725eb76db7cef5d5c41ffb1b816929df3932d2c5e463ce1b7a0d4ad18500f3288d6b7264dd8613f24f3d9f9c67"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000040) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x8, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x3c0040d0}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) 0s ago: executing program 0 (id=7684): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000380)={r1, &(0x7f0000000240)='[)/!\x00', 0x8000, &(0x7f00000002c0)={@align=0x3, {0x8, 0x69, 0xff, 0xffff}}, 0x400, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x5}) (async) sendmsg$alg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x6c, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004400090000000000000000000300000008000200", @ANYRES32=0x0, @ANYBLOB="42b5cd8b7de32868964b61f0b708dbcc78da5198a6d61473611cf3029c825253deb0b1d52d6ad3d7e9fbed6443f6ffaa648d4cd75b4b9279479f3e9ec5b0b613f353a52b9d47c48027f24e559bc634534b85c155574ee2773f6dc0fdcb14d85fc71fff2f0a6d1fe87c53a25e55c23adc847844b1de9f6cb78bb66862f2a2a938680830a7"], 0x1c}}, 0x24000044) (async) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) (async) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=r0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) kernel console output (not intermixed with test programs): id length. [ 665.742412][ T5830] Bluetooth: hci5: command tx timeout [ 665.806053][T28519] __nla_validate_parse: 6 callbacks suppressed [ 665.806078][T28519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5965'. [ 665.891214][T28408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.907078][T28408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.918653][T28408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47146 - 0 [ 665.960744][T28532] veth11: entered promiscuous mode [ 665.967874][T28532] veth11: entered allmulticast mode [ 666.065430][T28408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.082673][T28408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.103077][T28408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47146 - 0 [ 666.188336][T28541] IPv6: sit2: Disabled Multicast RS [ 666.201128][T28541] sit2: entered allmulticast mode [ 666.350035][T28408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.365056][T28408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.397013][T28408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47146 - 0 [ 666.657509][T28408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.672563][T28408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.683377][T28408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47146 - 0 [ 666.726309][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5976'. [ 666.783917][T28570] syzkaller0: entered promiscuous mode [ 666.790506][T28570] syzkaller0: entered allmulticast mode [ 667.639996][T28592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5982'. [ 667.839312][ T5830] Bluetooth: hci5: command tx timeout [ 667.911000][T28597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5984'. [ 669.092976][T28408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 669.150797][T28408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 669.182513][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 669.190709][ C0] lec:lec_tx_timeout: lec0 [ 669.228212][T28408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 669.276139][T28408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 669.318958][T28619] syzkaller1: entered promiscuous mode [ 669.337281][T28635] netlink: 'syz.3.5991': attribute type 1 has an invalid length. [ 669.348984][T28619] syzkaller1: entered allmulticast mode [ 669.407658][T28635] netlink: 'syz.3.5991': attribute type 11 has an invalid length. [ 669.445635][T28635] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5991'. [ 669.607239][T28408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.664236][T28656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 669.697086][T28408] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.738010][T12331] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.745460][T12331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.795784][T12331] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.803210][T12331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.904471][ T5830] Bluetooth: hci5: command tx timeout [ 669.947941][T28664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.964309][T28668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.085826][T28679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6001'. [ 670.407657][T28693] netlink: 'syz.3.6004': attribute type 15 has an invalid length. [ 670.656181][T28408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.766173][T28706] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 670.791166][T28408] veth0_vlan: entered promiscuous mode [ 670.813812][T28408] veth1_vlan: entered promiscuous mode [ 670.857672][T28408] veth0_macvtap: entered promiscuous mode [ 670.874622][T28408] veth1_macvtap: entered promiscuous mode [ 670.934169][T28408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.986013][T28408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.020030][T12329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.055672][T12329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.091108][T12329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.126132][T12329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.214707][T28728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6016'. [ 671.272823][T28732] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 671.335273][T28732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6017'. [ 671.414818][T12329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.431664][T12329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.503585][T28734] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 671.550743][T15273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.569331][T15273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.704694][T28748] x_tables: duplicate underflow at hook 3 [ 671.992198][T28772] syzkaller0: entered promiscuous mode [ 671.998328][T28772] syzkaller0: entered allmulticast mode [ 672.126423][T28780] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6032'. [ 672.241406][T28786] netlink: 'syz.2.6034': attribute type 1 has an invalid length. [ 672.347976][T28791] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 672.365506][T28786] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 672.588123][T28801] syzkaller0: entered promiscuous mode [ 672.607417][T28801] syzkaller0: entered allmulticast mode [ 672.657822][T28808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6041'. [ 672.686039][T28801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6038'. [ 673.107380][ T8097] lec:lec_start_xmit: lec0:No lecd attached [ 673.115272][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 673.126853][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 673.142852][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 673.151421][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 673.160104][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 673.383018][T28833] netlink: 'syz.4.6047': attribute type 1 has an invalid length. [ 673.595604][T28843] bond2: (slave gretap1): making interface the new active one [ 673.614658][T28853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6051'. [ 673.630225][T28843] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 673.763068][T28837] veth0: entered promiscuous mode [ 673.858631][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6053'. [ 673.875317][T28836] veth0: left promiscuous mode [ 673.943197][T28873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6052'. [ 673.943213][T15275] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 674.173820][T28881] IPVS: sync thread started: state = MASTER, mcast_ifn = dvmrp0, syncid = 3, id = 0 [ 674.442171][T28892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 674.472579][T28892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6059'. [ 674.486111][T28826] chnl_net:caif_netlink_parms(): no params data found [ 674.698261][T28906] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 674.747344][T28899] syzkaller0: entered promiscuous mode [ 674.758383][T28899] syzkaller0: entered allmulticast mode [ 674.871609][T12331] veth3: left allmulticast mode [ 674.882524][T12331] veth3: left promiscuous mode [ 674.887722][T12331] bridge1: port 1(veth3) entered disabled state [ 674.999634][T28923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.262848][ T5829] Bluetooth: hci3: command tx timeout [ 675.357352][T12331] bond3 (unregistering): (slave bridge0): Releasing active interface [ 675.617583][T12331] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 675.626229][T12331] bond10 (unregistering): (slave bridge8): the permanent HWaddr of slave - 16:bd:7b:ac:47:ca - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 675.679066][T12331] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 675.739501][T12331] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 675.749601][T12331] bridge_slave_1: left promiscuous mode [ 675.755975][T12331] bridge_slave_1: left allmulticast mode [ 675.763810][T12331] bond0 (unregistering): Released all slaves [ 675.777372][T12331] bond1 (unregistering): Released all slaves [ 675.792894][T12331] bond2 (unregistering): Released all slaves [ 675.808537][T12331] bond3 (unregistering): Released all slaves [ 675.831558][T12331] bond4 (unregistering): Released all slaves [ 675.849797][T12331] bond5 (unregistering): Released all slaves [ 675.869808][T12331] bond6 (unregistering): Released all slaves [ 675.888849][T12331] bond7 (unregistering): Released all slaves [ 675.905687][T12331] bond8 (unregistering): Released all slaves [ 675.922822][T12331] bond9 (unregistering): Released all slaves [ 675.946301][T12331] bond10 (unregistering): Released all slaves [ 675.964821][T28826] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.972082][T28826] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.984835][T28826] bridge_slave_0: entered allmulticast mode [ 675.997622][T28826] bridge_slave_0: entered promiscuous mode [ 676.179371][T28826] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.192521][T28826] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.217978][T28826] bridge_slave_1: entered allmulticast mode [ 676.228218][T28826] bridge_slave_1: entered promiscuous mode [ 676.253567][T12331] : left promiscuous mode [ 676.357624][T28945] __nla_validate_parse: 3 callbacks suppressed [ 676.357646][T28945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6069'. [ 676.616703][T12331] tipc: Left network mode [ 676.632020][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 676.746085][T28826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.795557][T28826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.828094][T28958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6073'. [ 676.863809][T28958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6073'. [ 676.915142][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.041080][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.282343][T28826] team0: Port device team_slave_0 added [ 677.301804][T28826] team0: Port device team_slave_1 added [ 677.342446][ T5829] Bluetooth: hci3: command tx timeout [ 677.453685][T28989] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 677.471050][T28989] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.484653][T28989] bridge0: entered allmulticast mode [ 677.507470][T28826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.521062][T28989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6078'. [ 677.552347][T28826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.611285][T28826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.644457][T28826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.662491][T28826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.690459][T28952] infiniband syz2: set down [ 677.695239][T28952] infiniband syz2: added ip6_vti0 [ 677.703363][T28952] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 677.708470][T28952] infiniband syz2: Couldn't open port 1 [ 677.725916][T28826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.769539][ T5941] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.854986][T28952] RDS/IB: syz2: added [ 677.859153][T28952] smc: adding ib device syz2 with port count 1 [ 677.874461][T28952] smc: ib device syz2 port 1 has no pnetid [ 677.948730][ T5941] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.965842][T28826] hsr_slave_0: entered promiscuous mode [ 677.987555][T28826] hsr_slave_1: entered promiscuous mode [ 678.015889][T28826] debugfs: 'hsr0' already exists in 'hsr' [ 678.031962][T28826] Cannot create hsr debugfs directory [ 678.061790][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.142310][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 678.150526][ C0] lec:lec_tx_timeout: lec0 [ 678.157064][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 678.171051][T29015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6085'. [ 678.810751][T29040] netlink: 'syz.1.6090': attribute type 10 has an invalid length. [ 678.872004][T29040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6090'. [ 678.972804][T29040] dummy0: entered promiscuous mode [ 678.989217][T29040] bridge0: port 3(dummy0) entered blocking state [ 679.000667][T29048] netlink: 'syz.2.6092': attribute type 21 has an invalid length. [ 679.016583][T29040] bridge0: port 3(dummy0) entered disabled state [ 679.047511][T29040] dummy0: entered allmulticast mode [ 679.055793][T29040] bridge0: port 3(dummy0) entered blocking state [ 679.062646][T29040] bridge0: port 3(dummy0) entered forwarding state [ 679.072079][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 679.251219][T29048] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 679.271865][T29048] bond6 (unregistering): Released all slaves [ 679.433605][ T5829] Bluetooth: hci3: command tx timeout [ 679.716184][T29082] openvswitch: netlink: Missing key (keys=40, expected=80) [ 679.840641][T28826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 679.916025][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 679.916056][T28826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 679.938900][T28826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 679.996176][T28826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.118206][T29105] s5: renamed from vlan1 (while UP) [ 680.461796][T29118] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 680.504794][T28826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.604097][T28826] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.645649][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.652881][T15280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.758230][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 680.767000][T12329] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.774844][T12329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.999827][T28826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 681.090526][T29133] syzkaller0: entered promiscuous mode [ 681.106504][T29133] syzkaller0: entered allmulticast mode [ 681.154670][T29133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6109'. [ 681.375414][T29146] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6112'. [ 681.504305][ T5829] Bluetooth: hci3: command tx timeout [ 681.614050][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 681.669495][T28826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.801919][T28826] veth0_vlan: entered promiscuous mode [ 681.820005][T28826] veth1_vlan: entered promiscuous mode [ 681.903109][T28826] veth0_macvtap: entered promiscuous mode [ 681.955681][T28826] veth1_macvtap: entered promiscuous mode [ 681.994619][T29172] macvtap1: entered promiscuous mode [ 682.000297][T29172] macvtap1: entered allmulticast mode [ 682.022536][T29172] veth1_vlan: entered allmulticast mode [ 682.094873][T28826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.127675][T28826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.248869][ T3513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.262433][ T3513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.396608][ T3513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.409847][ T3513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.445780][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 682.452928][T29176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6118'. [ 682.908106][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 683.164748][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 683.182421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 683.190782][ C0] lec:lec_tx_timeout: lec0 [ 683.471870][T28952] ip6_vti0 speed is unknown, defaulting to 1000 [ 683.841041][T12331] hsr_slave_0: left promiscuous mode [ 683.847986][T12331] hsr_slave_1: left promiscuous mode [ 683.889705][T12331] pim6reg (unregistering): left allmulticast mode [ 683.983390][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 684.453923][T12331] IPVS: stop unused estimator thread 0... [ 684.745689][T29164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.900837][T12331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.932306][T12331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.057301][T12331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.070296][T29226] netlink: 'syz.4.6125': attribute type 4 has an invalid length. [ 685.105715][T12331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.114170][T29226] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6125'. [ 685.187771][T29226] .`: renamed from bond0 (while UP) [ 685.401798][T29239] netlink: 'syz.0.6042': attribute type 11 has an invalid length. [ 685.404365][T29240] IPv6: NLM_F_REPLACE set, but no existing node found! [ 685.434193][T29239] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6042'. [ 685.605523][T29253] wg1: entered allmulticast mode [ 685.674462][T29259] syzkaller0: entered promiscuous mode [ 685.690914][T29259] syzkaller0: entered allmulticast mode [ 685.998781][T29281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6143'. [ 686.200418][T29290] rdma_op ffff88806b0dd1f0 conn xmit_rdma 0000000000000000 [ 686.333570][T29300] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6149'. [ 686.849102][T29322] tipc: Started in network mode [ 686.884017][T29322] tipc: Node identity fed1e2feaf75, cluster identity 4711 [ 686.924676][T29322] tipc: Enabled bearer , priority 11 [ 687.061043][T29335] veth0: entered promiscuous mode [ 687.070695][T29331] veth0: left promiscuous mode [ 687.305948][T29355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6165'. [ 687.350050][T29355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6165'. [ 687.703207][T29377] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 687.732533][T29383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6173'. [ 687.757243][T29382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6173'. [ 687.867892][T29388] netlink: 'syz.3.6175': attribute type 1 has an invalid length. [ 687.876428][T29388] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6175'. [ 687.889996][T29388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6175'. [ 688.045096][ T42] tipc: Node number set to 1369760510 [ 688.286640][T29414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6182'. [ 688.440748][T29424] netlink: 'syz.3.6183': attribute type 6 has an invalid length. [ 688.632768][T29435] netlink: 'syz.1.6188': attribute type 1 has an invalid length. [ 688.646088][T29438] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6189'. [ 688.652029][T29435] netlink: 'syz.1.6188': attribute type 1 has an invalid length. [ 688.684870][T29435] netlink: 'syz.1.6188': attribute type 2 has an invalid length. [ 688.732422][T29435] netlink: 'syz.1.6188': attribute type 2 has an invalid length. [ 688.763712][T29446] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6193'. [ 688.864521][T29445] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6193'. [ 688.915969][T29450] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 688.924441][T29450] team0: Device macvlan2 is already an upper device of the team interface [ 689.182256][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 689.190376][ C0] lec:lec_tx_timeout: lec0 [ 689.196055][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 689.249641][T29474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.600371][T29492] netlink: 'syz.1.6209': attribute type 21 has an invalid length. [ 689.755676][T29499] tipc: Enabled bearer , priority 2 [ 689.957538][T29513] sctp: [Deprecated]: syz.1.6217 (pid 29513) Use of int in max_burst socket option. [ 689.957538][T29513] Use struct sctp_assoc_value instead [ 689.979136][T29513] "syz.1.6217" (29513) uses obsolete ecb(arc4) skcipher [ 690.093511][T29518] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 690.115413][T29518] bond0 (unregistering): Released all slaves [ 690.330077][T29536] openvswitch: netlink: Invalid VLAN frame [ 690.410901][T29530] netlink: 'syz.0.6221': attribute type 1 has an invalid length. [ 690.547684][T29538] syzkaller1: entered promiscuous mode [ 690.559936][T29538] syzkaller1: entered allmulticast mode [ 690.886224][T29560] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 690.895449][T29562] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 691.190554][T29595] netlink: 'syz.0.6239': attribute type 1 has an invalid length. [ 691.228668][T29595] vlan2: entered promiscuous mode [ 691.234728][T29595] macvtap0: entered promiscuous mode [ 691.241078][T29595] vlan2: entered allmulticast mode [ 691.246475][T29595] macvtap0: entered allmulticast mode [ 691.252355][T29595] veth0_macvtap: entered allmulticast mode [ 691.337788][T29600] atomic_op ffff88801b380998 conn xmit_atomic 0000000000000000 [ 691.420674][ T5941] IPVS: starting estimator thread 0... [ 691.512616][T29605] IPVS: using max 38 ests per chain, 91200 per kthread [ 693.780012][T29560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 693.950678][T29622] : renamed from netdevsim0 [ 693.982144][T29624] __nla_validate_parse: 18 callbacks suppressed [ 693.982166][T29624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6246'. [ 694.015662][T29622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6247'. [ 694.056745][T29622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6247'. [ 694.070297][ T3513] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.103568][ T3513] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.120748][ T3513] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.150934][ T3513] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.185799][T29634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6249'. [ 694.222253][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 694.230679][ C0] lec:lec_tx_timeout: lec0 [ 694.394429][T29643] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 694.732052][T29674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6261'. [ 695.153914][T29694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6265'. [ 695.183285][T29694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6265'. [ 695.570823][T29712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.625342][T29714] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6271'. [ 695.705532][T29708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6271'. [ 695.897633][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.918606][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.927389][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.939665][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 695.951077][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.028351][T29729] netlink: 'syz.3.6277': attribute type 11 has an invalid length. [ 696.112079][T29731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6278'. [ 696.133766][T29722] ip6_vti0 speed is unknown, defaulting to 1000 [ 696.512613][T29746] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.520392][T29746] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.708618][T29746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.727499][T29746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.740643][T29746] tipc: Resetting bearer [ 696.800741][T29746] veth0_macvtap: left allmulticast mode [ 696.933973][T15275] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.964905][T15275] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.989515][ T3513] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.011144][ T3513] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.099219][T15275] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.134949][T15275] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.164329][ T3513] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.185561][ T3513] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.291347][ T3513] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.303107][ T3513] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.494744][ T3513] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.524594][ T3513] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.852614][T29798] netlink: 'syz.1.6294': attribute type 10 has an invalid length. [ 697.868781][T29798] netlink: 'syz.1.6294': attribute type 10 has an invalid length. [ 697.878294][T29798] netlink: 'syz.1.6294': attribute type 10 has an invalid length. [ 697.897532][ T3513] bridge_slave_1: left allmulticast mode [ 697.911418][T29798] netlink: 'syz.1.6294': attribute type 10 has an invalid length. [ 697.924505][ T3513] bridge_slave_1: left promiscuous mode [ 697.930332][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.988394][ T5830] Bluetooth: hci2: command tx timeout [ 698.276450][T29825] x_tables: duplicate underflow at hook 2 [ 698.413999][T29830] netlink: 'syz.3.6298': attribute type 33 has an invalid length. [ 698.720595][ T3513] .` (unregistering): (slave bridge0): Releasing backup interface [ 699.102720][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 699.130232][ T3513] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.141185][ T3513] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.152742][ T3513] .` (unregistering): (slave batadv0): Releasing backup interface [ 699.165664][ T3513] .` (unregistering): Released all slaves [ 699.176420][ T3513] bond1 (unregistering): Released all slaves [ 699.193458][ T3513] bond2 (unregistering): Released all slaves [ 699.210552][ T3513] bond3 (unregistering): Released all slaves [ 699.229955][ T3513] bond0 (unregistering): Released all slaves [ 699.246204][ T3513] bond4 (unregistering): Released all slaves [ 699.260881][ T3513] bond5 (unregistering): Released all slaves [ 699.288455][T29816] dvmrp0: entered allmulticast mode [ 699.532555][T29722] chnl_net:caif_netlink_parms(): no params data found [ 699.581484][ T3513] tipc: Left network mode [ 699.738119][T29858] __nla_validate_parse: 4 callbacks suppressed [ 699.738141][T29858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6302'. [ 699.870841][T29722] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.883140][T29722] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.894061][T29722] bridge_slave_0: entered allmulticast mode [ 699.906668][T29722] bridge_slave_0: entered promiscuous mode [ 699.918567][T29867] netlink: 'syz.1.6305': attribute type 13 has an invalid length. [ 699.928245][T29867] veth0_macvtap: left promiscuous mode [ 699.934855][T29867] macvtap0: entered allmulticast mode [ 699.946874][T29867] macvtap0: refused to change device tx_queue_len [ 699.957838][T29722] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.968944][T29722] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.983266][T29722] bridge_slave_1: entered allmulticast mode [ 699.991682][T29722] bridge_slave_1: entered promiscuous mode [ 700.009766][T29869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6306'. [ 700.019240][T29869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6306'. [ 700.067707][ T5830] Bluetooth: hci2: command tx timeout [ 700.100506][T29722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.115369][T29722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.245062][T29722] team0: Port device team_slave_0 added [ 700.278426][T29722] team0: Port device team_slave_1 added [ 700.497754][T29722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.524532][T29722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.590398][T29722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.644372][T29722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.651384][T29722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.734526][T29891] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 700.768849][T29722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.942198][T29906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.062840][T29910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.094789][T29722] hsr_slave_0: entered promiscuous mode [ 701.112070][T29722] hsr_slave_1: entered promiscuous mode [ 701.132616][T29722] debugfs: 'hsr0' already exists in 'hsr' [ 701.138517][T29722] Cannot create hsr debugfs directory [ 701.371007][T29916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6316'. [ 701.513849][T29923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6318'. [ 701.780627][T29929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6319'. [ 701.940289][T29929] bridge_slave_1: left allmulticast mode [ 701.948961][T29929] bridge_slave_1: left promiscuous mode [ 701.965337][T29929] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.020019][T29929] bridge_slave_0: left allmulticast mode [ 702.040114][T29929] bridge_slave_0: left promiscuous mode [ 702.054890][T29929] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.151734][ T5830] Bluetooth: hci2: command tx timeout [ 702.170478][T29933] tipc: Started in network mode [ 702.177171][T29933] tipc: Node identity ac14140f, cluster identity 4711 [ 702.193656][T29933] tipc: New replicast peer: 255.255.255.255 [ 702.201565][T29933] tipc: Enabled bearer , priority 10 [ 702.323889][ T3513] hsr_slave_1: left promiscuous mode [ 702.349291][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.377293][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.404172][ T3513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.414032][ T3513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.441360][ T3513] veth0_macvtap: left promiscuous mode [ 702.447196][ T3513] veth1_vlan: left promiscuous mode [ 702.453059][ T3513] veth0_vlan: left promiscuous mode [ 702.832496][ T3513] team0 (unregistering): Port device team_slave_1 removed [ 702.851494][ T3513] team0 (unregistering): Port device team_slave_0 removed [ 702.863295][ T3513] veth0_to_team (unregistering): left allmulticast mode [ 703.212119][T18795] tipc: Node number set to 2886997007 [ 703.608809][T29998] netlink: 'syz.0.6331': attribute type 1 has an invalid length. [ 703.621012][T29998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6331'. [ 703.747160][T30009] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6330'. [ 703.792149][T30006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6332'. [ 703.832443][T30009] netlink: 'syz.1.6330': attribute type 9 has an invalid length. [ 703.845138][T30006] netlink: 'syz.3.6332': attribute type 5 has an invalid length. [ 703.882969][T30006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6332'. [ 703.972534][T30006] geneve2: entered promiscuous mode [ 703.978281][T30006] geneve2: entered allmulticast mode [ 704.025769][T12331] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 704.104547][T12331] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 704.129417][T12331] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 704.142756][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 704.150848][ C0] lec:lec_tx_timeout: lec0 [ 704.156002][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 704.209176][T12331] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 704.228085][ T5830] Bluetooth: hci2: command tx timeout [ 704.448382][T29722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 704.537639][T29722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 704.560539][T29722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 704.586393][T29722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 704.765902][T30062] batadv1: entered allmulticast mode [ 704.896150][T30065] syzkaller1: entered promiscuous mode [ 704.917657][T30065] syzkaller1: entered allmulticast mode [ 704.985021][T30070] __nla_validate_parse: 4 callbacks suppressed [ 704.985042][T30070] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6345'. [ 705.096344][T30079] tipc: Can't bind to reserved service type 1 [ 705.198051][T29722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.260839][T29722] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.289846][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.297112][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.325932][T15273] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.333214][T15273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.428306][T30096] : entered promiscuous mode [ 705.749308][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6351'. [ 705.845717][T30122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6351'. [ 705.862568][T30115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6351'. [ 705.880872][T30106] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 705.906971][T30106] bond3 (unregistering): Released all slaves [ 705.921773][T30122] netlink: 'syz.4.6351': attribute type 20 has an invalid length. [ 705.947272][T30122] IPv6: NLM_F_CREATE should be specified when creating new route [ 705.988415][T30120] bridge1: entered promiscuous mode [ 705.993896][T30120] bridge1: entered allmulticast mode [ 706.004567][T30120] team0: Port device bridge1 added [ 706.032076][T30124] bridge0: port 4(team0) entered blocking state [ 706.039684][T30124] bridge0: port 4(team0) entered disabled state [ 706.047612][T30124] team0: entered allmulticast mode [ 706.053694][T30124] team_slave_0: entered allmulticast mode [ 706.061132][T30124] team_slave_1: entered allmulticast mode [ 706.074843][T30124] team0: entered promiscuous mode [ 706.080121][T30124] team_slave_0: entered promiscuous mode [ 706.086402][T30124] team_slave_1: entered promiscuous mode [ 706.093602][T30124] bridge0: port 4(team0) entered blocking state [ 706.100532][T30124] bridge0: port 4(team0) entered forwarding state [ 706.287807][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6356'. [ 706.343850][T30139] netlink: 'syz.4.6357': attribute type 30 has an invalid length. [ 706.486551][T29722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.575681][T29722] veth0_vlan: entered promiscuous mode [ 706.610383][T29722] veth1_vlan: entered promiscuous mode [ 706.727185][T29722] veth0_macvtap: entered promiscuous mode [ 706.767043][T29722] veth1_macvtap: entered promiscuous mode [ 706.824038][T29722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.861466][T29722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.945683][T15281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.982434][T15281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.009325][T15281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.032435][T15281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.436007][T30181] syzkaller1: entered promiscuous mode [ 707.454216][T30181] syzkaller1: entered allmulticast mode [ 707.469187][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.499418][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.571935][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.590615][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.740947][T30198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6370'. [ 707.778916][T30198] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 708.215117][T30225] syzkaller0: entered promiscuous mode [ 708.250846][T30225] syzkaller0: entered allmulticast mode [ 708.361796][T30225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6376'. [ 708.397588][T30233] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6378'. [ 708.472856][T30236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.481838][T30236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.490302][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6378'. [ 708.500542][T30236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.520316][T30236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.529764][T30236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 708.538685][T30233] openvswitch: netlink: Flow actions attr not present in new flow. [ 708.629558][T30236] Bluetooth: hci4: command 0x0406 tx timeout [ 708.658179][T30234] ip6_vti0 speed is unknown, defaulting to 1000 [ 708.673131][T30239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6379'. [ 708.683845][T30241] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.890761][T30246] : renamed from veth1_vlan (while UP) [ 709.183311][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 709.191405][ C0] lec:lec_tx_timeout: lec0 [ 709.689259][T30289] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 709.728617][T30289] netlink: 'syz.0.6393': attribute type 2 has an invalid length. [ 709.786002][T30234] chnl_net:caif_netlink_parms(): no params data found [ 710.020686][T30306] __nla_validate_parse: 7 callbacks suppressed [ 710.020708][T30306] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6396'. [ 710.152098][T30234] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.162465][T30234] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.174721][T30234] bridge_slave_0: entered allmulticast mode [ 710.182963][T30234] bridge_slave_0: entered promiscuous mode [ 710.198278][T30322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6399'. [ 710.306864][T30234] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.314295][T30234] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.331835][T30234] bridge_slave_1: entered allmulticast mode [ 710.356677][T30234] bridge_slave_1: entered promiscuous mode [ 710.599698][T30234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.623744][ T5830] Bluetooth: hci0: command tx timeout [ 710.638957][T30234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.676898][T30337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.706541][T30342] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6405'. [ 710.714111][T30344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6406'. [ 710.731940][T30344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'. [ 710.777990][T30234] team0: Port device team_slave_0 added [ 710.789398][T30234] team0: Port device team_slave_1 added [ 710.850870][T30234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.862080][T30234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.910938][T30234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.954592][T30234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.969177][T30234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.997406][T30234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.039185][T30363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6412'. [ 711.061988][T30363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6412'. [ 711.097591][T30367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.131635][T30361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6411'. [ 711.152595][T30361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6411'. [ 711.172019][T30234] hsr_slave_0: entered promiscuous mode [ 711.188513][T30234] hsr_slave_1: entered promiscuous mode [ 711.294013][T30372] netlink: 'syz.0.6414': attribute type 21 has an invalid length. [ 711.323871][T30372] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 711.340790][T30372] bond1 (unregistering): Released all slaves [ 711.354826][T30379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6415'. [ 711.446228][T30380] Cannot find add_set index 0 as target [ 711.468481][T30384] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 711.500673][T30384] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 711.522019][T30384] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 711.670661][T30234] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.686565][T30234] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.696981][T30234] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 711.807365][T30234] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.829322][T30234] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.854224][T30234] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 711.923824][T30234] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.936391][T30234] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.950679][T30234] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 711.990360][T30402] sctp: [Deprecated]: syz.2.6422 (pid 30402) Use of int in max_burst socket option. [ 711.990360][T30402] Use struct sctp_assoc_value instead [ 712.023629][T30234] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.035137][T30234] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.056936][T30234] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 712.099502][T30406] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 712.116491][T30407] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 712.311290][T30410] xt_l2tp: missing protocol rule (udp|l2tpip) [ 712.331700][T30410] netlink: 'syz.2.6425': attribute type 2 has an invalid length. [ 712.405661][T30412] syzkaller0: entered promiscuous mode [ 712.411487][T30412] syzkaller0: entered allmulticast mode [ 712.607354][T30420] x_tables: duplicate underflow at hook 2 [ 712.712956][ T5830] Bluetooth: hci0: command tx timeout [ 713.300924][T30431] netlink: 'syz.4.6431': attribute type 21 has an invalid length. [ 713.309146][T30431] netlink: 'syz.4.6431': attribute type 22 has an invalid length. [ 713.328602][T30431] netlink: 'syz.4.6431': attribute type 23 has an invalid length. [ 713.346177][T30431] netlink: 'syz.4.6431': attribute type 25 has an invalid length. [ 713.371053][T30431] netlink: 'syz.4.6431': attribute type 26 has an invalid length. [ 714.225718][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 714.515117][T30234] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 714.527023][T30424] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.547087][T30424] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.554510][T30424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.583043][T30447] syzkaller0: entered promiscuous mode [ 714.602553][T30447] syzkaller0: entered allmulticast mode [ 714.611391][T30234] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 714.716007][T30234] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 714.736461][T30234] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 714.792655][ T5830] Bluetooth: hci0: command tx timeout [ 714.930220][T30475] netlink: 'syz.4.6439': attribute type 1 has an invalid length. [ 714.963199][T30475] netlink: 'syz.4.6439': attribute type 1 has an invalid length. [ 715.008023][T30234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.040588][T30234] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.063546][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.070724][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.127933][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.135301][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.334163][T30496] tipc: Started in network mode [ 715.346005][T30496] tipc: Node identity 26c8b4aae6be, cluster identity 4711 [ 715.354243][T30496] tipc: Enabled bearer , priority 0 [ 715.464666][T30498] tipc: Disabling bearer [ 715.490300][T30510] netlink: 'syz.2.6450': attribute type 83 has an invalid length. [ 715.869382][T30234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.961970][T30532] bond1: option resend_igmp: invalid value (32767) [ 715.970332][T30532] bond1: option resend_igmp: allowed values 0 - 255 [ 715.980823][T30532] bond1 (unregistering): Released all slaves [ 716.085135][T30234] veth0_vlan: entered promiscuous mode [ 716.128300][T30234] veth1_vlan: entered promiscuous mode [ 716.185877][T30548] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 716.231386][T30234] veth0_macvtap: entered promiscuous mode [ 716.261765][T30234] veth1_macvtap: entered promiscuous mode [ 716.280583][T30552] __nla_validate_parse: 5 callbacks suppressed [ 716.280602][T30552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6463'. [ 716.323667][T30555] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6464'. [ 716.404195][T30234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.424748][T30559] netlink: 'syz.2.6465': attribute type 3 has an invalid length. [ 716.488842][T30234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.542785][ T3513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.574754][ T3513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.608191][ T3513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.621687][T30565] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 716.642695][ T3513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.862698][ T5830] Bluetooth: hci0: command tx timeout [ 716.878933][T30581] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 716.965488][T30586] netlink: zone id is out of range [ 716.970720][T30586] netlink: zone id is out of range [ 716.976238][T30586] netlink: zone id is out of range [ 716.989633][T30586] netlink: zone id is out of range [ 716.995403][T30586] netlink: zone id is out of range [ 717.011566][T30586] netlink: zone id is out of range [ 717.017235][T30586] netlink: zone id is out of range [ 717.023116][T30586] netlink: zone id is out of range [ 717.028389][T30586] netlink: zone id is out of range [ 717.077910][T30588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6477'. [ 717.091173][T30588] netlink: 11 bytes leftover after parsing attributes in process `syz.2.6477'. [ 718.647541][T30583] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 718.732324][T15275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.782544][T15275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.873455][T12331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.881613][T12331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.904812][T30595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6479'. [ 718.941300][T30595] ip6erspan0: entered promiscuous mode [ 719.232257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 719.240366][ C0] lec:lec_tx_timeout: lec0 [ 719.262721][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 719.423777][T30622] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6488'. [ 719.575506][T30640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6493'. [ 719.587029][T30640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6493'. [ 719.624368][T30641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6492'. [ 719.639849][T30640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6493'. [ 719.930765][T30659] Cannot find add_set index 46338 as target [ 720.492566][T30692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 720.745403][T30698] syzkaller0: entered promiscuous mode [ 720.750952][T30698] syzkaller0: entered allmulticast mode [ 720.781846][T30714] netlink: 'syz.4.6512': attribute type 10 has an invalid length. [ 720.800640][T30714] dummy0: entered promiscuous mode [ 720.807769][T30714] bridge0: port 3(dummy0) entered blocking state [ 720.816300][T30714] bridge0: port 3(dummy0) entered disabled state [ 720.831646][T30714] dummy0: entered allmulticast mode [ 720.843010][T30714] bridge0: port 3(dummy0) entered blocking state [ 720.849608][T30714] bridge0: port 3(dummy0) entered forwarding state [ 720.873238][T30712] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 720.918013][T30712] batadv1: entered promiscuous mode [ 720.923873][T30712] batadv1: entered allmulticast mode [ 720.930503][T30712] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 720.949967][T30712] team0: Failed to send options change via netlink (err -105) [ 720.960148][T30712] team0: Port device batadv1 added [ 720.968746][T30721] nbd: nbd3 already in use [ 720.977671][T30715] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 720.986932][T30715] batadv2: entered promiscuous mode [ 720.992497][T30715] batadv2: entered allmulticast mode [ 721.000751][T30715] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 721.010181][T30715] team0: Failed to send options change via netlink (err -105) [ 721.017746][T30715] team0: Port device batadv2 added [ 721.030816][T30716] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 721.373263][T12331] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 721.382988][T12331] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 721.467009][T30745] netlink: 'syz.0.6522': attribute type 2 has an invalid length. [ 721.479080][T12331] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 721.488560][T12331] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 721.678483][T30754] __nla_validate_parse: 7 callbacks suppressed [ 721.678504][T30754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6525'. [ 721.941072][T30765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6528'. [ 721.971680][T30765] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6528'. [ 723.500051][T30745] 9: entered promiscuous mode [ 723.668614][T30779] netlink: 'syz.2.6534': attribute type 8 has an invalid length. [ 723.790724][T30785] syzkaller0: entered promiscuous mode [ 723.796518][T30785] syzkaller0: entered allmulticast mode [ 723.807940][T30785] xt_l2tp: invalid flags combination: 0 [ 723.840732][T30785] wireguard0: entered promiscuous mode [ 723.846794][T30785] wireguard0: entered allmulticast mode [ 723.883189][T30785] team0: Device wireguard0 is of different type [ 724.150556][T30800] bond2: option min_links: invalid value (18446744073709551614) [ 724.172833][T30800] bond2: option min_links: allowed values 0 - 2147483647 [ 724.189111][T30800] bond2 (unregistering): Released all slaves [ 724.272306][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 724.280431][ C0] lec:lec_tx_timeout: lec0 [ 724.302889][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 724.321968][T30801] bond2: option min_links: invalid value (18446744073709551614) [ 724.334206][T30801] bond2: option min_links: allowed values 0 - 2147483647 [ 724.344893][T30801] bond2 (unregistering): Released all slaves [ 724.345655][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 724.351410][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 724.394007][T30811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6542'. [ 724.394992][T30816] netlink: 'syz.0.6543': attribute type 30 has an invalid length. [ 724.411431][T30815] netlink: 'syz.0.6543': attribute type 30 has an invalid length. [ 724.458223][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 724.479405][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 724.491965][T30816] netlink: 'syz.0.6543': attribute type 30 has an invalid length. [ 724.501719][T30818] IPv6: sit1: Disabled Multicast RS [ 724.530988][T30815] netlink: 'syz.0.6543': attribute type 30 has an invalid length. [ 724.570394][T12331] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.570553][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 724.609833][T30815] netlink: 'syz.0.6543': attribute type 30 has an invalid length. [ 724.640387][T12331] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.640565][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6543'. [ 724.658230][T12331] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.658325][T12331] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.693684][T30816] netlink: 'syz.0.6543': attribute type 30 has an invalid length. [ 724.742530][T30815] netlink: 'syz.0.6543': attribute type 30 has an invalid length. [ 725.688635][T30864] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 725.719813][T30868] xt_l2tp: invalid flags combination: 8 [ 725.727065][T30869] xt_l2tp: invalid flags combination: 8 [ 725.916427][T30882] net_ratelimit: 51 callbacks suppressed [ 725.916452][T30882] openvswitch: netlink: Missing key (keys=40, expected=80) [ 725.986301][T30838] netlink: set zone limit has 4 unknown bytes [ 726.035701][T30891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.130703][T30893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.193426][T30898] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 726.229451][T30903] xt_nat: multiple ranges no longer supported [ 726.340912][T15280] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.405560][T15280] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.438287][T15280] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.468581][T15280] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.499477][T30918] veth0_to_team: entered promiscuous mode [ 726.535205][T30918] veth0_to_team: left promiscuous mode [ 726.812102][T30934] __nla_validate_parse: 41 callbacks suppressed [ 726.812132][T30934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6579'. [ 726.839417][T30934] block nbd0: Unsupported socket: should be TCP or UNIX. [ 726.859774][T30934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6579'. [ 726.894340][T30934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6579'. [ 726.939098][T30909] scsi_nl_rcv_msg: discarding partial skb [ 727.041332][T30945] dvmrp0: entered allmulticast mode [ 727.065752][T30916] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6573'. [ 727.075155][T30916] netlink: 320 bytes leftover after parsing attributes in process `syz.4.6573'. [ 727.286320][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6585'. [ 727.425313][T30957] hsr_slave_0 (unregistering): left promiscuous mode [ 727.472931][T30960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6587'. [ 727.601851][T30967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6589'. [ 728.429149][T31017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6603'. [ 729.093953][T31032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6608'. [ 729.277985][T31042] Bluetooth: MGMT ver 1.23 [ 729.312257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 729.320639][ C0] lec:lec_tx_timeout: lec0 [ 729.342662][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 729.527454][T31058] validate_nla: 29 callbacks suppressed [ 729.527477][T31058] netlink: 'syz.3.6616': attribute type 1 has an invalid length. [ 729.602783][T31062] netlink: 'syz.2.6617': attribute type 4 has an invalid length. [ 729.834901][T31083] netlink: 'syz.1.6623': attribute type 12 has an invalid length. [ 729.849572][T31085] netlink: 'syz.4.6620': attribute type 1 has an invalid length. [ 729.870401][T31083] netlink: 'syz.1.6623': attribute type 29 has an invalid length. [ 729.871220][T31071] netlink: 'syz.4.6620': attribute type 1 has an invalid length. [ 730.094880][T31096] netlink: 'syz.4.6627': attribute type 32 has an invalid length. [ 730.153093][T31096] bond4: Setting coupled_control to off (0) [ 730.290452][T31108] delete_channel: no stack [ 730.460963][T31126] netlink: 'syz.1.6635': attribute type 1 has an invalid length. [ 730.553819][T31122] syzkaller0: entered promiscuous mode [ 730.559363][T31122] syzkaller0: entered allmulticast mode [ 730.696749][T31146] team0: left allmulticast mode [ 730.708470][T31146] team_slave_0: left allmulticast mode [ 730.721071][T31146] team_slave_1: left allmulticast mode [ 730.728398][T31146] batadv1: left allmulticast mode [ 730.733900][T31146] batadv2: left allmulticast mode [ 730.739175][T31146] team0: left promiscuous mode [ 730.744646][T31146] team_slave_0: left promiscuous mode [ 730.751106][T31146] team_slave_1: left promiscuous mode [ 730.757508][T31146] batadv1: left promiscuous mode [ 730.763224][T31146] batadv2: left promiscuous mode [ 730.768857][T31146] bridge0: port 4(team0) entered disabled state [ 730.786968][T31146] dummy0: left allmulticast mode [ 730.794097][T31146] bridge0: port 3(dummy0) entered disabled state [ 730.806007][T31146] bridge_slave_1: left allmulticast mode [ 730.811907][T31146] bridge_slave_1: left promiscuous mode [ 730.818379][T31146] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.837970][T31154] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 730.845699][T31146] bridge_slave_0: left allmulticast mode [ 730.860710][T31146] bridge_slave_0: left promiscuous mode [ 730.875282][T31146] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.140447][T31170] syz.1.6643: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 731.179188][T31170] CPU: 1 UID: 0 PID: 31170 Comm: syz.1.6643 Not tainted syzkaller #0 PREEMPT(full) [ 731.179225][T31170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.179241][T31170] Call Trace: [ 731.179251][T31170] [ 731.179262][T31170] dump_stack_lvl+0xe8/0x150 [ 731.179307][T31170] warn_alloc+0x249/0x340 [ 731.179338][T31170] ? stack_trace_save+0xa9/0x100 [ 731.179367][T31170] ? __pfx_warn_alloc+0x10/0x10 [ 731.179403][T31170] ? kasan_save_track+0x4f/0x80 [ 731.179425][T31170] ? kasan_save_track+0x3e/0x80 [ 731.179449][T31170] ? __kasan_kmalloc+0x93/0xb0 [ 731.179473][T31170] ? __kmalloc_cache_noprof+0x31c/0x660 [ 731.179497][T31170] ? xskq_create+0x56/0x170 [ 731.179529][T31170] ? xsk_setsockopt+0x54c/0x990 [ 731.179616][T31170] ? do_sock_setsockopt+0x17c/0x1b0 [ 731.179660][T31170] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 731.179693][T31170] ? do_syscall_64+0x14d/0xf80 [ 731.179735][T31170] __vmalloc_node_range_noprof+0x132/0x1730 [ 731.179799][T31170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 731.179832][T31170] ? __kasan_kmalloc+0x93/0xb0 [ 731.179867][T31170] vmalloc_user_noprof+0xad/0xe0 [ 731.179893][T31170] ? xskq_create+0xbf/0x170 [ 731.179926][T31170] xskq_create+0xbf/0x170 [ 731.179961][T31170] xsk_init_queue+0x8a/0xe0 [ 731.179995][T31170] xsk_setsockopt+0x54c/0x990 [ 731.180056][T31170] ? __pfx_xsk_setsockopt+0x10/0x10 [ 731.180087][T31170] ? __pfx_aa_sk_perm+0x10/0x10 [ 731.180122][T31170] ? aa_sock_opt_perm+0xff/0x1a0 [ 731.180157][T31170] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 731.180182][T31170] ? __pfx_xsk_setsockopt+0x10/0x10 [ 731.180219][T31170] do_sock_setsockopt+0x17c/0x1b0 [ 731.180262][T31170] __x64_sys_setsockopt+0x13d/0x1b0 [ 731.180303][T31170] do_syscall_64+0x14d/0xf80 [ 731.180337][T31170] ? trace_irq_disable+0x3b/0x150 [ 731.180370][T31170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.180394][T31170] ? clear_bhb_loop+0x40/0x90 [ 731.180423][T31170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.180443][T31170] RIP: 0033:0x7f2bfc39c799 [ 731.180467][T31170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.180486][T31170] RSP: 002b:00007f2bfd2b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 731.180513][T31170] RAX: ffffffffffffffda RBX: 00007f2bfc615fa0 RCX: 00007f2bfc39c799 [ 731.180530][T31170] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 731.180544][T31170] RBP: 00007f2bfc432bd9 R08: 0000000000000004 R09: 0000000000000000 [ 731.180562][T31170] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.180577][T31170] R13: 00007f2bfc616038 R14: 00007f2bfc615fa0 R15: 00007ffc69d26ec8 [ 731.180611][T31170] [ 731.181845][T31170] Mem-Info: [ 731.502134][T31170] active_anon:6220 inactive_anon:0 isolated_anon:0 [ 731.502134][T31170] active_file:2767 inactive_file:40321 isolated_file:0 [ 731.502134][T31170] unevictable:768 dirty:79 writeback:0 [ 731.502134][T31170] slab_reclaimable:13089 slab_unreclaimable:121669 [ 731.502134][T31170] mapped:29334 shmem:1372 pagetables:1507 [ 731.502134][T31170] sec_pagetables:0 bounce:0 [ 731.502134][T31170] kernel_misc_reclaimable:0 [ 731.502134][T31170] free:1287099 free_pcp:23707 free_cma:0 [ 731.578712][T31170] Node 0 active_anon:24880kB inactive_anon:0kB active_file:11068kB inactive_file:161088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:19032kB dirty:316kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15716kB pagetables:5888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 731.613389][T31170] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 731.618778][T31172] syzkaller0: entered promiscuous mode [ 731.675081][T31170] Node 0 DMA free:11244kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 731.692696][T31172] syzkaller0: entered allmulticast mode [ 731.724088][T31170] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 731.732783][T31170] Node 0 DMA32 free:1440880kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24980kB inactive_anon:0kB active_file:11068kB inactive_file:161088kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:36048kB local_pcp:20360kB free_cma:0kB [ 731.781315][T31170] lowmem_reserve[]: 0 0 0 0 0 [ 731.786487][T31170] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 731.816817][T31170] lowmem_reserve[]: 0 0 0 0 0 [ 731.821732][T31170] Node 1 Normal free:3696176kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58356kB local_pcp:28396kB free_cma:0kB [ 731.856623][T31170] lowmem_reserve[]: 0 0 0 0 0 [ 731.861674][T31170] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11244kB [ 731.879896][T31170] Node 0 DMA32: 11412*4kB (UM) 7430*8kB (UME) 3909*16kB (UME) 195*32kB (UME) 90*64kB (UM) 627*128kB (UME) 763*256kB (UM) 537*512kB (UE) 366*1024kB (UE) 164*2048kB (UM) 0*4096kB = 1440816kB [ 731.900193][T31170] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 731.915261][T31170] Node 1 Normal: 6*4kB (UM) 19*8kB (UM) 18*16kB (UME) 7*32kB (UME) 10*64kB (UME) 12*128kB (UM) 11*256kB (UM) 10*512kB (UM) 7*1024kB (UME) 8*2048kB (UE) 894*4096kB (UM) = 3696176kB [ 732.002483][T31170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.017352][T31170] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 732.042923][T31170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.062532][T31170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 732.072170][T31170] 44506 total pagecache pages [ 732.077480][T31170] 0 pages in swap cache [ 732.081764][T31170] Free swap = 124996kB [ 732.087170][T31170] Total swap = 124996kB [ 732.091528][T31170] 2097051 pages RAM [ 732.096705][T31170] 0 pages HighMem/MovableOnly [ 732.101739][T31170] 427019 pages reserved [ 732.106319][T31170] 0 pages cma reserved [ 732.126586][T31188] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 732.253748][T31191] __nla_validate_parse: 16 callbacks suppressed [ 732.253779][T31191] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6649'. [ 732.543127][T30236] Bluetooth: hci0: command 0x0405 tx timeout [ 732.690845][T31214] netlink: 'syz.3.6655': attribute type 2 has an invalid length. [ 732.743904][T31214] 9: entered promiscuous mode [ 732.783368][T31217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6658'. [ 732.904526][T31223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6662'. [ 732.991050][T31230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6659'. [ 733.047960][T31231] team_slave_0: entered promiscuous mode [ 733.054180][T31231] team_slave_1: entered promiscuous mode [ 733.059908][T31231] batadv1: entered promiscuous mode [ 733.065580][T31231] batadv2: entered promiscuous mode [ 733.107923][T31233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6663'. [ 733.133402][T31230] team0: entered promiscuous mode [ 733.158043][T31230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6659'. [ 733.279244][T31230] team0 (unregistering): left promiscuous mode [ 733.312682][T31230] team_slave_0: left promiscuous mode [ 733.343566][T31230] team_slave_1: left promiscuous mode [ 733.370704][T31230] batadv1: left promiscuous mode [ 733.409429][T31230] batadv2: left promiscuous mode [ 733.463607][T31230] team0 (unregistering): Port device team_slave_0 removed [ 733.501232][T31230] team0 (unregistering): Port device team_slave_1 removed [ 733.557441][T31230] team0 (unregistering): Port device bridge1 removed [ 733.588284][T31230] team0 (unregistering): Port device batadv1 removed [ 733.617384][T31230] team0 (unregistering): Port device batadv2 removed [ 733.630890][T31238] veth0: entered promiscuous mode [ 733.639709][T31246] netlink: 'syz.2.6666': attribute type 4 has an invalid length. [ 733.696485][T31236] veth0: left promiscuous mode [ 733.929436][T31266] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6673'. [ 734.127942][T31284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6679'. [ 734.221483][T31282] ip6gre1: entered promiscuous mode [ 734.352349][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 734.360603][ C0] lec:lec_tx_timeout: lec0 [ 734.383049][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 734.497338][T31300] macvlan0: entered promiscuous mode [ 734.604567][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6685'. [ 734.788592][T31322] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6690'. [ 735.115681][T31343] openvswitch: netlink: EtherType 0 is less than min 600 [ 735.174059][T31346] xt_ecn: cannot match TCP bits for non-tcp packets [ 735.262918][T31352] syzkaller1: entered promiscuous mode [ 735.273033][T31352] syzkaller1: entered allmulticast mode [ 735.329991][T31362] xt_ecn: cannot match TCP bits for non-tcp packets [ 735.509759][T31374] validate_nla: 2 callbacks suppressed [ 735.509784][T31374] netlink: 'syz.0.6705': attribute type 4 has an invalid length. [ 735.698458][T31386] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 735.920317][T31404] bond5: entered promiscuous mode [ 735.933572][T31404] bond5: entered allmulticast mode [ 735.940028][T31404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 735.971902][T31404] bond6: Removing last ns target with arp_interval on [ 736.045702][T31415] netlink: 'syz.4.6715': attribute type 1 has an invalid length. [ 736.355698][T31420] veth1_macvtap: left promiscuous mode [ 736.362055][T31420] macsec0: entered promiscuous mode [ 736.367806][T31420] macsec0: entered allmulticast mode [ 736.378613][T31420] veth1_macvtap: entered promiscuous mode [ 736.385543][T31420] veth1_macvtap: entered allmulticast mode [ 736.391726][T31420] macsec0: left promiscuous mode [ 736.398410][T31420] macsec0: left allmulticast mode [ 736.403881][T31420] veth1_macvtap: left allmulticast mode [ 736.467976][T31423] netlink: 'syz.1.6717': attribute type 1 has an invalid length. [ 736.504283][T31423] 8021q: adding VLAN 0 to HW filter on device bond3 [ 738.491340][T31374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.667049][T31441] tun0: tun_chr_ioctl cmd 1074025675 [ 738.673486][T31441] tun0: persist disabled [ 739.231291][T31475] __nla_validate_parse: 3 callbacks suppressed [ 739.231313][T31475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6732'. [ 739.304932][T31479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6734'. [ 739.336237][T31479] netlink: 'syz.3.6734': attribute type 3 has an invalid length. [ 739.413249][T31480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6734'. [ 739.917388][T31510] syzkaller1: entered promiscuous mode [ 739.923196][T31510] syzkaller1: entered allmulticast mode [ 739.943558][T31510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6741'. [ 740.345369][T31531] pim6reg527: entered allmulticast mode [ 740.462236][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6080 ms [ 740.470339][ C0] lec:lec_tx_timeout: lec0 [ 740.475490][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 740.503053][T31548] netlink: 'syz.1.6753': attribute type 2 has an invalid length. [ 740.902952][T31585] netlink: 'syz.4.6761': attribute type 8 has an invalid length. [ 740.977163][T31590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6764'. [ 741.143369][T31597] can: request_module (can-proto-5) failed. [ 741.601697][T31634] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6775'. [ 741.795778][T31636] netlink: 'syz.4.6777': attribute type 1 has an invalid length. [ 742.315840][T12329] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 742.457361][T31661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6783'. [ 742.546517][T31664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6785'. [ 742.555692][T31664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6785'. [ 742.594325][T31664] xt_hashlimit: size too large, truncated to 1048576 [ 743.038692][T31650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.246574][T31677] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 743.306237][T31677] bond8: (slave lo): Enslaving as an active interface with an up link [ 743.315219][T31677] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 743.344263][T31688] syz_tun: entered allmulticast mode [ 743.399918][T31688] bridge_slave_0: left allmulticast mode [ 743.443775][T31688] bridge_slave_0: left promiscuous mode [ 743.452636][T31688] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.469910][T31688] bridge_slave_1: left allmulticast mode [ 743.495031][T31694] openvswitch: netlink: Flow actions attr not present in new flow. [ 743.513309][T31688] bridge_slave_1: left promiscuous mode [ 743.538565][T31688] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.565797][T31699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6795'. [ 743.598001][T31688] bond0: (slave bond_slave_0): Releasing backup interface [ 743.635083][T31688] bond0: (slave bond_slave_1): Releasing backup interface [ 743.684829][T31688] team0: Port device team_slave_0 removed [ 743.727100][T31688] team0: Port device team_slave_1 removed [ 743.735787][T31688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.746050][T31688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.766652][T31688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.774909][T31688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.787526][T31688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.805342][T31699] chnl_net:caif_netlink_parms(): no params data found [ 743.877187][T31714] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 744.195582][T31725] pim6reg1: entered promiscuous mode [ 744.215131][T31725] pim6reg1: entered allmulticast mode [ 744.225050][ T29] audit: type=1107 audit(1773098535.095:19): pid=31720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='҇B\22lYu (aC4 @e闁X|ѸrRsqwWDOź/jfT0Υ<*1{F_Ѯg͝];u_aoSJEMG}7yO!o,sLRQ1Ut{'?1/k$z xCc8w^_c^Zj^Qkj2@Hp%A [ 744.225050][ T29] K({NT' [ 744.307151][T31726] __nla_validate_parse: 3 callbacks suppressed [ 744.307172][T31726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6803'. [ 745.002509][T31768] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.6815'. [ 745.036457][T31761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6814'. [ 745.100517][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6815'. [ 745.237240][T31775] bond2: option min_links: invalid value (18446744073709551614) [ 745.245493][T31775] bond2: option min_links: allowed values 0 - 2147483647 [ 745.257687][T31775] bond2 (unregistering): Released all slaves [ 745.334594][T31777] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6816'. [ 745.362474][T31781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6819'. [ 745.519026][T31800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6823'. [ 745.530464][T31802] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 2, id = 0 [ 745.791957][T31819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6827'. [ 745.998982][T31830] syzkaller0: entered promiscuous mode [ 746.004953][T31830] syzkaller0: entered allmulticast mode [ 746.006042][T31832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6832'. [ 746.018076][T31827] pim6reg1: entered promiscuous mode [ 746.026217][T31827] pim6reg1: entered allmulticast mode [ 746.071577][T31832] 8021q: adding VLAN 0 to HW filter on device bond5 [ 746.105347][T31830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6831'. [ 746.146554][T31839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 746.154831][T31839] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 746.168163][T31839] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 746.222277][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 746.231200][ C0] lec:lec_tx_timeout: lec0 [ 746.326538][T31844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 746.430276][T31854] veth0_to_team: entered promiscuous mode [ 746.438902][T31854] veth0_to_team: left promiscuous mode [ 746.940817][T31896] 8021q: VLANs not supported on lo [ 747.377763][T31924] sctp: [Deprecated]: syz.0.6857 (pid 31924) Use of int in max_burst socket option. [ 747.377763][T31924] Use struct sctp_assoc_value instead [ 747.512616][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.601817][T31938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.481847][T31966] ip6gre1: entered promiscuous mode [ 749.474968][T32019] netlink: 'syz.2.6890': attribute type 4 has an invalid length. [ 749.485715][T32016] syzkaller1: entered promiscuous mode [ 749.491355][T32016] syzkaller1: entered allmulticast mode [ 749.493345][T32018] netlink: 'syz.2.6890': attribute type 4 has an invalid length. [ 749.527156][T32020] netlink: 'syz.2.6890': attribute type 4 has an invalid length. [ 749.798984][T32035] netlink: 'syz.4.6896': attribute type 8 has an invalid length. [ 749.808208][T32035] __nla_validate_parse: 12 callbacks suppressed [ 749.808228][T32035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6896'. [ 749.849271][T32035] bond0: entered promiscuous mode [ 749.878554][T32035] gretap0: entered promiscuous mode [ 749.896804][T32035] erspan0: entered promiscuous mode [ 749.923596][T32035] debugfs: 'hsr1' already exists in 'hsr' [ 749.933656][T32035] Cannot create hsr debugfs directory [ 749.942817][T32035] hsr1: entered promiscuous mode [ 750.044032][T32053] macvlan0: entered promiscuous mode [ 750.172972][T32059] netlink: 'syz.0.6903': attribute type 7 has an invalid length. [ 750.182157][T32059] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6903'. [ 750.220603][T32061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6902'. [ 750.358165][T32069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6906'. [ 750.505148][T32077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6908'. [ 750.774194][T32083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6910'. [ 751.268585][T32104] xt_connbytes: Forcing CT accounting to be enabled [ 751.366142][T32111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6917'. [ 751.460989][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6919'. [ 751.473625][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6919'. [ 751.494318][T32114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6918'. [ 752.286666][T32167] netlink: 'syz.2.6932': attribute type 1 has an invalid length. [ 752.705397][T32186] bond6 (unregistering): Released all slaves [ 753.182322][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 753.190592][ C0] lec:lec_tx_timeout: lec0 [ 753.256164][T32188] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 753.325833][T32207] netlink: 'syz.0.6943': attribute type 24 has an invalid length. [ 753.497897][T32208] sctp: [Deprecated]: syz.0.6943 (pid 32208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 753.497897][T32208] Use struct sctp_sack_info instead [ 753.696470][T32220] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 754.373152][T32263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.780441][T32271] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 754.858097][T32264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 754.890473][T32260] syzkaller1: entered promiscuous mode [ 754.904485][T32260] syzkaller1: entered allmulticast mode [ 754.920145][T32268] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 754.945336][T32271] __nla_validate_parse: 12 callbacks suppressed [ 754.945358][T32271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6960'. [ 754.963780][T32271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6960'. [ 754.986186][T32279] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6961'. [ 755.324005][T32307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6968'. [ 755.418917][T32309] openvswitch: netlink: Duplicate key (type 2). [ 755.425497][T32307] openvswitch: netlink: Duplicate key (type 2). [ 755.481376][T32319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6971'. [ 755.571847][T32325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.776780][T32339] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6975'. [ 755.790590][T32339] 8021q: VLANs not supported on gre0 [ 755.973778][T32347] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6978'. [ 756.070013][T32351] syzkaller1: entered promiscuous mode [ 756.076376][T32351] syzkaller1: entered allmulticast mode [ 756.147479][T32353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6982'. [ 756.175003][T32359] openvswitch: netlink: Message has 4 unknown bytes. [ 756.186838][T32359] openvswitch: netlink: Message has 4 unknown bytes. [ 756.194501][T32360] bond0: entered promiscuous mode [ 756.199733][T32360] bond_slave_0: entered promiscuous mode [ 756.210043][T32360] bond_slave_1: entered promiscuous mode [ 756.226652][T32360] bridge_slave_1: entered promiscuous mode [ 756.357076][T32371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6984'. [ 756.406303][T32373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6986'. [ 756.919369][ T5837] IPVS: starting estimator thread 0... [ 757.012614][T32418] IPVS: using max 31 ests per chain, 74400 per kthread [ 758.507494][T32521] tipc: Enabling of bearer rejected, failed to enable media [ 758.652770][T32529] netlink: 'syz.2.7028': attribute type 13 has an invalid length. [ 758.670337][T32529] veth0_macvtap: left promiscuous mode [ 758.683378][T32529] macvtap0: entered allmulticast mode [ 758.709161][T32529] macvtap0: refused to change device tx_queue_len [ 758.844669][T32542] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 758.866799][T32542] syzkaller0: entered promiscuous mode [ 758.886539][T32542] syzkaller0: entered allmulticast mode [ 759.762392][T32578] netlink: 'syz.1.7040': attribute type 13 has an invalid length. [ 759.835784][T32578] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 759.876795][T32582] vlan3: entered allmulticast mode [ 759.883814][T32582] bridge3: entered allmulticast mode [ 759.889398][T32590] Bluetooth: MGMT ver 1.23 [ 759.936770][T32589] bridge3: port 1(veth7) entered blocking state [ 759.945216][T32589] bridge3: port 1(veth7) entered disabled state [ 759.952710][T32589] veth7: entered allmulticast mode [ 759.960246][T32589] veth7: entered promiscuous mode [ 760.033201][T32598] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 760.339427][T32621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.347376][T32613] __nla_validate_parse: 17 callbacks suppressed [ 760.347428][T32613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7050'. [ 760.423981][T32627] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7054'. [ 760.513676][T32617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7050'. [ 760.573434][T32632] sctp: [Deprecated]: syz.4.7056 (pid 32632) Use of int in maxseg socket option. [ 760.573434][T32632] Use struct sctp_assoc_value instead [ 760.810316][T32629] udevd[32629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 760.825878][T32629] udevd[32629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 760.842508][T32643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7061'. [ 760.852911][T32643] netlink: 'syz.0.7061': attribute type 5 has an invalid length. [ 760.861237][T32643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7061'. [ 760.877136][T32647] netlink: 'syz.1.7058': attribute type 1 has an invalid length. [ 760.922279][T32647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7058'. [ 761.057824][T32643] syzkaller0: entered promiscuous mode [ 761.064523][T32643] syzkaller0: entered allmulticast mode [ 761.082270][T32661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7061'. [ 761.417130][T32679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7069'. [ 761.823437][T32689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7070'. [ 761.833600][T32689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7070'. [ 762.804023][T32668] bridge2: entered promiscuous mode [ 762.809278][T32668] bridge2: entered allmulticast mode [ 762.974777][T32691] tipc: Enabled bearer , priority 0 [ 763.149974][T32691] syzkaller0: entered promiscuous mode [ 763.173555][T32691] syzkaller0: entered allmulticast mode [ 763.190935][T32691] tipc: Resetting bearer [ 763.239221][T32707] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 763.303969][T32690] tipc: Resetting bearer [ 763.633007][T32722] xt_hashlimit: invalid rate [ 764.942474][T30236] Bluetooth: hci1: command 0x0406 tx timeout [ 765.038392][T32690] tipc: Disabling bearer [ 765.053978][T32713] bridge2: entered promiscuous mode [ 765.059341][T32713] bridge2: entered allmulticast mode [ 765.067762][T32713] team0: Port device bridge2 added [ 765.074696][T32714] bridge0: port 4(team0) entered blocking state [ 765.081073][T32714] bridge0: port 4(team0) entered disabled state [ 765.088012][T32714] team0: entered allmulticast mode [ 765.093617][T32714] team_slave_0: entered allmulticast mode [ 765.103045][T32714] team_slave_1: entered allmulticast mode [ 765.111639][T32714] team0: entered promiscuous mode [ 765.117361][T32714] team_slave_0: entered promiscuous mode [ 765.123480][T32714] team_slave_1: entered promiscuous mode [ 765.130014][T32714] bridge0: port 4(team0) entered blocking state [ 765.136437][T32714] bridge0: port 4(team0) entered forwarding state [ 765.152700][T32720] netlink: 'syz.1.7079': attribute type 21 has an invalid length. [ 765.173964][T32720] netlink: 'syz.1.7079': attribute type 21 has an invalid length. [ 765.285246][T32734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.070530][T32701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.080868][T32730] netlink: 'syz.0.7084': attribute type 23 has an invalid length. [ 766.128660][T32756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.207458][T32763] __nla_validate_parse: 10 callbacks suppressed [ 766.207481][T32763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7091'. [ 766.255171][ T5942] IPVS: starting estimator thread 0... [ 766.352406][ T304] IPVS: using max 30 ests per chain, 72000 per kthread [ 766.367056][ T310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7096'. [ 766.376556][ T310] netlink: 'syz.0.7096': attribute type 7 has an invalid length. [ 766.385286][ T310] netlink: 'syz.0.7096': attribute type 8 has an invalid length. [ 766.393783][ T310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7096'. [ 766.410914][ T312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7096'. [ 766.420933][ T312] netlink: 'syz.0.7096': attribute type 7 has an invalid length. [ 766.435837][ T312] netlink: 'syz.0.7096': attribute type 8 has an invalid length. [ 766.444448][ T312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7096'. [ 766.497191][ T315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7097'. [ 766.641227][ T324] netlink: 'syz.0.7100': attribute type 2 has an invalid length. [ 766.731077][ T328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7101'. [ 766.784178][ T331] tipc: Enabling of bearer rejected, failed to enable media [ 766.838409][ T335] pimreg: entered allmulticast mode [ 766.868447][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7102'. [ 766.881719][ T340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.905169][ T332] pimreg: left allmulticast mode [ 766.919642][ T338] netlink: 'syz.4.7102': attribute type 5 has an invalid length. [ 766.941269][ T338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7102'. [ 767.002776][ T338] geneve3: entered promiscuous mode [ 767.011904][ T338] geneve3: entered allmulticast mode [ 767.024564][T15274] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 767.036822][T15274] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 767.095181][T15274] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 767.134177][T15274] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 767.305079][ T364] netlink: 'syz.1.7110': attribute type 2 has an invalid length. [ 767.403341][ T368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7112'. [ 767.579996][ T379] bridge0: entered promiscuous mode [ 767.605457][ T379] bridge0: entered allmulticast mode [ 768.021809][ T415] SET target dimension over the limit! [ 769.679859][ T499] openvswitch: netlink: Flow key attr not present in new flow. [ 769.947347][ T514] x_tables: duplicate underflow at hook 1 [ 770.795821][ T567] validate_nla: 2 callbacks suppressed [ 770.795852][ T567] netlink: 'syz.3.7173': attribute type 1 has an invalid length. [ 770.880442][ T567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 770.932010][ T571] bond3: (slave geneve2): making interface the new active one [ 770.947733][ T571] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 771.248699][ T592] __nla_validate_parse: 19 callbacks suppressed [ 771.248721][ T592] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7180'. [ 771.279425][ T591] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7180'. [ 771.421561][ T602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7184'. [ 771.521566][ T597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7182'. [ 771.717126][ T623] netlink: 'syz.3.7188': attribute type 12 has an invalid length. [ 771.726825][ T623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7188'. [ 771.745939][ T623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7188'. [ 771.770226][ T625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7189'. [ 771.826966][ T627] syzkaller1: entered promiscuous mode [ 771.837206][ T627] syzkaller1: entered allmulticast mode [ 771.888190][ T634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7192'. [ 771.901391][ T633] delete_channel: no stack [ 772.131440][ T647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7195'. [ 772.193338][ T647] syzkaller0: entered promiscuous mode [ 772.200420][ T647] syzkaller0: entered allmulticast mode [ 772.349189][ T660] netlink: 'syz.4.7199': attribute type 29 has an invalid length. [ 772.376075][ T660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7199'. [ 772.644615][ T682] netlink: 'syz.3.7204': attribute type 1 has an invalid length. [ 772.833180][ T692] ip6gre1: entered promiscuous mode [ 772.847215][ T701] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.857711][ T692] ip6gre1: entered allmulticast mode [ 772.891208][T15291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.905093][T15291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.919002][ T6017] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.042783][ T6017] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.056792][ T706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.082937][ T6017] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.460403][ T734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 774.780126][ T6017] IPVS: starting estimator thread 0... [ 774.837463][ T819] netlink: 'syz.1.7248': attribute type 10 has an invalid length. [ 774.872326][ T814] IPVS: using max 30 ests per chain, 72000 per kthread [ 775.058106][ T836] delete_channel: no stack [ 775.251563][ T832] sit0: mtu less than device minimum [ 775.583373][ T860] bond_slave_0: entered allmulticast mode [ 775.590254][ T860] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 775.795582][ T870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.867705][ T871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.969626][ T876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.095958][ T879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.343547][ T885] syz_tun: entered allmulticast mode [ 776.502827][ T888] __nla_validate_parse: 18 callbacks suppressed [ 776.502852][ T888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7267'. [ 776.555574][ T888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7267'. [ 776.808926][ T899] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7272'. [ 776.850151][ T899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7272'. [ 776.969550][ T907] netlink: 'syz.2.7273': attribute type 3 has an invalid length. [ 776.977991][ T907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7273'. [ 777.182503][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.258822][ T919] ipt_rpfilter: unknown options [ 777.267902][ T919] netlink: 'syz.2.7278': attribute type 5 has an invalid length. [ 777.496938][ T937] x_tables: duplicate underflow at hook 2 [ 777.526417][ T940] netlink: 'syz.1.7281': attribute type 10 has an invalid length. [ 777.939824][ T967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 777.959993][ T969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7289'. [ 778.050093][ T975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7291'. [ 778.078082][ T975] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7291'. [ 778.158824][ T979] xfrm0: mtu less than device minimum [ 778.233015][ T984] netlink: 'syz.0.7294': attribute type 12 has an invalid length. [ 778.658517][ T999] syzkaller0: entered promiscuous mode [ 778.664214][ T999] syzkaller0: entered allmulticast mode [ 779.720486][ T1026] IPv6: NLM_F_CREATE should be specified when creating new route [ 781.280362][ T997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.485600][ T1039] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 781.696225][ T1083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7315'. [ 781.718676][ T1082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7315'. [ 782.168958][ T1108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7320'. [ 785.422481][T30236] Bluetooth: hci5: command 0x0406 tx timeout [ 785.902912][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 795.662520][T30236] Bluetooth: hci3: command 0x0406 tx timeout [ 798.928733][ T494] bond8 (unregistering): (slave gretap5): Releasing active interface [ 798.952026][ T494] dvmrp1 (unregistering): left allmulticast mode [ 798.971116][ T494] bond0 (unregistering): (slave geneve3): Releasing active interface [ 799.207633][ T494] .` (unregistering): Released all slaves [ 799.218428][ T494] bond1 (unregistering): Released all slaves [ 799.234303][ T494] bond0 (unregistering): Released all slaves [ 799.252723][ T494] bond2 (unregistering): Released all slaves [ 799.287204][ T494] bond3 (unregistering): Released all slaves [ 799.315642][ T494] bond4 (unregistering): Released all slaves [ 799.336377][ T494] bond5 (unregistering): (slave veth7): Releasing active interface [ 799.356607][ T494] bond5 (unregistering): Released all slaves [ 799.371896][ T494] bond6 (unregistering): Released all slaves [ 799.387017][ T494] bond7 (unregistering): Released all slaves [ 799.401474][ T494] bond8 (unregistering): Released all slaves [ 799.422623][ T494] bond9 (unregistering): Released all slaves [ 799.444912][ T494] bond10 (unregistering): Released all slaves [ 799.464310][ T42] infiniband syz1: ib_query_port failed (-19) [ 799.600559][ T494] tipc: Disabling bearer [ 799.609927][ T494] tipc: Left network mode [ 799.890931][ T494] hsr_slave_0: left promiscuous mode [ 799.897422][ T494] hsr_slave_1: left promiscuous mode [ 799.956571][ T494] pimreg3 (unregistering): left allmulticast mode [ 802.504363][ T8097] lec:lec_start_xmit: lec0:No lecd attached [ 802.542663][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 803.921710][ T494] erspan0 (unregistering): left promiscuous mode [ 803.955496][ T494] gretap0 (unregistering): left promiscuous mode [ 803.994067][ T494] bond13 (unregistering): (slave geneve4): Releasing active interface [ 804.010178][ T494] bond1 (unregistering): (slave geneve2): Releasing active interface [ 804.206660][ T494] bond7 (unregistering): (slave bridge3): Releasing backup interface [ 804.214897][ T494] bridge3 (unregistering): left promiscuous mode [ 804.247040][ T494] .` (unregistering): left promiscuous mode [ 804.258849][ T494] .` (unregistering): Released all slaves [ 804.269446][ T494] bond1 (unregistering): Released all slaves [ 804.286963][ T494] bond2 (unregistering): Released all slaves [ 804.308980][ T494] bond3 (unregistering): Released all slaves [ 804.323938][ T494] bond4 (unregistering): Released all slaves [ 804.339006][ T494] bond5 (unregistering): Released all slaves [ 804.361405][ T494] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 804.372080][ T494] bond6 (unregistering): Released all slaves [ 804.387266][ T494] bond7 (unregistering): Released all slaves [ 804.406403][ T494] bond8 (unregistering): Released all slaves [ 804.426206][ T494] bond9 (unregistering): Released all slaves [ 804.441765][ T494] bond0 (unregistering): Released all slaves [ 804.456590][ T494] bond10 (unregistering): Released all slaves [ 804.479300][ T494] bond11 (unregistering): Released all slaves [ 804.493980][ T494] bond12 (unregistering): Released all slaves [ 804.509482][ T494] bond13 (unregistering): Released all slaves [ 804.678225][ T494] : left promiscuous mode [ 804.743198][ T494] 9: left promiscuous mode [ 804.811453][ T494] tipc: Left network mode [ 804.829249][ T494] IPVS: stopping master sync thread 21499 ... [ 804.840502][ T494] IPVS: stopping backup sync thread 20900 ... [ 805.243113][ T494] veth1_macvtap: left promiscuous mode [ 805.248809][ T494] veth1_vlan: left promiscuous mode [ 805.254359][ T494] veth0_vlan: left promiscuous mode [ 805.327852][ T494] pim6reg527 (unregistering): left allmulticast mode [ 805.819515][ T494] IPVS: stop unused estimator thread 0... [ 808.142778][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 808.150858][ C0] lec:lec_tx_timeout: lec0 [ 808.949781][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 814.142354][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 814.150539][ C0] lec:lec_tx_timeout: lec0 [ 821.508001][ T1124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7322'. [ 821.523923][ T1124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7322'. [ 821.716800][ T1124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7322'. [ 821.719883][ T1139] syzkaller0: entered promiscuous mode [ 821.731544][ T1139] syzkaller0: entered allmulticast mode [ 821.753597][ T1124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7322'. [ 821.948497][ T1161] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7332'. [ 822.025277][ T1156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.054673][ T1155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 822.069559][ T1171] openvswitch: netlink: IP tunnel dst address not specified [ 822.086469][ T1173] nbd: must specify at least one socket [ 822.106553][ T1175] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7334'. [ 822.116499][ T1173] block nbd1: NBD_DISCONNECT [ 822.121159][ T1173] block nbd1: Send disconnect failed -32 [ 822.125775][ T1169] tipc: Failed to remove unknown binding: 66,0,0/0:148276353/148276354 [ 822.129864][ T1173] block nbd1: shutting down sockets [ 822.160658][ T1164] bond0: (slave ip6tnl2): refused to change device type [ 822.164063][ T1169] tipc: Failed to remove unknown binding: 66,0,0/0:148276353/148276354 [ 822.379065][ T1188] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7333'. [ 822.437186][ T5830] block nbd0: Receive control failed (result -32) [ 822.674812][ T1058] tipc: Resetting bearer [ 822.785192][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7341'. [ 822.822650][ T1204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7341'. [ 822.985711][ T1058] tipc: Disabling bearer [ 823.124869][ T1215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7345'. [ 823.221538][ T1058] bond3 (unregistering): (slave geneve3): Releasing active interface [ 823.381550][ T1163] udevd[1163]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 823.549096][ T1058] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 823.557792][ T1058] bridge5 (unregistering): left promiscuous mode [ 823.733981][ T1058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.744395][ T1058] bond_slave_0: left allmulticast mode [ 823.753708][ T1058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.765694][ T1058] bond_slave_1: left allmulticast mode [ 823.772733][ T1058] bond0 (unregistering): Released all slaves [ 823.788041][ T1058] bond1 (unregistering): Released all slaves [ 823.811462][ T1058] bond2 (unregistering): Released all slaves [ 823.828235][ T1058] bond3 (unregistering): Released all slaves [ 823.848187][ T1058] bond4 (unregistering): Released all slaves [ 823.874493][ T1058] bond5 (unregistering): Released all slaves [ 824.111959][ T1058] tipc: Disabling bearer [ 824.149387][ T1058] tipc: Left network mode [ 824.489704][ T1248] syzkaller0: entered promiscuous mode [ 824.535202][ T1248] syzkaller0: entered allmulticast mode [ 826.693823][ T1255] syzkaller0: entered promiscuous mode [ 826.699664][ T1255] syzkaller0: entered allmulticast mode [ 828.380744][ T1312] batadv0: entered promiscuous mode [ 828.390849][ T1312] batadv0: left promiscuous mode [ 828.724809][ T1340] unsupported nlmsg_type 40 [ 828.787143][ T1350] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7368'. [ 828.807225][ T1347] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7371'. [ 829.084926][ T1370] IPv6: NLM_F_CREATE should be specified when creating new route [ 829.191855][ T1381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7379'. [ 829.355182][ T1378] bridge4: entered promiscuous mode [ 829.360474][ T1378] bridge4: entered allmulticast mode [ 829.461940][ T1381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.629586][ T1403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7382'. [ 829.948511][ T1058] hsr_slave_0: left promiscuous mode [ 829.967622][ T1058] hsr_slave_1: left promiscuous mode [ 829.984114][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.996586][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.054975][ T1058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.071028][ T1058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.153682][ T1058] veth1_macvtap: left promiscuous mode [ 830.159369][ T1058] veth0_macvtap: left promiscuous mode [ 830.169585][ T1058] veth1_vlan: left promiscuous mode [ 830.181971][ T1058] veth0_vlan: left promiscuous mode [ 830.233272][ T1430] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7388'. [ 830.260037][ T1434] netlink: 'syz.2.7390': attribute type 10 has an invalid length. [ 830.285662][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7387'. [ 830.359693][ T1058] team0 (unregistering): Port device batadv2 removed [ 830.586352][ T1058] team0 (unregistering): Port device team_slave_1 removed [ 830.605091][ T1058] team0 (unregistering): Port device team_slave_0 removed [ 830.758416][ T1421] netlink: 'syz.3.7388': attribute type 29 has an invalid length. [ 830.792260][ T1434] bond0: (slave wlan1): Opening slave failed [ 830.801587][ T1425] netlink: 'syz.3.7388': attribute type 29 has an invalid length. [ 830.944733][ T1446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7393'. [ 831.040880][ T1449] netlink: 'syz.4.7394': attribute type 1 has an invalid length. [ 831.354723][ T1475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7400'. [ 831.365626][ T1475] netlink: 'syz.1.7400': attribute type 7 has an invalid length. [ 831.374079][ T1475] netlink: 'syz.1.7400': attribute type 8 has an invalid length. [ 831.384991][ T1475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7400'. [ 831.504942][T30236] Bluetooth: hci2: command 0x0406 tx timeout [ 831.762088][ T1459] netlink: 'syz.4.7394': attribute type 5 has an invalid length. [ 832.037932][ T1492] veth1_macvtap: left promiscuous mode [ 832.109373][ T1058] IPVS: stop unused estimator thread 0... [ 832.136728][ T1500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7404'. [ 832.173618][ T1500] veth0_macvtap: left promiscuous mode [ 832.247314][ T1471] mpoa:mpoad_close: () going down [ 832.668080][ T1525] IPv6: NLM_F_CREATE should be specified when creating new route [ 832.856114][ T1534] netlink: 'syz.2.7418': attribute type 21 has an invalid length. [ 833.008589][ T1539] netlink: 'syz.2.7419': attribute type 6 has an invalid length. [ 833.228863][ T1548] tipc: Enabling of bearer rejected, failed to enable media [ 833.262456][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 833.630702][ T1583] netlink: 'syz.3.7432': attribute type 5 has an invalid length. [ 834.308382][ T1621] __nla_validate_parse: 6 callbacks suppressed [ 834.308425][ T1621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7442'. [ 834.324430][ T1621] openvswitch: netlink: Flow key attr not present in new flow. [ 834.478310][ T1629] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7443'. [ 834.702140][ T1641] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7446'. [ 834.753760][ T1641] netlink: 29988 bytes leftover after parsing attributes in process `syz.3.7446'. [ 834.778681][ T1645] syzkaller0: entered promiscuous mode [ 834.785552][ T1645] syzkaller0: entered allmulticast mode [ 834.954610][ T1647] netlink: zone id is out of range [ 834.959925][ T1647] netlink: zone id is out of range [ 834.968203][ T1647] netlink: zone id is out of range [ 834.988796][ T1647] netlink: zone id is out of range [ 834.995702][ T1647] netlink: zone id is out of range [ 835.004430][ T1647] netlink: del zone limit has 4 unknown bytes [ 835.231204][ T1664] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7455'. [ 835.276297][ T1664] 0: renamed from hsr_slave_1 (while UP) [ 835.294422][ T1664] 0: entered allmulticast mode [ 835.300035][ T1664] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 866.549304][ T8097] lec:lec_start_xmit: lec0:No lecd attached [ 872.142334][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 872.150500][ C0] lec:lec_tx_timeout: lec0 [ 872.155390][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 874.461494][ T1702] bridge5: entered promiscuous mode [ 874.483088][ T1702] bridge5: entered allmulticast mode [ 874.568040][ T1707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7465'. [ 874.634802][ T1711] openvswitch: netlink: Missing key (keys=40, expected=100) [ 874.645996][ T1711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7466'. [ 874.673469][ T1713] xt_hashlimit: size too large, truncated to 1048576 [ 874.883946][ T1698] ip6_vti0 speed is unknown, defaulting to 1000 [ 875.432680][ T1740] netlink: 'syz.3.7472': attribute type 11 has an invalid length. [ 875.450821][ T1740] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7472'. [ 875.644558][ T1754] IPVS: Unknown mcast interface: veth1_vlan [ 875.671527][ T1753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7476'. [ 875.718835][ T1753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7476'. [ 875.797190][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7479'. [ 875.867045][ T1756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.903308][ T1765] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7479'. [ 875.942657][ T1765] bridge_slave_1: default FDB implementation only supports local addresses [ 876.090163][ T1784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7482'. [ 876.192250][ T1789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7482'. [ 876.243527][ T1793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7484'. [ 876.259212][ T1793] gtp0: entered promiscuous mode [ 876.264767][ T1793] gtp0: entered allmulticast mode [ 876.844480][ T1786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.031927][ T1826] openvswitch: netlink: Message has 592 unknown bytes. [ 877.042676][ T1826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.182640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 877.193133][ C0] lec:lec_tx_timeout: lec0 [ 877.249220][ T1838] macvlan0: entered promiscuous mode [ 878.408818][ T1927] validate_nla: 1 callbacks suppressed [ 878.408844][ T1927] netlink: 'syz.1.7524': attribute type 10 has an invalid length. [ 878.445576][ T1927] macvtap0: left allmulticast mode [ 878.651672][ T1936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.916201][ T1946] ip6_vti0 speed is unknown, defaulting to 1000 [ 879.122399][ T1922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 879.128733][ T1922] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 879.171252][ T1922] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 879.184903][ T1922] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 879.212576][ T1922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 879.218563][ T1922] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 879.268837][ T1922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 879.278709][ T1922] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 879.580884][ T1956] __nla_validate_parse: 24 callbacks suppressed [ 879.580986][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 879.587875][ T1967] netlink: 'syz.2.7538': attribute type 83 has an invalid length. [ 879.641190][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 879.739338][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 879.780658][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 879.948242][ T1980] netlink: 'syz.3.7542': attribute type 1 has an invalid length. [ 880.001068][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 880.012590][ T1980] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 880.129127][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7535'. [ 880.187081][ T1992] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 880.738202][ T2025] tipc: Started in network mode [ 880.743707][ T2025] tipc: Node identity ae5642d459cc, cluster identity 4711 [ 880.751800][ T2025] tipc: Enabled bearer , priority 0 [ 880.765454][ T2029] ipvlan3: entered allmulticast mode [ 880.770876][ T2029] batadv_slave_1: entered allmulticast mode [ 880.779184][ T2029] batman_adv: batadv0: Adding interface: ipvlan3 [ 880.785739][ T2029] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.816887][ T2029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.828355][ T2029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.828839][ T2034] netlink: 'syz.1.7558': attribute type 12 has an invalid length. [ 880.839535][ T2029] batman_adv: batadv0: Interface activated: ipvlan3 [ 880.855130][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7558'. [ 880.970211][ T2025] syzkaller0: entered promiscuous mode [ 880.976089][ T2025] syzkaller0: entered allmulticast mode [ 880.985735][ T2025] tipc: Resetting bearer [ 881.007339][ T2033] IPv6: sit1: Disabled Multicast RS [ 881.017533][ T2033] sit1: entered allmulticast mode [ 881.023397][ T2041] netlink: 'syz.0.7559': attribute type 1 has an invalid length. [ 881.069241][ T2034] netlink: 'syz.1.7558': attribute type 12 has an invalid length. [ 881.078370][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7558'. [ 881.193825][T15275] tipc: Resetting bearer [ 881.216757][ T2024] tipc: Resetting bearer [ 882.743009][ T2024] tipc: Disabling bearer [ 882.762767][ T2048] bond4: (slave gretap2): making interface the new active one [ 882.771171][ T2048] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 882.785475][ T6714] tipc: Node number set to 4154082004 [ 882.959747][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7567'. [ 882.977289][ T2065] netlink: 'syz.2.7567': attribute type 7 has an invalid length. [ 883.049283][ T2061] bond4: entered promiscuous mode [ 883.065002][ T2061] bond4: entered allmulticast mode [ 883.071066][ T2061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 883.105420][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7567'. [ 883.123040][ T8192] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.132013][ T8192] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.163994][ T2065] netlink: 'syz.2.7567': attribute type 7 has an invalid length. [ 883.172059][ T8192] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.199645][ T8192] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 883.365012][ T2077] xt_hashlimit: size too large, truncated to 1048576 [ 883.573676][ T2097] netlink: 'syz.3.7576': attribute type 1 has an invalid length. [ 883.860433][ T2103] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 883.897605][ T2111] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 884.328373][ T2134] IPVS: Error connecting to the multicast addr [ 884.790446][ T2149] __nla_validate_parse: 5 callbacks suppressed [ 884.790469][ T2149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7590'. [ 885.074946][ T2154] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7590'. [ 885.085326][ T2154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7590'. [ 885.448111][ T2161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7592'. [ 885.518538][ T2172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7595'. [ 885.575058][ T2176] : renamed from team_slave_1 [ 885.799516][ T2192] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 885.811535][ T2191] geneve2: entered promiscuous mode [ 885.819619][ T2191] geneve2: entered allmulticast mode [ 885.849825][ T8192] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 885.882364][ T8192] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 885.907338][ T8192] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 885.938236][ T8192] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 886.020236][ T2199] syzkaller0: entered promiscuous mode [ 886.026233][ T2199] syzkaller0: entered allmulticast mode [ 886.046918][ T2205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7605'. [ 886.254459][ T2213] IPVS: ip_vs_add_dest(): server weight less than zero [ 886.423486][ T2223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7610'. [ 886.503865][ T2225] netlink: 'syz.4.7611': attribute type 3 has an invalid length. [ 886.673176][ T2234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7615'. [ 886.697888][ T2234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7615'. [ 886.708825][ T2234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7615'. [ 886.726390][ T2237] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 886.753940][ T2242] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 886.837871][ T2241] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.494309][ T2282] syzkaller1: entered promiscuous mode [ 887.499890][ T2282] syzkaller1: entered allmulticast mode [ 887.971835][ T2317] pim6reg: entered allmulticast mode [ 888.170168][ T2324] tap0: tun_chr_ioctl cmd 1074025678 [ 888.177213][ T2324] tap0: group set to 0 [ 888.724998][ T2366] x_tables: duplicate underflow at hook 1 [ 889.257725][ T2402] IPVS: Scheduler module ip_vs_sip not found [ 889.496586][ T2426] netlink: 'syz.1.7662': attribute type 29 has an invalid length. [ 889.525133][ T2426] netlink: 'syz.1.7662': attribute type 29 has an invalid length. [ 889.697166][ T2440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.764569][ T2447] netlink: 'syz.1.7667': attribute type 11 has an invalid length. [ 889.775609][ T2435] ip6_vti0 speed is unknown, defaulting to 1000 [ 889.813052][ T2447] netlink: 'syz.1.7667': attribute type 11 has an invalid length. [ 889.830749][ T2447] __nla_validate_parse: 6 callbacks suppressed [ 889.830771][ T2447] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7667'. [ 889.921430][ T2454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7669'. [ 890.186323][ T2468] netlink: 'syz.4.7673': attribute type 10 has an invalid length. [ 890.226429][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.245873][ T2468] bridge_slave_1: left allmulticast mode [ 890.251773][ T2468] bridge_slave_1: left promiscuous mode [ 890.264383][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.339465][ T2468] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 890.426040][ T2480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 890.445832][ T2482] netlink: 'syz.2.7675': attribute type 13 has an invalid length. [ 890.473537][ T2482] macvtap0: refused to change device tx_queue_len [ 890.483742][ T2482] xt_ecn: cannot match TCP bits for non-tcp packets [ 890.868746][ T2505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7680'. [ 890.944890][ T2505] "mq-deadline" elevator initialization, failed -12, falling back to "none" [ 891.013622][ T2505] ------------[ cut here ]------------ [ 891.019253][ T2505] !rwb [ 891.019278][ T2505] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.2.7680/2505 [ 891.033315][ T2505] Modules linked in: [ 891.037463][ T2505] CPU: 0 UID: 0 PID: 2505 Comm: syz.2.7680 Not tainted syzkaller #0 PREEMPT(full) [ 891.046893][ T2505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.057046][ T2505] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 891.063450][ T2505] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 2d 7d 25 fd eb 18 e8 26 7d 25 fd eb 0d e8 1f 7d 25 fd 4c 89 ff e8 47 a7 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 891.083508][ T2505] RSP: 0018:ffffc9000c92ee30 EFLAGS: 00010282 [ 891.089642][ T2505] RAX: 8d377b8da71c6200 RBX: 1ffff1100bbd9c04 RCX: 0000000000000046 [ 891.097770][ T2505] RDX: 0000000000000006 RSI: ffffffff8def3498 RDI: ffffffff8c27b280 [ 891.106357][ T2505] RBP: dffffc0000000000 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 891.114596][ T2505] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffff88805dece020 [ 891.122885][ T2505] R13: 0000000000000000 R14: ffff888021a9d000 R15: ffff88805dece000 [ 891.130915][ T2505] FS: 00007f56485f66c0(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 891.139946][ T2505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 891.146673][ T2505] CR2: 00007f8de6dc87d0 CR3: 000000004aa9e000 CR4: 00000000003526f0 [ 891.154791][ T2505] Call Trace: [ 891.158108][ T2505] [ 891.161083][ T2505] blk_register_queue+0x382/0x430 [ 891.166357][ T2505] __add_disk+0x677/0xd50 [ 891.170837][ T2505] ? down_read+0x272/0x2e0 [ 891.175420][ T2505] add_disk_fwnode+0xfb/0x480 [ 891.180164][ T2505] nbd_dev_add+0x72c/0xb50 [ 891.184982][ T2505] ? __pfx_nbd_dev_add+0x10/0x10 [ 891.190008][ T2505] ? bpf_lsm_capable+0x9/0x20 [ 891.194818][ T2505] ? security_capable+0x7e/0x2c0 [ 891.199918][ T2505] ? radix_tree_lookup+0x25c/0x290 [ 891.205436][ T2505] nbd_genl_connect+0x962/0x1cf0 [ 891.210648][ T2505] ? __pfx_nbd_genl_connect+0x10/0x10 [ 891.216222][ T2505] ? rcu_is_watching+0x15/0xb0 [ 891.221069][ T2505] ? trace_kmalloc+0x2a/0x110 [ 891.225935][ T2505] ? __nla_parse+0x40/0x60 [ 891.230554][ T2505] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 891.237115][ T2505] genl_family_rcv_msg_doit+0x22a/0x330 [ 891.242846][ T2505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 891.248992][ T2505] ? __lock_acquire+0x6b5/0x2cf0 [ 891.254335][ T2505] genl_rcv_msg+0x61c/0x7a0 [ 891.258909][ T2505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.264122][ T2505] ? __pfx_nbd_genl_connect+0x10/0x10 [ 891.269585][ T2505] ? __lock_acquire+0x6b5/0x2cf0 [ 891.274655][ T2505] netlink_rcv_skb+0x232/0x4b0 [ 891.279558][ T2505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.284707][ T2505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 891.290069][ T2505] ? down_read+0x272/0x2e0 [ 891.294664][ T2505] ? genl_rcv+0xd/0x40 [ 891.298785][ T2505] genl_rcv+0x28/0x40 [ 891.302908][ T2505] netlink_unicast+0x80f/0x9b0 [ 891.307740][ T2505] ? __pfx_netlink_unicast+0x10/0x10 [ 891.313246][ T2505] ? netlink_sendmsg+0x650/0xb40 [ 891.318334][ T2505] ? skb_put+0x11b/0x210 [ 891.322848][ T2505] netlink_sendmsg+0x813/0xb40 [ 891.327702][ T2505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.333127][ T2505] ? aa_sock_msg_perm+0xf1/0x1b0 [ 891.338145][ T2505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 891.344228][ T2505] ____sys_sendmsg+0x972/0x9f0 [ 891.349077][ T2505] ? futex_unqueue+0x211/0x240 [ 891.353985][ T2505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.359347][ T2505] ? import_iovec+0x73/0xa0 [ 891.364008][ T2505] ___sys_sendmsg+0x2a5/0x360 [ 891.368747][ T2505] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.374073][ T2505] ? futex_wait+0x29a/0x380 [ 891.378671][ T2505] ? __fget_files+0x2a/0x420 [ 891.383498][ T2505] ? __fget_files+0x3a0/0x420 [ 891.388265][ T2505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 891.393381][ T2505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 891.399036][ T2505] ? rcu_is_watching+0x15/0xb0 [ 891.404025][ T2505] do_syscall_64+0x14d/0xf80 [ 891.408680][ T2505] ? trace_irq_disable+0x3b/0x150 [ 891.413849][ T2505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.420031][ T2505] ? clear_bhb_loop+0x40/0x90 [ 891.425025][ T2505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.430989][ T2505] RIP: 0033:0x7f564a39c799 [ 891.435516][ T2505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.455313][ T2505] RSP: 002b:00007f56485f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.463895][ T2505] RAX: ffffffffffffffda RBX: 00007f564a616180 RCX: 00007f564a39c799 [ 891.471922][ T2505] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 891.480058][ T2505] RBP: 00007f564a432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 891.488204][ T2505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.496416][ T2505] R13: 00007f564a616218 R14: 00007f564a616180 R15: 00007ffee7090738 [ 891.504592][ T2505] [ 891.507691][ T2505] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 891.515018][ T2505] CPU: 0 UID: 0 PID: 2505 Comm: syz.2.7680 Not tainted syzkaller #0 PREEMPT(full) [ 891.524337][ T2505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.534514][ T2505] Call Trace: [ 891.537848][ T2505] [ 891.540817][ T2505] vpanic+0x56c/0xa60 [ 891.544886][ T2505] ? __pfx__printk+0x10/0x10 [ 891.549515][ T2505] ? __pfx_vpanic+0x10/0x10 [ 891.554053][ T2505] ? is_bpf_text_address+0x292/0x2b0 [ 891.559372][ T2505] ? is_bpf_text_address+0x26/0x2b0 [ 891.564610][ T2505] panic+0xc5/0xd0 [ 891.568556][ T2505] ? __pfx_panic+0x10/0x10 [ 891.573030][ T2505] __warn+0x315/0x4f0 [ 891.577051][ T2505] ? wbt_init_enable_default+0x18a/0x220 [ 891.583261][ T2505] ? wbt_init_enable_default+0x18a/0x220 [ 891.588949][ T2505] __report_bug+0x29a/0x540 [ 891.593756][ T2505] ? netlink_rcv_skb+0x232/0x4b0 [ 891.598724][ T2505] ? genl_rcv+0x28/0x40 [ 891.602903][ T2505] ? netlink_unicast+0x80f/0x9b0 [ 891.607904][ T2505] ? wbt_init_enable_default+0x18a/0x220 [ 891.613600][ T2505] ? __pfx___report_bug+0x10/0x10 [ 891.618693][ T2505] ? wbt_init_enable_default+0x18a/0x220 [ 891.624551][ T2505] report_bug+0x16a/0x220 [ 891.628943][ T2505] ? wbt_init_enable_default+0x18a/0x220 [ 891.634616][ T2505] ? wbt_init_enable_default+0x18c/0x220 [ 891.640299][ T2505] handle_bug+0x9c/0x200 [ 891.644639][ T2505] exc_invalid_op+0x1a/0x50 [ 891.649303][ T2505] asm_exc_invalid_op+0x1a/0x20 [ 891.654215][ T2505] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 891.660517][ T2505] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 2d 7d 25 fd eb 18 e8 26 7d 25 fd eb 0d e8 1f 7d 25 fd 4c 89 ff e8 47 a7 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 891.680432][ T2505] RSP: 0018:ffffc9000c92ee30 EFLAGS: 00010282 [ 891.686545][ T2505] RAX: 8d377b8da71c6200 RBX: 1ffff1100bbd9c04 RCX: 0000000000000046 [ 891.694559][ T2505] RDX: 0000000000000006 RSI: ffffffff8def3498 RDI: ffffffff8c27b280 [ 891.702573][ T2505] RBP: dffffc0000000000 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 891.710581][ T2505] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffff88805dece020 [ 891.718593][ T2505] R13: 0000000000000000 R14: ffff888021a9d000 R15: ffff88805dece000 [ 891.726737][ T2505] blk_register_queue+0x382/0x430 [ 891.731813][ T2505] __add_disk+0x677/0xd50 [ 891.736208][ T2505] ? down_read+0x272/0x2e0 [ 891.740688][ T2505] add_disk_fwnode+0xfb/0x480 [ 891.745440][ T2505] nbd_dev_add+0x72c/0xb50 [ 891.749926][ T2505] ? __pfx_nbd_dev_add+0x10/0x10 [ 891.754947][ T2505] ? bpf_lsm_capable+0x9/0x20 [ 891.759784][ T2505] ? security_capable+0x7e/0x2c0 [ 891.764761][ T2505] ? radix_tree_lookup+0x25c/0x290 [ 891.769933][ T2505] nbd_genl_connect+0x962/0x1cf0 [ 891.774931][ T2505] ? __pfx_nbd_genl_connect+0x10/0x10 [ 891.780440][ T2505] ? rcu_is_watching+0x15/0xb0 [ 891.785258][ T2505] ? trace_kmalloc+0x2a/0x110 [ 891.790350][ T2505] ? __nla_parse+0x40/0x60 [ 891.794821][ T2505] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 891.801208][ T2505] genl_family_rcv_msg_doit+0x22a/0x330 [ 891.806814][ T2505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 891.813195][ T2505] ? __lock_acquire+0x6b5/0x2cf0 [ 891.818389][ T2505] genl_rcv_msg+0x61c/0x7a0 [ 891.822950][ T2505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.828031][ T2505] ? __pfx_nbd_genl_connect+0x10/0x10 [ 891.833508][ T2505] ? __lock_acquire+0x6b5/0x2cf0 [ 891.838544][ T2505] netlink_rcv_skb+0x232/0x4b0 [ 891.843460][ T2505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 891.848699][ T2505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 891.854043][ T2505] ? down_read+0x272/0x2e0 [ 891.858506][ T2505] ? genl_rcv+0xd/0x40 [ 891.862687][ T2505] genl_rcv+0x28/0x40 [ 891.866726][ T2505] netlink_unicast+0x80f/0x9b0 [ 891.871533][ T2505] ? __pfx_netlink_unicast+0x10/0x10 [ 891.877018][ T2505] ? netlink_sendmsg+0x650/0xb40 [ 891.881989][ T2505] ? skb_put+0x11b/0x210 [ 891.886269][ T2505] netlink_sendmsg+0x813/0xb40 [ 891.891083][ T2505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.896414][ T2505] ? aa_sock_msg_perm+0xf1/0x1b0 [ 891.901424][ T2505] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 891.906756][ T2505] ____sys_sendmsg+0x972/0x9f0 [ 891.911577][ T2505] ? futex_unqueue+0x211/0x240 [ 891.916405][ T2505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.921750][ T2505] ? import_iovec+0x73/0xa0 [ 891.926310][ T2505] ___sys_sendmsg+0x2a5/0x360 [ 891.931037][ T2505] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.936308][ T2505] ? futex_wait+0x29a/0x380 [ 891.940898][ T2505] ? __fget_files+0x2a/0x420 [ 891.945532][ T2505] ? __fget_files+0x3a0/0x420 [ 891.950269][ T2505] __x64_sys_sendmsg+0x1bd/0x2a0 [ 891.955235][ T2505] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 891.960818][ T2505] ? rcu_is_watching+0x15/0xb0 [ 891.965643][ T2505] do_syscall_64+0x14d/0xf80 [ 891.970295][ T2505] ? trace_irq_disable+0x3b/0x150 [ 891.975367][ T2505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.981526][ T2505] ? clear_bhb_loop+0x40/0x90 [ 891.986245][ T2505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.992426][ T2505] RIP: 0033:0x7f564a39c799 [ 891.997161][ T2505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.017072][ T2505] RSP: 002b:00007f56485f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.025622][ T2505] RAX: ffffffffffffffda RBX: 00007f564a616180 RCX: 00007f564a39c799 [ 892.033632][ T2505] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 892.041630][ T2505] RBP: 00007f564a432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 892.049646][ T2505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.057659][ T2505] R13: 00007f564a616218 R14: 00007f564a616180 R15: 00007ffee7090738 [ 892.065871][ T2505] [ 892.069716][ T2505] Kernel Offset: disabled [ 892.074136][ T2505] Rebooting in 86400 seconds..