last executing test programs: 3.221151977s ago: executing program 4 (id=5167): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000280)=""/21, 0x15}], 0x3, &(0x7f0000000300)=""/175, 0xaf}, 0x0) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) (rerun: 64) 2.36490413s ago: executing program 0 (id=5174): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2040000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'vlan1\x00', @random="017335fffff8"}) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/179, 0xb3, 0x40000000, &(0x7f00000002c0)=@tipc, 0x80) 2.196420171s ago: executing program 4 (id=5176): r0 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x6, &(0x7f00000003c0)=""/165, 0xa5}, 0x1000}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000640)=""/184, 0xb8}], 0x3, &(0x7f0000000740)=""/49, 0x31}, 0xab1}, {{&(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/211, 0xd3}, {&(0x7f0000000900)=""/32, 0x20}, {&(0x7f0000000940)=""/69, 0x45}], 0x3, &(0x7f0000000a00)=""/144, 0x90}, 0x9}], 0x3, 0x2041, &(0x7f0000000b80)) (async) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000e00)={&(0x7f0000000bc0)=@phonet={0x23, 0x77, 0xe, 0x60}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)="de146a96a01a1b69264d0123b086061ea3595abdb1645c0e36fee988aad0ac2129b5fee32b4f7a5417e7979cc2633daa70", 0x31}, {&(0x7f0000000cc0)="97ae2b5620d27ab92a86910bf7d6a5442c60eb18c6f83a1d2f803f3d331e1f77709c924228c88c8e4a2298035c388141643d57844b414624d3056e72506251a10d9fb2b5685846511b5c83649eec4088cd9141a6465babf19d5a1f70bcc74782fb11aabd88cbd4f25c9fc2610e08d76016df895f7861ea428535418c811e70bfd0b23e81090b67ecf574c204289d45f033883612db0f92103645ca5b331a9495e12fd672b35e9c98bb2ca32f7823111e596889e81772c7ad6cdd179b8c30fa5fd5d2fb427207b6b4754ed9bb4ff9d04d89f2", 0xd2}], 0x3}, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xc0, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x40, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWFLOWTABLE={0xb8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x240}, 0x1, 0x0, 0x0, 0x90c0}, 0x4010) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000001140)={0x1, 0x0, 0x4, 0x800, @vifc_lcl_addr=@rand_addr=0x64010102, @multicast1}, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001200)={0x0, @initdev, @empty}, &(0x7f0000001240)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000013c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xe0, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001600)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001640)={"a51566fcd7dc34b7262e3f6ebac77519", r6, r7, {0x3, 0xfffffff9}, {0x4214, 0x5}, 0x2, [0x7, 0x3, 0x1, 0xe5, 0x9, 0x1, 0x640, 0x3, 0x80000001, 0x1, 0x7, 0x861, 0xfffffffffffffffa, 0x200]}) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r8, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001740)=""/167, 0xa7}], 0x1, &(0x7f0000001840)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002840)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000028c0)=""/234, 0xea}, {&(0x7f00000029c0)=""/54, 0x36}, {&(0x7f0000002a00)=""/52, 0x34}, {&(0x7f0000002a40)=""/245, 0xf5}, {&(0x7f0000002b40)=""/190, 0xbe}], 0x5, &(0x7f0000002c80)=""/218, 0xda}, 0x4}, {{&(0x7f0000002d80)=@nl=@proc, 0x80, &(0x7f0000003080)=[{&(0x7f0000002e00)=""/192, 0xc0}, {&(0x7f0000002ec0)=""/59, 0x3b}, {&(0x7f0000002f00)=""/148, 0x94}, {&(0x7f0000002fc0)=""/150, 0x96}], 0x4}, 0x9}, {{&(0x7f00000030c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003140)=""/145, 0x91}, {&(0x7f0000003200)=""/221, 0xdd}], 0x2, &(0x7f0000003340)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000004340)=""/64, 0x40}, {&(0x7f0000004380)=""/32, 0x20}, {&(0x7f00000043c0)=""/242, 0xf2}, {&(0x7f00000044c0)=""/176, 0xb0}, {&(0x7f0000004580)=""/11, 0xb}, {&(0x7f00000045c0)=""/29, 0x1d}, {&(0x7f0000004600)=""/224, 0xe0}, {&(0x7f0000004700)=""/251, 0xfb}, {&(0x7f0000004800)=""/15, 0xf}], 0x9}, 0x3}, {{&(0x7f0000004900)=@nfc_llcp, 0x80, &(0x7f0000007b00)=[{&(0x7f0000004980)=""/28, 0x1c}, {&(0x7f00000049c0)=""/4096, 0x1000}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/106, 0x6a}, {&(0x7f0000006a40)=""/4096, 0x1000}, {&(0x7f0000007a40)=""/56, 0x38}, {&(0x7f0000007a80)=""/91, 0x5b}], 0x7, &(0x7f0000007b80)=""/250, 0xfa}, 0x2}], 0x6, 0x10000, &(0x7f0000007e00)) ioctl$OCFS2_IOC_GROUP_EXTEND(r8, 0x40046f01, &(0x7f0000007e40)=0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000007f80)={&(0x7f0000007e80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007f40)={&(0x7f0000007ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x894}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000008100)={&(0x7f0000007fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000080c0)={&(0x7f0000008000)={0xb4, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb4}}, 0xc0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008180), r10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000081c0)={'nicvf0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000082c0)={&(0x7f0000008140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008280)={&(0x7f0000008200)={0x78, r11, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x749}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xc}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x8800) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000008440)={&(0x7f0000008300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000008400)={&(0x7f0000008340)={0xa8, r4, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000008480)) r13 = syz_genetlink_get_family_id$team(&(0x7f0000008540), r10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000008580)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000085c0)=0x0, &(0x7f0000008600)=0x4) sendmsg$TEAM_CMD_NOOP(r10, &(0x7f0000009300)={&(0x7f0000008500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000092c0)={&(0x7f0000008800)={0xaa4, r13, 0x10, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdd1}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xec0a}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x891}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r9}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9c}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5d}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r5}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r12}}}]}}]}, 0xaa4}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 1.868758765s ago: executing program 2 (id=5181): setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x2f, @local, 0x4e24, 0x4, 'rr\x00', 0x29, 0xd, 0x51}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000080)={0x8, 'syz_tun\x00', {'ip_vti0\x00'}, 0xfdeb}) sendto(r1, &(0x7f00000000c0)="fc76180b9a59ec317e5531d465ced4eb46a05c3a74c9148449e85d37faf334c7c327134dcb71e26ef9703fdaec76d319399c9cf2e820424e5508e00d302cdfb331f026d993014b584b8f6e97b87d9f5e424bc354508cf514cc5e9ecca143aafc98bc30c38f42185f8f7f31388d3e48dfd1db74d0b8c1649f9a21240730e80349531fbc9b0fccc7753cd45ead9511213761dfcfe9085d623dd5f9a22de7cfb24c0740bb97f3fdb5f0dc0475b884ffa322918b71786c2fe8c92a802b4a70020139e203676783334b59651e", 0xca, 0x4005, &(0x7f00000001c0)=@rc={0x1f, @none, 0x4}, 0x80) read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/89, 0x59) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd6e1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x190, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x174, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x96}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9799}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x12c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x3, 0x9, 0x4, 0x1, 0x3, 0x1]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x4, 0x18, 0x5, 0x4, 0x36, 0x1, 0x6c, 0x18, 0xb, 0x18, 0x9, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xed, 0x10, 0xfff8, 0x8, 0xfffe, 0x1ff, 0x2, 0xff]}}]}, @NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff, 0x5, 0x200, 0x4, 0x1, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x4, 0xbb0, 0x2ea4, 0xfffa, 0xe3, 0x7f]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x9, 0x30, 0x6c, 0x9, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0xfffe, 0xff, 0x6, 0x9, 0x59, 0xa2d]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0x1000, 0x2, 0x2, 0x2, 0xfc09]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0x9}, {0x0, 0x9}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x7}, {0x0, 0x2}, {0x6, 0x4}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x4}, {0x7, 0x7}, {0x6, 0x3}, {0x5, 0x2}, {0x5, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x5}, {0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x0, 0x3}, {0x4, 0x3}, {0x3, 0x5}, {0x2, 0x2}, {0x7, 0xa}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x6, 0x3}, {0x2, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x4}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x8}, {0x6, 0x1}, {0x0, 0x3}, {0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x9}, {0x1, 0x9}, {0x0, 0xa}, {0x3}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0x8}, {0x7}, {0x0, 0x3}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x10, 0xffff, 0x8, 0x0, 0x6]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000014}, 0x40c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2f036fda52"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000800) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f00000009c0)={'nicvf0\x00'}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a00)={0x10, 0x2, {0x2, @usage=0x5, 0x0, 0x2, 0x3, 0xf, 0xb388, 0x3, 0x82, @usage=0x4, 0x8, 0x101, [0x3, 0x5, 0x2a1, 0xa5e1, 0x40]}, {0xe, @struct={0xc, 0xd}, 0x0, 0x6be, 0x8000000000000000, 0xfffffffffffffffc, 0x928d, 0x3, 0x4, @usage=0x9, 0x7, 0x5c59, [0xffff, 0x8000, 0x4, 0x9, 0x101, 0x9b39]}, {0x401, @usage=0x8ee, 0x0, 0x1, 0xa, 0xffffffff, 0x9, 0x1, 0x0, @usage=0x1, 0x2, 0x0, [0x6, 0x4, 0xff, 0x2, 0xffffffff, 0x3]}, {0xbc9, 0x3ff, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000e00)={r8, 0xfffffffffffffffb, 0x40, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000001200)=0x0) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000001280)={0x0, @nfc={0x27, 0x0, 0x0, 0x4}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @nfc={0x27, r9, 0x0, 0x3}, 0x800, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)='team_slave_1\x00', 0x5, 0x10001, 0xbcab}) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000001680)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001340)={0x2d4, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x184, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0xf8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x118, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$XFS_IOC_FSGROWFSLOG(r7, 0x4008586f, &(0x7f00000016c0)={0x4, 0x401}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000018c0)={{r1, &(0x7f0000001700)='sane-20000\x00', 0x400200, &(0x7f0000001740)={@align=0x8001, {0x9, 0x7, 0x6, 0x1}}, 0xffff, &(0x7f0000001780)={@_ha_fsid}, &(0x7f00000017c0)}, {[0x10, 0x8, 0x4e7, 0x2]}, 0x7, 0x98, &(0x7f0000001800)=""/152}) setsockopt$EBT_SO_SET_COUNTERS(r7, 0x0, 0x81, &(0x7f0000001980)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x1, 0x0, 0x2, 0x101, 0xffffffffffffff80], 0x9, &(0x7f0000001940)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001b00), r7) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x44, r11, 0x420, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000001e40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001c80)={0x170, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf9, 0xa9, @random="812410d995dec7beb53b6925afc8915c6a2f95964cee2d90637f05952a7008571a677ebc91b562b0122e67be15af9f329d336bbe0e30d9532dfc1767ff2033e78f72479b495b89e9707bbf6f801528063776b81ac13540a67b3b90861b2ddd72ca26a2e766e873633d9c90e6d699c6b21a57514724326e6cc0f217cfe5a44b2059ef2956cb98be04d4e24227ad980d342b63141858d1c4e42eb1788a8e1b89d836bc659c8656ae338a45d6ce8fe6bfcf6e4a11ac281ca1c73dbf8e1b5c0eab658aa6e420c12bd1a736bcbf8e6152b02f60c360a6e037185d626c752adf3bebc848ed805d7902676fa962c62aee0e4db5a768b701f8"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffffffff}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x20000050) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000040c0)={&(0x7f0000001e80)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000004040)=[{&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="0be424fca51ce2da98ac76ca302f0ca2e817", 0x12}, {&(0x7f0000003f40)="4a2907aa6a0941aea3a4b7c3233ce5fe9e305cf9519dc28ecc962e0cb57969a9c9dc4005d13efa63e8fbf970a29d222d118e436149e88f1c92d9228e8e24984762c92390965d3eb1786331f92cf247286acef398d5911477e032fb4ac129ab58aa89f1d93aca20dfd40d3e1a4ec0af10d52442f1a7b45b72e2f6", 0x7a}, {&(0x7f0000003fc0)="7c2d1038bee48964c2ba96d3f982522307", 0x11}, {&(0x7f0000004000)="69157bce049128347005827c85dd6e96127c51a31e601d1e29e84eef3c8565b45df2e676a4501625eb4ca614fbbec92d977efb8743b2", 0x36}], 0x6}, 0x20000081) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000004100)=0x10) 1.766389587s ago: executing program 3 (id=5182): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000863000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0xdef57000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x81) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x6c, "55484d0f17578c234a993be387d4e9e5848790dc4f4af81643269f2a4efd271672a76795898e3f2617fc3da0707318a225710795c08881841f02c3917ea5fbf1deb31a7d0b5364b990006d3c7e55f1eb8b82117b95a9cea1963efba35811559dbef3354cb9557e9c9be4fa0e"}, &(0x7f00000000c0)=0x74) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="964400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r2, @ANYBLOB="6800128009000100766c616e000000005800028006000100020000000600050081000000100004800c0001000900000181000000340003800c00010008000000030000000c00010003000000080000000c00010009000000040000000c00010000000000010000800a000200aaaaaaaaaaaa0000"], 0x9c}}, 0x24008004) 1.682759451s ago: executing program 4 (id=5183): ioctl$int_out(0xffffffffffffffff, 0x5462, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) write$tun(r0, &(0x7f0000001240)={@void, @void, @x25={0x3, 0x1, 0xfd, "a534b4ac27eb1c19ca776ab10a76a58a33b43a8209901731346e7f3b83a4442e0208ea88b43a39fac700c61ef9aa049e15300a29f1aa0000000000000000"}}, 0xfffffffffffffebb) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000200)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002380)=@newtaction={0x109c, 0x30, 0x100, 0x0, 0x0, {}, [{0x1088, 0x1, [@m_pedit={0x1030, 0x3ff4, 0x0, 0x0, {{0xa}, {0xfffffffffffffc8e}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28}, {0x4, 0x6, "a26515e8fc4866ca0c91f5d4dd026b21f08e2ba9f66641cc4705f49ac027069feebb6d6794f5aff16ce822"}, {0xc}, {0xc}}}]}]}, 0x109c}}, 0x4004801) socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 1.68098699s ago: executing program 2 (id=5185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x440, 0x3f4, 0x300, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x5, [0x8000, 0x0, 0x3, 0x5, 0x80000000, 0x8, 0x800, 0x5, 0x3, 0xd06, 0x1, 0x0, 0x0, 0x0, 0x1, 0x79d9f485, 0x5, 0x0, 0x3, 0xfffffff9, 0x574d73b4, 0x5c, 0xd, 0x2, 0x3, 0x81, 0xe0b, 0x0, 0x9, 0xa3e9, 0x80000001, 0x10001, 0x5, 0x3, 0x7fffffff, 0xffff, 0xfffffff9, 0x5, 0xb, 0x38d, 0x0, 0x10000, 0x7, 0x6, 0x4, 0xcf80, 0x0, 0x1, 0x6, 0x401, 0x7, 0x10000, 0x7, 0x6, 0x9, 0x1, 0x8, 0x9, 0x29, 0x43a6, 0x3, 0x9f1b, 0x4], [0x6, 0x7ff, 0x3, 0x1, 0xb25, 0x0, 0x4, 0x1, 0x3, 0xe, 0xfffffff9, 0x9, 0xf7, 0xaa2, 0x1, 0x9, 0x200, 0x9, 0x1, 0x0, 0x4, 0x1ff, 0xe15, 0x10000, 0x2, 0xb, 0xff, 0x200, 0x7ff, 0x1, 0x7, 0x3, 0x3, 0x8, 0x4, 0xfffffbff, 0x0, 0xfffffff9, 0x0, 0x2, 0x7, 0x7, 0x8000, 0x7fff, 0x8, 0x6, 0x0, 0x4, 0x85e4, 0x101, 0x1, 0x0, 0x6, 0x4, 0x2, 0x6b0b, 0x0, 0x1, 0x5, 0x4, 0x3, 0x2, 0xf0e, 0x9], [0x3613, 0x1, 0x3, 0x100, 0x2, 0xfffffff4, 0x80000001, 0x2, 0x9, 0x4, 0xb60, 0x63017d48, 0x2, 0xfffff56e, 0x8, 0x1ffe00, 0x200, 0x7, 0xa12, 0xb5, 0x40, 0x4, 0x4, 0xffff, 0x4, 0x8, 0x1000, 0x768d, 0x3541, 0x7, 0xa3, 0xc, 0x7ff, 0x6, 0x8, 0x3, 0x1, 0x0, 0x7fff, 0x6, 0x3, 0x8, 0x3, 0x3, 0x8, 0x3, 0x8, 0xed, 0x27bf, 0x1, 0x6, 0x8, 0x4, 0x6, 0x4, 0xc6, 0x1f87, 0xe, 0x10001, 0x4, 0x3ffc0, 0x7fff, 0x2, 0x7], [0x1, 0xfffffffb, 0x0, 0x0, 0x3, 0x4, 0xfffffff7, 0xf5a9, 0x3, 0x9, 0x401, 0x80000001, 0x4, 0x9, 0xff65, 0x0, 0x5, 0x9, 0x9, 0x0, 0xb4, 0x8b22, 0x10000, 0x1, 0x6, 0x3, 0x3, 0x8, 0x40, 0x2, 0x0, 0x3ffc, 0xdd, 0x8, 0x8, 0x0, 0x4, 0x3ce, 0x10001, 0x74, 0x1ff, 0x8, 0x8000, 0x401, 0x5, 0xff, 0x6, 0x0, 0x9, 0x9, 0xbd, 0xc6, 0xd4, 0x40, 0x101, 0x4, 0x8, 0x0, 0x4, 0xd67, 0x7, 0x0, 0x0, 0x10001], 0x1f, ['\x00', '\x00', '\x00', '/)P\xfa*\x00', '*\x00', '*/\x00', '-{:\x00', '&}:)}&/#]\x06-{\x00']}, [""]}, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 1.412049045s ago: executing program 2 (id=5186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x44}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) (async) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) (async, rerun: 64) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x81, 0x7, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x65, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101}}}}) sendmsg$kcm(r5, &(0x7f0000001a00)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @private=0xa010102}, 0x1, 0x1, 0x2}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000180)="267535bb0f03b0", 0x7}, {&(0x7f00000001c0)="0a248add8494fa3ac19194750072e3970dcc43af8096f264b0b79973323373f56b9d671f509db88de43cbc51ca337210b3be32e24a30742d0293df", 0x3b}, {&(0x7f0000000600)="9a7796856dd222d111a2178ae3f290314737d1b740836b8cb8b0b54dd8addc52f018e07ebac1a2708fe7da2a54a9de7f3e7d873d4c113ee703976de0d4f726ee65104726e90baea4e6fdd66b36367558d9207748f5abda2540558537f18513b0f7adc6706762487cc2763bb564071cb4fbd6df19c5c58ed764a8efe7ec9bc53bbc004fb688c7a5899cf56edb395383838b6e49065327ade7a48b6316f36525d472a0c2a0adfd244dbb5f644b734a3ac338a4ff56912c55b4c7e9e660234d0183b84803aef4d621d6fc300b5416c83c81df6a9e7ca271deae0d040a3c4681e3838d6cce29c91e762fa03e480a57868d2766916c8ab0b260f647dfdc3ec3237b22055af0d8426ca663043b46b993f38d9319a898c61acd0445bbed45faf06afb2c4012e3a86843e556a4264d462f4a21ee0efd5022d59a9d37d594482b6e74ed9295e85513f405b95ab4eb633ccfe47be77b1f980fe4a0982ec2be47c9aa6823541fcfaef6809a50643c9b143f8db5cec368acf9211b93187c7204d8679e5656be0fcc1c67a7b293a7b8c84c0082cb94e358a17df11cf062d41bf10b6e29e7df41411b25fd459f6230cde70dee7742d6810d584dd5f34934f3a281ffb779addd0f8eb9e5e6eabfa27ecdf042fe7a089e4165ad0a9295cba255d52db5ef32f291ed6cd7fc9d50ac20bd463bccf2f72bf0b4219e7336e68a562064422d17aeed8d4e4dc2a0d9779d8caeabf062fe6650003c77f47cb2adfe74cdd83af756bd44c7cfcf24cc23a39f62ff7f7c7eda6ff0dddfc34dde2658e9dad8bb55dee7ba617e95e3799bb841253756c5b9d1057d38a85fa248a688f63f352d88b67f42022273165e11a406e20771a9d0d9482abc3a996b8bf187ef79ec270814f1e8ecec6907bedb482ab4e2be04a8634c2f2c117cd5953c960a6979e699963e26a921f7a9baf9f39fc767fcca9448d2f15d41a59f3fb862b9641ba920c5a285531efe748bf3cd2ed3c8b5383bc6f669dd3663bf9562d8e66dd3aaac78970727bdd72f9a3f435a41b56392593b553e4b4309ee43b5751c5bb6dd50c4fe94c549aa51bf571cff6354e43f21330bd7117fc88da062e8b0c6f24c183206cc5153979250854b68d4b8857ba27088cfd571fee38e0e1efac5a6396ea06f95814d6f048ab9c55b52746a4b9177a845cf187a16045f356d4889e4264f044b6ba21c7e35a2f89428f95badb99321e8f59ca23969cf70133690b68cbef7d7bfd3e74c2c9616d33995b766d97d6f9aef325e43cc2f613817370e5715bc2c6aff4e80f6d93cac789da0fe0f6b7d92aaff6e33414e82a1637806739036198cafac0794f9560719bb07aac8f45f8711afe5b6f984023e9a92acb3434e5b7a28f5e44951b738fb4145d5ba165471a503d57a5c3f204fcf73bd5afb2e239bfcbfa67f83bc10703056b233d522f7b73880b323f0262e62ac5698c9022e9e0cbba2b9336a67fe7a937e80064e3ff83f7fd73302f2a84b1f43da90cb8de9aa39658f0d383c2b24aa9eb3d2c100afe7317d360bf01bb63f94aad07db0f04c069609bec85e329bef7cbc441c0e22fb96d7a6c7297be8f850c76f97a05fe52835d2a13645cee7696a7b7461252e57fd5f85b18b1a7b5e35e6cca915f0422a73972a275c96f2d80c37ff210d48f279b5a33b8f57e4ac2585d6bb930db1f5d6485db2b4231aa03ea461ca0502e4669a7989ee47be9391b3793eca3050447742443480510f0028d1dd0198f326867f15ba0129a3a4ddd8a34df91b842a6d575190ab9107af6c4e61f6d65e767995b503b527173bc427a34a1704e2628e9857d215da59709c9b5c43b5c9b4b5cb550d54f5fccddf8457f26e305e6858c9e1409cb018dfac5282df7b89b072dc1b092a0bd144ecefc8226673916a6feea7a2157676cb42e75a86d0efaf7b893efc8fd5cdefaf5a7a49dffb690aad6e454ae47ef7d3c18923bff92f483a4be859bf1decc7b9e0ba4d44a6cd9ebcda685e026f43281da399f351fab0fdaca5ea5663da4c949edee3bb9f04dcc1f1874e038143b63b0399ca8b93a3504e42040c5e8ba2d9ef31f61745d50c0f3de1decb9976161af6500648e51f7d6778ffa6d4e0038ada2fa91eb2efebfe338714a931fa2c3ebd8e6dd0be550ea42c58992736c8fdc80e5561fc2823b2afda81a3455900d9f19b2893eb40a4ea702e37436e0cfb1d95421fc775626a20815155c8b8074e48770850a35076f5d468a04326695aa99d9e9c57f121bde282cddf1f9bd980e69a7504582e6c40ab9548a52283019ac6a0da77376e2d04c39b7d76f61d1127dfd7c591036bfc6bfd347c4a63688440ecc65133bdf012406057c1ecd893598fc2ea8babd572f3464a5a7ce3f8c266791b31c370f3104f20cfff4216673d4050bbd414ca999b34e7a183fd3778b06e44921f8f66b1d1da3f91b40e8b489f0973a3feeb88022403974d8aa4f479a85c522cbea46e1756d6b7d3009bdc9d5fcc50e9d145b44dc6d3450e85ded740be13cb3f431eb77332a95f163abacab12e55ba447af39e56b313b04c3d53ed7fe36d4a5ce4408c14b18233fe377c24a8750e9e5c4094d8875447c7716b48532f5761ab2dd4c88dc352ccf41bd3ad0bee3c42ed8517f5f02c0283296d4ed12fd5f6fa4ff97b4f78ba8046a805d33892bd276663285ef7ad8d12c79ea05ef8c12cc0d1c7f234e41a87ff38dcef5426eb7bc2d0dc0ace07eee3d5cfbf93e3363d75880636abcc14967c1a5ee20e6dc1f07462325520bd473ae6bf52377b56cf31c5e2c67f4c4ba9e1ba49f6af30817f6741251eb48e779e8639735afefe8be357c694876333c1ebb242e3df51dbf45842b05310bb559c01cd8bbaefca09ceb19889424a22b3c41eda532ca98fe51362a0c9c70c174c82fa5abb0cfc34f2b98a090cb63ab346e654e2cf4ccb5886594d91ce5dae06c072fe36dd1bf968527c9ef4244e4aefa2e61ac481a50636b3709ecf67d8885cd76b9256fa93102202c0ff05a515730beb4d254b52282ba6db1c2953d21a4ffa29eb16770ca6c1eb92750170d62b336281bea11774037432be22b04e8ae4c71f0f693d34bdd7762eb158f46a11e41d7a7aa96a5ee00493b14161c255d84f09ecd120d06dc5e95b0a785712e47476fdf8f5fb357fa914c315d2f9cdc64fd709a65612dcac4db6b4f3e3adcce3cfc6660b7ae0aa5b764bb4bb55c077bbeb20234a4dbe6cc124362929ac58d7510517cc2cec180cf4dddadbbfc94ce418d5ca9205f7c78eb77688134b13e34ada51370b9f36dce8ab2b954c8ee90145d3a81629deb2316f5606d3e418e32a4dc6392bb0dac465e0158cb3d3cd69ed593b53f09f34c0e89b688a55eb15bc9148de8e7ba4c89ff6230689a3f3265cbd8ab034fad0b785deec7cff65d978e42e09a8364065acde69772b298ed9c0220e9aaae6e4ca90a21697286bbccae59d0675dfa6eb90f5f4d7f601868acb92015e64e3a754d2a2916f9a9761632d00ff1290984bd29f026720998aed0b9160ddb1e9cf0bdada2657eca9c39170b26374cbbbfa86209efcdb3a2c63ac8692a4470a9847a6a0a271d982ce8d31460a479f8cfeed44f157ce166254e9db831838966e484cb4376cedea3453f3b330115715997daafb9b49de50a0a849016c3744cd934a8c0070eb9a16d563211f86944b19cc590b672f795da09de4b139e625c00d3c6dfe1a49e60577c6326bd07c7ddc9c1a86e37e9d1352f8dfc2ee9434e5d0281e3211a69b92f04a9950de1285d8e6e0e7c697676fae179ed9c0bcc9cabe5fd132bfd806e447251edda0544623f72c3cc103bef931d36c77bdda19ce72f27d563cd6ddb82e476861872ef19597acce52006309f81a5fbdf0b7baecbf8c09081c296663b39bcdc9ee7e98a630aff623d6df21c0fb3f3c5ce5f9041ec705a37186241945df4e40ae66186ee93b23b444fd3c74a92cc31a1d1a43e0af91c4f74ca961e1d73c4ddd28efe7d019d2368d908fa952bdc3b13061e920b3fc077645e450e260cc8204419ff02d4df6ffb5601bf199771a52667b667ac031d96dd342ea0c9088442b8b7ac71b0d5e09e76310d219e48d7215e776d21e83bb0f46ac3b472881335bae10a30a1987973976a87ff9b373f88348b13ac9cc33457c745f13c1e825ba6fad914e60490d2fc78faee2a18a1ff8f903b6bf0b8afef32c0719f1601a96fd57ae986594541325646eb987af0f9e1a65585cf7e75e858db79588be098cddb19704c9d1e49bdc34b9519904ee3726d29ca31847ac3265a9c1340a6f1932708908a4c6d0de727c2270da91eb4078fb03bf306f4435855d1af57307b6b6a2611f1bfefe66ac8cb5da4112bfc5f75f39fa2daadb5045488972be2563966a4279795e979dd8884e92e3446dbadabaaf0cdce6ed21011cda1d91f97c925aa82589e11dbbf5d854e8484e6220771be1760a7ecd35835a902a70f6398c009ba640613141aa82d4600671766e3f570350e0a62c2ef7f8eff4aac2d098a6aeed4c8dfe00f8f3344c519e2f55640309aa2d8e4131229e26eeeefd2dbf69adb56ef0ddf71d1342e9bb36d1bd6ac4a985f68d7ba07a7bf4c1ea5e731701ba985489b0cd41afc100eb4c4180af63a03d6e6e9ef052741806b2e06fbd5b98fe830ff8d620f7ffd880ea3e6589d3baefe42b36acda362e82397833489b4c95f0e2cd0f417c4fd8bbee78d7a6bcb34eaf8c20d508b6066b18355dbc566347a19ace1cc8e120c59cadc877a43ec3e12fa26d1b876d496339759ed4f9bd8152b0aa4a102c60dec851bb352dcf67354807cc1d31d757e599330de0d512f398c9f7df2717c4c44358e1ba1b12ab4978fa89c8701a912b50931ef4f3dbe4bd80ba6e7ee5853c54334072ae333997e021f8b8d04d06c9dee50419535f6e9ac611cf09c23845f3b7be17855dad19ee0afb5c37a7cdbd8787d46b6a33fab9bcd9b98dccb070e4cc1e0faefc288b98cc04e50a517862184e3d24c6c4f8733bb41975c52bd8ff502f57c4abc221aa5413297ded2228ac66b182f519f0028e3ff6c9647d00c109d68c5042d88ddd1b9e0c875bc1b004a96a7c1ee097b43118e55f362b496be4374a2962e6689e70e1074257339800f333d20aff08f26140c61023d7a46ca264addc35baddd36cde3b6fb26b39a4c28b3c3651a45ce288822b7a6255c44f3e7ad4d3e779b905b5310c47819fa8730a0a9fed0e23fe3e858b966b57f4d3eab8af2c0784d3a5c9f1b691cc63325064fedb39c040eb600f275fcf345672fdb3f23563a8afef68c721d44937c3830f6032293a54276ac23ce4bae007a9187af296c4a76964c7e905ad15b5ce1ac34b30fb0c087434adc43bddf3207b8c77c7b6a2f7274f64db3c25bfb72cbf8c5349ca2a2fe1aa7ebe98f5cd6048984310573c57d0dd1b578f7a132c33ec4a76c886cf41a947ff6307f1bd53829e06fc809f5d7b4959331b4a5f9058b51c6527e0e68eeaa852a6e91ab55b81a422c27700b3cb9684032ba92bf707cbe22b0576adaa5e5c8790e38810f00b55a5566eb74eb8ce94a5584b77cef3359e76fa03201f0913ffca9baadc9e7f241dea8fc89de5e64a0dd92767cf2fe89bec4e033baa1ad5028d25cbb474ce37de3e8f8a8b89e585010f49ec65211fb4b2cb5d8d9e9c8bbb04800f663aff94889cd402a95b2a5c4c07405a41fe196ac2a3f7ffcd8b51211204bb06de3994b45a08f9a0f0998c9b7db9afe19244c967ee37ea102cb85bae6f7f87f0fef02e4adf55781e26c7859e23538c6374d5613c", 0x1000}, {&(0x7f0000001600)="7b7a37a23f6d8ee4248d65a32bfae44626eda8232f555380b28d131e73b6ede5df1a6b0ae28bf0d6dd61a7713f112488ccf0d17e9ca51267e9f982fdadc6777d2bf936ebf4eed6f442ebb4ae9f44e70a592222", 0x53}, {&(0x7f0000001680)="aa20655d1c34cbe87ee8714463f6131068d33d0fd5695865a867b65c5a394b6974f83615c50cc3071d95", 0x2a}], 0x5, &(0x7f0000001740)=[{0x60, 0x108, 0x401, "dbb25f26134e8778663a02006e51a1a3bc7aff3df7c389488c4b7f3d0a7e013c34f6d7f0f460dbf97f54e34db4b8993dcee0492bfbd3cf5712df47502217a9482f8e6b2480240ccab3e7"}, {0x90, 0x115, 0x2492, "95e8a2d32f2a771597b945822a586161b4ea98ade09611012ac256e94a95fe567cc6b89b3f2379bad83383234f1d3103528b8df12c8c31a7fafbf5076c6f6051608826c2c0e3ae93e1065aa7e2d2992ee8fd2dc682ad64d0dbb48b7c25c866d0414994774196a394d8c6c43d46423145a6d15d424429b2701bf6a398"}, {0x38, 0x10a, 0x7, "883b00877741e396708bb22c712a1fc9e8be5d831b833a1fda531c4addffdfc11e88c2b8c168"}, {0x70, 0x10a, 0x5, "deed2c07b8d5d4beade300f61e8a105f5df74913e8b68caf921dede497f70bfeb39fb22ffaf70ffd74dac31afec0ec34ddb7285ea9e711e11ddd30394616800bb2959633ca153f552799f07e9c82314418bcdc4917f63951de0fc5824ec3"}, {0xf8, 0x107, 0x3, "5de1711b2498426833e604d41d8045979c3eb0bec5d10602c770baa5bfd4456121ec0931c522a587952b48ea9581a2e9281033f3cdf029ae1a99a40dbfb5555151201ee6ee5b116203ddef027b111a481bf334b51ef6b417b3f60f52fd667cb4d115693336006e3e0df997089fc7c840a82a1ee17b8335da136d1a1af282246e86476914d3e26a31ed708b4d559a1fe031413d15cddbada5389bb4bceead5dc1aa905658f51cf4a146e8474f2986b0fe69cd495e125355f8dd46688d76dfc99c18655bfdba014f71a61a560f89334378716c11d9df0a83f35172b71a30c9b88ec95a1edc6a"}], 0x290}, 0x8840) 1.389431547s ago: executing program 3 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x35b}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0xdd86, r10, 0x8000017}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000680)="8f4cd2c8fd09865e53d25ad3bfd9", 0xe}], 0x1}, 0x4) sendmmsg$unix(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltaction={0xfffffffffffffef2, 0x18, 0x931, 0x70bd2c, 0x25dfdc00, {0xa}}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f0000000080)=0xff, 0x4) 1.375740585s ago: executing program 4 (id=5188): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.304757415s ago: executing program 2 (id=5189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) r3 = socket(0x14, 0x2, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x42050004, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x35}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "33783d386bb67eb7a0ba56b1f2"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2e3a8748e9029b338aa6d0f72d"}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x10) 1.286217618s ago: executing program 1 (id=5190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002900)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="6b4c2322a0b2869651bb28b07fcbb054a3acf1acff2a0feac4eef6a74526179c", 0x20}], 0x1, 0x0, 0x0, 0x4040040}], 0x1, 0x4) recvmmsg$unix(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x12160, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff03, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd2b}}]}, 0x3c}}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000010000000000000000000000000a2000000000000000f5ff0005090001007379bf30000000001400000011000100000000000000000000000002f74c9fe6508e6b1f32007db9986b60089e9fbde1bc622834b3764b18365297c3b84f3b6e309b6109a335340000000002140000000000"], 0x48}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}, {&(0x7f0000000040)="5331d1401ea9b3cd24ce375f3cdfc4f16b6ae0e3ce7c9107873121477805", 0x1e}], 0x2}, 0x0) 1.20892682s ago: executing program 0 (id=5191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 952.053598ms ago: executing program 4 (id=5192): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r7 = socket$kcm(0x23, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r7, 0x800) accept4(r7, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x0, 0x2}, 0x94) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402038006"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r12, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r10, 0x1, 0x70bd2d, 0x204, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) 950.558068ms ago: executing program 0 (id=5193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x2000c800) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000000c0)=0x100) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0xe25) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0xbdf84039d9da4bc8, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 947.378059ms ago: executing program 1 (id=5194): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, 0x0, &(0x7f0000000240)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$inet(r0, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0x16, 0xffffffffffffffff, [{0x2, 0x10, "90261cf1ff7f0000eb1100b4cd8c"}]}]}}}], 0x28}, 0x40) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_emit_ethernet(0x86, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaab42ed1ae6caaffffffffffff344e0d0800450000780000000000019078ac1e0001ac1414aa03049078030200004700000000000000002f0000ac14140a0000000044246af3e000000100000001ac1e010100007fffac1e000100000002ac1414180000000644240f51e0000001000000010a01010100000006ffffffff000001ffe000000200000000f36bcc6779dc321f8ba5a34e1026cd135fe85ff6b689e7cf8a744610cdf2d449b18d8c88e795e2ab80dd906f5ac7430bf79833718cdaa4b39567f7145929f59b697d26c44ddb73f60ddda5742274737db9a21bd0bd767d77cee88f3c998cb3ec3f1a70d5177c057b8274d348b687f36807d644f872b96a9bd7f3db45d2ce8ee1adaa627152b62e87d32516527c7aab1376e84084c7085e492f016b6937daac90861c90dd422bd3c044df63d98407a443d36c373fd2d23fa52cb2e525230ffdbb8bcaf98ade3ed50a7f74c039e5d061a4ec0d671141ba0325950e4e75d47bbe40d83cbe5eafad058b648eb5c75340c8f469f191ce9f92637b6682b89890cb7e598b5080e361b41bb6c4342f05fc38ce323560daaa4e05c5fca783b40e177cdb52f528314c70a1c6c800ba8ce764e86bb28e6e739067ca3b701672140ae4d689e6d8ee49f26c84965f528b"], 0x0) (async) getsockopt$sock_int(r6, 0x1, 0x10, 0x0, &(0x7f0000000f00)) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/44, 0x5b, 0x2c, 0x1, 0x100}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0f0000000000000000ffc3d139ffffe8000000711063000005940053b45f5e00004dbadda5ced751f794"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x24, r7}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_getaddrlabel={0x24, 0x4a, 0x200, 0x5, 0x25dfdbfd, {0xa, 0x0, 0x18, 0x0, r5, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000004}, 0x80480c5) 835.804868ms ago: executing program 0 (id=5195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa101000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) 827.919239ms ago: executing program 3 (id=5196): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="3a2f3ae6", 0x4}], 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r2, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0xfffffde1, 0x10, 0x4, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x954f46ff5c521a9a}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0x0, 0x11, 0x0, 0x1, @dup_ipv6={{}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x7ff80000}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x8000000000000003}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "0823af132170a3b83648c0c73f4ea42373c74fb62412dcf829fdbbe6774da99583fc2e5dc8c49e866cb529183d4d995c51d1e7f717ee7d41987632be3451f4cc451c8a17bf4e4844c9ff101b02785bee4a4d4399941f4737980f1ae901be059d61796082d7c10e4d3102640eae1cb3adac4315c78cebf971c14d4b217caf643b7f7f157a4dd49cfa07c06a3b9b03686f97ef9ed24759f03c5d"}, @NFTA_DATA_VALUE={0x0, 0x1, "5554bfeb17bb3454790fb58df1e3aceb00d97fccb8896b6e446e566c69b91b40a84b328a805ffce18dce7617f07fb836bbb66fdb6e9f6d3a4efd30d4b87c83a0092bd0d300217c081ccd7658a8fffe"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "95d02c2c62b4018e77c85cba20c1450223278dfc205f514ca1ca201c3239628ce4b72349bf56d57b01303c6d63bf5e8fe1143969200228594dba4858fe58292e70d1ccc33bd805"}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_FLAGS, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @meta={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @meta={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @nat={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x0, 0x5, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @range={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP, @NFTA_RANGE_OP={0x0, 0x2, 0x1, 0x0, 0x1}]}}}, {0x0, 0x1, 0x0, 0x1, @last={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @match={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @meta={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x21}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz0\x00'}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xa31ad1a1fc005171}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "3534e19c483f24efd34b94a116ec6f532e7459e379d2b87983754b085e24b0de38a9a4b9326ae545cdc819fcbb7473de23b33ff7e5231eda1444373ca474dd723e4320b7de5fb1beda531196a6cca9205419430b590d06209bddac9086333d5f34c0b2a2871aa99e3e1b182b47b71ca2de9626abfa508cad57933207191da8a5ed77bfa170af6c5ac654f613b0f2f712980381d69208011bcd650e5f04475031fb3379a21704a558883d754f9b766e15cafa825ce4783ee9"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "0a2a573ea2e37f4f641b581dec73e0c94a58315b4d69ef6ec256aab6a75f4b93f327aa97fce47df202acc1396dc4d4de97f5ceb86325042effd9ff672ee6aeb7c9b902b9690a43a9dbbdfc0eea824094a4b73183a55614938f0a8494d9500b62326f3c9b70702f7cf13971222b4fceebba7d9e966c21624bd4753afc35bcd42e8707"}, @NFTA_DATA_VALUE={0x0, 0x1, "bce4779ca9ba21fe06580ba06d80f95ea7572b068d09ee1019866e6ff312ecdb567d1f1fe92726652237d5faf4ddd99ddc1ce20ae583bddbb0777b517b02f68176fc1874c3421abd35577068de09132f2157da381366cb3c550a0860971865fcb8c9b76a7ec028591f5db1a877d11a8155e8f13b9e06110e9dd6bbe4a93922b3c77d88f4388206c0dad95a143faa29400be226039d896e93a633"}, @NFTA_DATA_VALUE={0x0, 0x1, "a4f63746ffe7843b663ebb4baee853d0207705a5b2407c4d620c40d61687d6e366a87db89a98cbf38591d3ff75de7e22cd8ffdf3f40ea11aa8e8ef6e27193486d2d22a3b733902c93d8680d2423c1a50d10a7d7c7c3855ee8797292e1ca05fc2809527dc844f65736ca220bfc9bd2f9379530a2296f947ce56998a13b98a299e4b1f16cc763d7549d76e7c8220e60aff745afef5b2f1284232874635fe3b2d0b9910968421ea29"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x369025e25572a8aa}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x8}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "f729281568cad4b809a53f00e889696ba4d38c9bb2869c3281e48d2248f7578c28d4c2a0e3fbb2edd3e304c2681c13d2645d0929bc362343adae3be3f915b1abe8eecdf382738ef912ed22b3e5e2b52bdd3658433fafa01a36ba5fe0c91d0d4867471b5dc2c6f5b077f10f200c3539c665284972d4687e1f0197930f0cbe2ced15c389ba20f93334ad33cb660a904e940138f72bbd9e79f9242c67152a043606193996ee8e258dc0006ed2684930339a4e69560246f136d475f544499e54f08bd30c272a1f4bdd2e39e64c280d9f"}, @NFTA_DATA_VALUE={0x0, 0x1, "9b6f647be9ff3a53b5220897a8b0901ba66a85533eb739af0d720781fae6a32277499020e71aeea4360059d4749a8f6317f54733882ffe5c5c56d93ecdeddc1a3eaafd5cfe3ea47b2ef423790128f576c4c8ea8a204cd17f935443c80b9d2dfe21e8"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xdedd3c6f5fc9368c}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x0, 0x1, "ff2bc54d7b494e3e66982e011a4fafccd3d15bf4e388eaf4f59c0965426a907551c7952c6e584637d02bda33651019b2cd5bd194326c15a6a7e5f7153cc54bb69d0c572a9cc84aa1a3497a8853bacb77535c2313be8894fe73c223d597f4b0c881471618c37de3ef8b7ab062cf183d1783bdc2efa92a8865b71104bfae5b3e75224ebf578fbfbbf7325df7226ace7a"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE]}]}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "49b211e639f2d26ce637440e81602111b27b7c36af8fd75ce1ede8418a9d30eef45d4621b45acecc5c9d54cdb4054a270bc71da716e80f5613c8259834c23821134340ed795643f1c9c82d186b57a3ae1c594226cef6b6bd1fced7506e979bc50294e6d2c12e2a43f9d5b9ef830065d9bb23a17047d454"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "4ac621d82e2519edf517a792c32270ae7486afcf3be1a1bef1faa463118419b2f94b4daaabb1a1fc0247a716e46df71cd78311df5f2d0f8c6fececa39ca8e4bd2faffb9ad3eab2a1251632d358c9c80aaebe8f4b4189833aa32979f843e2f618ef0cdc67dafb6102433144ba03e87144e105ccb7c7f5662b1a260db44ac6f8e6a2f848b664cd05d1f750f6dbdd32b6431f9122de9586ec99a7399edf97f55b8abca8e8c4fed456201668cb2010285ee5945c1b1ad90be5ed0879ee1a7cd851e490273078f306a6c0e105449c2819925747e2a7dddffa75"}, @NFTA_DATA_VALUE={0x0, 0x1, "57f354c250de051e264caec74f6b848803964eb2a96eda3362c98c565260ae9944cdee16b726bf183f2f214a5191c94d5249ec638959c0a007bf680f6453e601ed788993599a9b67375b5c6fd17edc48a92fb9fa4ba9dd87367ecf331a001f6ab086de72198c77d2b5ba548ac2c7e053b6cd3fe1ec754b714d4e045c9f15e2f9198263e34cc7cbea584139a90a2bbddd515d6f706fb35e0e21ca7d524d41f057f252ae90b00a1e6f2af47ce577c7a3114796ebba2388f35bf8265737"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "d47d9237b53cdc6253bc97eaa3aa"}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "af0f5d6b59c057ea897692b2ef8723e7ba58112e03307c030a08f84e63bde86dfb6fa32f895850765d268e405fd2eb82c6f00d70661ac8c5ab3031165e547e412264535b6b927d322dabd51db704382b13c068d0668993ffaf018f32e76256a4728d170603c5a4708a3b431c0332d80469c7f6ea921b03ad8b1733334d6d3c42f70356babe1a5e0fb01dcdc5fa64255e4e0f2931a18f6a4c7eb76368d11a634bf605c59ab5be5cde0e994b6e697354807e03def71a9b710d2ab0555ffc98939d7d4b8a260525c4b186e80b0addb79f"}, @NFTA_DATA_VALUE={0x0, 0x1, "0e4efd82ecd6a1921f47e5ded9c4fc3e2ec5f05031e42efbca65d7747eec9ff75c27bea2d5839bf29c2edffe3508f982a7020d290b9952ceb5159a2e95a3ba87739963cf777e0ba00903fb389fe9395e7c2382a9cbe9fe93ffe602ff52b685d667374bebc9a19b8cd28f42751bb25d4f6b39ee1259f78082e3dc82d77117fcca45c6dffbba01287e66"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x0, 0x1, "ea33c57cf25b50842d833a09e88605b129b5e671b1fda2639ca2948d7f51e7c519ced6e42c8243be19621f07d341262fb26d191835e6b20f012faa2c13f5eb834c6c6e03e1e72abfe685ca4e63595f8bba76e4fbedbcfada6333e57b043b594bce0e9294be461389a87e79f2ffd14e"}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x8}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @masq={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x0, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x0, 0x1, 0x1, 0x0, 0x57}, @NFTA_MASQ_FLAGS={0x0, 0x1, 0x1, 0x0, 0x40}]}}}, {0x0, 0x1, 0x0, 0x1, @xfrm={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x0, 0x1, 0x1, 0x0, 0x1e}]}}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x0, 0x3, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}]}}}, {0x0, 0x1, 0x0, 0x1, @reject={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @rt={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @limit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "5667a368cc812793406349a6e11098576216d3f67f34fd62e5a524d641872c4cc43855bc7f4ba1ad063f62eaa8e953d0"}, @NFTA_DATA_VALUE={0x0, 0x1, "643c7e27db098f8c1247f6eb8e094fa3cdd0e238d48f607117b554b5cca3eb1032a0bbad1e903fccbf49abe90ffa6057756f96bf383d6595692f0b4e2a429a8de12135ef63e5568500c7d5990cfab29d86f7bf448e5773f6d378c625b3af86af1efecf1865e031fb25"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "4962c1d6aefac0ca8a418b1a6f897c3ee36e6cf40e6f2447e26e78cada392f453f97d29caddd5fa2ac30199fe35122cdc8914950a7cafd9df8678748d082ae6e1fe5f4"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @synproxy}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tunnel={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x0, 0x2, 0x1, 0x0, 0x12}]}}}, {0x0, 0x1, 0x0, 0x1, @quota={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @inner={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "ef40747ac2447826d37ef8df4b1757f6323bbcbee152491449bb68371b006e011d1777f8e548d7cd11cb4ce8a13161dfdb95fa504bd8582b53b49d9bf968d7f74ce1793b5afa322b4d29ebe6870d63005e1c8d946fde5e870cce0019163592d59b061dacb68dcb99646b26bc9072addb456bf570372431abc357279f6ced59264df08c0ca04b9836e61552390192ad2041f8c87dbac1bb136a34a6788439d578bcad204562725ffaae709f17b275ead5f1ce60b521acfd85cfcebe20bf2901d0f88b5409bf70d8cd2f464c5a5c1e4a7755f1cabbfa5e28b14e38c07f87f89b3651c9f16e"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @last={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x0, 0x1, 0x1, 0x0, 0x124f}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x82ea}, @NFTA_LAST_SET={0x0, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_LAST_SET={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x6}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 716.036139ms ago: executing program 1 (id=5197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_TXQLEN={0x8, 0xd, 0x2}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040804}, 0x4000) 641.447021ms ago: executing program 4 (id=5198): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f0000002b00)=0xa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) recvmmsg(r2, &(0x7f0000005040)=[{{&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f0000000400)=""/130, 0x82}, {&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000000600)=""/152, 0x98}, {&(0x7f00000006c0)=""/87, 0x57}], 0x5, &(0x7f00000007c0)=""/210, 0xd2}, 0x6f6}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/30, 0x1e}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/39, 0x27}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/72, 0x48}], 0x5, &(0x7f0000001b40)=""/232, 0xe8}, 0xfffffff9}, {{&(0x7f0000001c40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)}, {&(0x7f0000001d00)=""/178, 0xb2}], 0x2, &(0x7f0000001e00)=""/18, 0x12}, 0x1}, {{&(0x7f0000001e40)=@xdp, 0x80, &(0x7f0000003c40)=[{&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/218, 0xda}], 0x2, &(0x7f0000003c80)=""/52, 0x34}, 0x1}, {{&(0x7f0000003cc0)=@alg, 0x80, &(0x7f0000004140)=[{&(0x7f0000003d40)=""/120, 0x78}, {&(0x7f0000003dc0)=""/183, 0xb7}, {&(0x7f0000003e80)=""/154, 0x9a}, {&(0x7f0000003f40)=""/220, 0xdc}, {&(0x7f0000004040)=""/87, 0x57}, {&(0x7f00000040c0)=""/62, 0x3e}, {&(0x7f0000004100)=""/19, 0x13}], 0x7, &(0x7f00000041c0)=""/121, 0x79}, 0x10001}, {{&(0x7f0000004240)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000004940)=[{&(0x7f00000042c0)=""/25, 0x19}, {&(0x7f0000004300)=""/231, 0xe7}, {&(0x7f0000004400)=""/152, 0x98}, {&(0x7f00000044c0)=""/111, 0x6f}, {&(0x7f0000004540)=""/118, 0x76}, {&(0x7f00000045c0)=""/234, 0xea}, {&(0x7f00000046c0)=""/133, 0x85}, {&(0x7f0000004780)=""/96, 0x60}, {&(0x7f0000004800)=""/28, 0x1c}, {&(0x7f0000004840)=""/231, 0xe7}], 0xa, &(0x7f0000004a00)=""/81, 0x51}, 0xfffffffd}, {{&(0x7f0000004a80)=@hci, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004b00)=""/67, 0x43}, {&(0x7f0000004b80)=""/225, 0xe1}], 0x2}, 0x6}, {{&(0x7f0000004cc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004d40)=""/209, 0xd1}, {&(0x7f0000004e40)=""/156, 0x9c}], 0x2, &(0x7f0000004f40)=""/236, 0xec}, 0x9}], 0x8, 0x100, &(0x7f0000005240)={0x0, 0x989680}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) 601.086023ms ago: executing program 2 (id=5199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000000000000000bb0800010000000000"], 0x30}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) (async) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r5, 0x3) r6 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r6, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) (async) bind$inet(r6, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r5, 0x101) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = socket$netlink(0x10, 0x3, 0x15) socket$alg(0x26, 0x5, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0x20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5, 0x0, 0x18}}}}}, 0x36) sendmmsg$inet(r3, &(0x7f0000000fc0), 0x0, 0x20000000) (async) sendmmsg$inet(r3, &(0x7f0000000fc0), 0x0, 0x20000000) sendmmsg$inet_sctp(r3, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000008400000007000000ac1e000100000000"], 0x18, 0x4000}], 0x1, 0x20000840) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000008400000007000000ac1e000100000000"], 0x18, 0x4000}], 0x1, 0x20000840) 600.314139ms ago: executing program 3 (id=5200): socketpair(0x1d, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)=')+--[\x00', &(0x7f0000000080)='\x15\x00', 0x7fff}) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x180, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x75}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb8, @loopback, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0xc, 0x10000, @loopback, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x101, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}}}}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x20004804) r2 = socket$inet(0x2, 0x6, 0xffffffff) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000340)) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000380)=@nl=@unspec, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/255, 0xff}, {&(0x7f0000000600)=""/220, 0xdc}, {&(0x7f0000000700)=""/18, 0x12}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/249, 0xf9}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x8, &(0x7f0000000b80)=""/187, 0xbb}, 0x8}, {{&(0x7f0000000c40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/106, 0x6a}], 0x1}, 0x4}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000e00)=""/168, 0xa8}, {&(0x7f0000000ec0)=""/4, 0x4}, {&(0x7f0000000f00)=""/253, 0xfd}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x4, &(0x7f0000002040)=""/49, 0x31}, 0x40}, {{&(0x7f0000002080)=@generic, 0x80, &(0x7f0000002440)=[{&(0x7f0000002100)=""/6, 0x6}, {&(0x7f0000002140)=""/84, 0x54}, {&(0x7f00000021c0)=""/82, 0x52}, {&(0x7f0000002240)=""/72, 0x48}, {&(0x7f00000022c0)=""/110, 0x6e}, {&(0x7f0000002340)=""/26, 0x1a}, {&(0x7f0000002380)=""/136, 0x88}], 0x7, &(0x7f00000024c0)=""/177, 0xb1}, 0x2}, {{&(0x7f0000002580)=@nl=@unspec, 0x80, &(0x7f0000002800)=[{&(0x7f0000002600)=""/172, 0xac}, {&(0x7f00000026c0)=""/76, 0x4c}, {&(0x7f0000002740)=""/139, 0x8b}], 0x3, &(0x7f0000002840)=""/131, 0x83}, 0x400}], 0x5, 0x40002000, &(0x7f0000002a40)={0x0, 0x989680}) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000002a80)={r2, 0x4, 0x8, "c0d70e7b7bc4d53b0380038dd736a75a8e91ac9157fb3eaf58eca958366538efe3b13d34c8e30e07865dfdff82bd026473a674b53f345823bd7a23746d4722bfdd0e3aa2228a8437c8ab4f6ba617e290fa3262cc421e2244fc50f38be17bb34b5b393d99f6e4e221dcd8a2cf4a180f28f507267e0ad1b880f3488b98c0285b2d37548bac209336abb7f5aa21305f1c63143be0c0589a847b7ba5e3bfb27b04c2d3641f89290057f4cc8f236aaed43a2767cadd849eb3589410ef930624c054a8ef0a"}) (async) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000002b80), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000002bc0)='THAWED\x00', 0x7) (async) recvmmsg(r2, &(0x7f0000005500)=[{{&(0x7f0000002c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000002c80)=""/19, 0x13}, {&(0x7f0000002cc0)=""/117, 0x75}, {&(0x7f0000002d40)=""/34, 0x22}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x5, &(0x7f0000004e00)=""/227, 0xe3}, 0x7}, {{&(0x7f0000004f00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000004f80)=""/51, 0x33}, {&(0x7f0000004fc0)=""/19, 0x13}, {&(0x7f0000005000)=""/222, 0xde}, {&(0x7f0000005100)=""/223, 0xdf}, {&(0x7f0000005200)=""/26, 0x1a}], 0x5, &(0x7f00000052c0)=""/105, 0x69}, 0x3ff}, {{&(0x7f0000005340)=@nfc_llcp, 0x80, &(0x7f0000005400)=[{&(0x7f00000053c0)=""/7, 0x7}], 0x1, &(0x7f0000005440)=""/148, 0x94}, 0x7f}], 0x3, 0x100, &(0x7f00000055c0)) sendmsg$kcm(r0, &(0x7f0000005800)={&(0x7f0000005600)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005680)="d59d46cd7a89ef46739bd64609b10cdf2ed8e5c6b16bd7df4bd28e83ec40366217152370a5d9a3d7f389444952c37aaae043f34daa7e0d875a1cc6ba216a501c9bc00dbc4b1c4aad734f8164a3980d7693321767f34b7a0af274db8d8df122679f236d88623534cfb9a149393c2551202752c4dbaf85c27db4abd31628673946806855974f039eac7857073113ace10cb0911592f702d94269bfbf7ddd5911cac62215e7e3e678eaf2d7ab17b1480808697b44b42c8fba738122e44769e30c94b1d837", 0xc3}, {&(0x7f0000005780)="d2e57c603a84f10ddd199f1f3bb3144f64b57bf3ee393af6d32e2ddcd91c8e183aacbd605a4a2a1784e25806af03e7e921ca30d3aaa025ec84", 0x39}], 0x2}, 0x44) (async) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000005840)=0x6, 0x4) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000005880), 0x12) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000058c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1b5c, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000059c0)={{r8, 0xffffffffffffffff}, &(0x7f0000005940), &(0x7f0000005980)}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000005ec0)={&(0x7f0000005a00)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000005e40)=[{&(0x7f0000005a40)="29713b829f2c75ea4f4c153fd7b2070e5d867f52d8afd3e5ee1af70dc1a0aa068847a49b11", 0x25}, {&(0x7f0000005a80)="9f39d0d17959f2d35d6d7af6f43acf2a8988ab89ce9926d2b81c6e67ac8b29ba64c8a3fafd344d8342d6d11c4d33fae0f8ded3c907bc04672a3d1f4bcf83c0a19017dc0e5bc24478", 0x48}, {&(0x7f0000005b00)="7fae58e300edb98def0cdc8ed2cedcd35c18c98f6d0f8cd49e1468048a6a388a4bc71cadc6097f694b432772bfc1370fd9ff569eab7f79f120b0ead96231504094f9a51efb9e0c5e2130c85890d325004a5313c018bf2626a16117939e8c014198773b6471c9aabe2b0d5b0496b6d23e26c20ffa9c3bf30814a1b6d426cf088d67c1733a4ddfe9d30518a72fe3d8fd2aff5aed544f05d8ddfc917d71f301b7ff2da407cc9857d8", 0xa7}, {&(0x7f0000005bc0)="a76ba95796c2a4a3f9d625a9cac97dcf3e5455da9e700cd458537f9e3688d47026d149db8e8026d801ea60401c7fae621003e69236f9c77876514ccf4cac8a73e726252e5a871924559d7624ac0a63847b3e274c72a60358633498d9618e16e1413fa4b3a1b3b45cc7f8023ca1cedc54c15782c1", 0x74}, {&(0x7f0000005c40)="3047f66b472b1bedd8c02565e4b463a2d0a975b4760d66526d0e584669625dfb5de29da6411fa12230158d2f2be3b1b9daed787014a9af14ad9f125803e013638af09f8047a02b876524a037a780be1dbc5fdbb04fd0296b8b0e30f7a2b71df55de22e90206399d7502961a3b0dde46eaf20cb7831782a55ea0da40eda70435e929ac7b4c43b6215445c7bef4859f8d87affad05b2aa42315c8119f494b9de26bffc417c833f5ef8f6d947a2c0d70fc6aa622a80088704828f047c6ad143dcf7e7f5ee5b49f033f22c", 0xc9}, {&(0x7f0000005d40)="57cdb899f4ed60a198e58b843c7bf684abaeac60c9f73a8b901cb9cb032e81c66ff10eb8d66facd3d2aa3308", 0x2c}, {&(0x7f0000005d80)="9c112d97a8ee2bf2818be72a9c757b93109e2f6e", 0x14}, {&(0x7f0000005dc0)="015a34eb2619212643673bb5d1b0d5ca896e924ad66e0f7275828388ad2c7e1d832ebe1d2efde5748eaaf1d2626012bdee6529a199bbf03c72e035d73d2b2d195eaf0d1c3e40f069af0a7032cb853a6925e430b91c6c92fecd", 0x59}], 0x8}, 0x4014) (async) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000005f00)={{0x2, 0x4e22, @loopback}, {0x1, @local}, 0x24, {0x2, 0x4e21, @empty}, 'veth0_to_team\x00'}) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r10, &(0x7f0000005f80)="0017aa4d3ed13ae4af096adb8c1c2abee75467fb4336e53c45f33327edc4709ed438e357fa5ca1c086b8794630002ba8244d1a6d534f59a01de4565999880958835c65dffde31029ee4a095a7ea32e401def2b92546fa9d98b329d0a968dad7961254698f6e639a6a6d1a6e1759a01484b72c1c3cff6057241ae1a9dad5be94e99c2f52a8c058fb2b65d8f4c330f3e2419414ba586be270ac02b07f87ded7c47bf33e84ba06d732385a6db2909160015cf94bfd3d49c2eb01e9cf1970c897aea4437548cadedffeaa1cfcd", 0xcb, 0x40010, &(0x7f0000006080)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000060c0)={'erspan0\x00', 0x0}) getsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, &(0x7f0000006100)=0x1000, &(0x7f0000006140)=0x4) (async) getsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000006180), &(0x7f00000061c0)=0x4) (async) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000063c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000006200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000062c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x1e, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000006300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000006340)={0x5, 0xb, 0x9, 0x3}, 0x10, 0x216b8, 0xffffffffffffffff, 0x0, &(0x7f0000006380)=[r9, r8, r9, r8]}, 0x94) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006580)={@map=r9, 0x2e, 0x0, 0x64, &(0x7f0000006480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000064c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000006600), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000065c0)={@map=r8, r12, 0xd, 0x2000, r5, @value=r14, @void, @void, @void, r13}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006740)={@fallback=r5, 0xb, 0x0, 0x5, &(0x7f0000006640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000006680)=[0x0, 0x0, 0x0], &(0x7f00000066c0)=[0x0, 0x0], &(0x7f0000006700)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000006780)=0x6, 0x8) (async) setsockopt$inet_buf(r0, 0x0, 0x28, &(0x7f00000067c0)="3945e76473bd7c390c24542b645c72090dc87ae8b1e6f38c648590e2856683e30142ecbec353f64e754d2956a9be416dc9359ef65a3c489b6d46259b069c437388b63fce1987891ca867394d9424ee6a95b363f24c0848dec2", 0x59) (async) accept4$ax25(0xffffffffffffffff, &(0x7f0000006900)={{0x3, @null}, [@rose, @bcast, @remote, @null, @remote, @remote, @rose, @bcast]}, &(0x7f0000006980)=0x48, 0x80000) 504.839772ms ago: executing program 1 (id=5201): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x0, 0xc, 0x5c}, 0x2c) 504.099456ms ago: executing program 0 (id=5202): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_bt_hci(r0, 0xc0000031, &(0x7f0000000180)="7f74282c81240c") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20044050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x20}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000000)=0x4000003) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x6, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r9, 0x0, 0x25, 0x12, @val=@tcx={@void, @value=r9}}, 0x1c) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5400000009060108000000000e000000070080000900020073797a31000000000500010007000000078018000180d66e8c74a114000240fe8000000000000000000000000000bb060004400e1f8800000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 436.608102ms ago: executing program 3 (id=5203): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f00005d7000/0x2000)=nil, 0x2000, 0xb635773f07ebbeef, 0x8031, r8, 0x215eb000) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x61d0, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYBLOB="b871a37cd89c69a72c4c", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000280)={0x0, 0xffffffffffffffaf, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x0, 0x8, 0x200, r9, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3, 0x9}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8020000f8ffffffb703000008000000b70400000017000085000000030000009500000000000000"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=0x4) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 195.628597ms ago: executing program 0 (id=5204): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x6b, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x7, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 64) r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000000100)='b', 0x1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100ffffffff08000200020000002c00048005000300020000000500030000000000050003000000000005000300050000000500030001"], 0x50}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) unshare(0x22020600) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r9, @ANYBLOB="06000000000000bf658712000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000500"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r10, &(0x7f00000007c0)="736f26948d059ca704cb9aa9dc00e0d238b530b8f40b8fe3350ae21e85b405885410ccd62a181d03dbd3c6a68961ea6c98aa841130a81f6996b2e73ffe6007d8b68b226c6fbd7520b0c6b503a235ebef86681f719e6bd392db50ddc83ff93c9309917b824005af2fa450a5694f48fb55f9b4afd2756377e68de2e54c846495da49a46442bcea10ca37d0241a1ac2917315746b6dc5d9c6300af559b3aa982297965579328768a803140c0062831b12fdd33b00cd0d3517657d56586c72526cfb8f678016de5c3662050118e5b097ab6acccbac283e4f9b3075489f86748d684f14a6a95d6dfc12d35abd331ec35a20afe4c81cac434a888ae5afaa3a263b758f460e7cda7f4ad6913a4a93d57da6c3dbacc3697d39cb7c92e909232cea7bddf51213e2904501b9d5a1050103d679487c0c6c3d65b636cbbf1e4bdff68d5758b261ed0277383f558c4e0fdf07b3d8cd21c12bf7bb94ab921acd23bb57972c5be7a1b805276863235fc9e932ea91a7730c6e7a0801d80b6c45840568b45db987b50b913daa13be33694731992a21885d889334780cce9438ec9b6e3d112bc7e76b8b69ec4be00cfd42d3454fc928e77a529b122819212df2719d3047ab85f34460321644bd3a46c886af284d5b46688dafd63ce9258468be2972ac615f29432768802ba5c33b94fe69711101ded7086b7eed9c642867a08991d85378af850672594c58614628b34f0d6fd2447a6cb4be6c4e137ed7e5751b3ec1701992f5910c842776e78aa0ddc4d677b51d62187c9d8a54112c9590f81f2c8fda52680cbcd273c4eae589d38e052aea161eba6b44ce38c158f1fd8c67de5675d2f7cee6acc896f6a0e961e0f916c87f4c3d165710828cf57b", &(0x7f00000006c0)=""/205}, 0x20) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 96.751371ms ago: executing program 1 (id=5205): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000340)="b8b574e3", 0x4}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x9}, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x1, 0x100000000, 0x7}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x5392, 0xfb9d, 0x2, {r1, @in={{0x2, 0x4e21, @local}}, 0x81, 0xb57, 0xc, 0x4b, 0x9}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 72.263525ms ago: executing program 3 (id=5206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001340)=""/4051, 0xfd3}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r2, 0x301, 0x70bd2b, 0x25dfdbfc, {{0x5}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010) syz_emit_ethernet(0x65, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @wg=@cookie={0x3, 0x3, "551f23fbec52c993863cb15aaac0b48038d8b1b36315dd06", "2667c852fb35300fd418f4e380136a85114b71fac1b419e40265395c1c85179d"}}}}}}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="ed1df4f172f7a76923b48d97c9cac9b3663c7ce285a8f536710943086657ed6a641978aeb978a7961509b3ea3612afc861918ecf48683fa1971ad1256e240a0873b3c20a290ad5395bbdb4bb7e175f86485e"], 0x28}, 0x1, 0x6c00}, 0x0) 738.163µs ago: executing program 1 (id=5207): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000004c0)=0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069002a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@float={0x3, 0x0, 0x0, 0x10, 0x2}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x2e]}}, &(0x7f0000000140)=""/87, 0x33, 0x57, 0x1, 0xffff464e}, 0x28) write$cgroup_type(r2, &(0x7f0000000280), 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 2 (id=5208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x3, 0x5, 0x81, 0x8000, 0x1, 0x4d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x4}, 0x50) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000080)=0x9447, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0xffe0}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000007ff00001c0200000600000000000000", @ANYRES32=r2, @ANYBLOB="00c000"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000004000000040000000600"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r9}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010f000000000000000067000000080001003c00000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800c300741300000800c40001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x40040) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x3a, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "2231871043e372c6088e52cd75cfd619cb846f518e7b0086"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x0, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x0, 0xe7, "444c44bbfaaf0c179fd712895e5a7d7f5c359f334dcbdf06"}, @NL80211_ATTR_MNTR_FLAGS={0x0, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL, @NL80211_MNTR_FLAG_PLCPFAIL, @NL80211_MNTR_FLAG_CONTROL, @NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_ACTIVE, @NL80211_MNTR_FLAG_CONTROL, @NL80211_MNTR_FLAG_PLCPFAIL, @NL80211_MNTR_FLAG_PLCPFAIL]}]]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): adv_slave_0 (retrying later): interface not active [ 380.032593][T17833] __nla_validate_parse: 4 callbacks suppressed [ 380.032616][T17833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3228'. [ 380.054092][T17832] xt_hashlimit: size too large, truncated to 1048576 [ 380.061090][T17730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.068699][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.144070][T17730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.161274][T17838] xt_ecn: cannot match TCP bits for non-tcp packets [ 380.230219][ T51] Bluetooth: hci2: command tx timeout [ 380.317199][T17730] hsr_slave_0: entered promiscuous mode [ 380.324526][T17730] hsr_slave_1: entered promiscuous mode [ 380.338945][T17730] debugfs: 'hsr0' already exists in 'hsr' [ 380.357340][T17730] Cannot create hsr debugfs directory [ 380.429204][T17850] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20001 [ 380.625332][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3229'. [ 380.793284][T17855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.973506][T17730] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 380.982200][T17868] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3233'. [ 380.995088][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 381.045324][T17870] netlink: 'syz.4.3234': attribute type 83 has an invalid length. [ 381.161981][T17730] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 381.317324][T17730] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 381.451332][T17730] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 381.480557][T17885] syzkaller1: entered promiscuous mode [ 381.486301][T17885] syzkaller1: entered allmulticast mode [ 381.509257][T17888] erspan0: entered promiscuous mode [ 381.897820][T17730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.933781][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.967403][T17730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.997683][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.013009][T17730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 382.045541][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.059664][T17730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 382.089716][T17730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.106349][T17906] syzkaller0: entered promiscuous mode [ 382.118093][T17906] syzkaller0: entered allmulticast mode [ 382.178622][T17906] tc action pedit offset -2147483648 out of bounds [ 382.185859][T17906] tc action pedit offset -2147483648 out of bounds [ 382.192537][T17906] tc action pedit offset -2147483648 out of bounds [ 382.199126][T17906] tc action pedit offset -2147483648 out of bounds [ 382.205679][T17906] tc action pedit offset -2147483648 out of bounds [ 382.212304][T17906] tc action pedit offset -2147483648 out of bounds [ 382.218865][T17906] tc action pedit offset -2147483648 out of bounds [ 382.225386][T17906] tc action pedit offset -2147483648 out of bounds [ 382.231924][T17906] tc action pedit offset -2147483648 out of bounds [ 382.238478][T17906] tc action pedit offset -2147483648 out of bounds [ 382.245133][T17906] 0: reclassify loop, rule prio 0, protocol 800 [ 382.308622][ T51] Bluetooth: hci2: command tx timeout [ 382.632145][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.670540][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.742481][T10049] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.749814][T10049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.822276][T10049] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.829503][T10049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.897118][T17959] netlink: 'syz.2.3257': attribute type 1 has an invalid length. [ 382.919606][T17959] netlink: 'syz.2.3257': attribute type 2 has an invalid length. [ 382.937477][T17959] netlink: 'syz.2.3257': attribute type 12 has an invalid length. [ 382.946265][T17960] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3258'. [ 382.966637][T17960] openvswitch: netlink: Missing key (keys=40, expected=100) [ 383.048091][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 383.056166][ C1] lec:lec_tx_timeout: lec0 [ 383.061195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 383.110561][T17973] netlink: 'syz.0.3261': attribute type 10 has an invalid length. [ 383.139988][T17973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.165767][T17973] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 383.187601][T17977] netlink: 'syz.0.3261': attribute type 10 has an invalid length. [ 383.219046][T17977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3261'. [ 383.271157][T17977] batadv0: entered promiscuous mode [ 383.277321][T17977] batadv0: entered allmulticast mode [ 383.288569][T17977] bond0: (slave batadv0): Releasing backup interface [ 383.312064][T17977] bridge0: port 3(batadv0) entered blocking state [ 383.319027][T17977] bridge0: port 3(batadv0) entered disabled state [ 383.574635][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.680393][T12169] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 383.691296][T12169] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 383.727747][T17730] veth0_vlan: entered promiscuous mode [ 383.739522][T18001] netlink: 'syz.0.3269': attribute type 4 has an invalid length. [ 383.765142][T17730] veth1_vlan: entered promiscuous mode [ 383.771842][T18001] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3269'. [ 383.910253][T18009] syzkaller0: entered promiscuous mode [ 383.921785][T18009] syzkaller0: entered allmulticast mode [ 383.943190][T17730] veth0_macvtap: entered promiscuous mode [ 383.954795][T17730] veth1_macvtap: entered promiscuous mode [ 383.996232][T18017] lo: entered promiscuous mode [ 384.005187][T18017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.074865][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.131879][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.166442][T10050] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.187532][T18023] netlink: 'syz.0.3275': attribute type 32 has an invalid length. [ 384.203590][T10050] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.218908][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 384.229444][T10050] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.316999][T18023] bond2: Setting coupled_control to off (0) [ 384.334227][T10057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.389618][ T51] Bluetooth: hci2: command tx timeout [ 384.484143][T18046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3279'. [ 384.601369][T18035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.621155][T18035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.726287][T18050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3281'. [ 384.740375][T10047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.756512][T10047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.119950][T18057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3282'. [ 385.518468][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 385.599844][T18077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3287'. [ 385.683057][T18077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.752396][T18077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.790961][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'. [ 385.800575][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'. [ 385.836564][T18082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.847822][T18089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3289'. [ 385.875902][T18077] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3287'. [ 385.899057][T18077] netlink: Conntrack attr has 3 unknown bytes [ 385.907700][T18077] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3287'. [ 385.937020][T18095] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.176712][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 386.400664][T18124] netlink: 'syz.1.3300': attribute type 6 has an invalid length. [ 386.417070][T18126] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3301'. [ 386.470528][ T51] Bluetooth: hci2: command tx timeout [ 386.703095][T18143] gre1: entered promiscuous mode [ 386.720561][T18143] gre1: entered allmulticast mode [ 386.800617][T18143] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 386.820463][T18143] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 386.949342][ C0] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 387.111566][T18160] netlink: 'syz.2.3310': attribute type 4 has an invalid length. [ 387.140477][T18161] sctp: [Deprecated]: syz.0.3311 (pid 18161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.140477][T18161] Use struct sctp_sack_info instead [ 387.214495][T18161] sctp: [Deprecated]: syz.0.3311 (pid 18161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.214495][T18161] Use struct sctp_sack_info instead [ 387.518957][T18188] syzkaller0: entered promiscuous mode [ 387.524612][T18188] syzkaller0: entered allmulticast mode [ 387.566200][T18193] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 387.722476][T18201] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 387.749859][T18201] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 388.068554][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 388.076653][ C1] lec:lec_tx_timeout: lec0 [ 389.597410][T18141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.785466][T18206] SET target dimension over the limit! [ 390.028593][T18222] syzkaller0: entered promiscuous mode [ 390.034187][T18222] syzkaller0: entered allmulticast mode [ 390.292609][T18234] __nla_validate_parse: 3 callbacks suppressed [ 390.292632][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3331'. [ 390.358395][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3331'. [ 390.372341][T18238] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3332'. [ 390.685370][T18251] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 390.705687][T18254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.730488][T18257] netlink: 162044 bytes leftover after parsing attributes in process `syz.1.3335'. [ 390.841796][T18264] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 390.869352][T18264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.882506][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 390.893173][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3339'. [ 391.364263][T18290] bond3: entered allmulticast mode [ 391.397720][T18275] bridge3: entered promiscuous mode [ 391.408124][T18275] bridge3: entered allmulticast mode [ 391.437464][T18275] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 391.691540][T18318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3350'. [ 391.702848][T18320] xt_hashlimit: size too large, truncated to 1048576 [ 391.730628][T18321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3348'. [ 391.775042][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.867177][T18323] bridge_slave_0 (unregistering): left allmulticast mode [ 391.878519][T18323] bridge_slave_0 (unregistering): left promiscuous mode [ 391.886026][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.105676][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 392.124272][T18334] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 392.133645][T18334] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 394.206023][T18278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.371491][T18337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3354'. [ 394.389681][T18340] netlink: 'syz.4.3356': attribute type 8 has an invalid length. [ 394.416214][T18340] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.525557][T18353] netlink: 'syz.0.3358': attribute type 1 has an invalid length. [ 394.547508][T18356] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 394.565249][T18353] netlink: 'syz.0.3358': attribute type 2 has an invalid length. [ 394.768863][T18375] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 394.802178][T18375] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 395.076736][T18397] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 395.107055][T10045] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.117530][T10045] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.127549][T10045] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.188482][T10045] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.202037][T18403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.355329][T18410] Cannot find del_set index 1 as target [ 395.375803][T18413] sctp: [Deprecated]: syz.0.3374 (pid 18413) Use of int in max_burst socket option. [ 395.375803][T18413] Use struct sctp_assoc_value instead [ 395.483144][T18415] __nla_validate_parse: 11 callbacks suppressed [ 395.483167][T18415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3376'. [ 395.507398][T18418] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 395.514724][T18418] IPv6: NLM_F_CREATE should be set when creating new route [ 395.606885][T18422] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3379'. [ 395.621454][T18422] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3379'. [ 395.688515][T18425] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 395.769621][T18425] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 395.805873][T18425] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 396.115094][T18446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.122421][T18446] IPv6: NLM_F_CREATE should be set when creating new route [ 396.234177][T18446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3384'. [ 396.669123][T18463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3388'. [ 396.689102][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'. [ 396.804695][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3388'. [ 397.008481][T18469] bond1: entered promiscuous mode [ 397.015080][T18469] bond1: entered allmulticast mode [ 397.179269][ T29] audit: type=1800 audit(1775959402.776:4): pid=18490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3394" name="memory.events" dev="tmpfs" ino=241 res=0 errno=0 [ 397.272554][T18488] bond1: (slave bond_slave_1): Device is not our slave [ 397.287099][T18488] bond1: option active_slave: invalid value (bond_slave_1) [ 397.326307][T18499] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.334410][T18488] bond1 (unregistering): Released all slaves [ 397.376572][T18499] IPv6: Can't replace route, no match found [ 397.443627][T18496] netlink: 'syz.2.3393': attribute type 10 has an invalid length. [ 397.513531][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.550088][T18496] bridge_slave_1: left allmulticast mode [ 397.558324][T18496] bridge_slave_1: left promiscuous mode [ 397.564175][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.652938][T18514] netlink: 'syz.0.3402': attribute type 1 has an invalid length. [ 397.675609][T18496] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 397.969434][T18529] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.3405'. [ 398.041672][T18533] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.3407'. [ 398.259226][T18547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3410'. [ 398.615738][T18568] xt_hashlimit: size too large, truncated to 1048576 [ 398.761676][T18576] netlink: 'syz.1.3419': attribute type 1 has an invalid length. [ 400.181951][T18658] netlink: 'syz.4.3439': attribute type 1 has an invalid length. [ 400.201420][T18627] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.593877][T18676] netlink: 'syz.2.3447': attribute type 24 has an invalid length. [ 400.684308][T18682] __nla_validate_parse: 49 callbacks suppressed [ 400.684331][T18682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3448'. [ 400.756157][T18690] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 400.810667][T18690] bond2: entered promiscuous mode [ 400.819207][T18690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.976329][T18703] IPVS: Error connecting to the multicast addr [ 401.199885][T18710] bond1 (unregistering): Released all slaves [ 401.221489][T18721] veth1_macvtap: left promiscuous mode [ 401.331511][T18723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3461'. [ 401.654957][T18743] syzkaller0: entered promiscuous mode [ 401.667470][T18743] syzkaller0: entered allmulticast mode [ 401.784602][T18750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3469'. [ 401.890040][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 402.010065][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3474'. [ 402.081131][T18765] delete_channel: no stack [ 402.112003][T18769] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3476'. [ 403.434386][T18850] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3496'. [ 403.613840][T18857] ip6t_srh: unknown srh match flags 4000 [ 404.266853][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 404.636738][ T24] IPVS: starting estimator thread 0... [ 404.659285][T18905] netlink: 'syz.4.3508': attribute type 9 has an invalid length. [ 404.728140][T18906] IPVS: using max 27 ests per chain, 64800 per kthread [ 404.929611][T18916] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3514'. [ 405.155822][T18929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3518'. [ 405.231469][T18936] netlink: 'syz.4.3521': attribute type 10 has an invalid length. [ 406.508251][T19014] __nla_validate_parse: 1 callbacks suppressed [ 406.508272][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'. [ 406.559801][T19018] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.591640][T19018] bridge_slave_0 (unregistering): left allmulticast mode [ 406.603440][T19018] bridge_slave_0 (unregistering): left promiscuous mode [ 406.611363][T19018] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.644903][T19023] veth1: mtu less than device minimum [ 406.791510][T19030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3549'. [ 406.894029][T19038] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 406.910461][T19038] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 406.950446][T19040] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3552'. [ 407.060239][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 407.438624][ T5193] block nbd1: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 210 seconds [ 407.451275][ T5193] block nbd1: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 210 seconds [ 407.462361][ T5193] block nbd1: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 210 seconds [ 407.473491][ T5193] block nbd1: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 210 seconds [ 407.592268][T19077] netlink: 'syz.3.3565': attribute type 16 has an invalid length. [ 407.604196][T19081] bond1: Removing last arp target with arp_interval on [ 407.628230][T19077] netlink: 'syz.3.3565': attribute type 17 has an invalid length. [ 407.656554][T19079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3568'. [ 407.709299][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3571'. [ 407.740965][T19077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.791708][T19090] bond2 (unregistering): Released all slaves [ 407.824682][T19091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.843275][T19094] h: entered promiscuous mode [ 408.017527][T19107] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3575'. [ 408.185390][T19124] syzkaller1: entered promiscuous mode [ 408.195410][T19124] syzkaller1: entered allmulticast mode [ 408.242584][T19126] sctp: [Deprecated]: syz.0.3580 (pid 19126) Use of int in maxseg socket option. [ 408.242584][T19126] Use struct sctp_assoc_value instead [ 408.294682][T19129] Bluetooth: MGMT ver 1.23 [ 408.424864][T19141] veth0: entered promiscuous mode [ 408.512410][T19140] veth0: left promiscuous mode [ 408.620601][T19156] lo: entered promiscuous mode [ 408.646937][T19156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.706838][T19164] netlink: 'syz.4.3587': attribute type 1 has an invalid length. [ 408.735208][T19164] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3587'. [ 408.874112][T19172] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3593'. [ 408.936676][T19178] netlink: 'syz.3.3595': attribute type 30 has an invalid length. [ 409.044147][T19182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3596'. [ 409.092822][T19182] netlink: 'syz.1.3596': attribute type 6 has an invalid length. [ 409.106604][T19190] Bluetooth: MGMT ver 1.23 [ 409.129384][T19182] netlink: 'syz.1.3596': attribute type 5 has an invalid length. [ 409.154905][T19182] netlink: 'syz.1.3596': attribute type 6 has an invalid length. [ 409.187144][T19182] netlink: 'syz.1.3596': attribute type 5 has an invalid length. [ 409.216323][T19182] netlink: 'syz.1.3596': attribute type 6 has an invalid length. [ 409.465654][T19204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.991251][ T5947] IPVS: starting estimator thread 0... [ 410.111908][T19239] IPVS: using max 28 ests per chain, 67200 per kthread [ 410.332639][ T8579] lec:lec_start_xmit: lec0:No lecd attached [ 410.991992][T19296] openvswitch: netlink: EtherType 0 is less than min 600 [ 411.489158][T10046] tipc: Subscription rejected, illegal request [ 411.536961][T19328] delete_channel: no stack [ 411.719725][T19330] __nla_validate_parse: 198 callbacks suppressed [ 411.719760][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3644'. [ 411.811373][T19334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3645'. [ 414.396569][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'. [ 414.410742][T19340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3648'. [ 414.464829][T19341] validate_nla: 127 callbacks suppressed [ 414.464857][T19341] netlink: 'syz.1.3647': attribute type 4 has an invalid length. [ 414.495388][T19339] macvtap1: entered promiscuous mode [ 414.501071][T19341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3647'. [ 414.510246][T19339] vlan0: entered promiscuous mode [ 414.516650][T19346] netlink: 'syz.1.3647': attribute type 4 has an invalid length. [ 414.526937][T19339] macvtap1: entered allmulticast mode [ 414.533626][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3647'. [ 414.545031][T19339] vlan0: entered allmulticast mode [ 414.550593][T19339] veth0_vlan: entered allmulticast mode [ 414.583210][T19353] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3649'. [ 414.593397][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3649'. [ 414.621221][T19341] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3647'. [ 414.663798][T19353] bond0: entered promiscuous mode [ 414.688351][T19353] bond_slave_0: entered promiscuous mode [ 414.694277][T19353] bond_slave_1: entered promiscuous mode [ 414.717708][T19357] sctp: [Deprecated]: syz.4.3651 (pid 19357) Use of int in max_burst socket option. [ 414.717708][T19357] Use struct sctp_assoc_value instead [ 414.725187][T19353] bridge_slave_1: entered promiscuous mode [ 414.770681][T19353] bond0: left promiscuous mode [ 414.778113][T19353] bond_slave_0: left promiscuous mode [ 414.806415][T19353] bond_slave_1: left promiscuous mode [ 414.816493][T19353] bridge_slave_1: left promiscuous mode [ 414.824004][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3651'. [ 415.307444][T19401] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 415.371890][T19399] syzkaller0: entered promiscuous mode [ 415.377431][T19399] syzkaller0: entered allmulticast mode [ 415.908267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 415.916361][ C1] lec:lec_tx_timeout: lec0 [ 417.071492][T19419] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 417.072741][T19426] __nla_validate_parse: 3 callbacks suppressed [ 417.072762][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3669'. [ 417.154414][T19434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3671'. [ 417.203772][T19434] xt_hashlimit: size too large, truncated to 1048576 [ 417.244086][T19434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3671'. [ 417.273591][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3671'. [ 417.325941][T19447] netlink: 'syz.1.3675': attribute type 1 has an invalid length. [ 417.338118][T19447] netlink: 'syz.1.3675': attribute type 1 has an invalid length. [ 417.438822][T19447] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3675'. [ 417.449115][T19447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3675'. [ 417.689459][T19462] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 417.733676][T19461] syzkaller0: entered promiscuous mode [ 417.940506][T19481] Cannot find set identified by id 0 to match [ 417.946961][T19481] Cannot find set identified by id 0 to match [ 417.953947][T19481] Cannot find set identified by id 0 to match [ 417.985534][T19481] Cannot find set identified by id 0 to match [ 418.005623][T19481] Cannot find set identified by id 0 to match [ 418.014557][T19481] Cannot find set identified by id 0 to match [ 418.022441][T19482] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 418.040781][T19482] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 418.088990][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3689'. [ 418.106313][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c2e0000: rx timeout, send abort [ 418.133683][T19488] netlink: 'syz.0.3688': attribute type 10 has an invalid length. [ 418.155275][T19488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3688'. [ 418.194490][T19488] dummy0: entered promiscuous mode [ 418.214621][T19488] bridge0: port 1(dummy0) entered blocking state [ 418.243542][T19488] bridge0: port 1(dummy0) entered disabled state [ 418.251415][T19488] dummy0: entered allmulticast mode [ 418.264303][T19488] bridge0: port 1(dummy0) entered blocking state [ 418.270946][T19488] bridge0: port 1(dummy0) entered forwarding state [ 418.312890][T19504] netlink: 'syz.3.3691': attribute type 8 has an invalid length. [ 418.328398][T19504] sch_fq: defrate 0 ignored. [ 418.527387][T19515] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3691'. [ 418.600619][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cd41800: rx timeout, send abort [ 418.611171][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806c2e0000: abort rx timeout. Force session deactivation [ 418.762331][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3698'. [ 419.002654][T19539] netlink: 'syz.1.3702': attribute type 1 has an invalid length. [ 419.011828][T19536] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 419.024130][T19536] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 419.061703][T19539] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 419.109676][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cd41800: abort rx timeout. Force session deactivation [ 419.434941][T19568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.572125][T19575] netlink: 'syz.3.3714': attribute type 21 has an invalid length. [ 419.606710][T19575] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.683286][T19575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.690592][T19575] IPv6: NLM_F_CREATE should be set when creating new route [ 419.697895][T19575] IPv6: NLM_F_CREATE should be set when creating new route [ 419.705191][T19575] IPv6: NLM_F_CREATE should be set when creating new route [ 419.901656][T19596] dummy0: left allmulticast mode [ 419.907724][T19596] bridge0: port 1(dummy0) entered disabled state [ 419.954104][T19596] bridge0: port 3(batadv0) entered disabled state [ 420.010871][T19596] bridge_slave_1: left allmulticast mode [ 420.016840][T19596] bridge_slave_1: left promiscuous mode [ 420.023095][T19596] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.046803][T19596] bond0: (slave bond_slave_0): Releasing backup interface [ 420.066250][T19596] bond0: (slave bond_slave_1): Releasing backup interface [ 420.081579][T19596] team0: Port device team_slave_0 removed [ 420.094238][T19596] team0: Port device team_slave_1 removed [ 420.101266][T19596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.109514][T19596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.119648][T19596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.137360][T19597] team0: Mode changed to "activebackup" [ 420.252121][T19598] team0: Unable to change to the same mode the team is in [ 420.509836][T19623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.701506][T19638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.933852][T19647] bridge0: port 3(ipvlan2) entered blocking state [ 420.941546][T19647] bridge0: port 3(ipvlan2) entered disabled state [ 420.949439][T19647] ipvlan2: entered allmulticast mode [ 420.955589][T19647] bridge0: entered allmulticast mode [ 420.964778][T19647] ipvlan2: left allmulticast mode [ 420.974276][T19647] bridge0: left allmulticast mode [ 421.021237][T19646] bridge0: port 3(ipvlan2) entered blocking state [ 421.039529][T19646] bridge0: port 3(ipvlan2) entered disabled state [ 421.046260][T19646] ipvlan2: entered allmulticast mode [ 421.056722][T19646] bridge0: entered allmulticast mode [ 421.067229][T19646] ipvlan2: left allmulticast mode [ 421.075022][T19646] bridge0: left allmulticast mode [ 421.275103][T19664] gretap0: entered promiscuous mode [ 421.409119][T19672] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 421.417459][T19674] syzkaller0: entered promiscuous mode [ 421.424528][T19674] syzkaller0: entered allmulticast mode [ 421.439375][T19674] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 421.550024][T19679] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 421.681317][T19688] delete_channel: no stack [ 421.887775][T19702] openvswitch: netlink: Flow key attr not present in new flow. [ 422.189114][T19724] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 422.319650][T19730] __nla_validate_parse: 10 callbacks suppressed [ 422.319672][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3756'. [ 422.641213][T19756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3762'. [ 422.665394][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 422.738661][T19761] netlink: 'syz.1.3762': attribute type 83 has an invalid length. [ 422.758426][T19760] x_tables: unsorted underflow at hook 4 [ 422.768884][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3764'. [ 422.779555][T19761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3762'. [ 422.910582][T19767] netlink: 'syz.2.3763': attribute type 16 has an invalid length. [ 422.946952][T19768] veth5: entered allmulticast mode [ 423.018425][T19777] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3769'. [ 423.042474][T19774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3768'. [ 423.089705][T19777] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 423.356565][T19788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3771'. [ 424.080492][T19838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3785'. [ 424.188372][T19841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3786'. [ 424.496838][T19867] tipc: Started in network mode [ 424.518331][T19867] tipc: Node identity 00201, cluster identity 4711 [ 424.525174][T19867] tipc: Enabled bearer , priority 24 [ 424.600662][T19879] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 424.656078][T19879] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.679672][T19879] gretap1: entered promiscuous mode [ 424.696835][T19879] gretap1: entered allmulticast mode [ 424.729176][ T5490] veth0_vlan: left promiscuous mode [ 424.785074][ T5490] veth0_vlan: entered promiscuous mode [ 424.850960][T19887] erspan0: entered promiscuous mode [ 425.068744][T19902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.072732][T19907] netlink: 'syz.0.3801': attribute type 8 has an invalid length. [ 425.091111][T19902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.129887][T19902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.147773][T19902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.648083][ T5947] tipc: Node number set to 2101248 [ 425.701990][T19939] netlink: 'syz.0.3809': attribute type 1 has an invalid length. [ 425.751891][T19939] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 425.809723][T19948] netlink: 'syz.2.3810': attribute type 1 has an invalid length. [ 426.308236][T19975] netlink: 'syz.1.3819': attribute type 1 has an invalid length. [ 427.348876][T20030] netlink: 'syz.3.3831': attribute type 11 has an invalid length. [ 427.367476][T20030] __nla_validate_parse: 12 callbacks suppressed [ 427.367498][T20030] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3831'. [ 427.605808][T20042] netlink: 'syz.4.3835': attribute type 1 has an invalid length. [ 427.611569][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3833'. [ 427.640523][T20042] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 427.827058][T20055] syzkaller0: entered promiscuous mode [ 427.882179][T20055] syzkaller0: entered allmulticast mode [ 428.004233][T20070] netlink: 'syz.3.3839': attribute type 4 has an invalid length. [ 428.081977][T20075] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 428.099743][T20075] netlink: 'syz.3.3839': attribute type 2 has an invalid length. [ 428.133540][T20075] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 428.164754][T20078] netlink: 211804 bytes leftover after parsing attributes in process `syz.3.3839'. [ 428.194605][T20075] netlink: 'syz.3.3839': attribute type 3 has an invalid length. [ 428.197664][T20078] openvswitch: netlink: Key 2 has unexpected len 5 expected 4 [ 428.232962][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3839'. [ 428.902243][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 428.935771][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3843'. [ 428.938772][T10045] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 428.991977][T10049] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 429.018255][T20107] sit0: entered promiscuous mode [ 429.047656][T20107] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3843'. [ 429.063318][T10049] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 429.078743][T10049] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 429.157166][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3848'. [ 429.178664][T20110] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.248258][T20118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3846'. [ 429.943422][T20160] syzkaller0: entered promiscuous mode [ 429.955183][T20160] syzkaller0: entered allmulticast mode [ 430.037787][T20164] syzkaller0: entered promiscuous mode [ 430.044186][T20164] syzkaller0: entered allmulticast mode [ 430.087243][T20168] tipc: Enabling of bearer rejected, media not registered [ 430.266967][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3866'. [ 430.283030][T20175] validate_nla: 3 callbacks suppressed [ 430.283052][T20175] netlink: 'syz.4.3864': attribute type 1 has an invalid length. [ 430.413109][T20175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.452426][T20182] bond2: (slave geneve3): making interface the new active one [ 430.476490][T20182] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 430.706147][T20199] syzkaller0: entered promiscuous mode [ 430.712981][T20199] syzkaller0: entered allmulticast mode [ 430.732807][T20202] macvlan0: entered promiscuous mode [ 430.887150][T20212] Cannot find add_set index 0 as target [ 431.334539][T20238] netlink: 'syz.1.3884': attribute type 1 has an invalid length. [ 431.361737][T20238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.393822][T20238] bond2: (slave geneve2): making interface the new active one [ 431.403077][T20238] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 431.417303][T10045] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 431.426592][T10045] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 431.439765][T10045] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 431.450381][T10045] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 431.929977][T20268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.019922][T20271] macvtap1: entered promiscuous mode [ 432.025506][T20271] macvtap1: entered allmulticast mode [ 432.032220][T20271] veth1_vlan: entered allmulticast mode [ 432.063832][T20271] macvtap2: entered promiscuous mode [ 432.072953][T20271] macvtap2: entered allmulticast mode [ 432.148288][T20271] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 432.181998][T20271] netlink: 'syz.4.3894': attribute type 21 has an invalid length. [ 432.479748][T20299] __nla_validate_parse: 7 callbacks suppressed [ 432.479770][T20299] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3905'. [ 432.526947][T20300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3904'. [ 432.547776][T20299] netlink: 'syz.4.3905': attribute type 1 has an invalid length. [ 432.626990][T20306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3907'. [ 432.653657][T20304] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3906'. [ 432.877703][T20318] mac80211_hwsim hwsim41 syzkaller0: Caught tx_queue_len zero misconfig [ 432.925176][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3912'. [ 432.944721][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3912'. [ 432.972894][T20319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3912'. [ 433.003062][T20319] netlink: 'syz.3.3912': attribute type 1 has an invalid length. [ 433.039885][T20319] netlink: 'syz.3.3912': attribute type 2 has an invalid length. [ 433.389334][T20343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.525978][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 433.544607][T20349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 433.890080][T20369] netlink: 'syz.0.3926': attribute type 1 has an invalid length. [ 433.901615][T20371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3927'. [ 433.915899][T20371] netlink: 'syz.1.3927': attribute type 6 has an invalid length. [ 433.934130][T20371] netlink: 'syz.1.3927': attribute type 5 has an invalid length. [ 433.945266][T20369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 433.970656][T20372] bond5: (slave geneve2): making interface the new active one [ 433.984025][T20372] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 434.279720][T20386] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 434.355657][T20385] syzkaller0: entered promiscuous mode [ 434.428383][T20385] syzkaller0: entered allmulticast mode [ 434.437406][T20390] F: renamed from gre0 (while UP) [ 434.479438][T20395] x_tables: duplicate underflow at hook 2 [ 434.533083][T20390] F: entered allmulticast mode [ 434.913481][T20375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 434.939705][T20375] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 436.479536][T20420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.755768][T20440] ip6t_srh: unknown srh match flags 5F28 [ 437.521076][ T5193] block nbd1: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 240 seconds [ 437.532202][ T5193] block nbd1: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 240 seconds [ 437.543538][ T5193] block nbd1: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 240 seconds [ 437.554833][ T5193] block nbd1: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 240 seconds [ 437.695851][T20464] __nla_validate_parse: 4 callbacks suppressed [ 437.695873][T20464] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3957'. [ 437.711779][T20464] netem: invalid attributes len -24 [ 437.717128][T20464] netem: change failed [ 437.733971][T20486] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3959'. [ 437.896418][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3959'. [ 437.944180][T20487] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 437.980165][T20498] tls_set_device_offload: netdev not found [ 438.514046][T20533] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 438.547634][T20525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3971'. [ 438.771736][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 439.324468][T20582] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3984'. [ 439.516477][T20596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3989'. [ 439.564212][T20602] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 439.581711][T20602] netlink: 'syz.3.3988': attribute type 11 has an invalid length. [ 439.600425][T20602] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3988'. [ 439.637397][T20602] netlink: 'syz.3.3988': attribute type 1 has an invalid length. [ 439.820554][T20616] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3995'. [ 439.847670][T20618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3996'. [ 439.931085][T20620] pim6reg1: entered promiscuous mode [ 439.945163][T20620] pim6reg1: entered allmulticast mode [ 440.056376][T20626] syz_tun: refused to change device tx_queue_len [ 440.077269][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 441.283585][T20682] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 441.479046][T20682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 441.543500][T20696] bond3: option mode: unable to set because the bond device is up [ 441.921836][T20719] xt_TCPMSS: Only works on TCP SYN packets [ 442.004284][T20723] xt_hashlimit: size too large, truncated to 1048576 [ 442.543409][T20734] syzkaller0: entered promiscuous mode [ 442.550074][T20734] syzkaller0: entered allmulticast mode [ 442.882660][T20753] netlink: 'syz.1.4030': attribute type 5 has an invalid length. [ 442.911929][T20753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.105645][T20767] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 443.370667][T20778] netlink: 'syz.2.4038': attribute type 26 has an invalid length. [ 443.398618][T20778] __nla_validate_parse: 9 callbacks suppressed [ 443.398638][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 443.415619][T20778] netlink: 'syz.2.4038': attribute type 26 has an invalid length. [ 443.424708][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 443.843064][T20789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4041'. [ 443.853209][T20789] netlink: 'syz.2.4041': attribute type 7 has an invalid length. [ 443.862021][T20789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4041'. [ 444.425053][T20808] bond3: (slave gretap0): Device is not bonding slave [ 444.448308][T20808] bond3: option active_slave: invalid value (gretap0) [ 444.484800][T20808] bond3 (unregistering): Released all slaves [ 444.581904][T20816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4049'. [ 444.633695][T20821] syz_tun: entered allmulticast mode [ 444.658364][T20820] netlink: 'syz.1.4050': attribute type 1 has an invalid length. [ 444.673211][T20824] netlink: 'syz.3.4052': attribute type 1 has an invalid length. [ 444.702577][T20821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'. [ 444.726291][T20824] netlink: 'syz.3.4052': attribute type 2 has an invalid length. [ 444.749484][T20824] netlink: 'syz.3.4052': attribute type 1 has an invalid length. [ 444.768340][T20824] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4052'. [ 444.914563][T20834] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4053'. [ 445.088345][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.096406][ C1] lec:lec_tx_timeout: lec0 [ 445.488253][T20849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4057'. [ 445.544592][T20849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4057'. [ 445.657575][T20852] netlink: 'syz.0.4059': attribute type 1 has an invalid length. [ 445.795788][T20852] bond6: entered promiscuous mode [ 445.810958][T20852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.934814][T20852] 8021q: adding VLAN 0 to HW filter on device bond7 [ 446.010274][T20857] bond6: (slave bridge8): making interface the new active one [ 446.017811][T20857] bridge8: entered promiscuous mode [ 446.034257][T20857] bridge8: left promiscuous mode [ 446.102443][T20871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.145385][T20871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.477050][T20887] bond8: entered promiscuous mode [ 446.482924][T20887] 8021q: adding VLAN 0 to HW filter on device bond8 [ 446.504655][T20887] 8021q: adding VLAN 0 to HW filter on device bond8 [ 446.518927][T20887] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 446.539528][T20887] bond8: (slave sit1): Error -95 calling set_mac_address [ 446.613243][T20860] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 446.930659][T20904] can: request_module (can-proto-0) failed. [ 447.085785][T20913] netlink: 'syz.2.4076': attribute type 1 has an invalid length. [ 447.828996][ T5830] Bluetooth: hci1: command 0x0419 tx timeout [ 447.968115][T20946] netlink: 'syz.2.4093': attribute type 16 has an invalid length. [ 448.087209][T20963] netlink: 'syz.1.4096': attribute type 20 has an invalid length. [ 448.122413][T20963] IPv6: NLM_F_CREATE should be specified when creating new route [ 448.260544][T20974] sctp: [Deprecated]: syz.3.4100 (pid 20974) Use of int in max_burst socket option. [ 448.260544][T20974] Use struct sctp_assoc_value instead [ 448.434733][T20974] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 448.527296][T20995] netlink: 'syz.2.4107': attribute type 1 has an invalid length. [ 448.560359][T20974] bond3 (unregistering): Released all slaves [ 448.604668][T20999] __nla_validate_parse: 14 callbacks suppressed [ 448.604692][T20999] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4106'. [ 448.617654][T21002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4103'. [ 448.654378][T21004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4107'. [ 448.708356][ T5830] Bluetooth: hci2: command 0x0405 tx timeout [ 448.943911][T21015] netlink: 'syz.4.4110': attribute type 1 has an invalid length. [ 448.971234][T21012] netlink: 300 bytes leftover after parsing attributes in process `syz.2.4111'. [ 448.995670][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4110'. [ 449.054293][T21018] netlink: 'syz.4.4110': attribute type 1 has an invalid length. [ 449.069323][T21015] bond3: entered promiscuous mode [ 449.074422][T21015] bond3: entered allmulticast mode [ 449.080524][T21015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.096569][T21016] macvlan3: entered promiscuous mode [ 449.113413][T21016] macvlan3: entered allmulticast mode [ 449.408393][T21032] netlink: 'syz.4.4118': attribute type 61 has an invalid length. [ 449.427644][T21032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4118'. [ 449.469244][T21034] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4109'. [ 449.479525][T21037] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4109'. [ 449.495358][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4117'. [ 449.705411][T21045] netlink: 'syz.0.4122': attribute type 13 has an invalid length. [ 449.713614][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 449.723324][T21045] netlink: 'syz.0.4122': attribute type 13 has an invalid length. [ 449.848256][T21054] netlink: 'syz.4.4125': attribute type 2 has an invalid length. [ 449.880211][T21054] netlink: 'syz.4.4125': attribute type 2 has an invalid length. [ 450.451377][T21107] netlink: 'syz.0.4139': attribute type 4 has an invalid length. [ 450.472583][ T5830] block nbd3: Receive control failed (result -32) [ 451.136431][T21152] netlink: 'syz.1.4153': attribute type 21 has an invalid length. [ 451.497642][T21157] vcan1: entered promiscuous mode [ 451.527646][T21157] vcan1: entered allmulticast mode [ 451.818129][T21195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.854921][T21204] netlink: 'syz.3.4163': attribute type 21 has an invalid length. [ 452.130722][T21212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.744780][T21248] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 452.755356][T21248] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 452.768571][T21248] bond5: (slave ip6gre1): making interface the new active one [ 452.776941][T21248] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 453.602410][T21290] bond6: entered promiscuous mode [ 453.621382][T21290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 453.640719][T21300] veth0: entered promiscuous mode [ 453.652043][T21298] veth0: left promiscuous mode [ 453.772783][T21315] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 453.825358][T21316] __nla_validate_parse: 8 callbacks suppressed [ 453.825381][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'. [ 454.189196][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 454.216577][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 454.239969][T21338] validate_nla: 2 callbacks suppressed [ 454.239990][T21338] netlink: 'syz.1.4198': attribute type 39 has an invalid length. [ 454.299324][T21340] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4199'. [ 454.519165][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4201'. [ 454.577085][T21361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4201'. [ 454.671853][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4205'. [ 454.957019][T21347] lo: left promiscuous mode [ 454.962044][T21347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.132661][T21384] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 455.165349][T21382] netlink: 'syz.0.4210': attribute type 1 has an invalid length. [ 455.414694][T21392] macvtap2: entered promiscuous mode [ 455.420231][T21392] macvtap2: entered allmulticast mode [ 455.559279][T21393] macvtap2: entered promiscuous mode [ 455.564655][T21393] macvtap2: entered allmulticast mode [ 455.696773][T21409] netlink: 'syz.1.4218': attribute type 25 has an invalid length. [ 455.929130][T21413] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4220'. [ 456.504319][T21441] netlink: 'syz.4.4226': attribute type 2 has an invalid length. [ 456.528210][T21441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4226'. [ 456.642144][T21446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4228'. [ 456.657745][T21443] netlink: 'syz.1.4227': attribute type 2 has an invalid length. [ 456.711327][T21446] gretap2: entered promiscuous mode [ 456.730927][T21446] gretap2: entered allmulticast mode [ 456.756163][T21443] vþ: entered promiscuous mode [ 457.231364][T21470] tipc: Enabling of bearer rejected, failed to enable media [ 457.280199][T21477] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.403908][T21483] xt_hashlimit: size too large, truncated to 1048576 [ 458.156682][T21524] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 458.331325][T21530] netlink: 'syz.1.4251': attribute type 51 has an invalid length. [ 458.347212][T21530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.360447][T21530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.740816][T21530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.750152][T21530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.063544][T21552] __nla_validate_parse: 3 callbacks suppressed [ 459.063567][T21552] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4256'. [ 459.121079][T21558] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4256'. [ 459.180746][T21558] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4256'. [ 459.210762][T21556] syzkaller0: entered promiscuous mode [ 459.216398][T21556] syzkaller0: entered allmulticast mode [ 459.332747][T21565] syzkaller0: entered promiscuous mode [ 459.338571][T21565] syzkaller0: entered allmulticast mode [ 459.463281][T21573] netlink: 'syz.3.4261': attribute type 1 has an invalid length. [ 459.647580][T21578] sctp: [Deprecated]: syz.4.4263 (pid 21578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.647580][T21578] Use struct sctp_sack_info instead [ 459.807439][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 459.926908][T21596] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4267'. [ 460.032929][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4269'. [ 460.213544][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4274'. [ 460.252569][T21620] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4272'. [ 460.261887][T21620] netlink: 'syz.0.4272': attribute type 1 has an invalid length. [ 460.271839][T21620] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4272'. [ 460.304082][T21625] syzkaller0: entered promiscuous mode [ 460.311659][T21625] syzkaller0: entered allmulticast mode [ 460.466064][T21630] netlink: 'syz.1.4277': attribute type 1 has an invalid length. [ 460.662194][T21639] pimreg3: entered allmulticast mode [ 460.761383][T21647] tipc: Started in network mode [ 460.766337][T21647] tipc: Node identity 010000000000000001, cluster identity 4711 [ 461.208804][T21679] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4292'. [ 461.450527][T21690] netlink: 'syz.3.4297': attribute type 8 has an invalid length. [ 461.467624][T21690] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.475476][T21690] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.205378][T21729] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 462.630958][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 462.845647][T21758] netlink: 'syz.4.4315': attribute type 21 has an invalid length. [ 462.876525][T21758] netlink: 'syz.4.4315': attribute type 4 has an invalid length. [ 463.000072][T21758] netlink: 'syz.4.4315': attribute type 5 has an invalid length. [ 463.877754][T21806] ip6erspan0: entered allmulticast mode [ 463.922559][T21822] netlink: 'syz.1.4329': attribute type 3 has an invalid length. [ 464.000016][T21822] netlink: 'syz.1.4329': attribute type 2 has an invalid length. [ 464.143301][T21829] __nla_validate_parse: 16 callbacks suppressed [ 464.143325][T21829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4334'. [ 464.165178][T21831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4335'. [ 464.223805][T21829] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4334'. [ 464.310756][T21829] bridge2: port 1(erspan0) entered blocking state [ 464.326268][T21829] bridge2: port 1(erspan0) entered disabled state [ 464.360734][T21829] erspan0: entered allmulticast mode [ 464.385446][T21829] erspan0: entered promiscuous mode [ 464.431583][T21845] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 464.654084][T21856] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4343'. [ 464.724365][T21860] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4345'. [ 464.866290][T21867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4346'. [ 464.924351][T21867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.072510][T21867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.140723][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4351'. [ 465.227198][T21891] validate_nla: 2 callbacks suppressed [ 465.227222][T21891] netlink: 'syz.2.4353': attribute type 1 has an invalid length. [ 465.263994][T21891] bond7: entered promiscuous mode [ 465.278803][T21891] 8021q: adding VLAN 0 to HW filter on device bond7 [ 465.306287][T21891] bond7: (slave bridge3): making interface the new active one [ 465.340006][T21891] bridge3: entered promiscuous mode [ 465.346953][T21891] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 465.495678][T21905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4357'. [ 465.593498][T21907] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4358'. [ 465.608096][T21907] netlink: 'syz.0.4358': attribute type 2 has an invalid length. [ 465.721006][T21914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4361'. [ 466.060308][T21933] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 466.307703][T21937] netlink: 'syz.3.4368': attribute type 7 has an invalid length. [ 466.367259][T21938] netlink: 'syz.3.4368': attribute type 7 has an invalid length. [ 466.542286][T21952] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 466.928766][T21965] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 466.952699][T21968] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 466.974458][T21970] x_tables: unsorted underflow at hook 1 [ 466.994636][T21968] bond10: (slave lo): Enslaving as an active interface with an up link [ 467.028528][T21968] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 467.070696][T21973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.120168][T21976] netlink: 'syz.1.4379': attribute type 4 has an invalid length. [ 467.264505][T21983] netlink: 'syz.3.4382': attribute type 4 has an invalid length. [ 467.310656][T21983] .`: renamed from bond0 (while UP) [ 467.588430][ T5193] block nbd1: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 270 seconds [ 467.599613][ T5193] block nbd1: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 270 seconds [ 467.610744][ T5193] block nbd1: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 270 seconds [ 467.621912][ T5193] block nbd1: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 270 seconds [ 467.748180][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 467.921213][T22024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.049357][T22031] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 468.170188][T22039] macsec1: entered promiscuous mode [ 468.197660][T22040] netlink: 'syz.1.4398': attribute type 1 has an invalid length. [ 469.189645][T22071] netlink: 'syz.2.4405': attribute type 21 has an invalid length. [ 469.255131][T22075] __nla_validate_parse: 6 callbacks suppressed [ 469.255152][T22075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4403'. [ 469.309527][T22078] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 469.393154][T22085] netlink: 512 bytes leftover after parsing attributes in process `syz.4.4409'. [ 469.495633][T22078] netlink: 'syz.1.4408': attribute type 1 has an invalid length. [ 469.635165][T22098] syz.2.4411: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 469.651702][T22098] CPU: 0 UID: 0 PID: 22098 Comm: syz.2.4411 Not tainted syzkaller #0 PREEMPT(full) [ 469.651750][T22098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 469.651782][T22098] Call Trace: [ 469.651791][T22098] [ 469.651801][T22098] dump_stack_lvl+0xe8/0x150 [ 469.651839][T22098] warn_alloc+0x249/0x340 [ 469.651868][T22098] ? stack_trace_save+0xa9/0x100 [ 469.651896][T22098] ? __pfx_warn_alloc+0x10/0x10 [ 469.651932][T22098] ? kasan_save_track+0x4f/0x80 [ 469.651955][T22098] ? kasan_save_track+0x3e/0x80 [ 469.651977][T22098] ? __kasan_kmalloc+0x93/0xb0 [ 469.652012][T22098] ? __kmalloc_cache_noprof+0x31c/0x660 [ 469.652037][T22098] ? xskq_create+0x56/0x170 [ 469.652064][T22098] ? xsk_setsockopt+0x54c/0x990 [ 469.652088][T22098] ? do_sock_setsockopt+0x17c/0x1b0 [ 469.652116][T22098] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 469.652144][T22098] ? do_syscall_64+0x14d/0xf80 [ 469.652180][T22098] __vmalloc_node_range_noprof+0x132/0x1730 [ 469.652241][T22098] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 469.652275][T22098] ? __kasan_kmalloc+0x93/0xb0 [ 469.652307][T22098] vmalloc_user_noprof+0xad/0xe0 [ 469.652333][T22098] ? xskq_create+0xbf/0x170 [ 469.652362][T22098] xskq_create+0xbf/0x170 [ 469.652393][T22098] xsk_init_queue+0x8a/0xe0 [ 469.652422][T22098] xsk_setsockopt+0x54c/0x990 [ 469.652452][T22098] ? __pfx_xsk_setsockopt+0x10/0x10 [ 469.652479][T22098] ? __pfx_aa_sk_perm+0x10/0x10 [ 469.652515][T22098] ? aa_sock_opt_perm+0xff/0x1a0 [ 469.652540][T22098] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 469.652566][T22098] ? __pfx_xsk_setsockopt+0x10/0x10 [ 469.652594][T22098] do_sock_setsockopt+0x17c/0x1b0 [ 469.652628][T22098] __x64_sys_setsockopt+0x13d/0x1b0 [ 469.652664][T22098] do_syscall_64+0x14d/0xf80 [ 469.652695][T22098] ? trace_irq_disable+0x3b/0x150 [ 469.652715][T22098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.652738][T22098] ? clear_bhb_loop+0x40/0x90 [ 469.652766][T22098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.652799][T22098] RIP: 0033:0x7f00b599c819 [ 469.652821][T22098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.652842][T22098] RSP: 002b:00007f00b67bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 469.652865][T22098] RAX: ffffffffffffffda RBX: 00007f00b5c15fa0 RCX: 00007f00b599c819 [ 469.652883][T22098] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 469.652897][T22098] RBP: 00007f00b5a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 469.652912][T22098] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.652926][T22098] R13: 00007f00b5c16038 R14: 00007f00b5c15fa0 R15: 00007ffc341b3a58 [ 469.652963][T22098] [ 469.652977][T22098] Mem-Info: [ 469.944135][T22098] active_anon:6204 inactive_anon:0 isolated_anon:0 [ 469.944135][T22098] active_file:2571 inactive_file:40306 isolated_file:0 [ 469.944135][T22098] unevictable:768 dirty:100 writeback:0 [ 469.944135][T22098] slab_reclaimable:12889 slab_unreclaimable:127049 [ 469.944135][T22098] mapped:30151 shmem:1369 pagetables:1523 [ 469.944135][T22098] sec_pagetables:0 bounce:0 [ 469.944135][T22098] kernel_misc_reclaimable:0 [ 469.944135][T22098] free:1282547 free_pcp:16026 free_cma:0 [ 470.029729][T22098] Node 0 active_anon:25016kB inactive_anon:0kB active_file:10284kB inactive_file:161020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121204kB dirty:396kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16696kB pagetables:5852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 470.148542][T22098] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 470.194645][T22098] Node 0 DMA free:15212kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:148kB local_pcp:104kB free_cma:0kB [ 470.260140][T22120] pim6reg1: entered promiscuous mode [ 470.265701][T22120] pim6reg1: entered allmulticast mode [ 470.287344][T22098] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 470.312832][T22098] Node 0 DMA32 free:1200960kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25016kB inactive_anon:0kB active_file:10284kB inactive_file:161020kB unevictable:1536kB writepending:396kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:37188kB local_pcp:17116kB free_cma:0kB [ 470.396147][T22098] lowmem_reserve[]: 0 0 0 0 0 [ 470.418827][T22098] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 470.520657][T22098] lowmem_reserve[]: 0 0 0 0 0 [ 470.525476][T22098] Node 1 Normal free:3914032kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26648kB local_pcp:26648kB free_cma:0kB [ 470.631467][T22098] lowmem_reserve[]: 0 0 0 0 0 [ 470.668102][T22098] Node 0 DMA: 1*4kB (U) 1*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 2*1024kB (U) 3*2048kB (UM) 1*4096kB (M) = 15212kB [ 470.716173][T22098] Node 0 DMA32: 7468*4kB (UM) 5258*8kB (UM) 2526*16kB (UME) 209*32kB (UME) 219*64kB (UME) 685*128kB (UME) 522*256kB (UME) 441*512kB (UM) 310*1024kB (UME) 144*2048kB (UME) 2*4096kB (UM) = 1200704kB [ 470.761916][T22098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.806091][T22138] netlink: 'syz.0.4424': attribute type 1 has an invalid length. [ 470.823017][T22098] Node 1 Normal: 1*4kB (U) 12*8kB (UM) 16*16kB (UM) 12*32kB (UM) 8*64kB (UM) 7*128kB (UM) 7*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 952*4096kB (UM) = 3914084kB [ 470.858104][T22098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.876265][T22098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.885821][T22098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.896679][T22098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.907815][T22098] 44238 total pagecache pages [ 470.915920][T22098] 0 pages in swap cache [ 470.917696][T22143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4426'. [ 470.920375][T22098] Free swap = 124996kB [ 470.920399][T22098] Total swap = 124996kB [ 470.920416][T22098] 2097051 pages RAM [ 470.920427][T22098] 0 pages HighMem/MovableOnly [ 470.920439][T22098] 427072 pages reserved [ 470.920450][T22098] 0 pages cma reserved [ 470.987436][T22147] bond11: entered promiscuous mode [ 470.999648][T22146] netlink: 'syz.3.4425': attribute type 1 has an invalid length. [ 471.008815][T22147] bond11: entered allmulticast mode [ 471.014577][T22147] 8021q: adding VLAN 0 to HW filter on device bond11 [ 471.045172][T22149] bridge8: entered promiscuous mode [ 471.051102][T22149] bridge8: entered allmulticast mode [ 471.057244][T22149] bond11: (slave bridge8): Enslaving as a backup interface with an up link [ 471.099488][T10065] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 471.176229][T22138] bridge9: entered promiscuous mode [ 471.208377][T22138] bridge9: entered allmulticast mode [ 471.229546][T22138] bond11: (slave bridge9): Enslaving as a backup interface with a down link [ 471.238583][T10046] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 471.490085][T22178] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4433'. [ 471.499865][T22176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'. [ 471.768160][T22186] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 471.803276][T22192] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 471.819286][T22190] netlink: 4440 bytes leftover after parsing attributes in process `syz.1.4439'. [ 471.845335][T22190] netlink: 'syz.1.4439': attribute type 1 has an invalid length. [ 471.946328][T22190] bond5: entered promiscuous mode [ 471.974677][T22190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.989430][T22204] xt_socket: unknown flags 0x50 [ 471.994877][T22206] xt_socket: unknown flags 0x50 [ 472.016953][T22190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.029086][T22190] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 472.039716][T22190] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 472.059745][T22190] bond5: (slave vti0): making interface the new active one [ 472.075518][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4442'. [ 472.098420][T22190] vti0: entered promiscuous mode [ 472.107423][T22190] bond5: (slave vti0): Enslaving as an active interface with an up link [ 472.134401][T22216] ip6_vti0: entered allmulticast mode [ 472.149836][T22215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.265163][T22214] ip6_vti0: left allmulticast mode [ 472.697068][T22250] netlink: 'syz.0.4455': attribute type 4 has an invalid length. [ 472.737537][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4455'. [ 472.920341][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4461'. [ 472.942471][T22265] netlink: 'syz.1.4461': attribute type 2 has an invalid length. [ 473.008044][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4461'. [ 473.140994][T22283] netlink: 'syz.0.4466': attribute type 64 has an invalid length. [ 473.292161][T22289] team0: Device gtp0 is up. Set it down before adding it as a team port [ 473.675035][T22321] erspan0: entered promiscuous mode [ 473.686998][T22321] vlan3: entered promiscuous mode [ 473.768536][T22328] pim6reg1: entered promiscuous mode [ 473.780276][T22328] pim6reg1: entered allmulticast mode [ 473.917327][T22337] netlink: 'syz.2.4483': attribute type 33 has an invalid length. [ 473.993268][T22337] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 474.007232][T22337] bond8 (unregistering): Released all slaves [ 474.181679][T22353] netlink: 'syz.0.4490': attribute type 6 has an invalid length. [ 474.230360][T22353] netlink: 'syz.0.4490': attribute type 6 has an invalid length. [ 474.245999][ T8579] lec:lec_start_xmit: lec0:No lecd attached [ 474.263120][T22353] __nla_validate_parse: 10 callbacks suppressed [ 474.263138][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4490'. [ 474.472915][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4495'. [ 474.517384][T22371] netlink: 'syz.1.4495': attribute type 61 has an invalid length. [ 474.548144][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4495'. [ 474.875775][T22383] bond4: entered promiscuous mode [ 474.886648][T22383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.895533][T22386] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 475.001467][T22392] 8021q: adding VLAN 0 to HW filter on device bond4 [ 475.017543][T22392] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 475.038534][T22392] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 475.078518][T22392] bond4: (slave vti0): making interface the new active one [ 475.115447][T22392] vti0: entered promiscuous mode [ 475.139541][T22392] bond4: (slave vti0): Enslaving as an active interface with an up link [ 475.336737][T22417] syzkaller0: entered promiscuous mode [ 475.342509][T22417] syzkaller0: entered allmulticast mode [ 475.398267][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4508'. [ 475.407214][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4508'. [ 475.756780][T22450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.835858][T22455] validate_nla: 4 callbacks suppressed [ 475.835878][T22455] netlink: 'syz.0.4520': attribute type 1 has an invalid length. [ 475.925785][T22461] xt_hashlimit: size too large, truncated to 1048576 [ 475.937484][T22457] 8021q: adding VLAN 0 to HW filter on device bond13 [ 475.942527][T22464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4522'. [ 475.952795][T22457] bond12: (slave bond13): making interface the new active one [ 475.962528][T22457] bond12: (slave bond13): Enslaving as an active interface with an up link [ 475.979382][T22468] netlink: 'syz.4.4518': attribute type 1 has an invalid length. [ 475.987791][T22455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4520'. [ 476.070193][T22468] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.080504][T22455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 476.148717][T22465] vlan2: entered allmulticast mode [ 476.153984][T22465] bond5: entered allmulticast mode [ 476.255157][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4522'. [ 476.276495][T22464] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 476.286763][T22464] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 476.522800][T22499] ipt_ECN: cannot use operation on non-tcp rule [ 476.578247][T22498] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4531'. [ 476.604504][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4532'. [ 476.810024][T22507] netlink: 'syz.3.4533': attribute type 21 has an invalid length. [ 476.882514][T22517] syzkaller1: entered promiscuous mode [ 476.893237][T22517] syzkaller1: entered allmulticast mode [ 477.455868][T22550] netlink: 'syz.2.4547': attribute type 2 has an invalid length. [ 477.583199][T22559] netlink: 'syz.2.4549': attribute type 9 has an invalid length. [ 477.684203][T22563] bond8 (unregistering): Released all slaves [ 477.905050][T22578] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 477.913297][T22578] netlink: 'syz.0.4556': attribute type 3 has an invalid length. [ 479.426842][T22490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.628839][T22590] netlink: 'syz.3.4558': attribute type 1 has an invalid length. [ 479.668445][T22590] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 479.908027][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 479.924423][ C1] lec:lec_tx_timeout: lec0 [ 479.969992][T22604] __nla_validate_parse: 7 callbacks suppressed [ 479.970014][T22604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4562'. [ 480.022387][T22607] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4563'. [ 480.039194][T22609] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4564'. [ 480.065127][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4565'. [ 480.436191][T22624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4567'. [ 480.536125][T22636] veth1_to_bond: entered allmulticast mode [ 480.557578][T22641] veth1_to_bond: left allmulticast mode [ 480.626422][T22649] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4572'. [ 480.671283][T22647] syzkaller0: entered promiscuous mode [ 480.676857][T22647] syzkaller0: entered allmulticast mode [ 481.000150][T22668] delete_channel: no stack [ 481.033415][T22671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 481.044425][T22663] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4576'. [ 481.102186][T22677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4576'. [ 481.443670][T22690] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 481.508635][T22692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 482.206373][T22733] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4590'. [ 482.643500][T22757] team0: Port device team_slave_0 removed [ 482.700410][T22760] : entered promiscuous mode [ 482.716275][T22762] veth0_to_bond: entered allmulticast mode [ 483.083915][T22780] syzkaller1: entered promiscuous mode [ 483.112504][T22780] syzkaller1: entered allmulticast mode [ 483.276655][T22792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.070758][T22837] netlink: 'syz.3.4623': attribute type 1 has an invalid length. [ 485.022988][T22890] netlink: 'syz.1.4634': attribute type 5 has an invalid length. [ 485.137829][T22868] __nla_validate_parse: 13 callbacks suppressed [ 485.137855][T22868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4629'. [ 485.203422][T22893] bond8: option mode: invalid value (133) [ 485.217765][T22893] bond8 (unregistering): Released all slaves [ 485.260276][T22897] lo: entered promiscuous mode [ 485.281567][T22897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.361692][T22906] netlink: 'syz.1.4638': attribute type 1 has an invalid length. [ 485.605741][T22913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4641'. [ 485.616100][T22916] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4642'. [ 485.739608][T22929] sctp: [Deprecated]: syz.2.4640 (pid 22929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.739608][T22929] Use struct sctp_sack_info instead [ 488.232798][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 488.546394][T22910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.557341][T22928] netlink: 'syz.0.4645': attribute type 11 has an invalid length. [ 488.567394][T22928] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4645'. [ 488.706893][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4652'. [ 488.771776][T22956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4653'. [ 488.784531][T22954] netlink: 'syz.4.4650': attribute type 1 has an invalid length. [ 488.823294][T22956] netlink: 57 bytes leftover after parsing attributes in process `syz.3.4653'. [ 488.867589][T22956] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4653'. [ 489.302156][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4664'. [ 489.336958][T22989] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4664'. [ 489.368361][T22989] netlink: 'syz.3.4664': attribute type 1 has an invalid length. [ 489.472040][T22989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.560810][T23007] netlink: 'syz.2.4665': attribute type 11 has an invalid length. [ 489.642939][T22996] bond3: (slave veth3): Enslaving as an active interface with a down link [ 489.745021][T23000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.759250][T23000] bond3: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 490.193628][T23039] netlink: 'syz.1.4672': attribute type 10 has an invalid length. [ 490.293813][T23039] team0 (unregistering): Port device team_slave_0 removed [ 490.324569][T23039] team0 (unregistering): Port device team_slave_1 removed [ 490.934811][T23073] sctp: [Deprecated]: syz.4.4678 (pid 23073) Use of int in max_burst socket option. [ 490.934811][T23073] Use struct sctp_assoc_value instead [ 492.752483][T23013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 493.013317][T23107] __nla_validate_parse: 1 callbacks suppressed [ 493.013340][T23107] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4689'. [ 493.042275][T23108] lo: left promiscuous mode [ 493.131905][T23108] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.331775][T23108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.351426][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 493.364752][T23108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.417134][T23108] veth0_vlan: left promiscuous mode [ 493.482690][T23108] bond1: left promiscuous mode [ 493.487732][T23108] bond1: left allmulticast mode [ 493.494073][T23108] bond2: left promiscuous mode [ 493.504268][T23108] gretap1: left promiscuous mode [ 493.513644][T23108] gretap1: left allmulticast mode [ 493.520743][T23133] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 493.529342][T23108] bond6: left promiscuous mode [ 493.529794][T23134] netlink: 'syz.1.4696': attribute type 64 has an invalid length. [ 493.546103][T23108] bond7: left promiscuous mode [ 493.551435][T23108] bridge3: left promiscuous mode [ 493.567812][T10064] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.690020][T10064] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.730986][T10064] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.778950][T10064] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.848661][T23149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4698'. [ 493.857715][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4698'. [ 494.030288][T23161] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4703'. [ 494.176113][T23168] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4704'. [ 494.198213][T23169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4704'. [ 494.381540][T23184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4710'. [ 494.533912][T23184] bond14: entered promiscuous mode [ 494.584693][T23184] 8021q: adding VLAN 0 to HW filter on device bond14 [ 494.643258][T23196] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4712'. [ 494.675128][T23196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.737816][T23184] 8021q: adding VLAN 0 to HW filter on device bond14 [ 494.756998][T23184] bond14: (slave sit1): The slave device specified does not support setting the MAC address [ 494.797269][T23184] bond14: (slave sit1): Error -95 calling set_mac_address [ 495.007463][T23216] netlink: 'syz.4.4717': attribute type 29 has an invalid length. [ 495.041115][T23216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.229446][T23228] syzkaller1: entered promiscuous mode [ 495.236118][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4720'. [ 495.261712][T23228] syzkaller1: entered allmulticast mode [ 495.268498][T23231] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 495.543549][T23251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4727'. [ 495.790564][T23266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 497.038896][T23322] syz_tun: entered allmulticast mode [ 497.060843][T23321] syz_tun: left allmulticast mode [ 497.283939][T23340] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 497.483152][T23356] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 497.531783][T23350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.578812][T23349] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 497.668842][ T5193] block nbd1: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 300 seconds [ 497.691252][ T5193] block nbd1: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 300 seconds [ 497.702342][ T5193] block nbd1: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 300 seconds [ 497.713909][ T5193] block nbd1: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 300 seconds [ 497.813613][T23371] tipc: Failed to remove unknown binding: 66,1,1/0:3010497200/3010497202 [ 498.309145][T23396] __nla_validate_parse: 5 callbacks suppressed [ 498.309167][T23396] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4758'. [ 498.366186][T23396] 0·: renamed from hsr_slave_1 (while UP) [ 498.423302][T23396] 0·: entered allmulticast mode [ 498.474208][T23396] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 498.498631][T23406] sctp: [Deprecated]: syz.0.4758 (pid 23406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.498631][T23406] Use struct sctp_sack_info instead [ 498.714206][T23429] openvswitch: netlink: IP tunnel dst address not specified [ 499.212377][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 499.238121][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4770'. [ 499.327019][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4770'. [ 499.328135][ T66] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.360061][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4770'. [ 499.409660][ T66] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.429503][ T66] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.448470][ T66] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.630488][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4774'. [ 499.666602][T23476] hsr_slave_1 (unregistering): left promiscuous mode [ 499.873561][T23490] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4780'. [ 500.059166][T23497] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4782'. [ 500.293884][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4784'. [ 500.338343][T23504] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 500.717435][T23524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.765795][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4792'. [ 500.988932][T23540] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 501.107822][T23548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.191410][T23548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.236161][T23548] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 501.269172][T23548] bond0 (unregistering): Released all slaves [ 501.527562][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 501.589297][T23571] syzkaller0: entered promiscuous mode [ 501.598402][T23571] syzkaller0: entered allmulticast mode [ 501.792600][T23586] netlink: 'syz.2.4807': attribute type 9 has an invalid length. [ 501.824449][T23588] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 502.266711][T23611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.858979][T23640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.866294][T23640] IPv6: NLM_F_CREATE should be set when creating new route [ 503.222399][T23658] netlink: 'syz.1.4832': attribute type 4 has an invalid length. [ 503.249963][T23658] netlink: 'syz.1.4832': attribute type 7 has an invalid length. [ 503.257763][T23658] netlink: 'syz.1.4832': attribute type 8 has an invalid length. [ 503.479977][T23674] __nla_validate_parse: 14 callbacks suppressed [ 503.480003][T23674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 503.600385][T23680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4840'. [ 504.054306][T23703] netlink: 'syz.4.4846': attribute type 1 has an invalid length. [ 504.276803][T23725] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4853'. [ 504.555406][T23703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4846'. [ 504.690736][T23744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.714364][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4861'. [ 504.778928][T23752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4859'. [ 505.111668][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4866'. [ 505.209312][T23778] netlink: 'syz.4.4869': attribute type 10 has an invalid length. [ 505.233570][T23778] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 505.254867][T23778] batman_adv: batadv0: Adding interface: netdevsim0 [ 505.277019][T23778] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.309556][T23778] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 505.335456][T23783] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4870'. [ 505.384677][T23778] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 505.646719][T23813] netlink: 'syz.3.4879': attribute type 21 has an invalid length. [ 505.655723][T23813] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4879'. [ 505.673351][T23813] netlink: 'syz.3.4879': attribute type 4 has an invalid length. [ 505.682341][T23813] netlink: 'syz.3.4879': attribute type 5 has an invalid length. [ 505.691544][T23813] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4879'. [ 505.702933][T23813] netlink: 'syz.3.4879': attribute type 21 has an invalid length. [ 505.762751][T23816] openvswitch: netlink: IP tunnel dst address not specified [ 505.842395][T23818] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 505.865308][T23818] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 505.943107][T23823] sch_tbf: burst 12 is lower than device bridge5 mtu (1514) ! [ 506.551919][T23855] IPVS: Unknown mcast interface: netpci0 [ 506.868769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.876836][ C1] lec:lec_tx_timeout: lec0 [ 507.130281][T23876] validate_nla: 3 callbacks suppressed [ 507.130302][T23876] netlink: 'syz.3.4893': attribute type 1 has an invalid length. [ 507.182017][T23876] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 508.100138][T23914] netlink: 'syz.2.4905': attribute type 9 has an invalid length. [ 508.185715][T23914] netlink: 'syz.2.4905': attribute type 6 has an invalid length. [ 508.458296][T23934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.565077][T23939] __nla_validate_parse: 11 callbacks suppressed [ 508.565099][T23939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4912'. [ 508.633056][T23941] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4911'. [ 508.753684][T23949] syzkaller1: left promiscuous mode [ 508.775585][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4913'. [ 508.808676][T23949] syzkaller1: left allmulticast mode [ 508.895517][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4913'. [ 509.084475][T23966] nft_compat: unsupported protocol 0 [ 509.414906][T23981] ipvlan3: entered allmulticast mode [ 509.443316][T23981] batadv_slave_1: entered allmulticast mode [ 509.459961][T23981] batman_adv: batadv0: Adding interface: ipvlan3 [ 509.474875][T23981] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.502121][T23981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.513636][T23981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.524396][T23981] batman_adv: batadv0: Interface activated: ipvlan3 [ 509.537701][T23979] tipc: Enabled bearer , priority 24 [ 509.725062][T23999] xt_hashlimit: max too large, truncated to 1048576 [ 509.770290][T23999] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 509.813399][T24000] xt_hashlimit: size too large, truncated to 1048576 [ 509.885997][T24012] netlink: 'syz.0.4930': attribute type 4 has an invalid length. [ 509.941072][T24000] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 510.007288][T24020] IPv6: NLM_F_REPLACE set, but no existing node found! [ 510.255152][T24031] netlink: 'syz.4.4936': attribute type 24 has an invalid length. [ 510.349938][T24035] syzkaller0: entered promiscuous mode [ 510.355628][T24035] syzkaller0: entered allmulticast mode [ 510.625400][T24065] netlink: 'syz.3.4942': attribute type 10 has an invalid length. [ 510.650889][T24065] bridge_slave_1: left allmulticast mode [ 510.679564][T24065] bridge_slave_1: left promiscuous mode [ 510.716409][T24065] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.852530][T24075] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4944'. [ 510.880052][T24065] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 510.900986][T24075] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4944'. [ 510.924830][ T5947] tipc: Node number set to 16777216 [ 510.934379][T24075] netlink: 'syz.1.4944': attribute type 5 has an invalid length. [ 510.992073][T24075] netlink: 'syz.1.4944': attribute type 6 has an invalid length. [ 511.001380][T24075] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4944'. [ 511.168410][T24085] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4947'. [ 511.204479][T24087] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4946'. [ 511.278124][T24087] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4946'. [ 511.334422][T24085] syzkaller0: entered promiscuous mode [ 511.348390][T24085] syzkaller0: entered allmulticast mode [ 513.986019][T24186] syzkaller0: entered promiscuous mode [ 514.005436][T24186] syzkaller0: entered allmulticast mode [ 514.314849][T24204] __nla_validate_parse: 2 callbacks suppressed [ 514.314871][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4968'. [ 514.344446][T24207] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4970'. [ 514.448214][T24216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4971'. [ 517.674674][T24252] syzkaller0: entered promiscuous mode [ 517.688194][T24252] syzkaller0: entered allmulticast mode [ 517.697081][T24257] vcan0: tx drop: invalid da for name 0x0000400000000000 [ 517.707036][T24256] netlink: 'syz.2.4981': attribute type 4 has an invalid length. [ 517.744605][T24260] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 519.206987][T24268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4985'. [ 519.468939][T24288] netlink: 'syz.2.4988': attribute type 10 has an invalid length. [ 519.476825][T24288] netlink: 396 bytes leftover after parsing attributes in process `syz.2.4988'. [ 519.690717][T24289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4990'. [ 519.700038][T24289] openvswitch: netlink: Unknown nsh attribute 0 [ 519.719282][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4990'. [ 519.783270][T24289] netlink: 'syz.4.4990': attribute type 1 has an invalid length. [ 519.796575][T24289] netlink: 'syz.4.4990': attribute type 2 has an invalid length. [ 519.903160][T24316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4995'. [ 519.921542][T24316] netlink: 4492 bytes leftover after parsing attributes in process `syz.2.4995'. [ 520.151494][T24326] netlink: 'syz.2.4997': attribute type 1 has an invalid length. [ 520.163543][T24330] syzkaller0: entered allmulticast mode [ 520.173755][T24326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4997'. [ 520.561284][T24343] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 520.681876][T24350] bond15: Unable to set up delay as MII monitoring is disabled [ 520.729053][T24359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5003'. [ 520.789949][T24350] bond15 (unregistering): Released all slaves [ 520.853498][T24363] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5004'. [ 520.862665][T24363] netlink: 'syz.1.5004': attribute type 7 has an invalid length. [ 520.870597][T24363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5004'. [ 520.896302][T24353] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 520.896630][T24362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 520.933469][T24365] netlink: 'syz.2.5003': attribute type 4 has an invalid length. [ 520.970647][T24372] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 521.188746][T24380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5007'. [ 521.506037][T24412] netlink: 'syz.4.5013': attribute type 10 has an invalid length. [ 521.525428][T24410] netlink: 'syz.4.5013': attribute type 10 has an invalid length. [ 521.584543][T24412] batman_adv: batadv0: Removing interface: netdevsim0 [ 521.631923][T24412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.676680][T24412] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 521.843591][T24428] x_tables: unsorted underflow at hook 1 [ 521.897816][T24433] x_tables: duplicate underflow at hook 1 [ 521.969697][T24418] syzkaller1: entered promiscuous mode [ 521.978384][T24418] syzkaller1: entered allmulticast mode [ 522.553348][ T5830] Bluetooth: hci2: command 0x0405 tx timeout [ 522.680975][T10065] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.690015][T10065] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.699507][T10065] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.709252][T10065] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 522.822695][T24480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 522.852903][T24481] validate_nla: 2 callbacks suppressed [ 522.852924][T24481] netlink: 'syz.2.5029': attribute type 12 has an invalid length. [ 522.886025][T24481] netlink: 'syz.2.5029': attribute type 21 has an invalid length. [ 522.898092][T24486] netlink: 'syz.0.5031': attribute type 15 has an invalid length. [ 522.906110][T24481] netlink: 'syz.2.5029': attribute type 4 has an invalid length. [ 522.919081][T24481] netlink: 'syz.2.5029': attribute type 5 has an invalid length. [ 522.940052][T24490] netlink: 'syz.2.5029': attribute type 21 has an invalid length. [ 522.968822][T24490] netlink: 'syz.2.5029': attribute type 4 has an invalid length. [ 522.994142][T24490] netlink: 'syz.2.5029': attribute type 5 has an invalid length. [ 523.535516][T24523] netlink: 'syz.2.5043': attribute type 19 has an invalid length. [ 523.598161][T24523] netlink: 'syz.2.5043': attribute type 19 has an invalid length. [ 523.620303][T10065] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.635068][T10065] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.662607][T24527] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 523.698037][T10065] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.794283][T10065] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.028636][T24557] IPv6: NLM_F_CREATE should be specified when creating new route [ 524.037317][T24557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.044642][T24557] IPv6: NLM_F_CREATE should be set when creating new route [ 524.051956][T24557] IPv6: NLM_F_CREATE should be set when creating new route [ 524.059236][T24557] IPv6: NLM_F_CREATE should be set when creating new route [ 524.221237][T24564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.251188][T24565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.259242][T24565] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 524.269683][T24565] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 524.284992][T24565] bond0: (slave xfrm1): making interface the new active one [ 524.296957][T24565] bond0: (slave xfrm1): Enslaving as an active interface with an up link [ 524.826857][T24597] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 524.989990][T24606] __nla_validate_parse: 18 callbacks suppressed [ 524.990016][T24606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5069'. [ 525.018171][T24606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5069'. [ 525.207261][T24622] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5074'. [ 525.336900][T24634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5077'. [ 525.349256][T24630] 8021q: adding VLAN 0 to HW filter on device bond8 [ 525.366612][T24630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5077'. [ 525.386727][T24630] bond8: (slave bridge5): making interface the new active one [ 525.397859][T24630] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 525.665754][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.693469][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.723588][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.743689][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.771997][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.782245][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.792273][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.807542][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.909234][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 525.924445][T24660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 525.955926][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.008612][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.021647][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.042976][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.056756][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.098020][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.108671][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.133715][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.145819][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.156429][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.166867][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.177394][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.221866][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.235173][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.276720][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.294127][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.313314][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.323453][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.335330][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.348751][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.368683][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.383024][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.395410][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.412402][T24652] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 526.487838][T24689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5097'. [ 526.559946][T24694] veth0: entered promiscuous mode [ 526.566417][T24686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.610518][T24694] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5098'. [ 526.642263][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5095'. [ 526.650698][T24694] veth0: left promiscuous mode [ 526.845760][T24710] syzkaller1: entered promiscuous mode [ 526.879896][T24710] syzkaller1: entered allmulticast mode [ 526.895700][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5103'. [ 527.058443][T24723] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5108'. [ 527.363926][T24741] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 527.748447][ T5193] block nbd1: Possible stuck request ffff8880269c0000: control (read@0,1024B). Runtime 330 seconds [ 527.760163][ T5193] block nbd1: Possible stuck request ffff8880269c0200: control (read@1024,1024B). Runtime 330 seconds [ 527.771644][ T5193] block nbd1: Possible stuck request ffff8880269c0400: control (read@2048,1024B). Runtime 330 seconds [ 527.782888][ T5193] block nbd1: Possible stuck request ffff8880269c0600: control (read@3072,1024B). Runtime 330 seconds [ 528.176201][T24798] lo: entered allmulticast mode [ 528.181608][T24798] tunl0: entered allmulticast mode [ 528.187078][T24798] gre0: entered allmulticast mode [ 528.193069][T24798] gretap0: entered allmulticast mode [ 528.199593][T24798] ip_vti0: entered allmulticast mode [ 528.205271][T24798] ip6_vti0: entered allmulticast mode [ 528.212423][T24798] sit0: entered allmulticast mode [ 528.217807][T24798] ip6tnl0: entered allmulticast mode [ 528.223896][T24798] ip6gre0: entered allmulticast mode [ 528.240596][T24798] ip6gretap0: entered allmulticast mode [ 528.249667][T24798] bridge0: entered allmulticast mode [ 528.255398][T24798] team0: entered allmulticast mode [ 528.261583][T24798] team_slave_0: entered allmulticast mode [ 528.267550][T24798] team_slave_1: entered allmulticast mode [ 528.274264][T24798] dummy0: entered allmulticast mode [ 528.281015][T24798] nlmon0: entered allmulticast mode [ 528.286672][T24798] caif0: entered allmulticast mode [ 528.293458][T24798] batadv0: entered allmulticast mode [ 528.299709][T24798] vxcan0: entered allmulticast mode [ 528.305335][T24798] vxcan1: entered allmulticast mode [ 528.313398][T24798] veth0: entered allmulticast mode [ 528.319627][T24798] veth1: entered allmulticast mode [ 528.325169][T24798] wg0: entered allmulticast mode [ 528.330910][T24798] wg1: entered allmulticast mode [ 528.336230][T24798] wg2: entered allmulticast mode [ 528.345600][T24798] veth0_to_bridge: entered allmulticast mode [ 528.353397][T24798] veth1_to_bridge: entered allmulticast mode [ 528.361670][T24798] bridge_slave_1: entered allmulticast mode [ 528.369015][T24798] veth0_to_bond: entered allmulticast mode [ 528.375290][T24798] bond_slave_0: entered allmulticast mode [ 528.382199][T24798] veth1_to_bond: entered allmulticast mode [ 528.389422][T24798] bond_slave_1: entered allmulticast mode [ 528.395540][T24798] veth0_to_team: entered allmulticast mode [ 528.402571][T24798] veth1_to_team: entered allmulticast mode [ 528.409477][T24798] veth0_to_batadv: entered allmulticast mode [ 528.415820][T24798] batadv_slave_0: entered allmulticast mode [ 528.423154][T24798] veth1_to_batadv: entered allmulticast mode [ 528.430121][T24798] xfrm0: entered allmulticast mode [ 528.435785][T24798] veth0_to_hsr: entered allmulticast mode [ 528.442702][T24798] hsr_slave_0: entered allmulticast mode [ 528.453081][T24798] hsr0: entered allmulticast mode [ 528.458701][T24798] veth1_virt_wifi: entered allmulticast mode [ 528.465065][T24798] veth0_virt_wifi: entered allmulticast mode [ 528.474229][T24798] virt_wifi0: entered allmulticast mode [ 528.480526][T24798] veth1_vlan: entered allmulticast mode [ 528.486403][T24798] vlan0: entered allmulticast mode [ 528.492211][T24798] veth0_vlan: entered allmulticast mode [ 528.498404][T24798] vlan1: entered allmulticast mode [ 528.503911][T24798] macvlan0: entered allmulticast mode [ 528.510716][T24798] macvlan1: entered allmulticast mode [ 528.516477][T24798] ipvlan0: entered allmulticast mode [ 528.523106][T24798] ipvlan1: entered allmulticast mode [ 528.529056][T24798] veth1_macvtap: entered allmulticast mode [ 528.535178][T24798] veth0_macvtap: entered allmulticast mode [ 528.542090][T24798] macvtap0: entered allmulticast mode [ 528.547852][T24798] macsec0: entered allmulticast mode [ 528.554199][T24798] geneve0: entered allmulticast mode [ 528.564733][T24798] geneve1: entered allmulticast mode [ 528.571565][T24798] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 528.580076][T24798] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 528.587805][T24798] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 528.596003][T24798] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 528.604484][T24798] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 528.612283][T24798] ipvlan2: entered allmulticast mode [ 528.617874][T24798] ip6tnl1: entered allmulticast mode [ 528.624106][T24798] bridge1: entered allmulticast mode [ 528.630663][T24798] macsec1: entered allmulticast mode [ 528.636292][T24798] bond1: entered allmulticast mode [ 528.642077][T24798] ip6erspan0: entered allmulticast mode [ 528.649497][T24798] bond2: entered allmulticast mode [ 528.654907][T24798] bond3: entered allmulticast mode [ 528.661082][T24798] macvlan2: entered allmulticast mode [ 528.666761][T24798] sit1: entered allmulticast mode [ 528.673434][T24798] gretap1: entered allmulticast mode [ 528.679436][T24798] gre1: entered allmulticast mode [ 528.684858][T24798] macvlan3: entered allmulticast mode [ 528.691963][T24798] macvlan4: entered allmulticast mode [ 528.697737][T24798] bond4: entered allmulticast mode [ 528.703554][T24798] bond5: entered allmulticast mode [ 528.712401][T24798] ip6gre1: entered allmulticast mode [ 528.718381][T24798] bond6: entered allmulticast mode [ 528.724437][T24798] bridge2: entered allmulticast mode [ 528.730921][T24798] bond7: entered allmulticast mode [ 528.736264][T24798] bridge3: entered allmulticast mode [ 528.742344][T24798] bridge4: entered allmulticast mode [ 528.748417][T24798] vlan0.4: entered allmulticast mode [ 528.754078][T24798] macvlan5: entered allmulticast mode [ 528.760754][T24798] ip6tnl2: entered allmulticast mode [ 528.766471][T24798] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 528.784191][T24798] erspan1: entered allmulticast mode [ 528.791532][T24798] vxlan0: entered allmulticast mode [ 528.806925][T24798] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 528.827714][T24798] bond0: entered allmulticast mode [ 528.833770][T24798] xfrm1: entered allmulticast mode [ 528.863657][T24798] bond8: entered allmulticast mode [ 528.879167][T24798] bridge5: entered allmulticast mode [ 528.915645][ T66] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.925492][ T66] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.940469][ T66] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.949992][ T66] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.736620][T24771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.747130][T24780] validate_nla: 11 callbacks suppressed [ 530.747148][T24780] netlink: 'syz.4.5124': attribute type 1 has an invalid length. [ 530.769359][T24788] __nla_validate_parse: 3 callbacks suppressed [ 530.769381][T24788] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5127'. [ 530.954317][T24814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5135'. [ 531.064679][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5132'. [ 531.074280][T24822] netlink: 'syz.1.5132': attribute type 5 has an invalid length. [ 531.083851][T24822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5132'. [ 531.105483][T24822] geneve3: entered promiscuous mode [ 531.113700][T24822] geneve3: entered allmulticast mode [ 531.121239][T10046] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 531.144385][T10046] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 531.268157][T10046] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 531.284370][T10046] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 531.300282][T24830] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5139'. [ 531.456678][T24832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5140'. [ 531.487273][T24832] bridge0: entered promiscuous mode [ 531.494166][T24832] macsec2: entered promiscuous mode [ 531.499835][T24832] macsec2: entered allmulticast mode [ 531.505413][T24832] bridge0: entered allmulticast mode [ 531.513256][T24832] bridge0: port 1(macsec2) entered blocking state [ 531.540780][T24832] bridge0: port 1(macsec2) entered disabled state [ 531.555586][T24832] bridge0: left allmulticast mode [ 531.568893][T24832] bridge0: left promiscuous mode [ 532.140363][T24869] netlink: 'syz.0.5150': attribute type 21 has an invalid length. [ 532.153114][T24869] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5150'. [ 532.236227][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5150'. [ 532.508305][T24885] netlink: 'syz.1.5154': attribute type 9 has an invalid length. [ 532.615291][T24894] netlink: 'syz.2.5156': attribute type 1 has an invalid length. [ 532.701069][T24896] block nbd0: reconnected socket [ 532.739768][T24896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5157'. [ 532.798976][T24905] ip6t_REJECT: ECHOREPLY is not supported [ 532.805246][ T5830] block nbd0: Receive control failed (result -32) [ 532.900645][T24915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5158'. [ 532.926865][T24907] bond16: Unable to set peer notification delay as MII monitoring is disabled [ 532.959993][T24907] bond16 (unregistering): Released all slaves [ 533.026674][T24904] syzkaller1: entered promiscuous mode [ 533.072226][T24904] syzkaller1: entered allmulticast mode [ 533.079626][T24913] tc_dump_action: action bad kind [ 533.913661][ T5830] block nbd4: Receive control failed (result -107) [ 533.940823][T24943] nbd4: detected capacity change from 0 to 127 [ 533.958798][T16116] block nbd4: Dead connection, failed to find a fallback [ 534.000648][T16116] block nbd4: shutting down sockets [ 534.005962][T16116] blk_print_req_error: 138 callbacks suppressed [ 534.005980][T16116] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.042687][T16116] buffer_io_error: 138 callbacks suppressed [ 534.042707][T16116] Buffer I/O error on dev nbd4, logical block 0, async page read [ 534.065605][T24956] sctp: [Deprecated]: syz.2.5173 (pid 24956) Use of int in maxseg socket option. [ 534.065605][T24956] Use struct sctp_assoc_value instead [ 534.087674][T16116] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.131939][T16116] Buffer I/O error on dev nbd4, logical block 1, async page read [ 534.157698][T16116] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.168651][T16116] Buffer I/O error on dev nbd4, logical block 2, async page read [ 534.176491][T16116] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.191881][T16116] Buffer I/O error on dev nbd4, logical block 3, async page read [ 534.199845][T16116] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.210061][T16116] Buffer I/O error on dev nbd4, logical block 0, async page read [ 534.219696][T16116] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.256547][T16116] Buffer I/O error on dev nbd4, logical block 1, async page read [ 534.265756][T16116] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.277656][T24959] s5ÿÿø: renamed from vlan1 (while UP) [ 534.284863][T16116] Buffer I/O error on dev nbd4, logical block 2, async page read [ 534.293815][T16116] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.304366][T16116] Buffer I/O error on dev nbd4, logical block 3, async page read [ 534.319727][T16116] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.348768][T16116] Buffer I/O error on dev nbd4, logical block 0, async page read [ 534.356652][T16116] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 534.401829][T16116] Buffer I/O error on dev nbd4, logical block 1, async page read [ 534.422084][T16116] ldm_validate_partition_table(): Disk read failed. [ 534.447868][T24970] tipc: Enabling of bearer rejected, failed to enable media [ 534.451681][T16116] Dev nbd4: unable to read RDB block 0 [ 534.472710][T16116] nbd4: unable to read partition table [ 534.492063][T16116] ldm_validate_partition_table(): Disk read failed. [ 534.508831][T16116] Dev nbd4: unable to read RDB block 0 [ 534.520198][T16116] nbd4: unable to read partition table [ 534.546418][T24974] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 534.684369][T24983] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 534.927163][T24991] netlink: set zone limit has 4 unknown bytes [ 535.112615][T25006] netlink: 'syz.4.5188': attribute type 1 has an invalid length. [ 535.207780][T25006] bond9: entered promiscuous mode [ 535.213557][T25006] 8021q: adding VLAN 0 to HW filter on device bond9 [ 535.225632][T25005] syzkaller0: entered promiscuous mode [ 535.231552][T25005] syzkaller0: entered allmulticast mode [ 535.247386][T25013] netlink: 'syz.1.5190': attribute type 10 has an invalid length. [ 535.302649][T25006] bond9: (slave bridge3): making interface the new active one [ 535.314676][T25006] bridge3: entered promiscuous mode [ 535.344926][T25006] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 535.567561][T25019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.766515][T25029] bond16: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 535.932505][T25038] can: request_module (can-proto-0) failed. [ 535.997295][T25054] __nla_validate_parse: 3 callbacks suppressed [ 535.997316][T25054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5199'. [ 536.069993][T25059] openvswitch: netlink: IP tunnel TTL not specified. [ 536.079098][T25047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5199'. [ 536.102300][T25048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5202'. [ 536.115179][T25053] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 536.199906][T25059] openvswitch: netlink: EtherType 50a is less than min 600 [ 536.392081][T25072] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.5205'. [ 536.453937][T25076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5206'. [ 536.511479][T25079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5208'. [ 536.551990][T25079] [ 536.554391][T25079] ====================================================== [ 536.561440][T25079] WARNING: possible circular locking dependency detected [ 536.568505][T25079] syzkaller #0 Not tainted [ 536.573096][T25079] ------------------------------------------------------ [ 536.580149][T25079] syz.2.5208/25079 is trying to acquire lock: [ 536.586252][T25079] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60 [ 536.595543][T25079] [ 536.595543][T25079] but task is already holding lock: [ 536.602941][T25079] ffffffff8f17d3e8 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 536.611718][T25079] [ 536.611718][T25079] which lock already depends on the new lock. [ 536.611718][T25079] [ 536.622331][T25079] [ 536.622331][T25079] the existing dependency chain (in reverse order) is: [ 536.631441][T25079] [ 536.631441][T25079] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 536.638635][T25079] __mutex_lock+0x19f/0x1300 [ 536.643818][T25079] get_device_parent+0x16f/0x3a0 [ 536.649349][T25079] device_add+0x2e1/0xb70 [ 536.654272][T25079] device_create+0x269/0x300 [ 536.659435][T25079] msr_device_create+0x33/0x50 [ 536.664759][T25079] cpuhp_invoke_callback+0x445/0x860 [ 536.670626][T25079] cpuhp_thread_fun+0x36b/0x780 [ 536.676056][T25079] smpboot_thread_fn+0x541/0xa50 [ 536.681572][T25079] kthread+0x388/0x470 [ 536.686210][T25079] ret_from_fork+0x51e/0xb90 [ 536.691373][T25079] ret_from_fork_asm+0x1a/0x30 [ 536.696715][T25079] [ 536.696715][T25079] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 536.704348][T25079] cpuhp_thread_fun+0x127/0x780 [ 536.709781][T25079] smpboot_thread_fn+0x541/0xa50 [ 536.715285][T25079] kthread+0x388/0x470 [ 536.719925][T25079] ret_from_fork+0x51e/0xb90 [ 536.725087][T25079] ret_from_fork_asm+0x1a/0x30 [ 536.730423][T25079] [ 536.730423][T25079] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 536.738206][T25079] cpus_read_lock+0x42/0x160 [ 536.743364][T25079] static_key_slow_inc+0x12/0x30 [ 536.748878][T25079] nbd_genl_reconfigure+0x132f/0x1ea0 [ 536.754840][T25079] genl_family_rcv_msg_doit+0x22a/0x330 [ 536.760958][T25079] genl_rcv_msg+0x61c/0x7a0 [ 536.766038][T25079] netlink_rcv_skb+0x232/0x4b0 [ 536.771520][T25079] genl_rcv+0x28/0x40 [ 536.776077][T25079] netlink_unicast+0x80f/0x9b0 [ 536.781433][T25079] netlink_sendmsg+0x813/0xb40 [ 536.786768][T25079] ____sys_sendmsg+0x972/0x9f0 [ 536.792099][T25079] ___sys_sendmsg+0x2a5/0x360 [ 536.797336][T25079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 536.802917][T25079] do_syscall_64+0x14d/0xf80 [ 536.808063][T25079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.814508][T25079] [ 536.814508][T25079] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 536.822182][T25079] __mutex_lock+0x19f/0x1300 [ 536.827323][T25079] nbd_queue_rq+0x37b/0x1100 [ 536.832469][T25079] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 536.838563][T25079] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 536.845457][T25079] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 536.851995][T25079] blk_mq_run_hw_queue+0x348/0x4f0 [ 536.857659][T25079] blk_mq_dispatch_list+0xd16/0xe10 [ 536.864447][T25079] blk_mq_flush_plug_list+0x48d/0x570 [ 536.870369][T25079] __blk_flush_plug+0x3ed/0x4d0 [ 536.875775][T25079] __submit_bio+0x28d/0x580 [ 536.880829][T25079] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 536.887092][T25079] block_read_full_folio+0x599/0x830 [ 536.892939][T25079] filemap_read_folio+0x137/0x3b0 [ 536.898541][T25079] do_read_cache_folio+0x358/0x590 [ 536.904235][T25079] read_part_sector+0xb6/0x2b0 [ 536.909568][T25079] adfspart_check_ICS+0xa5/0xa40 [ 536.915067][T25079] bdev_disk_changed+0x7ba/0x1550 [ 536.920782][T25079] blkdev_get_whole+0x380/0x510 [ 536.926195][T25079] bdev_open+0x31e/0xd30 [ 536.931003][T25079] blkdev_open+0x470/0x610 [ 536.935977][T25079] do_dentry_open+0x785/0x14e0 [ 536.941309][T25079] vfs_open+0x3b/0x340 [ 536.945954][T25079] path_openat+0x2e08/0x3860 [ 536.951107][T25079] do_file_open+0x23e/0x4a0 [ 536.956195][T25079] do_sys_openat2+0x113/0x200 [ 536.961456][T25079] __x64_sys_openat+0x138/0x170 [ 536.966876][T25079] do_syscall_64+0x14d/0xf80 [ 536.972107][T25079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.978561][T25079] [ 536.978561][T25079] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 536.985808][T25079] __mutex_lock+0x19f/0x1300 [ 536.990960][T25079] nbd_queue_rq+0xc6/0x1100 [ 536.996018][T25079] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 537.002124][T25079] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 537.009007][T25079] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 537.015541][T25079] blk_mq_run_hw_queue+0x348/0x4f0 [ 537.021203][T25079] blk_mq_dispatch_list+0xd16/0xe10 [ 537.026953][T25079] blk_mq_flush_plug_list+0x48d/0x570 [ 537.032877][T25079] __blk_flush_plug+0x3ed/0x4d0 [ 537.038282][T25079] __submit_bio+0x28d/0x580 [ 537.043353][T25079] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 537.049564][T25079] block_read_full_folio+0x599/0x830 [ 537.055416][T25079] filemap_read_folio+0x137/0x3b0 [ 537.061003][T25079] do_read_cache_folio+0x358/0x590 [ 537.066676][T25079] read_part_sector+0xb6/0x2b0 [ 537.072000][T25079] adfspart_check_ICS+0xa5/0xa40 [ 537.077498][T25079] bdev_disk_changed+0x7ba/0x1550 [ 537.083080][T25079] blkdev_get_whole+0x380/0x510 [ 537.088487][T25079] bdev_open+0x31e/0xd30 [ 537.093294][T25079] blkdev_open+0x470/0x610 [ 537.098275][T25079] do_dentry_open+0x785/0x14e0 [ 537.103604][T25079] vfs_open+0x3b/0x340 [ 537.108255][T25079] path_openat+0x2e08/0x3860 [ 537.113407][T25079] do_file_open+0x23e/0x4a0 [ 537.118463][T25079] do_sys_openat2+0x113/0x200 [ 537.123708][T25079] __x64_sys_openat+0x138/0x170 [ 537.129119][T25079] do_syscall_64+0x14d/0xf80 [ 537.134269][T25079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.140723][T25079] [ 537.140723][T25079] -> #4 (set->srcu){.+.+}-{0:0}: [ 537.147890][T25079] __synchronize_srcu+0xca/0x300 [ 537.153391][T25079] elevator_switch+0x1e8/0x7a0 [ 537.158752][T25079] elevator_change+0x2cc/0x450 [ 537.164083][T25079] elevator_set_default+0x36c/0x430 [ 537.169843][T25079] blk_register_queue+0x366/0x430 [ 537.175426][T25079] __add_disk+0x677/0xd50 [ 537.180330][T25079] add_disk_fwnode+0xfb/0x480 [ 537.185574][T25079] nbd_dev_add+0x72c/0xb50 [ 537.190546][T25079] nbd_init+0x168/0x1f0 [ 537.195299][T25079] do_one_initcall+0x250/0x8d0 [ 537.200625][T25079] do_initcall_level+0x104/0x190 [ 537.206212][T25079] do_initcalls+0x59/0xa0 [ 537.211115][T25079] kernel_init_freeable+0x2a6/0x3e0 [ 537.216879][T25079] kernel_init+0x1d/0x1d0 [ 537.221765][T25079] ret_from_fork+0x51e/0xb90 [ 537.226915][T25079] ret_from_fork_asm+0x1a/0x30 [ 537.232404][T25079] [ 537.232404][T25079] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 537.240270][T25079] __mutex_lock+0x19f/0x1300 [ 537.245453][T25079] elevator_change+0x1b3/0x450 [ 537.250769][T25079] elevator_set_none+0xb5/0x140 [ 537.256214][T25079] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 537.262600][T25079] nbd_start_device+0x17f/0xb10 [ 537.268350][T25079] nbd_genl_connect+0x165b/0x1cf0 [ 537.273936][T25079] genl_family_rcv_msg_doit+0x22a/0x330 [ 537.280131][T25079] genl_rcv_msg+0x61c/0x7a0 [ 537.285191][T25079] netlink_rcv_skb+0x232/0x4b0 [ 537.290500][T25079] genl_rcv+0x28/0x40 [ 537.295031][T25079] netlink_unicast+0x80f/0x9b0 [ 537.300351][T25079] netlink_sendmsg+0x813/0xb40 [ 537.305667][T25079] ____sys_sendmsg+0x972/0x9f0 [ 537.310989][T25079] ___sys_sendmsg+0x2a5/0x360 [ 537.316222][T25079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 537.321708][T25079] do_syscall_64+0x14d/0xf80 [ 537.326857][T25079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.333293][T25079] [ 537.333293][T25079] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 537.341955][T25079] blk_alloc_queue+0x546/0x680 [ 537.347268][T25079] __blk_mq_alloc_disk+0x197/0x390 [ 537.352936][T25079] nbd_dev_add+0x499/0xb50 [ 537.357908][T25079] nbd_init+0x168/0x1f0 [ 537.362624][T25079] do_one_initcall+0x250/0x8d0 [ 537.367951][T25079] do_initcall_level+0x104/0x190 [ 537.373438][T25079] do_initcalls+0x59/0xa0 [ 537.378406][T25079] kernel_init_freeable+0x2a6/0x3e0 [ 537.384213][T25079] kernel_init+0x1d/0x1d0 [ 537.389097][T25079] ret_from_fork+0x51e/0xb90 [ 537.394254][T25079] ret_from_fork_asm+0x1a/0x30 [ 537.399577][T25079] [ 537.399577][T25079] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 537.406819][T25079] fs_reclaim_acquire+0x71/0x100 [ 537.412310][T25079] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 537.418584][T25079] alloc_inode+0xb8/0x1b0 [ 537.423479][T25079] iget_locked+0x131/0x6a0 [ 537.428450][T25079] kernfs_get_inode+0x4f/0x780 [ 537.433765][T25079] kernfs_get_tree+0x5cd/0x980 [ 537.439075][T25079] sysfs_get_tree+0x46/0x110 [ 537.444220][T25079] vfs_get_tree+0x92/0x2a0 [ 537.449187][T25079] do_new_mount+0x341/0xd30 [ 537.454241][T25079] __se_sys_mount+0x31d/0x420 [ 537.459477][T25079] do_syscall_64+0x14d/0xf80 [ 537.464630][T25079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.471078][T25079] [ 537.471078][T25079] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 537.479102][T25079] __lock_acquire+0x15a5/0x2cf0 [ 537.484590][T25079] lock_acquire+0xf0/0x2e0 [ 537.489602][T25079] down_write+0x96/0x200 [ 537.494388][T25079] kernfs_remove+0x30/0x60 [ 537.499350][T25079] __kobject_del+0xe1/0x330 [ 537.504394][T25079] kobject_del+0x45/0x60 [ 537.509176][T25079] cleanup_glue_dir+0x1a3/0x220 [ 537.514588][T25079] device_del+0x780/0x8f0 [ 537.519472][T25079] device_destroy+0xb2/0x1a0 [ 537.524642][T25079] macvtap_device_event+0x226/0x400 [ 537.530394][T25079] notifier_call_chain+0x1be/0x400 [ 537.536063][T25079] unregister_netdevice_many_notify+0x186a/0x2370 [ 537.543039][T25079] rtnl_dellink+0x5d4/0x820 [ 537.548089][T25079] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 537.553575][T25079] netlink_rcv_skb+0x232/0x4b0 [ 537.558882][T25079] netlink_unicast+0x80f/0x9b0 [ 537.564193][T25079] netlink_sendmsg+0x813/0xb40 [ 537.569523][T25079] ____sys_sendmsg+0x972/0x9f0 [ 537.574840][T25079] ___sys_sendmsg+0x2a5/0x360 [ 537.580064][T25079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 537.585551][T25079] do_syscall_64+0x14d/0xf80 [ 537.590698][T25079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.597141][T25079] [ 537.597141][T25079] other info that might help us debug this: [ 537.597141][T25079] [ 537.607390][T25079] Chain exists of: [ 537.607390][T25079] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 537.607390][T25079] [ 537.620207][T25079] Possible unsafe locking scenario: [ 537.620207][T25079] [ 537.627676][T25079] CPU0 CPU1 [ 537.633061][T25079] ---- ---- [ 537.638470][T25079] lock(gdp_mutex); [ 537.642397][T25079] lock(cpuhp_state-up); [ 537.649269][T25079] lock(gdp_mutex); [ 537.655709][T25079] lock(&root->kernfs_rwsem); [ 537.660497][T25079] [ 537.660497][T25079] *** DEADLOCK *** [ 537.660497][T25079] [ 537.668669][T25079] 2 locks held by syz.2.5208/25079: [ 537.673887][T25079] #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x42a/0x820 [ 537.682893][T25079] #1: ffffffff8f17d3e8 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 537.692072][T25079] [ 537.692072][T25079] stack backtrace: [ 537.698113][T25079] CPU: 0 UID: 0 PID: 25079 Comm: syz.2.5208 Not tainted syzkaller #0 PREEMPT(full) [ 537.698136][T25079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 537.698149][T25079] Call Trace: [ 537.698157][T25079] [ 537.698166][T25079] dump_stack_lvl+0xe8/0x150 [ 537.698197][T25079] print_circular_bug+0x2e1/0x300 [ 537.698228][T25079] check_noncircular+0x12e/0x150 [ 537.698261][T25079] __lock_acquire+0x15a5/0x2cf0 [ 537.698288][T25079] ? __lock_acquire+0x6b5/0x2cf0 [ 537.698312][T25079] ? rcu_is_watching+0x15/0xb0 [ 537.698342][T25079] lock_acquire+0xf0/0x2e0 [ 537.698364][T25079] ? kernfs_remove+0x30/0x60 [ 537.698385][T25079] down_write+0x96/0x200 [ 537.698401][T25079] ? kernfs_remove+0x30/0x60 [ 537.698417][T25079] ? __pfx_down_write+0x10/0x10 [ 537.698432][T25079] ? kernfs_root+0x1c/0x230 [ 537.698459][T25079] ? kernfs_root+0x1c/0x230 [ 537.698483][T25079] ? kernfs_root+0x1c/0x230 [ 537.698516][T25079] ? kernfs_root+0x1ea/0x230 [ 537.698543][T25079] kernfs_remove+0x30/0x60 [ 537.698559][T25079] __kobject_del+0xe1/0x330 [ 537.698577][T25079] kobject_del+0x45/0x60 [ 537.698593][T25079] cleanup_glue_dir+0x1a3/0x220 [ 537.698620][T25079] device_del+0x780/0x8f0 [ 537.698648][T25079] ? __pfx_device_del+0x10/0x10 [ 537.698677][T25079] device_destroy+0xb2/0x1a0 [ 537.698703][T25079] ? __pfx_device_destroy+0x10/0x10 [ 537.698734][T25079] macvtap_device_event+0x226/0x400 [ 537.698762][T25079] ? __pfx_macvtap_device_event+0x10/0x10 [ 537.698790][T25079] ? igmp_netdev_event+0x7c/0x750 [ 537.698817][T25079] notifier_call_chain+0x1be/0x400 [ 537.698851][T25079] unregister_netdevice_many_notify+0x186a/0x2370 [ 537.698888][T25079] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 537.698920][T25079] ? netdev_upper_dev_unlink+0x99/0xe0 [ 537.698941][T25079] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 537.698963][T25079] ? macvlan_dellink+0x3e2/0x470 [ 537.698985][T25079] ? __pfx_macvtap_dellink+0x10/0x10 [ 537.699009][T25079] ? __pfx_macvtap_dellink+0x10/0x10 [ 537.699034][T25079] rtnl_dellink+0x5d4/0x820 [ 537.699055][T25079] ? __lock_acquire+0x6b5/0x2cf0 [ 537.699080][T25079] ? __pfx_rtnl_dellink+0x10/0x10 [ 537.699103][T25079] ? __lock_acquire+0x6b5/0x2cf0 [ 537.699127][T25079] ? __lock_acquire+0x6b5/0x2cf0 [ 537.699183][T25079] ? __pfx_rtnl_dellink+0x10/0x10 [ 537.699203][T25079] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 537.699225][T25079] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 537.699244][T25079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 537.699268][T25079] ? __lock_acquire+0x6b5/0x2cf0 [ 537.699294][T25079] netlink_rcv_skb+0x232/0x4b0 [ 537.699315][T25079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 537.699336][T25079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.699360][T25079] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.699382][T25079] netlink_unicast+0x80f/0x9b0 [ 537.699402][T25079] ? __pfx_netlink_unicast+0x10/0x10 [ 537.699420][T25079] ? netlink_sendmsg+0x650/0xb40 [ 537.699439][T25079] ? skb_put+0x11b/0x210 [ 537.699462][T25079] netlink_sendmsg+0x813/0xb40 [ 537.699486][T25079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.699512][T25079] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.699541][T25079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.699564][T25079] ____sys_sendmsg+0x972/0x9f0 [ 537.699607][T25079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.699635][T25079] ? import_iovec+0x73/0xa0 [ 537.699658][T25079] ___sys_sendmsg+0x2a5/0x360 [ 537.699685][T25079] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.699712][T25079] ? futex_wake+0x4ac/0x580 [ 537.699751][T25079] ? __fget_files+0x2a/0x420 [ 537.699767][T25079] ? __fget_files+0x3a0/0x420 [ 537.699786][T25079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 537.699812][T25079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.699841][T25079] ? rcu_is_watching+0x15/0xb0 [ 537.699872][T25079] do_syscall_64+0x14d/0xf80 [ 537.699898][T25079] ? trace_irq_disable+0x3b/0x150 [ 537.699913][T25079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.699931][T25079] ? clear_bhb_loop+0x40/0x90 [ 537.699951][T25079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.699969][T25079] RIP: 0033:0x7f00b599c819 [ 537.699986][T25079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.700002][T25079] RSP: 002b:00007f00b67bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.700022][T25079] RAX: ffffffffffffffda RBX: 00007f00b5c15fa0 RCX: 00007f00b599c819 [ 537.700036][T25079] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 537.700048][T25079] RBP: 00007f00b5a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 537.700059][T25079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.700070][T25079] R13: 00007f00b5c16038 R14: 00007f00b5c15fa0 R15: 00007ffc341b3a58 [ 537.700091][T25079] [ 538.200614][ T8579] lec:lec_start_xmit: lec0:No lecd attached [ 541.272097][ T5194] udevd[5194]: worker [5836] /devices/virtual/block/nbd1 timeout; kill it [ 541.281659][ T5194] udevd[5194]: seq 15047 '/devices/virtual/block/nbd1' killed [ 543.908125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 543.916181][ C1] lec:lec_tx_timeout: lec0