last executing test programs: 4.868754188s ago: executing program 0 (id=6261): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010010000000000000000000000fc00e2ad0000d6b71b6239b36377c400000a090000000000080000000700000009000100f3797a300000000016000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c080006407726840db9547efe00000028580000000c0a01010000000000000000070000000900110073797a30000000002c0073be6a1172d403802800008008000340000000021c00028018000280080001000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 4.62968327s ago: executing program 0 (id=6263): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r0, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x7, &(0x7f0000000000), 0xa0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1) (async) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000000)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="080006"], 0x24}}, 0x4) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="080006"], 0x24}}, 0x4) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) recvmmsg$unix(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x124, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8bf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x888ae8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x38}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffc01}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x98, 0x130, 0x0, 0x130, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'pimreg1\x00', {}, {}, 0x1d}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a2) (async) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x98, 0x130, 0x0, 0x130, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'pimreg1\x00', {}, {}, 0x1d}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0xff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a2) 4.320274681s ago: executing program 0 (id=6266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x1c, r2, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4243b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000ec0)="9925f561", 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp], 0x1) 4.013141459s ago: executing program 0 (id=6271): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x2d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0xd, [0x2c29, 0x4], 0x9, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x3a}, @remote, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @remote, @empty, @private0, @mcast2, @local, @local, @mcast2, @loopback, @private0], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffffff, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], 'pim6reg1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3b, 0x0, 0x3, 0x14}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "2bd6", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/user\x00') ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = openat$cgroup_ro(r0, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x2d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0xd, [0x2c29, 0x4], 0x9, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x3a}, @remote, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @remote, @empty, @private0, @mcast2, @local, @local, @mcast2, @loopback, @private0], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffffff, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], 'pim6reg1\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3b, 0x0, 0x3, 0x14}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "2bd6", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) getpid() (async) syz_open_procfs$namespace(r2, &(0x7f0000000140)='ns/user\x00') (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) (async) openat$cgroup_ro(r0, &(0x7f0000000740)='net_prio.prioidx\x00', 0x0, 0x0) (async) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) (async) 3.770239235s ago: executing program 0 (id=6275): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) (async) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) (async) 3.592302517s ago: executing program 0 (id=6277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x5, @rand_addr, 0x4}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x710d, {{0xa, 0x4e21, 0x8, @remote, 0x7}}}, 0xce) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) (async) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff81004e230e227f004001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa00000000ffffffffffffffffe7ee000000000000000002000000008d2f99c3ea84211e2d", 0x61}], 0x1) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) syz_emit_ethernet(0x1e, &(0x7f0000000000)=ANY=[], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="c12cd111deec67078da291f0d7d3b1b6dec65f4003c8ec4a501b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200)="9cd8df172afc80", &(0x7f0000001540), 0x1, r4}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x300, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000480)="802000800000b8a80000cd7a0003a90986", 0x11, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0x6, 0x6, @local}, 0x14) (async) socket$inet_icmp(0x2, 0x2, 0x1) 3.008807235s ago: executing program 4 (id=6287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89b0, &(0x7f0000000540)={'macvlan0\x00', @random="00009e0c1100"}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x108, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x130}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 2.760494713s ago: executing program 3 (id=6290): sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000209c", @ANYRES16, @ANYBLOB="070627bd7000fcdbdf252d0000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8015}, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x800) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.759497742s ago: executing program 4 (id=6291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x10001, 0x1, 0x20000007, 0x7fffffff, 0x101}, 0x3, 0x8}, [{0xde, 0xe3, 0x1, 0x9, 0x8000, 0x4}, {0x2000000, 0x8, 0x5, 0x1, 0xa66, 0x100}, {0x4, 0x3ee1, 0x6, 0x5432, 0xd, 0x40}, {0x0, 0x9, 0x1, 0xbd, 0x9e3, 0x1}, {0xfff, 0x0, 0x7, 0x80000000, 0x6, 0x55f}, {0x6, 0xb8c, 0x6, 0x3, 0x0, 0x10001}, {0x401, 0x9, 0x5, 0x10000, 0x9, 0x76}, {0x66, 0x7, 0x9, 0x4, 0x0, 0xc4}, {0x1, 0xcc, 0xf, 0x8, 0x0, 0x9}, {0x6, 0x5, 0x1, 0x401, 0x7, 0x4}, {0x6, 0x3, 0x2, 0x2, 0x5, 0x3}, {0x400, 0x8, 0xcf02, 0x876, 0x401, 0x7370d629}, {0x80000000, 0x7, 0x7fff, 0xdc0d, 0x6, 0x3}, {0xb, 0xe, 0x0, 0x80000001, 0x7, 0x4}, {0x0, 0x800, 0xa2e6, 0x10008000}, {0x6, 0x9, 0x1, 0xffffaf21, 0x8, 0x7}, {0xa6, 0x2, 0x1, 0x4, 0x6, 0xfffffffa}, {0x7, 0x100, 0x9, 0x1, 0x3, 0x4}, {0x2, 0x5, 0x4, 0x81, 0x3ff, 0x8000}, {0x7, 0x4, 0x1, 0x1, 0xfffffffa, 0x90e7}, {0x0, 0x2, 0x9, 0x7fff, 0x81, 0x45}, {0x7, 0x2, 0x10, 0x4, 0xffffffff, 0x2}, {0x5, 0x10, 0x8001, 0x5, 0x8, 0x1}, {0x2, 0xffffff64, 0x5, 0xff, 0xc455, 0x4}, {0xb2, 0x1, 0x6, 0x1, 0x3, 0x1}, {0x2, 0x4, 0x200, 0x10000, 0x0, 0x6}, {0x8001, 0x7, 0x7, 0x9, 0xa39, 0x1}, {0xfaa8, 0x0, 0xc, 0x0, 0xa, 0xa}, {0x425, 0x6, 0x1, 0x4, 0x9, 0xbeaa}, {0x2, 0x80000001, 0x0, 0x8, 0x0, 0x7}, {0x101, 0x7, 0xfe3, 0x935, 0x9, 0x8001}, {0x829a, 0x1, 0x0, 0x10001, 0x1, 0x1}, {0xffffffff, 0x6, 0x100, 0x0, 0x9, 0x4}, {0x1, 0xde4c, 0x800, 0x7, 0x8, 0x646f}, {0x7, 0x81, 0x9, 0x6, 0x9}, {0x2, 0x9, 0x40, 0x5, 0x1, 0x71b0}, {0x80000001, 0x7, 0x1, 0xa00000, 0x10, 0x101}, {0x8, 0x80000001, 0x10001, 0x8, 0x7, 0x4}, {0x5, 0x8, 0xfffff6e0, 0xfffffffe, 0x5, 0x424}, {0x7, 0x5, 0x6, 0x5, 0x0, 0xfffffff7}, {0x53, 0xf, 0x7, 0x2, 0x400, 0x7}, {0x1, 0x1, 0x7, 0x401, 0x9cf58fe}, {0x1, 0xffffffff, 0x81c3, 0x1, 0x0, 0x80000001}, {0xffffffff, 0x7, 0x3, 0x8, 0x81, 0x6}, {0x9, 0xfff, 0x6, 0x1, 0x8, 0xfffffff8}, {0x7ff, 0x8, 0x7, 0x800, 0x81, 0x400}, {0x5, 0x7, 0x18000000, 0x0, 0x200, 0x8}, {0xfffff800, 0x6, 0x7, 0x12000, 0x6, 0xffffffff}, {0x9, 0x7f, 0x3, 0x9, 0xffffffff, 0xffffffff}, {0x9, 0x37, 0x8, 0x12b, 0x89e1, 0x101}, {0x9, 0x53, 0x1, 0x6, 0xfffffffa, 0x5}, {0x7, 0x1, 0x4, 0x7, 0xffffffff}, {0x63bd, 0x8, 0x3, 0xb63a, 0x1, 0x4}, {0x6, 0x0, 0x2e25, 0x81, 0xff, 0x3}, {0x4, 0xa, 0xc, 0x2, 0x800100, 0x2}, {0xee, 0x2, 0x5, 0x3, 0x2, 0x3}, {0x10000, 0xfffff7fe, 0x8, 0x8, 0x868, 0xb406}, {0x6, 0xb8ed, 0xeb, 0xffffffff, 0x0, 0x3}, {0x7bd, 0x5, 0x85, 0x4, 0x9, 0x7}, {0x7fff, 0x73b, 0x8001, 0xdcb, 0x8, 0x8}, {0xfffff001, 0x4, 0x9000000, 0x2, 0x7fffffff, 0x94}, {0x6, 0x8001, 0x8, 0x367, 0x8, 0x1}, {0x2, 0x40, 0x3, 0x7ff, 0xe66a, 0x698}, {0x7f, 0xf, 0xffff98b3, 0xa, 0x3}, {0xa, 0x4, 0x5, 0x2, 0xfffd}, {0x30000, 0x1, 0x5, 0xf90, 0x6ed, 0x2}, {0x3, 0xfff, 0x8, 0x3, 0x66d9, 0x8}, {0x8000, 0x3, 0x7, 0x800, 0x10001, 0x6}, {0xa, 0xdd2fc5d, 0x8, 0xf1, 0x9, 0x6}, {0x9, 0xffffffff, 0xb38c, 0x6, 0x81, 0x891c}, {0x1, 0xe, 0x8000, 0x3, 0x3, 0x1}, {0x0, 0x3, 0x5fbb, 0x0, 0x5, 0xffff}, {0x1, 0x1, 0x400, 0x3, 0x3c12, 0x74a}, {0x20, 0x2, 0x5, 0x1, 0x2, 0xffff8000}, {0x0, 0x9, 0xaf4e, 0xe3, 0x4, 0x2800}, {0x7, 0x8, 0x9, 0x2, 0x5, 0x4}, {0x5, 0x7, 0x5, 0xa, 0x6, 0x4}, {0x9, 0xffffff83, 0x7, 0x0, 0x3, 0xd}, {0x9bd, 0x2, 0x8, 0x3, 0x0, 0xf}, {0x7, 0x81, 0x3, 0x8, 0x3, 0x9}, {0x1, 0x800, 0xf, 0x5, 0x1000, 0x3}, {0x9, 0xa24, 0x2, 0x5, 0x400, 0xa}, {0x2b4e, 0x8, 0x5, 0x3, 0xf, 0x7800000}, {0x80000001, 0x100, 0x8c, 0x6, 0x7, 0x8}, {0x6, 0x2, 0xb5, 0x8, 0x9, 0x1000}, {0x7, 0x1, 0xe3c, 0x0, 0x3, 0x1}, {0x6, 0x5, 0x9, 0x5, 0x1, 0xc}, {0x8, 0x7, 0x800, 0x5, 0x9, 0x3}, {0xfff, 0x764, 0x400, 0xd7b, 0x0, 0x2}, {0x4, 0xfffffff7, 0x80000001, 0xce, 0xfffffffd, 0x1}, {0x3, 0x8, 0x10000, 0x5cf, 0xae9, 0xd}, {0x8, 0x5, 0x80000000, 0x6, 0x1, 0x1}, {0x5, 0x401, 0x1000, 0xaa, 0x3, 0xf}, {0x7ca, 0x2, 0x0, 0x401, 0x4, 0x2}, {0x1, 0xffffffff, 0x0, 0x4, 0x2, 0x7}, {0x2, 0x9, 0x5, 0xf, 0x2, 0x6}, {0x80000000, 0x0, 0xd041, 0x4, 0x734, 0x3ff}, {0x6, 0x3c00000, 0x5d51, 0x10001, 0x4, 0xffffffff}, {0x9, 0x5, 0x3, 0x2c28, 0xfffffff7, 0x4}, {0x2cb, 0x5, 0x8, 0x1, 0x5e6, 0x4}, {0x2, 0x1ff, 0xb, 0x2007, 0x3ff, 0x8}, {0x34, 0x3, 0x1, 0x6, 0x1000, 0x80}, {0x80000001, 0xd, 0x5, 0x7, 0xf4, 0x6}, {0x80, 0xf, 0x80000000, 0x0, 0x967, 0x3}, {0x3, 0xffffffff, 0xf44, 0xa51, 0x0, 0x5}, {0x4, 0x3, 0x6, 0xffffff1d, 0xbcd, 0x8}, {0x4, 0x100, 0xd1e3, 0x9, 0xa, 0x5}, {0x4, 0x9, 0x4, 0x7fffffff, 0xffffffaf, 0x5}, {0x0, 0x5, 0x800, 0x6, 0x10001, 0x4}, {0x4, 0x7cbdf1ab, 0x3d7, 0x5, 0x8, 0x3}, {0x7, 0x8, 0xffffa250, 0x4, 0x3, 0x8}, {0x20004, 0x7fffffff, 0x4, 0xff, 0xffff, 0x7}, {0xe3, 0x5, 0x0, 0xd, 0x9, 0xffffffc0}, {0x7fff, 0x4, 0xffffffff, 0x3, 0x80, 0x9}, {0x8, 0xfffffff9, 0x0, 0x0, 0x38b, 0x6}, {0x4, 0x2, 0x8, 0x5, 0x5, 0x2}, {0x6784, 0xfff, 0x7, 0xd, 0x3, 0x7}, {0xfe52, 0x5, 0x2, 0x7, 0x4, 0xfffffffb}, {0xa, 0x4, 0x81, 0xe9ca, 0x7, 0x3}, {0x5, 0x9, 0x4, 0x7, 0x1, 0x472517a2}, {0x0, 0x0, 0x1, 0x6, 0x3, 0xfffffffa}, {0x1, 0x49c, 0x5, 0x2f4b, 0x724e88c2, 0x2}, {0xd, 0xfffffffc, 0x2, 0x9, 0x2ca, 0x401}, {0x7, 0x6, 0x9, 0x7ff, 0x6ec, 0x1ff}, {0xfff, 0x5, 0xb4d, 0x8, 0x1, 0x4}, {0xfffffff8, 0xffffffff, 0x3, 0x1, 0x2, 0x703d}, {0xc, 0x4, 0xe8b6, 0x0, 0x9, 0x3}, {0xf, 0x1c, 0x5, 0x5, 0x6, 0x7fffffff}], [{0x4}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x84be6f01e67e12d7, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x6, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0xe94b35fccb9c3a2a}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x2, 0x3}, {0x2}, {0x2}, {0x3, 0x1}, {}, {}, {0x3}, {0x3, 0x1}, {0x2}, {}, {}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {}, {0x4, 0x1}, {}, {0x3}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x240440d5}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pipe(0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a010100000000000000000a00000af28b4a6073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.402747988s ago: executing program 3 (id=6295): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='@**\x00', 0x121001, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x80]}, {0x6, 0x9e00, 0x2, 0xffff}}, 0x80000001, &(0x7f0000000080), &(0x7f00000000c0)=0x5}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xdf, "394edc1a905a91bb90df4499015afba6cc848bda57089c2aa9ae651ff25aa1af164bbce0d56be93654de941fe42f3a02ccc99a9f19be0687fcaaac21576ff8e0c1841ba9f74f3661b2fef8df7b45361161ab711de9df9dd60a6223c96c626b4d50922f0d90482472bb1471eff22cc950a70b3f0535f1ae5778bec7d42f16e50c2848d1d4babfdee04d5479e41999b446de50e17ac1a17cdd4ac3860243a301a13a0f5af2262a8257e8d423fc309345f8efd88c57615d13975502dc789e001e6588b267f7b7c57b53042281ef433c21efab9ea56d7e6ab8573cc6f6ffc73a24"}, &(0x7f0000000240)=0xe7) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xdf, "394edc1a905a91bb90df4499015afba6cc848bda57089c2aa9ae651ff25aa1af164bbce0d56be93654de941fe42f3a02ccc99a9f19be0687fcaaac21576ff8e0c1841ba9f74f3661b2fef8df7b45361161ab711de9df9dd60a6223c96c626b4d50922f0d90482472bb1471eff22cc950a70b3f0535f1ae5778bec7d42f16e50c2848d1d4babfdee04d5479e41999b446de50e17ac1a17cdd4ac3860243a301a13a0f5af2262a8257e8d423fc309345f8efd88c57615d13975502dc789e001e6588b267f7b7c57b53042281ef433c21efab9ea56d7e6ab8573cc6f6ffc73a24"}, &(0x7f0000000240)=0xe7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={r1, 0x6}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r0, &(0x7f0000000300)='\x00', 0x8000, &(0x7f0000000340)={@align=0x400, {0x1ff, 0xfffc, 0x10001, 0xd}}, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=0x5}) read$nci(r4, &(0x7f0000000440)=""/14, 0xe) r5 = openat$cgroup_ro(r4, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r2) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000150}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x33}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0xc800) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x33}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0xc800) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000700)=0x2) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r8, &(0x7f0000000780)="9ba772c9bfebb4979242b43434ca2e91538ffcc58d7d078267db60ef0712785d89f5792a0235420f2408da7b6d0bde074461f39c2baeaac727002b7b902da740d5fdfda0bcd1a083ae4395343ec084301851df86bc", 0x55, 0x8) r9 = socket(0x6, 0x80000, 0x6) recvfrom$unix(r8, &(0x7f0000000800)=""/39, 0x27, 0x22, 0x0, 0x0) (async) recvfrom$unix(r8, &(0x7f0000000800)=""/39, 0x27, 0x22, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0x3c, 0x14, &(0x7f0000000840)="8c7242d849af98b94b6edfa246bd01ef4916c70b060813fd67ae6469d6cbddac53c44d1c6f673f0251a1d234c28c7a6636e8814c936511c12eaa6529", &(0x7f0000000880)=""/20, 0x1ae1, 0x0, 0xc4, 0xc9, &(0x7f00000008c0)="db2edd00f26006965a582a94f3f68920730612cc1c5bc17ff9bf3c72de3121049104bdae88a18d6d9723d222d942b9d2719fb8e1bab5a1c2f09c9b7bd8c64cad8511e9e9d9ca860c1bfe90a791f08f5cdc0ef0618c60de40890ec1940f671e5be47d1866216c625515b63a11e0775b41ef67bf55e6d4c42a14bfb89bb1fdf7176ef527f7e97c5ff5a140e98301fd6d5d105b272b2cd1c7c79cfe93e392ea5a3a4cca11077991e9ce2be6970bba7a371a4ea0a9a5df1649e5830c483a007f1c090fdf1837", &(0x7f00000009c0)="b99ea926ae021cb3c748ad47135ee3a80eecd786321e4301dd36d161f6078a52124a54c6add3282c37d8ca3a8577a0a2b04e7cdaad8a417ce8b208729e6194593ee3029e3fae013a41b320710475d9112c903a235627e69a1315f190453cc80f29a883af5e49be63d9e8d2bb9ce22d7fd85fc224385e5d7d604d4cded813751d6e8f6a8c5a713b4567f230016d77d124c0d1273f1f39fa9f1b1ba408cb33c91e7c8d504f4d48948d6ac1563ec3f5c7c96145b1c7189e07f7ca6a8abc5bfd599d8316c8564bdd65322b", 0xb}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000c00)={&(0x7f0000000b40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r10, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0xc041) socket(0x1a, 0xa, 0x80) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d40)="f25deb044f5441eebec88361ea", 0xd}, {&(0x7f0000000d80)="e585d7bf731c2009c84b455e92f2c2cbc243cbb8e68e366726e52f074bc7536807cbc56fbf41f475ad2250f18bf9ade8f327c60b50df3b1b51cac671d5a36953e8bacf5f873c71d518b8209a2769e9f8f2dc239fed7797947648d6638bacb9b412b64fdd3ec77a13c7135fdf6385d0a3a7a5463ddbb454acc1b8c72b0d3c569dcddcb0bec9617a556ccbd0dee3c5f844a2d7b20dc4be188dd338004730d6d6a5c8647dff9fb1787775b9eafcbf71877480421a1f958056e1ffb34106d4a6ccdfaaf7b93c53e31ab0d63005b273aeed371ef19beb280dece24280f1291be6f4e55b9322a95033fed8b927b548fb7fec2d0dabf8ac0cb56b569105e83e38fc", 0xfe}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x800) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x111, 0x2, 0x1, 0x4) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r11, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x14) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r11, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000001040)={0x0, 0x2, [0x10001, 0x6, 0xff, 0x2, 0x68b844c1, 0xfffffffffffffff7]}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000001040)={0x0, 0x2, [0x10001, 0x6, 0xff, 0x2, 0x68b844c1, 0xfffffffffffffff7]}) sendmmsg(r9, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)="afaf531dc220663d7a94640887db8aa94c18502b4f5f1dff09e6808649df4bc005bb4348c53b16c24c458d01cb01b3746b7826d51931057b99eae6c0405e3a4b69f52c07dfb153135748b73e9a548c2448cce207a64b880aeeebb11fca332bde6f969cb4dc6372e73c800cd0d84bccc6b9de", 0x72}], 0x1, &(0x7f0000001140)=[{0x100, 0x102, 0xc94, "13233ec534f42ee9f4a50df8387c7123e3bd75e4b35b985bd927985f956084748dc5897f3697903c80389920c8310a50bf833268bed3767df0d4c202b6a5fad8dd7c38e32bee452f3df80796b619589fcc90122a1febdb85a448a5e7c1b5905b9af0aa79a45015c0373aa60c75a9378f571c49d69e3e063357d44a80aa3a3b7fc30ebb5ccf67339868a1575eedfcdf7a7f31008718aadf514671cc45f3177c8418985b2636c3c76d638026fb57c235bfa5400837c38a428f60ac964b5895741fb92da9c0fee52590a323142478eb2199fade7b8d9f8b3148e3a267a7416e67c9bd0c238d3f6d65820e5b70fd31039796"}, {0xa0, 0x110, 0x1ff, "b62357bfc61c92406b1eed96d1ec8fa82d80a8d95e9f4f5dd3646fa2c01bb1c8a8e5f0fac567e0fd9e3f88a0516bf71ef5c39215e47927d19f2883afd19cf336c7eed2990e97f04448aea9de4c79317144de35bc2c5d9f2e2c900b2bc91911793f8eb6b682be81a20036f94a3775a79f454f124f9951d3d902150cdf9a160e636aa317c936c62d345af568cfa5"}], 0x1a0}}], 0x1, 0x20000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x3, 0x4, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000001380)='syzkaller\x00', 0x7, 0xd5, &(0x7f00000013c0)=""/213, 0x41000, 0x35, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x0, 0x7, 0xe}, 0x10, 0x0, r0, 0x1, &(0x7f00000018c0)=[r0, r7, r8, r7, r7, r8, r0, r4], &(0x7f0000001900)=[{0x0, 0x5, 0x2, 0x3}]}, 0x94) 2.273480885s ago: executing program 2 (id=6296): r0 = socket$netlink(0x10, 0x3, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x3}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x34}, 0x20) recvmsg(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000000340)=""/20, 0x14}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/79, 0x4f}], 0x6, &(0x7f00000004c0)=""/189, 0xbd}, 0x40000045) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6ab6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 2.213312944s ago: executing program 4 (id=6297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0000000000119078000007000000000000004e220018907804000000000000000800000000000000"], 0x0) 2.060122897s ago: executing program 3 (id=6299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)=ANY=[], 0xc2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x6, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_PIM(r10, 0x29, 0xd0, &(0x7f0000000040)=0x200, 0x4) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0x6, 0xb}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfffffffffffffff7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 2.05686057s ago: executing program 2 (id=6300): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000040)={&(0x7f0000000000)=[{0x3, 0x9, 0x4, 0x7fffffff, 0x3}], 0x1, 0x28, 0xd, 0xd0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000540)={{r0, &(0x7f0000000080)='[{%&\x00', 0x600000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x7f]}, {0x7, 0x8, 0x0, 0x96c}}, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x3ff}, 0x4, &(0x7f00000004c0)=[{0x2, 0x4e7, &(0x7f0000000180)='\x00', &(0x7f00000001c0)="3bdc9aa9d1ccb3dd99da06b852b84d46d24bb433a8f6", 0x16, 0x2a}, {0x1, 0x3, &(0x7f0000000200)='\x00', &(0x7f0000000240)="350de0d478a95a804ccf91fd9cea0ff162735c6091dc66f5c0e384c848ee52906dc90031d567dc6a4c2ce195f363db97e1b72ada6fda87229eb35474500d1a24f86d8c2557075cd39aad2298fe7af85982965fb6f6ad481ee2da042012cf35e6fe3d2ee0c5b213d219c7d2c1bd9a33d7104047b54bda3b23db7dd01fd937701806ce9030b071617163a74253cf401ae01aabf5b38dc48705", 0x98, 0x10}, {0x2, 0x12, &(0x7f0000000300)='\x00', &(0x7f0000000340)="ba7224c593965076c094e29abf8824293645777e403b6215d7cd88326432c4017d44d4232ecf5258f45c1d7538075d822ced6818d88903f4f631ed6d6fe6a4730c2ac2116c674c1278dfbe848e0fe23ff8ecfae28635eab3e61d55ca08407e63691a40abc74819ffe3e962e094d9bca0fcbd30d9c952ea3ddbefc652c1a5853f8ac48b", 0x83}, {0x1, 0x3, &(0x7f0000000400)='#-\x00', &(0x7f0000000440)="4399f4438f11f65131e891907b8e0225fa81a4291c04e6a199a0ab884ca0b91c2740a1c24844cd8f23381bc7628cc4c707cdc0f297939f08cf38bd0e063c3d7d9d66c853a6408a8d67f7b7e0a2aae92431cc605a92f930", 0x57, 0x10}]}) write$bt_hci(r1, &(0x7f00000005c0)={0x1, @le_create_cis={{0x2064, 0x5}, {0x1, [{0x5, 0x6}]}}}, 0x9) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000600)={r0, 0x0, 0x8, 0x7, 0x9, 0x1, [0x6, 0x7, 0x401, 0x3ff, 0x3c1, 0x4]}) r2 = openat$cgroup_int(r1, &(0x7f0000000680)='cpuset.memory_spread_slab\x00', 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000006c0)) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000) write$bt_hci(r1, &(0x7f0000000800)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0x8, 0xd, 0x7, 0x0, 0x3, 0x4}, {0x1, 0x2, 0x82, 0x5, 0x10, 0x10001}}}}, 0x25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'xfrm0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000880)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000008c0)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000900)={r8, 0x7, 0x7}, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000940)={0x0, "988e1025cbf8f426687acf4930f9a1b3"}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000001940)={{}, {@val={r9}, @max}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)=@can_newroute={0x44, 0x18, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_CS_XOR={0x8, 0x5, {0x4, 0x0, 0xfffffffffffffffd, 0x7}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "70d55ddc0dd8678e"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x44025}, 0x4000050) write$cgroup_type(r1, &(0x7f0000001ac0), 0x9) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000001b00)={'veth1_to_batadv\x00', {0x2, 0x4e22, @broadcast}}) pread64(r1, &(0x7f0000001b40)=""/105, 0x69, 0x6) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001bc0)={r7, 0x1, 0x30}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001c40)=@assoc_value={r6, 0xd22bc27}, 0x8) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000001f40)={{&(0x7f0000001c80)=[{0x3, 0x1, 0x0, {0xaf, 0x3}, 0x2, 0x4, 0x1}, {0x7fffffffffffffff, 0x10001, 0x3, {0x9, 0x7}, 0xffffffff, 0x8, 0x8}, {0x8001, 0xb98, 0x5, {0xff, 0x7}, 0x0, 0x7, 0x7}, {0x4, 0x0, 0x2, {0x9}, 0x2, 0x8001, 0x10001}, {0xfef5, 0x2, 0x1000, {0x40, 0x401}, 0x4, 0x266e4a0e, 0x3}], 0x5, 0x40, 0x9, 0x4}, {&(0x7f0000001dc0)=[{0x7, 0x2}, {0x3, 0x6}, {0x3, 0x3ff}, {0x1, 0x8}, {0x8, 0xc69a}, {0x8, 0x8}, {0xffff, 0x7}], 0x7, 0x10, 0x3, 0x70}, {&(0x7f0000001e40)=[0x4, 0x6, 0x5f, 0x79fe, 0x7], 0x5, 0x8, 0x5dc0, 0x2}, {&(0x7f0000001e80)=[{0x4, 0xffffffffffffffff, 0x81, 0x40, 0x60ad}, {0x7, 0x8, 0x5, 0x18b, 0x68}], 0x2, 0x28, 0x4}, {&(0x7f0000001f00)=[0x5, 0x7, 0x80000000], 0x3, 0x8, 0x4, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001fc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000002fc0)={{r11, 0xdf, 0x8000000000000001, 0x1befc254, 0xb, 0x2, 0x68, 0x4, 0xffffff46, 0x3, 0x97cf, 0x7f, 0xfff, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004280)={0x18, 0x24, &(0x7f0000003fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x56}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0x4, 0x1, 0x0, 0xc, 0x9}, @printk={@li}, @ldst={0x3, 0x0, 0x0, 0xf, 0xa, 0x100, 0x4}]}, &(0x7f0000004100)='syzkaller\x00', 0x9, 0xac, &(0x7f0000004140)=""/172, 0x41000, 0x68, '\x00', r3, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004200)={0x1, 0x2, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004240)=[r1, r1], 0x0, 0x10, 0x4}, 0x94) write$bt_hci(0xffffffffffffffff, &(0x7f0000004340)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc9}}}, 0x7) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000004380)={0x2f, 0x18, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x2, 0x7a, "5b4c2d47789f000161a9bab67ec2dc1a06d7d557be6b52658bd383778ff2a49dc2d556ac0dd57ef901238b809d12e258dbdd9d0fad8954a8c6ec5bd49235b1e2f7ab682a5fce78f16c4b109e2b8e08ca6a87f188efdd4e71d9c435e996a0809343373d2980907e16ad0e704e4d6181b7accb99c2f26b037877bd"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x4, [0x3ff, 0x3]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x80, 0x4, [0x7fffffffffffffff, 0x0, 0x7, 0xad6]}}]}, 0xd0) 1.979225284s ago: executing program 4 (id=6301): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x100, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8bf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x888ae8e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.746897764s ago: executing program 2 (id=6303): r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000002780)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="8c361cfcfee2c500abd779c205dd2d3706518ca99780f8198e76f15170267a02f4bacd85", 0x24}, {&(0x7f00000000c0)="e6251bec9993956fa342f510d6488ac0", 0x10}, {&(0x7f0000000100)="7ae22115399c851307e9c9c761db6de4bee574296d1e70268843d70381dfb700c27582ad251c715db7600e40ff5ccefe8c68b88887a217f2f0bf2bf307590a2c915fb69a1ea0831bb7644522fc57733907ba5a823a12b99e27b98b861804e2e70e331c278dfe512d6ab9e6ed0372897d5fb429f28f483f4c167e174cf0bb94edbd4a7fd77a2014b940a51cc693deff331dcae56868ba10ad1c844698d5f1a36e80b71c4403ef2b9d8b82efba5d926ef947347709eda979a61dd15990c5b7", 0xbe}, {&(0x7f00000001c0)="d5c86b65d01bcb2d5f660451039032762aba39797dc339641a64eb45907e67fb8531bf215a515971b9c2cb7a323dfea86260c06c636a23f6a9dced6c1daeb16f1dd2bcf22be0423e03f2037919d879ac8769a11004ff5d05277bbc3706b2c43a456a28af6c27ab753803ce0d692cdae8e236d543840e0194e064ea13a3db01e99f5403a7f6d7dd0e0a0a4f53d99bd5", 0x8f}, {&(0x7f0000000280)}], 0x5, &(0x7f0000000340)=[{0x78, 0x10f, 0x800, "ec67f93045159ccbcee3eca0183f63a2bf986e9501585d48e64bc7ef8b3f1577a6b14251b94691db0982564ef5b0020075c2291785500f0dd47e0a5b0f8807a13b3ee9b2113ddbdd8945a1b60a9fcd78a9178d61fbe2e88339a60ae18b57d93501"}, {0x1010, 0x15, 0x7, "5d2073e53ee1831276ee339b6b8c7d52c310605b98a830cdaa6f300243567b603cfcae92aaa7b5782433c63ce32278afa2602cc936a3ac8cb7db7627dddf4c4d06f3dc1e5dc59d3a1b59040941bde2de2c8740229860b6beb4540db9fbe89bdf1e2c5808b0d8383fdc877fe274d138bfc79a7d34c4a6e9ece8b35695cb8ffc9716b841f5abf6ab9fb48d121802efa8bff1303a8b59866956cd5974ce4fc2a3a0dab5e64fe5b4e0f3b9b86b89e5a795ed18a7ce002d545a43a906bdce11db617a8710b99a9462ac333db55530d1d57d95174362237650a35139f66664a249839e19d2e9a03615de8e669ccf713c18945eea0b0327912b7ccf5117dbbef058c33380d169d02e3686b1d6d5bdaa057b45c8a32705db4ef8f1302ffa35cc705d2fecd27a2ca55e87d4ce582d5fea5fd6c475a87074b87f53205b95f58c57019bb9dc3e7728982e06be78b917427a79e1707ec330ad1598da89d79e36bdef4ed13b4adab2b80044f2b20f2f6d17d9332d259988818c197513435c3585646c4e9280ea2fe46d3926ef872c2beba65a0fe56775439e21e305aff508a5db08ce5009a26df9369b633bc6ad15cc065c43dbb9ee7e89bdecbc9269c3e1879a1c569c898396d7b7fbd1a7242b3752b4110c22ea77379a678213c02010507b8e55696bac08c95b792fca1da796b9ee04c44a514262c302bb92820ecc1736ebae821a382ca4d37462b1b469e2e4c3612d205d153e4e743681472bf945bcd7c0e4aa3bb4618bced0446343c501092e0c0d847b6d2768cfb94b234432bf83b7b6dc6705f441611b4fdd7258f5028fb91e08f52a86475d40c6362b3e0a269dee199c89dfc10e67cd9e3616ecf71bedffc5d2d1297bcc23ff5a3b0d51a974c05c7f5f6f5a2faf8d6196371337c02a8c678ffbc2478ec741224b5baea3ddd37c3f08a11384395b326d691fbc7ea8a2e91162a9e5498c33e7cef43a5933c4f284616adabf572b77990caae2c69c95caa89f68077c9127d5494a3154ecc078901013eba949dd9b1f828eefdc5c2e096bbfc4dd8ea75858136bfaf99504895087fe631262d2140cf4e23d78e90a7736eebfd1ef573768c2cd19bc7a4262df08c4268eca1efc323976b9d684f01cdb8ea679f98c16147b1131f6a2113268da9468524225727126c5f0c681a2a3eb5a5a104ee953864da31e889f4b275204038372d2e0d1f9c7e5834a7bde122f065a7591d773c4d7468f5b06d70bf5a41164e4e84c1dfafa9f4287abb9f67987e06bd97e43198ade4acf30f32535d20bef938be186225d1c52c4e248a4809a73f4ddaa9c4c35564a1b8c65a9d9f59e16355559317988471f98341bc87dc180ad3a9d267601b3cf81b3f3855110218d37fb3cb0d826dd25cd73cb24a7bf792f9e8d13b000bd3bff910358c20395c62c11bf61deff7365a0e65df861fb80653195f8404ffe9cca696fa5adcefb726cfa65a59ce1f9d0476c0badd3f24664f07376140a0433fb7942db2a1f1db0ad533e0703dcfb9ef7f588e2807f271afb511b41fd85812a214046eabcc26927b3c93c3425fa2672473a97d6a186cfc25c14aed9066ee66835330ef257dc23d1bfb25f595b00a0316898586e13fbf0e6d5a75058e7d765ed16582a7f750c6aef7b73419dcc132b5c35faf5f1e43f11910f74134563e5951a9ba42a5246d90c40886ab7c6b2fe04478a66d2e02adc9acc77782bb4022c7147313e5b194914013ec7d8fc8dffe412e7d281133edbe2a213b2a758a16ebc673c40b6d9e714029365c90bd5de426ae62c40c5dc12153db3f570fee6e9906804c710d50e8530e92b48c9749f8ac8bc32d35f07a429c7d12467081d4ec1023b678a99394ee99dd4a93b9095455f368d9b1447e6228bb9c63e9f3f9d309b350d48bb63d483303ad9929214f4e720ca4d0d7f8d34a219fec9b74c652cb246ac5ce9e6433691cf3e6353e97ed65710b90f320cf6ff510a249053dca844a27b34e9a7192bf4af6de9242de789e6dab8337b3fb7303bcb9ca53afd30701d162df8262479458880439502c8b0dd37c61848e75768fb6c9ef238c924881e9a9abe20278fdcbb4f3d196f85e372d86c1c3d18e714bd642b39fa5bd0c0ba354160dcf9d86255005d605d0e0cd6c84985b24834fa9eed5e9dd22cacf74a37e6647ec9bcec0633629710f89f7ae78dea0e151b3fe99a7d5057f5a6b94bb1a80a4a22da28ef3334872f88581d4c223588965449fdb2148e67be06c1b4c17b69b5c033d272e68e584f467826e47cc9d3666baef0fc130cbb2003bbe0289cd413f7458ae0601a4baa4af7a348c6cdc52ab85f9258e38d56b92db0423ea331a9b8daf24c6b1bbd422e8539db7c2941400130e64ba65830889e0eb4d72fec113f2839a527d73eb4a661f87625875f0f62b1faac513c271f986bb4dd5f22c964c424c58b11cc862e508d9b095ef5ce5c9be33a7ef3f5bec059f87514bd5014606cb81928c504147ed52b168faaae07c6c03b2d77df2cf024349750f64e449c1f9de63c5cca162eca14399189f01906b837d2a29d2a31c7c034919934773bd43a475e0616c21848b030cbbcac703fbbba8a798106d721be3ad605b59a6e643bc05fd5dde137c30664ef544541a51ac4482745748a9f763d5913ce1e2c598e64987139d14c553e5801db1c912e88ecc953e59d8797d0529d93eeabb1ee216a19eb34ce47062194944b17eff27c99df134c6d3a4d1f5183f9b6d18a15a8c5954267e17f9e618180b3a0eceb7291e412087fa3531d20c5f2254c3433959b8f2451175bc7deacf3fe981005dca145ac9e851d4e43fa1c9ccadcb93b468ded14838521394428dcf928df65d985ec2481a7754148f59ef4e1f88054360566e12c50e905f6305844a4d853149d7a20d13ae34764d07b1e027413fe853210a62f7b28e22a40566d3c5b4a59579df0e0d74de7c0b7ac20cb2353dbff5d6e95f6f5a6cc107c74c0bbe1e3d1f92090d76316f87c701188a85a902a6cbda4514ef2176d52110e7f0ea9f3535c62448c75652e24f9094b265b48e6689428f27e2c7387d541387bfcefe8aa72f942d0c775da39473eb73b21bd649c501e46a8d97fadf83e4ea18eb522fb81f2c469870e21d08dcea9110c3b47eb4d517e94bf5c0cee2e720caedd929b99a701260c70f67e2b39e356f1164214277005d68beeca338ce4844fcf2fd529354787b8871fe8c17f69693ec5c623692a738252596803e839c4546db8b469819bc6cb20ad26b52e7c8c698b5f4cb6f1ddaa80ccf7ec7f525880f304480c8995072fcffb424e13ce1a05244a857e0e7bd461321a0bb34f12049e2862472d70c6489127685ad4898424a0a4ad92d0b7a2379b0ed3f52eb8e1ceb15b959c0ef8c40524a65837d2dde3d7e231740a49e122abd3241b1c97d626aadd69f93350aa2c710bfeb04459bd3bd8e4c791fcc2f57df6bfcb303418d67d10489d82fe1710fe9f9c5f568236fc1fc053120296c9d429ac9bf7301e7d552c4e2a1c334282450c93418ca9806fdbed3b761a3c60937b1a336af99eb9fa1ca76d4da4fc4226e58a1a48049921a3debcaf26c4979b3c6a234887ca816e59a9fd6945feaca6a646c1caacf435f24553767a1ed65ded5c0886a260b8f16ce15a4bc90cb0baa3bb13959ed0a919ddfcc82197041e7821974f83b2a4f9abb57d95a1bb2e88aa6cbec23657ce8a127fe5383c3685459da390230eba2a89a7bc90daf06550f08eb3890110e6dc7361e793a9d9b20895a2f96d8916c67938a4de69e28412530b149f4b9f4e5f071e7e72b987b7fef7c42ab1e0717650c5e7fe0eb3eeb3317eb0d80d7183b15fd991c551c4f0399408c50e9386c06b8ec9091dfbd484ef372ea5241016d77d1c00f75a74abf2bb5b7323257f68dd8ef3fbd5b49bff9b4f7511b852b75d8363c5a5633c6f8170f7e1b48c5b3864e34a266b664b41fb228bb5ed746526515e66a43b4b33087c7b7a8b38ef0fb8e1ee320f1b2b88f54e5142a5ec2a843a80f7a22ea387c46163608685ad63a2d1e5cf3a06a3a73408a72f55051c54eda8f7c085ca3a5c81ca9d3e150a256d4d708f27edaada20e37a83cd72008af3fe520d11bed5864b37ce72bf577ccfdc4fda697adfbb67a86a4d67e50159a50cddae8303914596747af3f237fd89379d9092adc673af92212a31c1cb8b56265a0c5821a6ba07772e41d397371254d52c43a8c513ba4c6dad86f40aa6beebef9d621c8c4bc590352240efd9b75cd268a2b06df1388351411b14f14bd19c98c46c577629954f99f1ac1a0d593a73343da2b515addb792390d6975445ff803f7e368a73496282e685c2e9823e1ae3dec8ef0a2ffb7a0b019c6b69b15ea9c9a4a76b3191feed82739bc5abf8d03c8db9bf288b18b59b2a0c284240be7e0acdd329a9a6c8b66fea830b3dc9d8e664df7cc9b3f02a131a090c94bbcada739ba85a08d113f4b750f29a9f101228cefa4790d6e7e05a5a94b41f8d77b81928be89632d897f0bedff18af6480866716887d06771e2e75fe06b5353e412af78893f32b12e1094e55e41e4239a4a10f6afd02109cc4fd9c7b3060e4911fead1ad879d634463dfccaad6fa96bfce95199ee358c7809197d0a6a2123fc8da01aad25dc9b0dd7c41fc0d3f978a70bf8dce7902d0945cee1d37e79fe61580efbbcdfc0d6bf2e515b026985e3a53b456275c447f9389058dca1133b4f14cf0a2bdbd072d511283ec00210779970bf9f7e014a319043cc8cdea9a6f8ce07e495061aa9320b29e7212e0e89b1860d07064b2c22e75eb815f85e20aac009555e9577fc4fa7119ccf02fda41897abf4458c8c34755ed27e049188af4e2e9600ec52705617a119f34bb5a226152fcc258a652d91b79ae4336c6cf5a64da2805bc5799892e966c8e995a65c7263583d1ef91bf0cc7369d9d18985f529876428ff9621c1f25dcdcfd8d039a160bae3a05e72fc8ed5d9104046c3f943e49478991613f2a1bfdff9f3cfdd45e401ad337e7a8b442cdf3e2cfe7014d6e0fefc381ef29ac9af04f990558f6ef69473fdea1a75d43c1c352050e61411f28be753a53aba7013a4b3102036b822768a9565df944266f3092977464ffbab5335af1598bcad8260de92be640b2c9a820431430bf26d22b645ebae50754ef4027278ec4153bf0a607b8f8c1afb56ab8eaf82b6d2ee71b18d3d9bddfde50e1bcfb5fd5bc947c5cb0c17922f11e92cf4b7aaa88e2645cfcd4711fd69d07ca5f5c4773d7fc7d09ea9be710572546816ce06c9811d4c4ab10f920716f9376e8574d4a8fda403e8f66aa5c9a8063def7a6eaab5409e969dc2e0a7545ee20246dd474e4f5719f6259925ee7e2151b1a6831f5be9f2c495f39f6e2c69132857ca6b41b03d33e21886c26eade3a5586d5fbf9e257bd64d4e2c328ce4da95a4d9c15f4baed05c26f3f85387d2e9370daa272a6a4fff5684b34e96b769653e9155acaeb14be3850f86f380c0170db64f43e14dd36f72f6731f1153b98b4db622eb6d50fb7c6582ab416d4a7c2e6325ac751fa3904f04dc0ecfe68ef47cd64fd775538baf783fc2ce05e7bd7bed690e0eb31f0d3cebc1c664e539f755391d61d3cf55b5b9c36151915c3e3a64c351cb3f64fa63d713d2f0eef5c4d794e4da93fcc11c8e1f2c27744116a1a956879e56ce1ac43d887278c18540083e72e6ea4ef6e8bbf41bf74a036f24978a15610d6bfffbf58282e9745476d62bb00e537035bc45f502f0150237a544e1b908f6bf4289e14150019e22909c2f378fee6"}, {0xb8, 0x29, 0x7, "64db2545ed7386374a29198fd1f8b4fd7426b5016a8b2475de0fb13ae3493cf1dd9629959293538952589f4a55d90b87e017ec4fce63bd33db3f614c46e6f3e8201bc2d68803756787adc478fe0536cb5b7417698539376929921a61c266871398a6692992ff6601e2d85f23a1d959252585eb08506d0544ebeba60728ae76f1192cc6833dbcbc5eeebe047ce04a45d83c950e0aabf001bb4a3fe76499cbf3232b4cf3810745"}, {0x98, 0x104, 0x51, "32694137c54a318effd4e6fd48add05d33a9a890950e005a0bbb69fd829b4f454c1376e673c7c91fb56fa16e41c5774d56e7f68f28a246cc309c9961f83e005f15b101db879e866b624ba9bd69475159225b8076094febcbd73fad3ed99e8392e69a8adb93aba41f9efe844298165607849de380a73fde0f0570da0f929b2bd378ef27c419"}, {0x1010, 0x114, 0x10000, "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"}, {0xe0, 0x117, 0x7, "28b84767833a3c48b0dfd5ac4f308dd133c5ef4988a11e8f81ecca3fc2390347bb92314068f24bc792664b5fe45c661b414e6dc9de2b08a9563b8db557ec8e63734293f062e55cb78a2892e309725d9b06c67707d840672b2eaf6791c12a9bed4a69b7f55d695c822ac5476e9c4d7548ce80c30abc1812e5668b9cb32ad6bce2f2a45089a226458619b945f1218bd93759561ddcde29f3320a3d477274f289256e6ecbbe67d2408125a829241806db49627c5af16963246c8c57d2ecdaccfb3b04d11a5d4cac7ded1b05"}, {0xc8, 0x113, 0x8, "68e397aad06621b36ef3a75a0da32009f22a86229abcd26e42ebd05ec76568f88c02a99dc1fd02f6aa85590def479dd97021dbcc7f5a346fb4f1dd56ad4f508b85f22954cd321368a9c9931be948ec963a505969b348f5963613beb525926cfc40116d2c9db2a5cbf6dbd45e0e16374a519249923efcbcf5e333f5543972bbf4ad061b3495f3688382dcf46ba393819e12f080ce2c3fb378df18858c48393186dad3759ad3498d8ae301c869b6afd3420f9815cc96499092"}, {0x40, 0x3a, 0x7, "1b380569ab37535ef97d27658b8128fa1a602b6199469db96999862fe8472a07fb01b38d87ba8ef0f2886ba31c532a"}, {0x70, 0x109, 0x2, "46d2dc4fe1ebaaabc154cef4914854fa93c99f7026198d9ceb83fda99e8432fe7b9005c6357f75ebe349e5d4eee87cf48cb30a6188d6a6053aea36039b518d565597afb3c14cdeeecb91e809b43125dac0e0fe0d0f9f07b686"}], 0x2440}, 0x48015) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000027c0)=""/134, &(0x7f0000002880)=0x86) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000028c0)={0x0, 0x1000}, &(0x7f0000002900)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002940)={r2, @in={{0x2, 0x4e24, @loopback}}, 0x401, 0x7, 0xffff, 0x4, 0x40, 0x4, 0x3b}, 0x9c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000002a00)={r2, 0xef, "8b6a72ef4f6a9e0003d0880eb3fc4484b501b9b51c88f3ea53a3a6138be2e8f922d5faa5f09ce3e0a82ceb9f71d772f292a23057d40e5f7586cf0df2febce36346485b289f0ffb4fc11e5164d6e6f5172fce142e79f115b6313fa023a7b3a2442da0dd51be6933089119a31d069228c396b7e0062869f539bfb667e85de638b9a85633432adaeacf5b4ab04a3ad1a8c18d7ef3babc8c507a0d17605f96a8225e62153b8db44ded5c704eaa6d5c0c5f31583e1cff27d24a82482b97701d281759999a334ab08db48a709885d48b76baabe65138bba6ea9e4dbba92b21ef6eca44b7aa8167c419e21a74c0da3f57c185"}, &(0x7f0000002b00)=0xf7) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002c00)={'syztnl1\x00', &(0x7f0000002b80)={'syztnl1\x00', 0x0, 0x29, 0x9d, 0x6, 0xf, 0x16, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7f80, 0x40, 0x4, 0x9}}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000002c40)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000002d40)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000002fc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002d80)=@report={0x1d4, 0x20, 0x400, 0x70bd28, 0x25dfdbfc, {0x32, {@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x8, 0x4e21, 0x1, 0x2, 0x20, 0x20, 0x3b, r6, r7}}, [@srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x35}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e23, 0x4e21, @in=@multicast1}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e22, @in=@rand_addr=0x64010101}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xd}, @proto={0x5, 0x19, 0x6c}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_crypt={0xfc, 0x2, {{'ecb-aes-neonbs\x00'}, 0x5a0, "2393fef7da576d804d2bf9d7837477361d609fc1c853a053935ec23f31c63e14240f6a71eb77dc7a11b405dc5274b2c720be3b25f6f3e054857ae07523c3c43c1a07198b5122ed6ee636e7224750334749506b2e22c381dd0fa79d8bcc050bd85e929eea0a5df493b6834c6a56728675fd00b3938c4ec810b4c07a175600a12422fe6e3c7aa8a95d4476c55cef65f2a127651c7adc6473eb239fa530990ce619d05ec75bb015acc0203237a2f58b57293d77dfac"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd28, 0x70bd2a, 0x70bd29, 0xda26, [0x0]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x800) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000003000)={{0x8}, 0x100, './file0\x00'}) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000003140), &(0x7f0000003180)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000031c0)={r4, @in6={{0xa, 0x4e23, 0x10, @remote, 0x5}}, 0xf, 0x3, 0x201, 0xffffffff, 0x288}, &(0x7f0000003280)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000032c0)={r4, @in6={{0xa, 0x4e22, 0x3, @mcast1, 0x6}}}, 0x84) sendmsg$rds(r5, &(0x7f0000004280)={&(0x7f0000003380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000003540)=[{&(0x7f00000033c0)=""/156, 0x9c}, {&(0x7f0000003480)=""/177, 0xb1}], 0x2, &(0x7f0000004000)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x7d}, &(0x7f0000003580)=0x5, &(0x7f00000035c0)=0x9, 0xdd, 0x9, 0x2, 0x4, 0x1e, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x60}, @rdma_args={0x48, 0x114, 0x1, {{0x200, 0x5}, {&(0x7f0000003600)=""/214, 0xd6}, &(0x7f0000003c00)=[{&(0x7f0000003700)=""/52, 0x34}, {&(0x7f0000003740)=""/12, 0xc}, {&(0x7f0000003780)=""/59, 0x3b}, {&(0x7f00000037c0)=""/137, 0x89}, {&(0x7f0000003880)=""/212, 0xd4}, {&(0x7f0000003980)=""/127, 0x7f}, {&(0x7f0000003a00)=""/240, 0xf0}, {&(0x7f0000003b00)=""/158, 0x9e}, {&(0x7f0000003bc0)=""/54, 0x36}], 0x9, 0x2, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x5, 0x1}, &(0x7f0000003cc0)=0x7, &(0x7f0000003d00)=0x8, 0x5, 0x7f, 0x2868, 0x100000000, 0x30, 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x64e6, 0x20bd}, &(0x7f0000003d40)=0x2000000, &(0x7f0000003d80)=0x5, 0x7db, 0x100000000, 0x5, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003dc0)=""/53, 0x35}, &(0x7f0000003e00), 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003e40)=""/79, 0x4f}, &(0x7f0000003ec0), 0x40}}, @cswp={0x58, 0x114, 0x7, {{0xe, 0x5}, &(0x7f0000003f00)=0x4, &(0x7f0000003f40)=0x81, 0x7, 0xff, 0x8, 0x0, 0x9, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x25a5}, &(0x7f0000003f80)=0x6, &(0x7f0000003fc0), 0x80, 0x401, 0x4, 0xbc, 0x0, 0x10000}}], 0x278, 0x4000000}, 0x800) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000042c0)={0x6, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SYNC(r8, 0x80086e8a, &(0x7f0000004300)) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, &(0x7f0000004440)={r8, &(0x7f0000004340)='\x00', 0x454c81, &(0x7f0000004380)={@align=0x33, {0x7, 0xc000, 0x1, 0x10}}, 0x8, &(0x7f00000043c0), &(0x7f0000004400)=0x8}) accept$unix(r11, 0x0, &(0x7f0000004480)) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000004600)={&(0x7f00000044c0)=0x80000, 0x5, &(0x7f0000004500)=[{}], &(0x7f00000045c0)}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004740)={@cgroup=r11, 0x24, 0x1, 0x5d7f, &(0x7f0000004640)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000004680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000046c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004780)={@map=r11, r11, 0xc, 0x2000, r11, @value, @void, @void, @void, r12}, 0x20) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000047c0)={r9, 0xfffe}, &(0x7f0000004800)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x23, &(0x7f0000004840)={r14, 0x9}, 0x8) 1.527215866s ago: executing program 2 (id=6305): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80201}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc488d82aca211b2, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4008040) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x8880) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000440)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="18", 0x1}], 0x1}, 0x4008840) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000080)=0x2a2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff"}, 0x28) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={'ipvlan0\x00', {0x2, 0x4e23, @private=0xac141437}}) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x10001, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.376283849s ago: executing program 3 (id=6306): unshare(0x100000) socket$inet6(0xa, 0x5, 0x1) 1.375298949s ago: executing program 1 (id=6307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) shutdown(r1, 0x1) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000005050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x832}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f00000003c0)=0x10) (async) shutdown(r1, 0x1) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, 0x0, 0x4) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x5, 0x4}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000005050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x4000040) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x832}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) (async) 1.189972436s ago: executing program 1 (id=6308): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x745b}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48004) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d3, 0x0) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x80, 0x101, 0xe, 0xc40, 0x3, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffbe}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x6, 0x4, 0x9}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008804) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r11, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendfile(r12, 0xffffffffffffffff, &(0x7f0000000000)=0x5db, 0xff) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 1.094956284s ago: executing program 3 (id=6309): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0300000007397c3f6c149cfaa44731bbe74da938e7ea29bd9347af093256135037b80a57c626218b821b31cf687d284d8a5530a320031c22a5a9f8e3d44e359b66a37c75ffa2582013de71efbcfa929a1febf02c798330353d82ce7db02839ff00269099d15a00276e909d6a7878f7be5534446edc591e88a9a159d776a5b84d63c435715d11e317cc553c8900b54c483001b8766696d01d122ba0148fefbe2ab60b0c34ff384b768960894272d52161c315418e8f5b5751490c7dfd0a7f449fa097344b758ccda1829025eec051a59c8edca14264e7b5cc6a78cc7d", @ANYRES16=r0, @ANYBLOB="000426bd7000fbdbdf250c000000a400058008000100756470002c000280080002000100000008000100140000000800020000000100080001001d000000080003005100000007000100696200000800010075647000080001006574680054000280080002000000008008000200050000000800010020000000080003000600000008000300ffffff7f080003000600000008000300060000000800010009000000080001000500000008000100090000003c000380080001000700000008000100010400000800020009b5000008000100ffffff7f080003007f0000000800020022faffff0800030009000000a0000680040005003c00040067636d2861657329000000000000000000000000000000000000000000000000140000002610d2e088cc6894777cb2da327ec004f576c3044400040067636d28616573290000000000000000000000000000000000000000000000001c000000ec01684c979321920b9b430216777ef6611e352301b5c3f0e1951f8008000100010000000800010005000000080001000b000000040105803c000280080003002798000008000200090000000800010001000000080003000000010008000300ffffff7f08000200cbba866108000200010400000c00028008000100010000005400028008000400ff070000080001002000000008000100180000000800030007000000080004008a0000000800020006000000080001001600000008000200090000000800040074050000080003000600000007000100696200000800010075647000070001006962000008000100756470004400028008000300ffffff7f0800020003000000080003000100000008000200090000000800010003000000080002000200000008000100130000000800020001000000600007800c00030006000000000000000c000400a1c700000000000008000100090000000c000300ff0f0000000000000c00040000000080ff0700000c00040026000000000000000c00040008000000000000000c0004000700000000000000100104800900010073797a300000000044000780080003003d00000008000100120000000800020009000000080002000000000008000200e900000008000400ff00000008000200ff7f00000800040000bc51020900010073797a31000000004c000780080002000000010008000300ff03000008000400e4000000080003000500000008000300611e0000080001000a0000000800020005000000080001000100000008000200001000000900010073797a30000000000900010073797a30000000004c000780080001000c0000000800020000000000080004007f0000000800010006000000080001000000000008000300050000000800040096f0ffff08000400010000000800020000004000040009802000028004000400080002000200000008000200060000000800010009000000"], 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f0000002e80)=[{{&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000580)=""/134, 0x86}], 0x2, &(0x7f0000000680)}, 0x2}, {{&(0x7f00000006c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/28, 0x1c}, {&(0x7f0000001ec0)=""/159, 0x9f}], 0x3, &(0x7f0000001fc0)=""/222, 0xde}, 0x400}, {{&(0x7f00000020c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002240)=[{&(0x7f0000002140)=""/65, 0x41}, {&(0x7f00000021c0)=""/80, 0x50}], 0x2, &(0x7f0000002280)=""/65, 0x41}, 0x4}, {{&(0x7f0000002300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002380)=""/233, 0xe9}, {&(0x7f0000002480)=""/167, 0xa7}, {&(0x7f0000002540)=""/147, 0x93}, {&(0x7f0000002600)=""/27, 0x1b}, {&(0x7f0000002640)=""/178, 0xb2}, {&(0x7f0000002700)=""/45, 0x2d}, {&(0x7f0000002740)=""/13, 0xd}], 0x7, &(0x7f0000002800)=""/127, 0x7f}, 0x4}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002880)=""/94, 0x5e}], 0x1, &(0x7f0000002940)=""/184, 0xb8}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002a00)=""/175, 0xaf}, {&(0x7f0000002ac0)=""/247, 0xf7}, {&(0x7f0000002bc0)=""/165, 0xa5}, {&(0x7f0000002c80)=""/218, 0xda}, {&(0x7f0000002d80)=""/69, 0x45}], 0x5}, 0x3}], 0x6, 0x10100, &(0x7f0000003000)={0x77359400}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x2, 0xff, 0x0, 0x2000, 0x1, 0x57, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r6, r7, 0x1, 0x2, 0x2}, 0x50) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x50, r1, 0x49ba5000) 980.889637ms ago: executing program 4 (id=6310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x105}], 0x1) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x284, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9c8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf, 0x3, "f1d2704dc04ee5cb356faa"}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x73}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa35}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8d0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa1a1}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e45}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe81}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fffffff, @private1, 0x2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) 937.843635ms ago: executing program 1 (id=6311): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0xff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f00000001c0), 0xe) socket$netlink(0x10, 0x3, 0x4) listen(r6, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028006000f00000000000400120006001000000000000600110000000000"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 750.832446ms ago: executing program 1 (id=6312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002240)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="54e4ac9c713118a098169003ea5b57a9b1d72f5c12c89b143277e17060496599ec6409ba91c03bf97b11b0115274ce0134d134bcc08d55bd374b0fad", 0x3c}, {&(0x7f0000000180)="d0e0495880926eefe61ddc02be160b3aa22a59f18f969dab1b910ff25f7453ccda4d7186e0c4d6754d213c6480b0edfc2a868001e3839987e0edef5d9cff52f2d9bd528fd314", 0x46}, {&(0x7f0000000200)="24f5337c271dfd427a83958a69186a4505bed6c4ef27d896307e167b477ed87280d25db47b2e7cb5b21193cf8e6ab21074ca1232c3ae1a63422635a6ee8b84aee06a91d2fb387e30a78d21b6c590fdf622832a933c", 0x55}, {&(0x7f0000000280)="19b4e259ebbfde2340309ddec04f5bbef89098798ed211337b5fe94daba1bfcdfba8edf9a70f6e1962242d898cd9278d16474ac68ae38ba077d0219f19ce02cfc19857c5cefe5c", 0x47}, {&(0x7f0000000300)="2daa4a4cfcfe9539c4190e6936efa7a84ad4ae2072df09e7ca0540a768e1e6446c32ee989adef479f1e5229dce6febd8365926705c33ecdf20047618169e21ee5fb32a5b", 0x44}, {&(0x7f0000000380)="b9a38e0b325bec7e8f13dba32d567a107b8855d1ccc548cdfac9bacf0e0d86bd38e54326271a94c6817857c96af39278c003bbfac7950c9b52e36910f7d89102acbf142df3e8b96480d6d904b61d78cfdc1afccdefebf53496115fcb04714762f60178599bf49f8388167904ed0f0092f30df7712bb136b7904b6a634519a4d4c0cac9680aba65343cc15d3c0fef4ba667ee70d63ebd787416b9e042757bd1e6d3df8ef44518126a9560", 0xaa}], 0x6, &(0x7f00000008c0)=[@rthdrdstopts={{0xd0, 0x29, 0x37, {0x87, 0x16, '\x00', [@ra={0x5, 0x2, 0x7ff}, @generic={0x1, 0xad, "8159acbfa4e9edbdaaeca08db08e47aa8343f8cbac1499b6b23b0c6ca13b5ac2c3dc420529ab70496649b930b44989788aa47b6c3e85fdf6f7a7bc72eed54bb01c2c37d0215282305d646cfb4fd124ecede66114736f45ff70ebdc68465b29de5940dc922355b671908723d7b67e327849dcb7e4abe50cd75289a0c1f72d15ba50899ae02ee19dafc4e2aa2c63cd96e7de39e8ad7b342f1bb892b943c76b8e5cd107472536bb06b304ff10655f"}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x6f, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xffff}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x1, 0x5, 0x0, [@local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xef}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x0, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @mcast1}, @generic={0x9c, 0x46, "2bd6fe2ea06550722f8b4c443749e32789fc94dda737d115dfeed015b978b1160d3871c93f8e63030c1dec6a509959a5e2261b8eb257bcdcd22602898c84eba34109f5c80086"}, @enc_lim]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x29, 0x7, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private1}]}}}], 0x238}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000680)="3c1248407c3a3792f13c8cb9c5a25c3a377ddb894e314286497d8f5dd8bdf71b7ace1a79f3f87dfc685b3dc51b0ac3a58990f00e915c18a7e4ac00ff636928bd875c8afcb3c0a1709e40ddd5e9cfb18a1c0f23d52301e077ef04d1c8c5ba26f65d121dfe37334df66876f3069dec370d679f45a1dbb538a71bf5efb74ddba662e10a312aea3a8e44adaa0cf98d8abf56ce829d8535d37f49034f85c2513872164978f04b096f41000f96d06bf3d368c1fbdb158086f910a82266febf36f9fd0d6ec6b2704403157b42dcb356097cdfa51897b6468fbf9808a4a3b41d7bf2208226916a5a9d9dd3ae4c02", 0xea}, {&(0x7f0000000780)="9c677f35f13e7e16b79b0c0dcea88a94a84a86e4783da5e70c09d8f7663369cedef6e3ff690530f9e0bb0e6cf5f3a932957e7736056cc67f83c853e6148200a43bb4f994", 0x44}, {&(0x7f0000000800)="18778194766c484dc5aefed09dfabb", 0xf}, {&(0x7f0000000840)="ed641148f119a43729f387f0664562e8fd62cedb4fcd208f37a0fbf34ee04d9817995731794d99ab8d058552573511a2c8adfbae61563c21bf026d783a7f375806a8feb5123e2c28", 0x48}, {&(0x7f0000000fc0)="ff9ab19bbdfa0dd127d5e41b802d3fa792722306c374d8790d4743405b9cdd24d996c275d14f2b1aeda6a55ab6737d24111652e70c75ecc9d7e419cd421539403cd9deb95b06743b3f6ba7db9b3153da67dde21d8dee396df516e3a8c73657cb0ab9f357317a7be61e17feae15b120f7e7074bb68780db9b70d1b5a881129b203d1e1fcb029bbc30b3420590d0688367ea0c463aeea9bb9434f6d54e2b663e15cc5a3ca06416fb6499d2602f3e2d7f10f7555a28ac2d86d20d6d79d748d77c47aed62c593ad642a0a284cd63c7226605d030e380997bee9f5a95156f7dc96e1ed77c9c12901e6017e68e520a91c707d4a0cb4b2e8e9e300939737d6000c749925e87cbdb4fffea54feb575a754e59174b8fc4e723c2e994daffdbfb3cc0a494fca679625e73a63dd4ad50dfd6652faef42d7cef5c3c8b8a10df4439191c4db1d69b3f10820b391e2b88f31f474a4f6437266c319489fb41f4839f9329bf2ffd577ec13b59cd6f289f3b8681b1bde80cfbc55c26398328911b6890bd117d6acfc0d678e44c730a2419a3008aea68e8162d2ad6223e07ddd98e30a4c827076801b1e319c06d3f74e5f485271c76ead8dcf7f27f7da731263fd835917fc96be62704e766b12c4b93b547b98012122cfbbf48453bd386312cda8d30c52ac5aab21cf0a0129c33ba8e7e39203c7aaedf400748b9dfb20dae4057499e6328dbf8b5bdb3dafe4c2af22149c5287392b5fd165444e00cc14c8b4103346185aadd1486c81dafd5e366f9efc759d7c1d4eeb6d063c9dabb52e3c81919557986fb88b6cd84c4778e971be71c366026430655193315457e9ea4a0ec8b246f4f6bb59fd8cd1f6de240181145571dbf42d54795fda9991489bf3d62a7550ffd037f8c3b7f9035a667ecb94b2c44d77b75ce4c24594fbbe12604f9abab4f97a25b3fe4ac3dfcfbd3bb167bd2a55b91d048be6e8b3c450e8f9004e2af50c6543752cfb39fec5789788737f2954eef9811582082caeb7b649789a2df3929f54ac2630408333bdeff812a41fc0d31f4381ebd89d2315de120cdc513b186df63c1cd96851f2112b0acdcec73e6036d5499e47f91671ba3e9b533098d890f035f5220acb5e8103db18131a7a5a07ea0b54b3b7147c22cf374d3db2bd7ef8b15d3d570ab3eb9a185a8bddb93abd464d9d987723a9a201809340781893a6770fee7afdda7fc5302c9a2690dc23c43a49f91cb1fc699e103f8e008af32c963eafada320d8b3e12183a92a64f9dec0db108d539bd4de355f16b2e8453135738e5c6a655a6bfbed758620b1647204686f4e4b96b10a57a773eeba234224fecaaf5dde740256fdbd81dab299c8d40cb5eb01e79658fbde4716177f9535ed4bd6185cdeffaf0a21531f035bb3c3b006dff42335e1eedc2edfe611b51fc2a675c8ff3eb1b8268b385b0d9996f9303d79580f0fbb56856e4b2fc09f9ffb89f4c5a1b17399d3ccf85ff6ac2f1daee9c99cab9c492b8a70ba0cec8050becf9d66d8b3be19b7b427bf0ac0d6cdf107583edc81baa09941d05bd15ed98f18ce167bb45b982a5212315e5637618cdb6f7e27fc56569a248bcc8413ab240191de7591a8388dee5a2c62c957176f58ac10db88516206dcac22419df602cc8e8ae5c710ae0cfd5ca123aa334496c1cceefe30be1ba631ff20d168be9c603f09b774094d5d4e773701928ba8c6b0a5ffc0b101662680de05ceb9692faa761d5c7444e263c8e3df6152e66790f4a2ff101ad9fcb3b9df89dca955b70beee398b4fe19c62300a099a91daf07a1db78a3c6e1725a740d33f255f7cebdb272200ed1ea7ef3318ca44d1b75fecbb269842d85183784fc74eff6a06c1ae94f008ba464e5662783f6903d3c9dd8b0a1fa8f203d40b7e241869987de5d39a0005c2ed5b4e0fde4aa79f4eeb1ddb51b38adc36f0599e69cdeb915916e73f1592b74c7f2a0282fa017008d468b8f479698e295aeff1aa5f9f0ebb02299430de4764679e7a7a6e9c298064a14641a032cf588911a2619679f02cdf45a9bf5194654d64516540c6717c36492b6207a1dace883cc8dd93048512d1297987053b28ef546d6f034004aa42efc64308ca9ee921c10cbfac686d93dc124a3f36db4edbb45c653b8b1f8600b3227473bf44204c1b2f96469b966638bca8c6fefe440ceb95e494e675ee92396593fbd90d0cafa24ba6ff3fbc16bb252ffe677a634b2cefaa9f9809cad1b4d24cfd38c4bd4a01b250aa21f8fff17a9172d62ebb4721e8cb5de81e1a0d55d035d570986d7389683c4d85b6ac86bae103a5d028804a907632467686d630e0023db62806b882b4140e9b82221f60f4f11f83cc29dd67216ff01a28463e56dcfb70cd2a4aac9da4e6acdef371c47d8aefe279e1ac0eaaea5ea5ffe53622033f430e3545d661facad27789c8c37d2f2c48b8f141aba2cdaac46a2c093a8ce1fb8a6d9fa65a086f29db67ce50cb62f9c44dbd2f6910241dcafeb8b881edd5984ac4ee9ebce220095905f20ffdb8720a7b0291e26d859475cc6aac35d13386e212e6fb1e81903a7f076cb77800fee4e270feb89bdd91ec25e8a3329cf318d4f70054e161be3c6d9f81a195eef4cf890b7861801deaf5c68f42a572714ed3bd48e19ddcd17cefc95d122252e905724a78248b7776a8afcdbcf07533636f96a3cb2e9a142c70250a479a8d3158eec96f37c4685204f51760bf4462a8fe944c686dc757695efcdffda744bc6a1fc31a5a12624b2f9926b2b882613ee6b2a1d0dd127d592a9a1930871c864c1230cc1c367ba19910e9c69eed4929e0752ed647ed8fa2164a28fa16146bc2242de855642a7e8c4b296c5aa8839c900812dc25ff35dd6850674d940a5665be0dbe01419390373ec4b50b7e028bdf5afd7b4f645f2dc2c0ec8ec83b98e79c1797292472aa0129f697f9dc380b174fba205c0bd56ff224f72b31986210aaa6c4d1c4f3a9a2b53d649420f3abed6348ee5d55e244204aa8917914a2826eb51aaf8eb0a217956f53af2a4a85987bee0d59fdc8377dfbe8390a5df11b6281acca5c92b0ea62af42ba7653ca1283fa8845647a37d0e0e88430eca6b54f3db9c4bab106b343209d4c69d858ca4f8db8172f80100a522ded27afe298109031842641faad8c6c694e578803810f0ac2a97b2792b88288c7925d167def4f38e07f11a15d287c0750f5b8d270c1aa1642d78d35dbb23e563e83cb077a0d0843a6f73628734cd7165dfa6cb0bd5ada58f9a2b530c4640d933763a6cf8a3cf9fad1dffd46a1d2773402e18e5a0b89edc073ee56926081c3326eff9bfcb454279036407a311b11febcd74869c662a45aaaa8963e75957d9a56e17f4b0ff24322edd5dbf6cc4ed06d53aab62ac5ab235b823826d471755bb491d5ae87724aaa38dc15c2eae56a0175c93652ee6927c2f9cead4ea7957d8f2fa3f337a6430f57b5884ef18a19f70a692c9079f3fc926cc490350449075033780226edd63df7b52a473f47052951d2f90fd478554c2b6a0ec94fff4116b72e00fbf30d09862217ad8f3fcce115b4c401614226ca218ecfe43440512e560406271043b9537029ea20a6e6407ed1f245c2017088a62d4299963ef65f89a75769ff78e72b1cea19e7e4e38980cf3b7cd6a4c9bf6ddf58689b26c089cf19272717015d8be061207045a2d7d6884a18b69e6a1896997e2837ddb08238b9ed0a493dfe24ac1d15c226d9f1fea4ff0bfc83537edbfa81a689d4a74e90e051ab51b9ca1fc1a2d888fba229fb871b1fc2ec18ae70273bd6c87e1a347670e72d029515b61d5b392887d594695b6bef47e57c673282c956b8650ae7205b6165b23a68675cecad5cdb229575b71f56fefa2ef89610d59f9786318558423ac2b31d545f272a1a770bbca16faa1c75715afcb9adb96808639b35c78fd9fc3a3179b812559ffc94f259d657b6d8341f21fe050bef5cc75947ad90233bd8f429be5efd7ffee1fc97ffee982898c56339c7b32c917454e3c668c74eb3106b28f2a78d04a851e40f6f6c5c1c845d37b7c4174f9b60665fa32e524334b2e1f21a5bf5bf63be25daf4e4a89c6190e825401167797ed2605710444c1f18ddc31cf122eb915a3fc06080f6b64fa15130b6dea22060eda85d24310e22b3212284759ffa6f6571b2236ddbe0df16c7c37cc231d4acb1516e2da70462f493a2eeea89ef03f3f21dcd8ae9f1997438a1c8574e1a1e213d6c7e8948c4a0876387a0ddc8d149477dc36b94444ab2ab3e1f087c2f812e40959df2be609cf340c9ea25d922a3db22bff282273cd91c0b9b3188c6e79f747922f3c219500919357c4dd2fa139cc45436371c6c12d4c9703583ce2ae1033b68f55416c1d1db0c7c6843e453f2d43c89b70443489265dfb965d0c4e53818a822747e2a6d25f560b183264e032d2bec14687df1747c76b3620ba6b4eccc22b142362e35b06bad066521428ee381cb7f17c6f32639ca46992b673bf2e7bb01d4bc6c5085bca7054ab6242ef9b9cbedaf2bff8a04df74259e8a032451a2da2877d0e7bf9a78c1d7e4877884e00b5a82c41d569e5ba75ba5391f01a97515c48bddb8f2fe0a40de68dd9405ef3bad0e9cab0e72d8be28436896536ffc835307b468546730bf7442b471fe82068d12b0a5f2056d982308748de82c7951cfba428e0fba7aa56ef969cfa272c4003c7ff732f0ea3b6d6c39664cb666109ed348b122e3b34e552fa28ce86451067719167d1bd5fe7649b33debec42083919b39e607845877670a1fcb0aac97aff2d50aed1724a11ea96d3ca59bae7ba97eadd16374c5dda29745d5e3bc5ce61023ed29de0f5d1103fa61d17ad03acf50d59db5456bb93323468777b1d80af607a2a5c6e10adb961c114b279cc1671a6c2b87c31719ff4eec75fe054729277d1bec60653bd361e2734a5e5657db68080e9097d154b6bfa4d8c38feb2b79fe14827df6c9206f7677f0332ce6ac1c52f1d35571ff27bb0cd1bec1b35e269518b59849280f8e2f223cdd629642d50239398b655835f548542b356cbc5da1ce7727bdf684c49a95681f1d8382058fb0343eb248c678a8a05542e46a9e6a50e16d419fdb16cac19fa7a5186b9f973fd3f9392700ef338a7ab6c6b8c790823cadf3d1bf25ef2e6324b9af58a08a7ded5dcb664ac87f4383e55fb7d15aca033c372e054086ad4f0a30ba0841145d06022f535f3f4c069b3a12c5ed6745677fef2a9700538e1adde2893454a3677b109e0fd4a15314f0f9476b8c02defeb81d86f2cc804cd10cba96d5db46d5cc8d46cdb3604838873b2d2767e7844456a564112841bb1c377fcfed0ca83b140b272c90950cb58842ac72793ebb3d3df98ff65700c8b434c3f10ebd01aecbca5f0faaa07f7db9e7de6355b215ac31b8d609225f534ab0c1da650dde218a2a941b273117f46068415447e00c5870f84ffd2790eb1c89749ca502976273503c70704d23a1da46a341671046450725ed192362e4c286f2e15990d21a3dea9a0ca03bf818ca1b30ba66db2193564320615aaf90211ae785f7a74e8f7eb6b2f3026da81e6167079e8f0e2ebb3862386beeee940e86d5887564c6b0de6d6df771ad510279453eb44b1a92eec801e466e2abbcae86461b4ba68394281edd106b0daaac4b3a5db9346e75fefaa2702f5bb37ddd1aa170022999706c25b0193c8579eb7fa62820344bf79190b9ecc43ba63fcb819b82d8049b8b13572d088d7c55d5d74f88202bb7be1a35e0bc870828bc4f9b41c96556d3c8fd99a647449f2913f71f", 0x1000}, {&(0x7f0000002000)="61fdc85c594159acbac49dc562ee240752ab1609e3e5381e675083cf612b7be4d3ad3e0e5cca0ea42a526e450f", 0x2d}, {&(0x7f0000002040)="73b8b98fdfec69779e756844024faf6538e6fcc07e46b2c5c7639215d0795c9899e74242eeb1eaa0bc28be633de4dcb51fd14e26373f6dc7381f0cf5d86c0c136e42d5493d6b25f87dd709de83598e2b4e59cfc29c64b6e468e823bd2974e284b6f331860a40811c2b259e163b4c472c73a4e6b1f14c136ca2c36f23df05764f7694e83aaefcab49aca0e964f5913b21a4a05689d9bc72c1ea2c0272e030e625184bcc4c4a20ab96ce4d6ffbe332fcab20e8d83cde2847264ff80858b3d507a5a61e843e6706ec761dde03032567", 0xce}, {&(0x7f0000002140)="0933103520e1746c0711973c76227b3e893e837890c0299ac76cd9d96d155097e8b8cb912591aa98a60bc10d5bbb713bd475f3", 0x33}], 0x8, &(0x7f00000004c0)=[@hopopts={{0xd8, 0x29, 0x36, {0x4, 0x17, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xa3, "a47c5bd1fbb1f180fc16e29f42b08a80d013327c85654106375b75f0ee553273cc23bf2e1e26ed7be210957ce629faeeaad3fea7c4451e7c9b7ad8d564a137efcf19be02efe83cab42161406bacf8de88befdb05668342af50abcef3f339c6982b8fbb61601b30e4fbe22e1fdf1adf4ab78cd1816c5797f080478a172de86ed86965f31c19e1a6c9ff45a70cf559eb95caf7cef2ff34b46753aab9fd05e29213139dd8"}, @hao={0xc9, 0x10, @private1}]}}}], 0xd8}}], 0x3, 0x0) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 584.743865ms ago: executing program 1 (id=6313): socket$nl_route(0x10, 0x3, 0x0) 554.691827ms ago: executing program 2 (id=6314): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2002}]}}, 0x0, 0x26}, 0x28) getsockopt(r1, 0x7, 0x10000, 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 540.956879ms ago: executing program 1 (id=6315): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) listen(0xffffffffffffffff, 0x3) sendfile(r0, r4, 0x0, 0x20000000002) socket$inet6(0xa, 0x80002, 0x0) 348.145515ms ago: executing program 4 (id=6316): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x400, 0x0) ioctl$int_out(r5, 0x5460, &(0x7f0000000a40)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) r7 = socket$inet6(0xa, 0x3, 0x38) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$kcm(0x11, 0x3, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xb}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x84) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r14, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) (async) setsockopt$inet6_int(r7, 0x29, 0x13, &(0x7f0000000040)=0xb03, 0x4) 237.606676ms ago: executing program 2 (id=6317): socket$nl_xfrm(0x10, 0x3, 0x6) gettid() r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x403, 0xfffffff9, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4802}, 0x4040050) socket$nl_xfrm(0x10, 0x3, 0x6) (async) gettid() (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x403, 0xfffffff9, 0x25dfdbff, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4802}, 0x4040050) (async) 0s ago: executing program 3 (id=6318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x9, 0x3, 0x8}, {0xffff, 0x1, 0x0, 0x1}, {0xffff, 0xc9, 0xa, 0x8}, {0xfff7, 0xd, 0xb, 0x1}]}, 0x10) connect$rds(r3, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) kernel console output (not intermixed with test programs): 39][T22858] IPVS: persistence engine module ip_vs_pe_À not found [ 586.338112][T22867] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 586.364847][T22869] x_tables: duplicate underflow at hook 2 [ 586.379790][T22858] 8021q: adding VLAN 0 to HW filter on device bond5 [ 586.389352][T22858] bond0: (slave bond5): Enslaving as an active interface with an up link [ 586.479088][T22867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 586.544626][T22861] vlan2: entered promiscuous mode [ 586.557323][T22861] bond3: entered promiscuous mode [ 586.567277][T22872] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 586.580888][T22861] vlan2: entered allmulticast mode [ 586.587990][T22861] bond3: entered allmulticast mode [ 586.653770][T22867] bond3: (slave bridge2): making interface the new active one [ 586.688055][T22867] bridge2: entered promiscuous mode [ 586.696075][T22867] bridge2: entered allmulticast mode [ 586.703826][T22867] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 587.574731][T22932] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4335'. [ 587.629744][T22920] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.637600][T22920] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.929013][T22920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.970784][T22920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.078887][T22920] ipvlan1: left promiscuous mode [ 588.122706][T22952] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.4338'. [ 588.153930][T22920] vlan2: left promiscuous mode [ 588.165324][T22920] bond3: left promiscuous mode [ 588.171505][T22920] bridge2: left promiscuous mode [ 588.350866][T22902] bond1: option lp_interval: invalid value (0) [ 588.386694][T22902] bond1: option lp_interval: allowed values 1 - 2147483647 [ 588.437518][T22902] bond1 (unregistering): Released all slaves [ 588.641524][ T1027] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.651264][ T1027] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.682601][ T1027] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.721704][ T1027] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.256553][T22999] __nla_validate_parse: 2 callbacks suppressed [ 589.256576][T22999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4348'. [ 589.462027][T23007] netlink: 'syz.3.4351': attribute type 1 has an invalid length. [ 589.517869][T16804] net_ratelimit: 641 callbacks suppressed [ 589.517893][T16804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.556407][T23016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4351'. [ 589.668965][T23021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.702377][T23007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.726624][T23019] macvlan2: entered promiscuous mode [ 589.745261][T23019] macvlan2: entered allmulticast mode [ 589.768629][T23019] bond5: entered promiscuous mode [ 589.789858][T23019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 589.806857][T23019] bond5: left promiscuous mode [ 589.847068][T23027] syzkaller1: entered promiscuous mode [ 589.859124][T10915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.867119][T23027] syzkaller1: entered allmulticast mode [ 589.868715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.070371][T23043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4357'. [ 590.099455][T23043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4357'. [ 590.432423][T23053] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 590.442003][T23053] bond6: option packets_per_slave: allowed values 0 - 65535 [ 590.470232][T23053] bond6 (unregistering): Released all slaves [ 590.612466][T23068] netlink: 'syz.2.4364': attribute type 1 has an invalid length. [ 590.656678][T20795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.893532][T23068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.898232][T10915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.908675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.927034][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4368'. [ 591.098882][T23081] bond3: (slave veth0_to_bond): making interface the new active one [ 591.112128][T23081] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 591.167765][T23068] macvlan0: entered promiscuous mode [ 591.190293][T23068] macvlan0: entered allmulticast mode [ 591.222009][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4364'. [ 591.234427][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 591.261303][T23068] bond3: entered promiscuous mode [ 591.293523][T23068] veth0_to_bond: entered promiscuous mode [ 591.312359][T23068] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 591.325999][T23068] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 591.373273][T23068] bond3: left promiscuous mode [ 591.383408][T23068] veth0_to_bond: left promiscuous mode [ 591.404363][T23100] netlink: 'syz.0.4373': attribute type 1 has an invalid length. [ 591.579020][T23100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 591.633774][T23098] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 591.678532][T23115] block nbd2: not configured, cannot reconfigure [ 591.716354][T23107] macvlan2: entered promiscuous mode [ 591.725369][T23107] macvlan2: entered allmulticast mode [ 591.732666][T23107] bond4: entered promiscuous mode [ 591.741589][T23107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 591.750396][T23107] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 591.767790][T23107] bond4: left promiscuous mode [ 591.796369][T16804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.837561][T23122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4380'. [ 591.846885][T23122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4380'. [ 591.856258][T10908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.938777][T10915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.120119][T23131] netlink: 'syz.4.4382': attribute type 17 has an invalid length. [ 592.174003][T23133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4384'. [ 593.122939][T23190] netlink: 'syz.0.4398': attribute type 1 has an invalid length. [ 593.183631][T23190] bond5: entered promiscuous mode [ 593.191120][T23190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 593.234496][T23190] bond5: (slave bridge3): making interface the new active one [ 593.244230][T23190] bridge3: entered promiscuous mode [ 593.253876][T23190] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 593.530260][T23207] syzkaller0: entered promiscuous mode [ 593.542343][T23207] syzkaller0: entered allmulticast mode [ 593.860805][T23228] netlink: 'syz.0.4407': attribute type 83 has an invalid length. [ 594.313771][T23250] C: renamed from lo (while UP) [ 594.324844][T23234] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 594.379811][T23234] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 594.411982][T23252] __nla_validate_parse: 15 callbacks suppressed [ 594.412003][T23252] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4415'. [ 594.434661][T23234] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 594.492083][T23258] netlink: 'syz.3.4417': attribute type 1 has an invalid length. [ 594.515062][T23234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 594.532728][T23232] syzkaller0: entered promiscuous mode [ 594.539872][T23232] syzkaller0: entered allmulticast mode [ 594.554958][T23261] netlink: 'syz.3.4417': attribute type 1 has an invalid length. [ 594.603723][T23234] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 594.896103][T10908] net_ratelimit: 9 callbacks suppressed [ 594.896124][T10908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.022812][T23283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4423'. [ 595.042448][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4423'. [ 595.056263][T10915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.064652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.110679][T23286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'. [ 595.130217][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4425'. [ 595.285999][T20795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.348266][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4428'. [ 595.363557][T23299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4427'. [ 595.475402][T23303] syzkaller0: entered promiscuous mode [ 595.490619][T23303] syzkaller0: entered allmulticast mode [ 595.676699][T23318] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4432'. [ 595.983519][T23339] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4435'. [ 596.016239][T23336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4436'. [ 596.097452][T10915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.106003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.412832][ T1027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.538295][T23365] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 596.654261][T23373] syzkaller0: entered promiscuous mode [ 596.674251][T23370] nbd: must specify at least one socket [ 596.680413][T23373] syzkaller0: entered allmulticast mode [ 596.952794][T23389] bridge4: entered promiscuous mode [ 596.977001][T23389] bridge4: entered allmulticast mode [ 597.138210][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.146825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.215031][T23396] 8021q: adding VLAN 0 to HW filter on device bond6 [ 597.238959][T23401] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 597.275005][T23401] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 597.908938][ T605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.921131][ T605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.798049][T23485] netlink: 'syz.3.4479': attribute type 1 has an invalid length. [ 598.975728][T21287] Bluetooth: hci0: command 0x0c1a tx timeout [ 598.982536][ T5632] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 599.224729][T23512] netlink: 'syz.2.4486': attribute type 16 has an invalid length. [ 599.233272][T23512] netlink: 'syz.2.4486': attribute type 17 has an invalid length. [ 599.363056][T23512] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 599.399515][T23512] veth3: left promiscuous mode [ 599.463355][T23512] xfrm1: left promiscuous mode [ 599.477210][T23512] xfrm1: left allmulticast mode [ 599.516724][T23512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.539318][T23512] geneve2: left promiscuous mode [ 599.550027][T23512] geneve2: left allmulticast mode [ 599.583093][T23512] gre1: left promiscuous mode [ 599.593087][T23512] gre1: left allmulticast mode [ 599.809716][T23526] bridge3: entered promiscuous mode [ 599.828521][T23526] bridge3: entered allmulticast mode [ 600.239862][T23551] __nla_validate_parse: 7 callbacks suppressed [ 600.239884][T23551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4498'. [ 600.316945][T23547] syz.1.4495 (23547) used greatest stack depth: 17968 bytes left [ 600.375062][T23551] hsr_slave_0: left promiscuous mode [ 600.394378][T23551] hsr_slave_1: left promiscuous mode [ 600.654706][T23571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4503'. [ 600.671232][T23571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4503'. [ 600.688098][T23530] syzkaller0: entered promiscuous mode [ 600.712660][T23530] syzkaller0: entered allmulticast mode [ 600.741917][T23575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4504'. [ 600.881224][T23581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4508'. [ 600.916366][T23581] netlink: 'syz.1.4508': attribute type 1 has an invalid length. [ 600.944981][T23581] netlink: 'syz.1.4508': attribute type 2 has an invalid length. [ 600.977945][T23587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4509'. [ 601.058424][T23499] Bluetooth: hci0: command 0x0c1a tx timeout [ 601.138060][T23499] Bluetooth: hci2: command 0x0406 tx timeout [ 601.245481][T23597] xt_policy: output policy not valid in PREROUTING and INPUT [ 601.357416][T23601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4510'. [ 601.522768][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 601.550996][T23601] bond4 (unregistering): Released all slaves [ 601.821304][T23625] netlink: 'syz.0.4520': attribute type 10 has an invalid length. [ 601.831548][T23618] net_ratelimit: 35 callbacks suppressed [ 601.831570][T23618] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 601.866745][T23625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.880872][T23622] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 601.894455][T23625] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 601.955328][T23629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.983108][T23629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.020631][T23629] bond0 (unregistering): (slave team0): Releasing backup interface [ 602.065459][T23629] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 602.154283][T23629] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 602.191862][T23638] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 602.206855][T23629] bond0 (unregistering): Released all slaves [ 602.254551][T23639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4523'. [ 602.311838][T23639] vlan0: entered promiscuous mode [ 602.448586][T23639] vlan0: left promiscuous mode [ 602.571045][T23650] netlink: 'syz.2.4527': attribute type 1 has an invalid length. [ 602.748662][T23650] bond4: entered promiscuous mode [ 602.754672][T23650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.773041][T23660] gtp0: entered promiscuous mode [ 602.789191][T23660] gtp0: entered allmulticast mode [ 602.806165][T23667] : renamed from bond0 (while UP) [ 603.261190][T23683] netlink: 'syz.4.4536': attribute type 1 has an invalid length. [ 603.300767][T23683] 8021q: adding VLAN 0 to HW filter on device bond7 [ 603.398559][T23683] bond7: (slave veth0_to_bond): making interface the new active one [ 603.423656][T23703] netlink: 'syz.1.4540': attribute type 39 has an invalid length. [ 603.438740][T23683] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 603.502634][T23687] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4537'. [ 603.627678][T23710] netlink: 'syz.0.4541': attribute type 29 has an invalid length. [ 604.237780][T23735] netlink: 'syz.1.4550': attribute type 83 has an invalid length. [ 604.552669][T23752] netlink: 'syz.0.4556': attribute type 29 has an invalid length. [ 604.775292][T23767] IPv4: Oversized IP packet from 127.202.26.0 [ 604.794646][T23766] IPv4: Oversized IP packet from 127.202.26.0 [ 605.111333][T23785] netlink: 'syz.0.4566': attribute type 1 has an invalid length. [ 605.434112][T23799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.492172][T23797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.714509][T23811] team1: left allmulticast mode [ 605.792937][T23823] __nla_validate_parse: 10 callbacks suppressed [ 605.792973][T23823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4577'. [ 605.930394][T23830] IPv4: Oversized IP packet from 127.202.26.0 [ 605.941823][T23827] syzkaller0: entered promiscuous mode [ 605.962368][T23827] syzkaller0: entered allmulticast mode [ 606.238089][T23839] team0 (unregistering): Port device team_slave_0 removed [ 606.264833][T23839] team0 (unregistering): Port device team_slave_1 removed [ 606.329858][ T14] smbdirect: ib_dev[syz1] removed [ 606.603561][T23847] syzkaller1: entered promiscuous mode [ 606.618239][T23847] syzkaller1: entered allmulticast mode [ 606.801427][T23877] syzkaller1: entered promiscuous mode [ 606.819907][T23877] syzkaller1: entered allmulticast mode [ 607.059972][T23895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4594'. [ 607.091407][T23895] nbd: must specify at least one socket [ 607.471385][T23910] netlink: 'syz.2.4599': attribute type 11 has an invalid length. [ 607.511672][T23910] netlink: 4312 bytes leftover after parsing attributes in process `syz.2.4599'. [ 607.607647][T23919] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 607.974001][T23943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4606'. [ 607.996089][T23944] gre1: entered promiscuous mode [ 608.032985][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4606'. [ 608.043391][T23943] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4606'. [ 608.322140][ T5288] veth1_vlan: left promiscuous mode [ 608.520462][T23961] validate_nla: 1 callbacks suppressed [ 608.520485][T23961] netlink: 'syz.1.4609': attribute type 18 has an invalid length. [ 608.563526][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4608'. [ 608.818644][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4614'. [ 609.195264][T23983] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 610.871329][T23935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.907995][T23981] netlink: 'syz.1.4615': attribute type 1 has an invalid length. [ 610.955999][T23981] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4615'. [ 611.510775][T24013] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4621'. [ 611.536368][T24013] 0·: renamed from hsr0 (while UP) [ 611.580409][T24013] 0·: entered allmulticast mode [ 611.602294][T24013] hsr_slave_0: entered allmulticast mode [ 611.628674][T24013] hsr_slave_1: entered allmulticast mode [ 611.643812][T24013] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 612.073072][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4631'. [ 612.163395][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4631'. [ 612.586348][T24070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4633'. [ 612.648451][T24074] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4637'. [ 612.741760][T24075] netlink: 'syz.3.4634': attribute type 11 has an invalid length. [ 612.760612][T24082] lo: entered promiscuous mode [ 612.770990][T24082] tunl0: entered promiscuous mode [ 612.798726][T24082] gre0: entered promiscuous mode [ 612.806529][T24082] gretap0: entered promiscuous mode [ 612.817865][T24082] erspan0: entered promiscuous mode [ 612.827630][T24082] ip_vti0: entered promiscuous mode [ 612.986012][T24080] syzkaller1: entered promiscuous mode [ 612.994280][T24080] syzkaller1: entered allmulticast mode [ 613.012487][T24091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4639'. [ 613.126636][T24097] netlink: 'syz.0.4639': attribute type 10 has an invalid length. [ 613.176318][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4640'. [ 613.509787][T24116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4646'. [ 613.696889][T24125] syzkaller0: entered promiscuous mode [ 613.706301][T24125] syzkaller0: entered allmulticast mode [ 614.449235][T24179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4660'. [ 614.952720][T24208] netlink: 'syz.4.4668': attribute type 1 has an invalid length. [ 615.001581][T24208] bond8: (slave bridge4): making interface the new active one [ 615.010292][T24208] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 615.072682][T24212] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 616.451267][T24113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.463153][T24151] __nla_validate_parse: 2 callbacks suppressed [ 616.463172][T24151] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4645'. [ 616.719600][T24221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4674'. [ 617.457036][T24242] gretap0: entered promiscuous mode [ 617.462465][T24242] gretap0: entered allmulticast mode [ 617.837722][T24270] netlink: 'syz.3.4687': attribute type 1 has an invalid length. [ 617.958516][T24270] bond0: entered promiscuous mode [ 617.969659][T24270] bond0: entered allmulticast mode [ 617.985322][T24270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.045385][T24275] erspan1: entered allmulticast mode [ 618.091361][T24275] bond0: (slave erspan1): making interface the new active one [ 618.107608][T24275] erspan1: entered promiscuous mode [ 618.119126][T24275] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 618.321669][T24298] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4692'. [ 618.609012][T24309] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 618.640635][T24311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4697'. [ 618.687758][T24311] netlink: 'syz.4.4697': attribute type 4 has an invalid length. [ 618.791100][T24314] syzkaller1: entered promiscuous mode [ 618.804576][T24314] syzkaller1: entered allmulticast mode [ 618.872194][T24314] xt_l2tp: v2 sid > 0xffff: 1114112 [ 618.949432][T24318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4698'. [ 619.157763][T24329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4700'. [ 619.272515][T24332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4700'. [ 619.423314][T24329] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 619.473706][T24339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4700'. [ 619.519079][T24332] bond5: entered promiscuous mode [ 619.534619][T24332] bridge3: entered promiscuous mode [ 619.549618][T24332] bond5: entered allmulticast mode [ 619.565156][T24332] bridge3: entered allmulticast mode [ 619.582258][T24332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.596872][T24336] 8021q: VLANs not supported on xfrm0 [ 619.822223][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4706'. [ 619.850431][T24354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4706'. [ 619.918026][T24354] netlink: 'syz.1.4706': attribute type 15 has an invalid length. [ 620.065099][T16804] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 256 - 0 [ 620.098240][T16804] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 620.135965][T16804] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 620.176508][T16804] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 620.275294][T24370] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 620.354147][T24370] bond6 (unregistering): Released all slaves [ 620.959017][T24404] netlink: 'syz.3.4716': attribute type 1 has an invalid length. [ 621.100588][T24404] 8021q: adding VLAN 0 to HW filter on device bond7 [ 621.138173][T24405] macvlan2: entered promiscuous mode [ 621.143641][T24405] macvlan2: entered allmulticast mode [ 621.151621][T24405] bond7: entered promiscuous mode [ 621.158163][T24405] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 621.174251][T24410] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 621.188522][T24405] bond7: left promiscuous mode [ 621.640038][T24422] 8021q: VLANs not supported on ipvlan1 [ 622.051310][T24442] __nla_validate_parse: 6 callbacks suppressed [ 622.051335][T24442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4726'. [ 622.087378][T24451] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 624.039277][T24535] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4750'. [ 624.346448][T24547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4751'. [ 624.522521][T24541] team0 (unregistering): Port device team_slave_0 removed [ 624.660147][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.674741][T24541] team0 (unregistering): Port device team_slave_1 removed [ 624.697385][T24563] xt_NFQUEUE: number of total queues is 0 [ 624.938064][T24571] x_tables: duplicate underflow at hook 3 [ 625.777893][T24590] netlink: 'syz.0.4759': attribute type 2 has an invalid length. [ 625.805926][T24590] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4759'. [ 625.814766][T24587] bridge0: entered promiscuous mode [ 625.841642][T24587] bridge0: entered allmulticast mode [ 626.245252][T24604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4763'. [ 626.384373][T24609] netlink: 'syz.1.4763': attribute type 21 has an invalid length. [ 626.471089][T24604] IPVS: Error connecting to the multicast addr [ 626.506903][T24618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4764'. [ 626.528987][T24617] openvswitch: netlink: IPv4 tunnel dst address is zero [ 626.562355][T24617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.739623][T24619] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4765'. [ 626.763568][T24623] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4766'. [ 627.159771][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4769'. [ 627.261786][T24638] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.312699][T24638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4770'. [ 627.964978][T24672] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4778'. [ 628.531403][T24692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4783'. [ 628.558148][T24689] bond0: Removing last arp target with arp_interval on [ 628.917122][T24701] geneve2: entered promiscuous mode [ 628.934586][ T14] netdevsim netdevsim1 : set [1, 0] type 2 family 0 port 44552 - 0 [ 628.958410][T24703] netlink: 'syz.0.4787': attribute type 1 has an invalid length. [ 628.981841][T24703] netlink: 'syz.0.4787': attribute type 1 has an invalid length. [ 629.007221][T24703] netlink: 'syz.0.4787': attribute type 1 has an invalid length. [ 629.048102][T24703] netlink: 'syz.0.4787': attribute type 1 has an invalid length. [ 629.296695][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 44552 - 0 [ 629.329696][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 44552 - 0 [ 629.358515][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 44552 - 0 [ 630.856141][T24761] netlink: 'syz.1.4800': attribute type 2 has an invalid length. [ 630.864398][T24761] netlink: 'syz.1.4800': attribute type 11 has an invalid length. [ 630.873070][T24761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4800'. [ 635.533474][T24734] IPv6: sit3: Disabled Multicast RS [ 635.541444][T24734] sit3: entered allmulticast mode [ 635.587480][T24755] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4798'. [ 635.827558][T24767] netlink: 'syz.1.4802': attribute type 21 has an invalid length. [ 636.025181][T24778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4805'. [ 636.040571][T24777] ipvlan2: entered allmulticast mode [ 636.061446][T24777] batadv_slave_1: entered allmulticast mode [ 636.109984][T24782] netlink: 'syz.1.4806': attribute type 8 has an invalid length. [ 636.134368][T24774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4805'. [ 636.134585][T24778] xfrm1: entered promiscuous mode [ 636.156633][T24782] netlink: 'syz.1.4806': attribute type 8 has an invalid length. [ 636.221573][T24778] xfrm1: entered allmulticast mode [ 636.408532][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4809'. [ 636.442210][T24790] netlink: 'syz.0.4808': attribute type 1 has an invalid length. [ 637.519980][T24830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4816'. [ 637.580364][T24830] netlink: 'syz.4.4816': attribute type 1 has an invalid length. [ 638.264221][T24845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4820'. [ 638.859724][T24848] syzkaller0: entered promiscuous mode [ 638.896654][T24848] syzkaller0: entered allmulticast mode [ 639.229763][T24860] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4826'. [ 639.242150][T24860] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4826'. [ 639.532651][T24868] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4828'. [ 639.896282][T24876] netlink: 'syz.2.4832': attribute type 1 has an invalid length. [ 639.994139][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'. [ 640.328032][T24890] netlink: 'syz.2.4836': attribute type 21 has an invalid length. [ 640.369293][T24890] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.017770][T24916] No such timeout policy "syz0" [ 641.487044][T24921] 8021q: adding VLAN 0 to HW filter on device bond10 [ 642.226333][T24950] netlink: 'syz.1.4853': attribute type 13 has an invalid length. [ 643.058888][T24994] __nla_validate_parse: 6 callbacks suppressed [ 643.058943][T24994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4865'. [ 643.469842][T25014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.612347][T25017] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 643.664721][T25017] syzkaller1: group set to 0 [ 643.692537][T25018] ip6tnl0: Caught tx_queue_len zero misconfig [ 643.800977][T25024] veth0: entered promiscuous mode [ 643.959642][T25024] veth0: left promiscuous mode [ 644.188896][T25043] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4877'. [ 644.277309][T25047] geneve3: entered promiscuous mode [ 644.434468][T25056] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4877'. [ 645.061472][T25055] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 645.212522][T25061] syzkaller1: entered promiscuous mode [ 645.245791][T25061] syzkaller1: entered allmulticast mode [ 645.546911][T25075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4884'. [ 645.600754][T25076] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4884'. [ 645.630016][T25075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4884'. [ 645.648780][T25080] syz.2.4886: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 645.721443][T25080] CPU: 0 UID: 0 PID: 25080 Comm: syz.2.4886 Not tainted syzkaller #0 PREEMPT(full) [ 645.721473][T25080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.721486][T25080] Call Trace: [ 645.721495][T25080] [ 645.721504][T25080] dump_stack_lvl+0xe8/0x150 [ 645.721539][T25080] warn_alloc+0x24c/0x270 [ 645.721575][T25080] ? stack_depot_save_flags+0x33/0x800 [ 645.721610][T25080] ? __pfx_warn_alloc+0x10/0x10 [ 645.721644][T25080] ? kasan_save_track+0x3e/0x80 [ 645.721663][T25080] ? __kasan_kmalloc+0x93/0xb0 [ 645.721685][T25080] ? xsk_setsockopt+0x52a/0x960 [ 645.721715][T25080] ? do_sock_setsockopt+0x17c/0x1b0 [ 645.721737][T25080] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 645.721758][T25080] ? do_syscall_64+0x174/0x580 [ 645.721778][T25080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.721810][T25080] __vmalloc_node_range_noprof+0x12c/0x1730 [ 645.721874][T25080] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 645.721911][T25080] ? __kasan_kmalloc+0x93/0xb0 [ 645.721935][T25080] ? __kmalloc_cache_noprof+0x32d/0x660 [ 645.721966][T25080] ? __kmalloc_cache_noprof+0x150/0x660 [ 645.722009][T25080] vmalloc_user_noprof+0xad/0xe0 [ 645.722041][T25080] ? xskq_create+0xbf/0x170 [ 645.722070][T25080] xskq_create+0xbf/0x170 [ 645.722102][T25080] xsk_init_queue+0x8a/0xe0 [ 645.722132][T25080] xsk_setsockopt+0x52a/0x960 [ 645.722158][T25080] ? __fget_files+0x2a/0x420 [ 645.722179][T25080] ? __pfx_xsk_setsockopt+0x10/0x10 [ 645.722206][T25080] ? __pfx_aa_sk_perm+0x10/0x10 [ 645.722236][T25080] ? aa_sock_opt_perm+0xff/0x1a0 [ 645.722266][T25080] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 645.722295][T25080] ? __pfx_xsk_setsockopt+0x10/0x10 [ 645.722323][T25080] do_sock_setsockopt+0x17c/0x1b0 [ 645.722350][T25080] __x64_sys_setsockopt+0x13d/0x1b0 [ 645.722373][T25080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.722395][T25080] do_syscall_64+0x174/0x580 [ 645.722413][T25080] ? trace_irq_disable+0x3b/0x140 [ 645.722434][T25080] ? clear_bhb_loop+0x40/0x90 [ 645.722461][T25080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.722483][T25080] RIP: 0033:0x7fe07379de59 [ 645.722502][T25080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.722520][T25080] RSP: 002b:00007fe074587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 645.722543][T25080] RAX: ffffffffffffffda RBX: 00007fe073a25fa0 RCX: 00007fe07379de59 [ 645.722559][T25080] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 645.722572][T25080] RBP: 00007fe073833e6f R08: 0000000000000004 R09: 0000000000000000 [ 645.722585][T25080] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.722599][T25080] R13: 00007fe073a26038 R14: 00007fe073a25fa0 R15: 00007ffcad0fb4c8 [ 645.722635][T25080] [ 646.036646][T25080] Mem-Info: [ 646.039837][T25080] active_anon:7548 inactive_anon:4 isolated_anon:0 [ 646.039837][T25080] active_file:144 inactive_file:43192 isolated_file:0 [ 646.039837][T25080] unevictable:768 dirty:39 writeback:0 [ 646.039837][T25080] slab_reclaimable:11981 slab_unreclaimable:118709 [ 646.039837][T25080] mapped:29394 shmem:2900 pagetables:1465 [ 646.039837][T25080] sec_pagetables:0 bounce:0 [ 646.039837][T25080] kernel_misc_reclaimable:0 [ 646.039837][T25080] free:1292432 free_pcp:10077 free_cma:0 [ 646.085046][T25080] Node 0 active_anon:30292kB inactive_anon:16kB active_file:576kB inactive_file:172572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117476kB dirty:156kB writeback:0kB shmem:10164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14928kB pagetables:5736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 646.119914][T25080] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 646.167689][T25080] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 646.197597][T25080] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 646.203424][T25080] Node 0 DMA32 free:1209672kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30992kB inactive_anon:16kB active_file:576kB inactive_file:172572kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2551436kB mlocked:0kB bounce:0kB free_pcp:39648kB local_pcp:21080kB free_cma:0kB [ 646.236787][T25080] lowmem_reserve[]: 0 0 0 0 0 [ 646.241563][T25080] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 646.280871][T25080] lowmem_reserve[]: 0 0 0 0 0 [ 646.285766][T25080] Node 1 Normal free:3943996kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 646.317363][T25080] lowmem_reserve[]: 0 0 0 0 0 [ 646.322147][T25080] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 646.334962][T25080] Node 0 DMA32: 2624*4kB (UM) 1594*8kB (UM) 788*16kB (UME) 178*32kB (UME) 140*64kB (UM) 244*128kB (UM) 202*256kB (UME) 102*512kB (UME) 52*1024kB (UME) 10*2048kB (UME) 232*4096kB (UM) = 1209680kB [ 646.354812][T25080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 646.366388][T25080] Node 1 Normal: 1*4kB (M) 1*8kB (M) 7*16kB (UM) 2*32kB (UM) 6*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3943996kB [ 646.444793][T25090] gre2: entered allmulticast mode [ 646.448097][T25080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 646.463307][T25091] netlink: 'syz.0.4887': attribute type 8 has an invalid length. [ 646.479698][T25080] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 646.534785][T25080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 646.544426][T25080] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 646.553751][T25080] 46464 total pagecache pages [ 646.558463][T25080] 0 pages in swap cache [ 646.562656][T25080] Free swap = 124996kB [ 646.566840][T25080] Total swap = 124996kB [ 646.571029][T25080] 2097051 pages RAM [ 646.574883][T25080] 0 pages HighMem/MovableOnly [ 646.579606][T25080] 427421 pages reserved [ 646.583814][T25080] 0 pages cma reserved [ 646.591556][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 646.600904][T25095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 646.612161][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 646.621648][T25096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 646.840622][T25107] syzkaller1: entered promiscuous mode [ 646.859127][T25107] syzkaller1: entered allmulticast mode [ 647.016850][T25117] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 647.025268][T25117] openvswitch: netlink: Message has 512 unknown bytes. [ 647.052719][T25118] xt_hashlimit: overflow, try lower: 3/0 [ 647.785080][T25146] netlink: 'syz.2.4900': attribute type 3 has an invalid length. [ 648.254384][T25163] netlink: 'syz.2.4906': attribute type 1 has an invalid length. [ 648.264061][T25163] nbd: error processing sock list [ 648.283885][T25168] sctp: [Deprecated]: syz.0.4909 (pid 25168) Use of int in max_burst socket option. [ 648.283885][T25168] Use struct sctp_assoc_value instead [ 648.546774][T25176] netlink: zone id is out of range [ 648.552002][T25176] netlink: zone id is out of range [ 648.557157][T25176] netlink: zone id is out of range [ 648.562320][T25176] netlink: zone id is out of range [ 648.586594][T25176] netlink: zone id is out of range [ 648.602618][T25176] netlink: zone id is out of range [ 648.632482][T25176] netlink: zone id is out of range [ 648.654562][T25176] netlink: zone id is out of range [ 648.673289][T25176] netlink: zone id is out of range [ 648.701629][T25176] netlink: zone id is out of range [ 648.737353][T25189] __nla_validate_parse: 6 callbacks suppressed [ 648.737373][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 648.756785][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 648.813965][T25180] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 648.828520][T25180] bond6 (unregistering): Released all slaves [ 649.120857][T25211] veth1_macvtap: left promiscuous mode [ 649.126423][T25211] macsec0: entered promiscuous mode [ 649.171740][T25214] veth1_to_bond: entered allmulticast mode [ 649.353721][T25227] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4923'. [ 649.375414][T25225] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4923'. [ 649.388735][T25211] syzkaller0: entered promiscuous mode [ 649.394279][T25211] syzkaller0: entered allmulticast mode [ 649.402009][T25227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4923'. [ 649.531274][T25234] xt_CT: No such helper "snmp" [ 649.602069][T25240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4926'. [ 653.586843][T25237] bridge5: entered promiscuous mode [ 653.592168][T25237] bridge5: entered allmulticast mode [ 653.602877][T25245] syzkaller0: entered promiscuous mode [ 653.608695][T25245] syzkaller0: entered allmulticast mode [ 653.778551][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4928'. [ 653.788489][T25260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4928'. [ 653.808653][T25263] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 653.901328][T25267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.073971][T25273] netlink: 'syz.3.4933': attribute type 1 has an invalid length. [ 654.150254][T25273] bond8: entered promiscuous mode [ 654.158121][T25273] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.166042][T25226] veth1_to_bond: left allmulticast mode [ 654.188970][T25273] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.196236][T25273] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 654.291578][T25273] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 654.349622][T25275] netlink: 'syz.3.4933': attribute type 1 has an invalid length. [ 654.359580][T25273] bond8: (slave ip6gre1): making interface the new active one [ 654.367959][T25273] ip6gre1: entered promiscuous mode [ 654.382552][T25273] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 654.416567][T25279] netlink: 'syz.1.4935': attribute type 7 has an invalid length. [ 654.750260][T25297] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4940'. [ 654.825248][T25303] netlink: 'syz.1.4941': attribute type 1 has an invalid length. [ 654.833067][T25303] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4941'. [ 654.934576][T25311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4941'. [ 654.943645][T25311] net_ratelimit: 391 callbacks suppressed [ 654.943667][T25311] openvswitch: netlink: Missing key (keys=40, expected=80) [ 655.250594][T25324] netlink: 'syz.0.4947': attribute type 1 has an invalid length. [ 655.262102][T25324] netlink: 'syz.0.4947': attribute type 3 has an invalid length. [ 655.270893][T25324] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4947'. [ 655.369547][T25325] h: entered promiscuous mode [ 655.645969][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4950'. [ 655.791674][T25340] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.031966][T25359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 656.054101][T25361] team_slave_1: Caught tx_queue_len zero misconfig [ 656.263359][T25380] netlink: 'syz.3.4960': attribute type 1 has an invalid length. [ 656.291661][T25380] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4960'. [ 656.468634][T25389] syzkaller0: entered promiscuous mode [ 656.485287][T25389] syzkaller0: entered allmulticast mode [ 656.559588][T25389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.609356][T25389] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4963'. [ 656.789132][T25405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4967'. [ 657.155077][T25416] netlink: 'syz.4.4970': attribute type 1 has an invalid length. [ 657.349448][T25430] vlan2: entered allmulticast mode [ 657.373742][ T30] audit: type=1800 audit(1782943173.747:19): pid=25434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4976" name="memory.events" dev="tmpfs" ino=1705 res=0 errno=0 [ 657.446673][ T30] audit: type=1804 audit(1782943173.747:20): pid=25435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4976" name="/newroot/331/memory.events" dev="tmpfs" ino=1705 res=1 errno=0 [ 658.631805][T25492] netlink: 'syz.0.4997': attribute type 1 has an invalid length. [ 658.667354][T25492] netlink: 'syz.0.4997': attribute type 2 has an invalid length. [ 658.943790][T25503] __nla_validate_parse: 5 callbacks suppressed [ 658.943813][T25503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5000'. [ 659.149123][T25509] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5002'. [ 659.350509][T25515] x_tables: duplicate underflow at hook 2 [ 659.512408][T25523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5006'. [ 659.714713][T25531] netlink: 'syz.3.5009': attribute type 1 has an invalid length. [ 659.789635][T25535] block nbd2: Unsupported socket: should be TCP or UNIX. [ 659.797003][T25534] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5008'. [ 659.807539][T25529] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5008'. [ 660.277145][T25549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5015'. [ 660.363776][T25556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5017'. [ 660.401759][T25556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5017'. [ 660.503771][T25559] netlink: 'syz.4.5020': attribute type 1 has an invalid length. [ 660.626721][T25559] bond11 (unregistering): Released all slaves [ 660.679821][T25580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5020'. [ 660.700694][T25584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5023'. [ 660.903673][T25591] netlink: 'syz.0.5028': attribute type 1 has an invalid length. [ 661.030956][T25591] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 661.051670][T25598] veth5: entered promiscuous mode [ 661.059566][T25598] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 661.073628][T25591] 8021q: adding VLAN 0 to HW filter on device bond6 [ 661.075068][T20798] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 661.181467][T25602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.220522][T20795] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 661.269430][T25604] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 661.503394][T25607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.513087][T25607] bond0: (slave bond1): Enslaving as an active interface with a down link [ 661.613190][T25619] batadv_slave_0: entered promiscuous mode [ 661.641688][T25619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.677144][T25619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.016191][T25689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.023565][T25689] IPv6: NLM_F_CREATE should be set when creating new route [ 663.030836][T25689] IPv6: NLM_F_CREATE should be set when creating new route [ 663.090436][T25695] netlink: 'syz.2.5062': attribute type 12 has an invalid length. [ 663.521194][T25720] nbd: must specify a device to reconfigure [ 664.173100][T25757] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 664.391822][T25775] netlink: 'syz.1.5085': attribute type 11 has an invalid length. [ 664.399839][T25775] netlink: 'syz.1.5085': attribute type 4 has an invalid length. [ 664.407612][T25775] __nla_validate_parse: 15 callbacks suppressed [ 664.407634][T25775] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5085'. [ 664.551798][T25781] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5086'. [ 664.640786][T25787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5087'. [ 664.681037][T25780] netlink: 'syz.3.5087': attribute type 15 has an invalid length. [ 664.742106][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5087'. [ 665.004630][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5095'. [ 665.138340][T25802] tipc: Enabled bearer , priority 0 [ 665.158652][T25807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5096'. [ 665.168632][T25802] syzkaller0: entered promiscuous mode [ 665.192422][T25802] syzkaller0: entered allmulticast mode [ 665.214348][T25802] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 665.231626][T25806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5097'. [ 665.300874][T25814] tipc: Resetting bearer [ 665.326920][T25800] tipc: Resetting bearer [ 665.339864][T25806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5097'. [ 665.406053][T25800] tipc: Disabling bearer [ 665.487361][T16804] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 665.608242][T25812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.620355][T25832] netlink: 'syz.1.5105': attribute type 3 has an invalid length. [ 665.641821][T25832] netlink: 'syz.1.5105': attribute type 1 has an invalid length. [ 665.651372][T25832] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5105'. [ 665.676002][T25832] NCSI netlink: No device for ifindex 813332851 [ 665.798841][T25836] netlink: 'syz.3.5106': attribute type 4 has an invalid length. [ 665.871338][T25838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5107'. [ 666.393713][T25868] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 666.574941][T25886] tipc: Invalid UDP bearer configuration [ 666.575003][T25886] tipc: Enabling of bearer rejected, failed to enable media [ 667.080200][T25905] tipc: Enabled bearer , priority 0 [ 667.326223][T25905] syzkaller0: entered promiscuous mode [ 667.331817][T25905] syzkaller0: entered allmulticast mode [ 667.337972][T25905] tipc: Resetting bearer [ 667.449791][T25905] tipc: Resetting bearer [ 668.128819][T25926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.682693][T25905] tipc: Disabling bearer [ 671.694229][T25953] veth0_virt_wifi: mtu less than device minimum [ 671.961993][T20798] syzkaller0: tun_net_xmit 76 [ 671.967862][T20798] syzkaller0: tun_net_xmit 48 [ 671.976978][T25965] syzkaller0: create flow: hash 1100470173 index 1 [ 671.991799][ T5829] syzkaller0: tun_net_xmit 76 [ 672.109826][ T5639] syzkaller0: tun_net_xmit 76 [ 672.181039][T25964] syzkaller0: delete flow: hash 1100470173 index 1 [ 672.378162][T25994] xt_hashlimit: size too large, truncated to 1048576 [ 676.236078][T25981] netlink: 'syz.2.5142': attribute type 2 has an invalid length. [ 676.445073][T26010] __nla_validate_parse: 7 callbacks suppressed [ 676.445094][T26010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5149'. [ 676.461519][T26012] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5150'. [ 676.478159][T26014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5151'. [ 676.488261][T26014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5151'. [ 676.715680][T26023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5155'. [ 676.949733][T26029] netlink: 'syz.0.5156': attribute type 1 has an invalid length. [ 676.983562][T26029] netlink: 756 bytes leftover after parsing attributes in process `syz.0.5156'. [ 677.092787][T26037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5159'. [ 677.173270][T26037] netlink: 211720 bytes leftover after parsing attributes in process `syz.4.5159'. [ 677.183426][T26037] openvswitch: netlink: Message has 4 unknown bytes. [ 677.470720][T26063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5164'. [ 677.594484][T26058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5164'. [ 677.834393][T26084] tipc: Failed to remove unknown binding: 66,0,0/0:3919625804/3919625805 [ 677.843524][T26084] tipc: Failed to remove unknown binding: 66,0,0/0:3919625804/3919625805 [ 678.023823][T26091] syzkaller0: entered promiscuous mode [ 678.032284][T26091] syzkaller0: entered allmulticast mode [ 678.065980][T26091] bond8: entered allmulticast mode [ 678.071188][T26091] ip6gre1: entered allmulticast mode [ 678.158957][T26101] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 678.166043][T26101] IPVS: set_ctl: invalid protocol: 11822 101.116.0.0:0 [ 678.174199][T26101] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 678.207715][T26090] bond8: left allmulticast mode [ 678.213585][T26090] ip6gre1: left allmulticast mode [ 678.340535][T26104] netlink: 'syz.1.5174': attribute type 2 has an invalid length. [ 678.349275][T26104] netlink: 'syz.1.5174': attribute type 2 has an invalid length. [ 678.636802][T26124] Unknown options in mask b7f2 [ 681.055264][T26098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 681.296278][T26143] netlink: 'syz.2.5186': attribute type 4 has an invalid length. [ 681.374749][T26146] netlink: 'syz.0.5187': attribute type 8 has an invalid length. [ 681.740803][T26166] __nla_validate_parse: 2 callbacks suppressed [ 681.740824][T26166] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5192'. [ 681.829056][T26169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5195'. [ 681.838693][T26169] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5195'. [ 681.904879][T26171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5196'. [ 681.958690][T26173] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5197'. [ 682.164759][T26188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5196'. [ 682.529391][T26205] netlink: 'syz.0.5205': attribute type 1 has an invalid length. [ 682.566304][T26212] lo: Caught tx_queue_len zero misconfig [ 682.818576][T26232] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5212'. [ 682.918134][T26232] bond2 (unregistering): Released all slaves [ 683.004363][T26238] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5215'. [ 683.176189][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5219'. [ 683.185526][T26249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5219'. [ 683.208624][T20795] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.219880][T20795] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.229364][T20795] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.238435][T20795] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 683.407942][T26256] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 683.418164][ T5829] IPVS: starting estimator thread 0... [ 683.425478][T26258] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 683.718236][T26260] IPVS: using max 26 ests per chain, 62400 per kthread [ 684.356027][T26303] bond10: Unable to set down delay as MII monitoring is disabled [ 684.368274][T26303] bond10 (unregistering): Released all slaves [ 684.561082][T26314] openvswitch: netlink: Key type 31 is not supported [ 685.192111][T26341] openvswitch: netlink: Actions may not be safe on all matching packets [ 685.737862][T26368] sock: sock_timestamping_bind_phc: sock not bind to device [ 685.752671][T26366] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.760002][T26366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.131509][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 686.531914][T26370] bond2 (unregistering): Released all slaves [ 686.858353][T26400] __nla_validate_parse: 14 callbacks suppressed [ 686.858376][T26400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5262'. [ 687.130807][T26409] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5266'. [ 687.210527][T26409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5266'. [ 687.261463][T26409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5266'. [ 687.493390][T26433] Unsupported ieee802154 address type: 0 [ 687.601367][T26441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5272'. [ 687.763910][T26448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5274'. [ 688.055300][T26450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.124010][T26450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.248747][T26450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.258642][T26450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.272087][T26450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 688.282507][T26450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.356274][T26450] veth1_vlan: left promiscuous mode [ 688.363384][T26450] veth0_vlan: left promiscuous mode [ 688.373087][T26450] veth0_vlan: entered promiscuous mode [ 688.382350][T26450] veth1_vlan: entered promiscuous mode [ 688.400606][T26450] 8021q: adding VLAN 0 to HW filter on device  [ 688.412537][T26450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.421863][T26450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.438206][T26450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.493195][T26450] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 688.568395][T20798] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.575804][T20798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.609390][T20798] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.616686][T20798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.713310][T26479] --map-set only usable from mangle table [ 688.820239][T26470] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.830683][T26470] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.111686][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5285'. [ 689.176293][T20796] netdevsim netdevsim1 : set [0, 1] type 1 family 0 port 8472 - 0 [ 689.184584][T20796] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 6081 - 0 [ 689.193035][T20796] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 689.202793][T20796] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.273898][T20796] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 689.295544][T20796] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.306033][T20796] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 689.314881][T20796] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.343790][T20796] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.352821][T20796] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.362427][T20796] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.371351][T20796] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.433064][T20796] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.480168][T20796] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.502987][T20796] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.528059][T20796] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.929992][T26516] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5290'. [ 689.945773][T26513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5289'. [ 690.201101][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5294'. [ 690.613181][T26549] netlink: 'syz.3.5300': attribute type 23 has an invalid length. [ 691.149924][T26566] bond0 (unregistering): (slave erspan1): Releasing active interface [ 691.158087][T26566] erspan1: left promiscuous mode [ 691.170223][T26566] bond0 (unregistering): Released all slaves [ 691.492471][T26588] netlink: 'syz.0.5305': attribute type 3 has an invalid length. [ 691.624922][T26592] syzkaller0: entered promiscuous mode [ 691.630484][T26592] syzkaller0: entered allmulticast mode [ 691.828350][T26602] netlink: 'syz.0.5311': attribute type 1 has an invalid length. [ 691.851225][T26602] __nla_validate_parse: 4 callbacks suppressed [ 691.851248][T26602] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5311'. [ 691.954959][T26606] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 691.960870][T26606] syzkaller1: Linktype set failed because interface is up [ 692.383243][T26613] syzkaller0: entered promiscuous mode [ 692.405745][T26613] syzkaller0: entered allmulticast mode [ 692.530801][T26638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5319'. [ 692.587670][T26640] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 692.793338][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5324'. [ 693.201220][T26675] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 693.545627][T26690] netlink: 'syz.1.5334': attribute type 3 has an invalid length. [ 693.726753][T26698] SET target dimension over the limit! [ 693.742237][T26701] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5338'. [ 693.775523][T26701] bond11 (unregistering): Released all slaves [ 693.903602][T26707] netlink: 'syz.2.5339': attribute type 2 has an invalid length. [ 694.173578][T26718] xt_nat: multiple ranges no longer supported [ 694.187495][T26718] xt_nat: multiple ranges no longer supported [ 694.617384][T26749] netlink: 'syz.0.5348': attribute type 10 has an invalid length. [ 694.637057][T26750] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 694.714868][T26751] netlink: 'syz.1.5349': attribute type 1 has an invalid length. [ 694.722758][T26751] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5349'. [ 694.741151][T26751] netlink: 'syz.1.5349': attribute type 1 has an invalid length. [ 694.853882][T26755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5352'. [ 694.876430][T26758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5353'. [ 694.885188][T26755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5352'. [ 694.885444][T26758] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5353'. [ 694.916900][T26758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5353'. [ 695.710650][T26804] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 695.763137][T26802] netlink: 'syz.0.5368': attribute type 11 has an invalid length. [ 696.356094][T26821] netlink: 'syz.2.5371': attribute type 1 has an invalid length. [ 696.523317][T26825] netlink: 'syz.0.5374': attribute type 1 has an invalid length. [ 696.742090][T26825] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 696.861633][T26838] netlink: 'syz.2.5377': attribute type 1 has an invalid length. [ 696.900903][T26838] 8021q: adding VLAN 0 to HW filter on device bond6 [ 696.953612][T26838] bond3: (slave veth0_to_bond): Releasing active interface [ 696.982767][T26838] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 697.743294][T26874] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 697.796909][T26874] bond2 (unregistering): Released all slaves [ 697.918084][T26877] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 698.625339][T26928] netlink: 'syz.2.5403': attribute type 1 has an invalid length. [ 698.667164][T26917] netlink: 'syz.2.5403': attribute type 11 has an invalid length. [ 698.667211][T26920] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 699.517806][T26961] __nla_validate_parse: 8 callbacks suppressed [ 699.517827][T26961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5414'. [ 699.542091][T26961] netlink: 'syz.2.5414': attribute type 12 has an invalid length. [ 699.760893][T26970] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 701.842420][T26943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.132646][T26981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5418'. [ 702.181663][T26980] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5417'. [ 702.203902][T26983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5420'. [ 702.297802][T26986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5421'. [ 702.349672][T26988] team1: left promiscuous mode [ 702.371514][T26988] ipvlan2: left allmulticast mode [ 702.385597][T26988] batadv_slave_1: left allmulticast mode [ 702.392092][T26986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5421'. [ 702.732361][T27015] lo speed is unknown, defaulting to 1000 [ 702.740167][T27015] lo speed is unknown, defaulting to 1000 [ 702.747124][T27015] lo speed is unknown, defaulting to 1000 [ 702.797958][T27018] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5428'. [ 703.071744][T27015] infiniband sz1: set active [ 703.076575][ T5639] lo speed is unknown, defaulting to 1000 [ 703.082411][T27015] infiniband sz1: added lo [ 703.096164][T27022] tipc: Started in network mode [ 703.114196][T27022] tipc: Node identity 2003, cluster identity 4711 [ 703.145710][T27015] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 703.160820][T27015] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 703.177985][T27015] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 703.178501][T27022] tipc: Node number set to 8195 [ 703.283171][T27032] IPv6: NLM_F_REPLACE set, but no existing node found! [ 703.385019][T27015] RDS/IB: sz1: added [ 703.463837][T27015] smc: adding ib device sz1 with port count 1 [ 703.470050][T27015] smc: ib device sz1 port 1 has no pnetid [ 703.480805][ T5639] lo speed is unknown, defaulting to 1000 [ 703.545812][T27037] 8021q: adding VLAN 0 to HW filter on device bond11 [ 703.590878][T27015] lo speed is unknown, defaulting to 1000 [ 703.606085][T27042] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5437'. [ 703.663773][T27044] netlink: 'syz.3.5438': attribute type 5 has an invalid length. [ 703.817304][T27053] sctp: [Deprecated]: syz.4.5440 (pid 27053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.817304][T27053] Use struct sctp_sack_info instead [ 703.968110][T27055] syzkaller0: entered promiscuous mode [ 703.974101][T27055] syzkaller0: entered allmulticast mode [ 704.062355][T27015] lo speed is unknown, defaulting to 1000 [ 704.331248][T27067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5445'. [ 704.542373][T27073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5448'. [ 704.555590][T27015] lo speed is unknown, defaulting to 1000 [ 704.618552][T27073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5448'. [ 704.635240][ T30] audit: type=1804 audit(1782943220.977:21): pid=27075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5447" name="/newroot/407/cgroup.controllers" dev="tmpfs" ino=2102 res=1 errno=0 [ 704.694541][ T30] audit: type=1800 audit(1782943220.977:22): pid=27075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5447" name="cgroup.controllers" dev="tmpfs" ino=2102 res=0 errno=0 [ 704.864536][T27073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5448'. [ 704.891900][T27079] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 704.925853][T27073] bond8: entered promiscuous mode [ 704.930971][T27073] bridge7: entered promiscuous mode [ 704.936459][T27073] bond8: entered allmulticast mode [ 704.941628][T27073] bridge7: entered allmulticast mode [ 704.968522][T27082] netlink: 6208 bytes leftover after parsing attributes in process `syz.3.5449'. [ 705.029175][T27073] 8021q: adding VLAN 0 to HW filter on device bond8 [ 705.254237][T27100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5453'. [ 705.382331][T27015] lo speed is unknown, defaulting to 1000 [ 705.527587][T27110] tipc: Started in network mode [ 705.557097][T27110] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 705.607093][T27110] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:003c [ 705.620123][T27110] tipc: Enabled bearer , priority 10 [ 705.719418][T27113] nbd: nbd0 already in use [ 705.730939][T27115] geneve1: mtu less than device minimum [ 705.917305][T27118] syzkaller0: entered promiscuous mode [ 705.936156][T27118] syzkaller0: entered allmulticast mode [ 705.943958][T27015] lo speed is unknown, defaulting to 1000 [ 705.994275][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5461'. [ 710.087460][T27015] lo speed is unknown, defaulting to 1000 [ 710.087556][T10908] tipc: Node number set to 1 [ 710.348518][T27146] bond12 (unregistering): Released all slaves [ 710.456567][T27154] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5469'. [ 710.467670][T27144] bond12 (unregistering): Released all slaves [ 710.574723][T27156] x_tables: duplicate underflow at hook 2 [ 710.637663][T27015] lo speed is unknown, defaulting to 1000 [ 711.742246][T27196] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5482'. [ 711.756243][T27191] syzkaller1: entered promiscuous mode [ 711.761879][T27191] syzkaller1: entered allmulticast mode [ 712.332868][T27224] tipc: Enabled bearer , priority 0 [ 712.359149][T27224] syzkaller0: entered promiscuous mode [ 712.374507][T27224] syzkaller0: entered allmulticast mode [ 712.388965][T27224] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 712.444439][T27224] tipc: Resetting bearer [ 712.461324][T27231] tipc: Started in network mode [ 712.466999][T27231] tipc: Node identity c2ab52caa596, cluster identity 4711 [ 712.475891][T27231] tipc: Enabled bearer , priority 0 [ 712.483048][T27223] tipc: Resetting bearer [ 712.524535][T27223] tipc: Disabling bearer [ 712.572304][T27233] tipc: Enabling of bearer rejected, already enabled [ 712.744639][T27229] syzkaller0: entered promiscuous mode [ 712.750188][T27229] syzkaller0: entered allmulticast mode [ 712.779302][T27229] tipc: Resetting bearer [ 712.816765][T27231] ip6gre0: Master is either lo or non-ether device [ 712.995369][T27229] tipc: Resetting bearer [ 713.046629][T27254] x_tables: ip6_tables: TEE.1 target: invalid size 40 (kernel) != (user) 216 [ 717.541517][T27229] tipc: Disabling bearer [ 717.579194][ T5639] tipc: Node number set to 1732072138 [ 717.584895][T27284] netlink: 'syz.0.5498': attribute type 1 has an invalid length. [ 717.607872][T27287] : (slave bond_slave_0): Releasing backup interface [ 717.623113][T27287] : (slave veth0_to_bond): Releasing backup interface [ 717.635782][T27284] netlink: 'syz.0.5498': attribute type 1 has an invalid length. [ 717.946654][T27302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5505'. [ 717.980698][T27306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5507'. [ 718.091561][T27314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5508'. [ 718.252569][T27326] xt_l2tp: v2 doesn't support IP mode [ 718.301462][T27320] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 718.314035][T27320] bond9 (unregistering): Released all slaves [ 718.382063][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5512'. [ 718.391242][T27325] netlink: 'syz.4.5511': attribute type 2 has an invalid length. [ 718.406001][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5512'. [ 718.412017][T27333] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5513'. [ 718.429096][T27333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5513'. [ 718.431421][T27331] netlink: 'syz.0.5512': attribute type 12 has an invalid length. [ 718.453160][T27331] netlink: 'syz.0.5512': attribute type 11 has an invalid length. [ 719.163520][T27358] netlink: 'syz.2.5521': attribute type 1 has an invalid length. [ 719.309229][T27358] bond9: entered promiscuous mode [ 719.380433][T27358] 8021q: adding VLAN 0 to HW filter on device bond9 [ 719.441860][T27366] bond9: (slave bridge8): making interface the new active one [ 719.449429][T27366] bridge8: entered promiscuous mode [ 719.488194][T27366] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 719.736543][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5525'. [ 719.835973][T27375] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5525'. [ 719.836007][T27376] netlink: 'syz.4.5525': attribute type 20 has an invalid length. [ 719.862737][T27376] IPv6: NLM_F_CREATE should be specified when creating new route [ 720.065067][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5531'. [ 720.740652][T27410] openvswitch: netlink: Message has 4 unknown bytes. [ 721.115058][T27420] ip6erspan0: entered promiscuous mode [ 721.120620][T27420] ip6erspan0: entered allmulticast mode [ 721.837470][T27460] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 722.981844][T27524] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.008441][T27524] syzkaller0: entered promiscuous mode [ 723.013988][T27524] syzkaller0: entered allmulticast mode [ 723.023012][T27524] __nla_validate_parse: 45 callbacks suppressed [ 723.023034][T27524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5569'. [ 723.248813][T27530] netlink: 'syz.4.5572': attribute type 83 has an invalid length. [ 723.262808][T27531] netlink: 'syz.4.5572': attribute type 83 has an invalid length. [ 723.455742][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'. [ 723.532656][T27538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5575'. [ 723.649296][T27543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5577'. [ 723.926881][T27555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5583'. [ 724.156010][T27570] bond10: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 724.218134][T27570] bond10 (unregistering): Released all slaves [ 724.324094][T27583] netlink: 'syz.3.5592': attribute type 21 has an invalid length. [ 724.427705][T27583] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 724.453617][T27583] bond0 (unregistering): Released all slaves [ 724.538845][T27591] tipc: Enabling of bearer rejected, failed to enable media [ 724.566662][T27591] tipc: Failed to remove unknown binding: 66,1,1/1:3393482741/3393482743 [ 724.606089][T27596] tipc: Enabled bearer , priority 0 [ 724.636293][T27596] syzkaller0: entered promiscuous mode [ 724.641838][T27596] syzkaller0: entered allmulticast mode [ 724.659684][T27596] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 724.743171][T27599] tipc: Resetting bearer [ 724.868324][T27595] tipc: Resetting bearer [ 724.935096][T27595] tipc: Disabling bearer [ 724.974952][T27609] syzkaller0: entered promiscuous mode [ 724.980513][T27609] syzkaller0: entered allmulticast mode [ 725.033379][T27609] syzkaller1: entered promiscuous mode [ 725.038935][T27609] syzkaller1: entered allmulticast mode [ 725.168312][T27625] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 725.273889][T27624] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 725.751075][T27645] netlink: 'syz.4.5610': attribute type 1 has an invalid length. [ 725.772121][T27645] netlink: 'syz.4.5610': attribute type 3 has an invalid length. [ 725.795408][T27645] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5610'. [ 725.836419][T27645] NCSI netlink: No device for ifindex 813332851 [ 725.907074][T27651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5611'. [ 725.950845][T27651] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5611'. [ 725.962276][T27655] netlink: 'syz.2.5612': attribute type 2 has an invalid length. [ 725.972715][T27656] netlink: 'syz.3.5613': attribute type 39 has an invalid length. [ 726.145014][T27668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5616'. [ 726.216228][T27674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5618'. [ 726.240447][T27674] netlink: 'syz.2.5618': attribute type 11 has an invalid length. [ 726.445694][T27684] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 726.455734][T27683] netlink: 'syz.4.5620': attribute type 2 has an invalid length. [ 726.484428][T27683] netlink: 'syz.4.5620': attribute type 1 has an invalid length. [ 726.492712][T27683] netlink: 'syz.4.5620': attribute type 1 has an invalid length. [ 726.601438][T27689] atomic_op ffff88807c0dc998 conn xmit_atomic 0000000000000000 [ 726.791325][T27691] bond6: (slave veth0_to_bond): Releasing backup interface [ 726.883056][T27691] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 727.139809][T27711] xt_bpf: check failed: parse error [ 727.575144][T27737] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.787404][T27753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.804717][T10908] lo speed is unknown, defaulting to 1000 [ 728.163907][T27773] 8021q: VLANs not supported on ip_vti0 [ 728.349855][T27783] __nla_validate_parse: 5 callbacks suppressed [ 728.349875][T27783] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5653'. [ 730.065534][T27803] x_tables: unsorted underflow at hook 1 [ 730.071986][T27803] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5658'. [ 730.087175][T27803] x_tables: unsorted underflow at hook 1 [ 730.715753][T27745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.924433][T27816] bond10: invalid ARP target 0.0.0.0 specified for addition [ 730.939586][T27816] bond10: option arp_ip_target: invalid value (0) [ 730.957527][T27816] bond10 (unregistering): Released all slaves [ 731.121348][T27821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.805973][T27843] xt_TPROXY: Can be used only with -p tcp or -p udp [ 732.526888][T27881] validate_nla: 4 callbacks suppressed [ 732.526912][T27881] netlink: 'syz.0.5678': attribute type 30 has an invalid length. [ 732.674610][T27890] bridge_slave_1: left promiscuous mode [ 732.691569][T27890] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.704622][T27890] bridge_slave_0: left allmulticast mode [ 732.710345][T27890] bridge_slave_0: left promiscuous mode [ 732.716203][T27890] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.822113][T27896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5686'. [ 732.832279][T27896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5686'. [ 733.029115][T27902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5688'. [ 733.299711][T27907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5689'. [ 733.895355][T27923] x_tables: duplicate underflow at hook 2 [ 735.557586][T27875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.951632][T27937] netlink: 768 bytes leftover after parsing attributes in process `syz.1.5697'. [ 736.050476][T27933] syzkaller0: entered promiscuous mode [ 736.080741][T27933] syzkaller0: entered allmulticast mode [ 736.178451][T27943] netlink: 'syz.3.5700': attribute type 21 has an invalid length. [ 736.186933][T27943] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.194809][T27943] netlink: 'syz.3.5700': attribute type 1 has an invalid length. [ 736.209760][T27943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5700'. [ 736.376907][T27961] netlink: 'syz.2.5702': attribute type 1 has an invalid length. [ 736.394612][T27961] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5702'. [ 736.415381][T27962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5700'. [ 736.424512][T27962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5700'. [ 736.710459][T27976] tipc: Enabling of bearer rejected, failed to enable media [ 736.795857][T27976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5709'. [ 737.354131][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 737.363271][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 737.405358][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 737.415196][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 737.650131][T28002] dvmrp0: entered allmulticast mode [ 739.967270][T28120] tipc: Enabling of bearer rejected, failed to enable media [ 739.991072][T28118] netlink: 'syz.0.5756': attribute type 3 has an invalid length. [ 740.126325][T28123] syzkaller1: entered promiscuous mode [ 740.134058][T28123] syzkaller1: entered allmulticast mode [ 740.152976][T28123] netlink: 'syz.3.5758': attribute type 1 has an invalid length. [ 740.597329][T28144] netlink: 'syz.1.5765': attribute type 32 has an invalid length. [ 741.382991][T28172] ipt_REJECT: TCP_RESET invalid for non-tcp [ 741.455120][T28184] syzkaller0: entered promiscuous mode [ 741.477765][T28184] syzkaller0: entered allmulticast mode [ 741.506009][T28184] TC_ACT_REPEAT abuse ? [ 741.724162][T28195] bridge_slave_1: left promiscuous mode [ 741.742307][T28195] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.782858][T28195] bridge_slave_0: left allmulticast mode [ 741.813967][T28195] bridge_slave_0: left promiscuous mode [ 741.841988][T28195] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.138979][T28214] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 742.167286][T28215] __nla_validate_parse: 112 callbacks suppressed [ 742.167307][T28215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5785'. [ 742.204680][T28219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5786'. [ 742.238017][T28219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5786'. [ 742.540464][T28239] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5790'. [ 742.955968][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5800'. [ 743.211201][T28279] tipc: Enabling of bearer rejected, failed to enable media [ 743.334877][T28289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5805'. [ 743.739176][T28302] netlink: 'syz.1.5809': attribute type 1 has an invalid length. [ 743.748333][T28302] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5809'. [ 743.985164][T28318] netlink: 61 bytes leftover after parsing attributes in process `syz.4.5818'. [ 744.019461][T28318] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5818'. [ 744.227011][T28327] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 744.235778][T28327] bond7: option packets_per_slave: allowed values 0 - 65535 [ 744.252857][T28327] bond7 (unregistering): Released all slaves [ 744.730161][T28349] dvmrp0: left allmulticast mode [ 744.745189][T28349] vlan1: left allmulticast mode [ 744.754176][T28349] veth0_vlan: left allmulticast mode [ 744.800605][T28350] smc: net device team0 applied user defined pnetid SYZ2 [ 744.835229][T28345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5825'. [ 745.028939][T16801] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.051771][T16801] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.189912][T28370] netlink: 'syz.3.5832': attribute type 1 has an invalid length. [ 745.197963][T28370] netlink: 'syz.3.5832': attribute type 4 has an invalid length. [ 745.207667][T28370] netlink: 'syz.3.5832': attribute type 1 has an invalid length. [ 745.221882][T28370] netlink: 'syz.3.5832': attribute type 4 has an invalid length. [ 745.350432][T28380] netlink: 'syz.4.5834': attribute type 58 has an invalid length. [ 747.538938][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 747.982114][T28360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.212637][T28405] netlink: 'syz.2.5840': attribute type 1 has an invalid length. [ 748.240305][T28405] __nla_validate_parse: 3 callbacks suppressed [ 748.240323][T28405] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5840'. [ 748.671791][T28427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 748.740286][T28427] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 748.762668][T28427] gretap2: entered promiscuous mode [ 748.779768][T28427] gretap2: entered allmulticast mode [ 748.793514][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 748.824463][T28437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5851'. [ 748.839284][T28437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5851'. [ 748.851561][T28435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5850'. [ 748.877533][T28435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5850'. [ 748.988707][T28437] bond3: option all_slaves_active: invalid value (222) [ 749.006539][T28441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5853'. [ 749.046996][T28437] bond3 (unregistering): Released all slaves [ 749.401483][T28463] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5857'. [ 749.437964][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5858'. [ 749.457238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.498877][T28465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5858'. [ 750.071922][T28497] veth1_vlan: entered promiscuous mode [ 750.093712][T28497] macvlan0: entered promiscuous mode [ 750.263400][T28512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.270772][T28512] IPv6: NLM_F_CREATE should be set when creating new route [ 750.278120][T28512] IPv6: NLM_F_CREATE should be set when creating new route [ 751.352398][T28580] netlink: 'syz.0.5888': attribute type 2 has an invalid length. [ 751.477463][T28586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.919944][T28609] xt_policy: output policy not valid in PREROUTING and INPUT [ 751.928013][T28611] xt_policy: output policy not valid in PREROUTING and INPUT [ 751.963252][T28612] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 752.060081][T28613] netlink: 'syz.4.5899': attribute type 1 has an invalid length. [ 752.085672][T28613] netlink: 'syz.4.5899': attribute type 1 has an invalid length. [ 752.244130][T28622] team0: entered promiscuous mode [ 752.260308][T28622] team_slave_0: entered promiscuous mode [ 752.273711][T28622] team_slave_1: entered promiscuous mode [ 752.296026][T28622] team0: left promiscuous mode [ 752.302575][T28622] team_slave_0: left promiscuous mode [ 752.312945][T28622] team_slave_1: left promiscuous mode [ 752.542951][T28639] netlink: 'syz.1.5907': attribute type 11 has an invalid length. [ 753.134418][T28673] xt_hashlimit: size too large, truncated to 1048576 [ 753.314304][T28682] __nla_validate_parse: 9 callbacks suppressed [ 753.314325][T28682] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5923'. [ 753.939916][T28711] xt_hashlimit: size too large, truncated to 1048576 [ 754.163751][T23499] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.184724][T23499] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.197329][T23499] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.215639][T23499] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.226156][T23499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 754.588673][T28726] veth0_macvtap: entered allmulticast mode [ 754.605164][T28726] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 754.673352][T28726] syzkaller1: entered promiscuous mode [ 754.680612][T28726] syzkaller1: entered allmulticast mode [ 754.846167][T28738] x_tables: duplicate underflow at hook 2 [ 754.890948][T28739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.086188][T28744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5939'. [ 755.305030][T28761] netlink: 'syz.0.5941': attribute type 1 has an invalid length. [ 755.322997][T28761] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5941'. [ 755.532357][T28768] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 755.612928][T28716] lo speed is unknown, defaulting to 1000 [ 755.754987][T28780] IPVS: length: 159 != 8 [ 756.044440][T20796] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.090118][T20796] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.136073][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5948'. [ 756.174980][T20796] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.259384][T23499] Bluetooth: hci3: command tx timeout [ 756.279886][T20796] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.335098][T16801] bridge_slave_1: left promiscuous mode [ 756.351335][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.399391][T28798] netlink: 'syz.3.5949': attribute type 1 has an invalid length. [ 756.420909][T16801] bridge_slave_0: left allmulticast mode [ 756.435104][T16801] bridge_slave_0: left promiscuous mode [ 756.445602][T28798] netlink: 756 bytes leftover after parsing attributes in process `syz.3.5949'. [ 756.456511][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.840869][T16801] bond1 (unregistering): (slave gretap1): Releasing active interface [ 756.873497][T16801] bond4 (unregistering): (slave gretap2): Releasing active interface [ 757.044729][T16801] bond8 (unregistering): (slave bridge4): Releasing active interface [ 757.093781][T16801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.104413][T16801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.115287][T16801] bond0 (unregistering): (slave bond5): Releasing backup interface [ 757.127393][T16801] bond0 (unregistering): Released all slaves [ 757.140839][T16801] bond1 (unregistering): Released all slaves [ 757.160792][T16801] bond2 (unregistering): Released all slaves [ 757.182433][T16801] bond3 (unregistering): Released all slaves [ 757.202130][T16801] bond4 (unregistering): Released all slaves [ 757.220852][T16801] bond5 (unregistering): Released all slaves [ 757.247846][T16801] bond6 (unregistering): Released all slaves [ 757.265883][T16801] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 757.279760][T16801] bond7 (unregistering): Released all slaves [ 757.297209][T16801] bond8 (unregistering): Released all slaves [ 757.316432][T16801] bond9 (unregistering): Released all slaves [ 757.332980][T16801] bond10 (unregistering): Released all slaves [ 757.358244][T16801] bond11 (unregistering): Released all slaves [ 757.806782][T28832] syzkaller1: entered promiscuous mode [ 757.830519][T28832] syzkaller1: entered allmulticast mode [ 757.844670][T16801] tipc: Left network mode [ 757.907531][T28832] syzkaller1: left promiscuous mode [ 757.957304][T28832] syzkaller1: left allmulticast mode [ 758.200300][T28861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5963'. [ 758.219843][T28862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5963'. [ 758.308125][T28868] netlink: 'syz.3.5964': attribute type 1 has an invalid length. [ 758.344781][T23499] Bluetooth: hci3: command tx timeout [ 758.469014][T28854] bridge_slave_1: left allmulticast mode [ 758.488581][T28854] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 758.689469][T28868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.829620][T28870] bond0: (slave veth3): Enslaving as an active interface with a down link [ 758.909463][T28893] xt_hashlimit: size too large, truncated to 1048576 [ 758.947864][T28894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5968'. [ 759.038378][T28898] netlink: zone id is out of range [ 759.179898][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 759.289896][T28899] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 759.368119][T28912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5972'. [ 760.121057][T28716] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.131840][T28936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5978'. [ 760.168218][T28716] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.205369][T28716] bridge_slave_0: entered allmulticast mode [ 760.231262][T28944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5979'. [ 760.258669][T28716] bridge_slave_0: entered promiscuous mode [ 760.292139][T28716] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.314481][T28716] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.352069][T28716] bridge_slave_1: entered allmulticast mode [ 760.398277][T28716] bridge_slave_1: entered promiscuous mode [ 760.417250][T21287] Bluetooth: hci3: command tx timeout [ 760.699850][T28716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.747612][T28716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.792213][T16801] veth1_vlan: left promiscuous mode [ 761.632479][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 761.639924][T28983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5989'. [ 761.744965][T28716] team0: Port device team_slave_0 added [ 761.759348][T28995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5991'. [ 761.782179][T28716] team0: Port device team_slave_1 added [ 761.811884][T28996] x_tables: unsorted underflow at hook 3 [ 762.017402][T23499] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 762.029891][T29005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.080058][T28716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.104675][T28716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.165587][T28716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.218635][T28716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.228113][T28716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.309751][T28716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.495826][T23499] Bluetooth: hci3: command tx timeout [ 762.515117][T28716] hsr_slave_0: entered promiscuous mode [ 762.532395][T29020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5999'. [ 762.550990][T28716] hsr_slave_1: entered promiscuous mode [ 763.382808][T28716] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.701788][T29061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6007'. [ 763.757773][T29061] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6007'. [ 763.812158][T29061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6007'. [ 763.836837][T28716] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.762540][T28716] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.943297][T29119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6015'. [ 765.005050][T28716] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.232119][T29080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.248377][T29127] netlink: 'syz.3.6016': attribute type 2 has an invalid length. [ 767.317108][T28716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 767.366112][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.374410][T28716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 767.448589][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.465076][T28716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 767.513429][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.617983][T28716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 767.642642][T28716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.729526][T29215] netlink: 'syz.3.6021': attribute type 10 has an invalid length. [ 767.777521][T29204] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6018'. [ 767.792460][T29215] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.810576][T29215] : (slave team0): Enslaving as an active interface with an up link [ 768.071456][T28716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.143969][T29230] netlink: 'syz.2.6025': attribute type 1 has an invalid length. [ 768.158443][T29230] netlink: 'syz.2.6025': attribute type 4 has an invalid length. [ 768.169811][T29230] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6025'. [ 768.182170][T28716] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.242641][T20796] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.249943][T20796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.372629][T29242] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 768.408318][T20796] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.415687][T20796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.626753][T29256] netlink: 'syz.1.6031': attribute type 3 has an invalid length. [ 769.420031][T29299] xt_NFQUEUE: number of total queues is 0 [ 769.446766][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 769.465860][T29299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6038'. [ 769.667848][T29299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 769.686373][T29299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6038'. [ 769.700560][T29310] bridge9: entered promiscuous mode [ 769.708923][T29310] bridge9: entered allmulticast mode [ 769.720084][T29310] team0: Port device bridge9 added [ 770.186869][T28716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.568961][T29353] xt_TCPMSS: Only works on TCP SYN packets [ 770.608782][T29351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6048'. [ 771.069162][T28716] veth0_vlan: entered promiscuous mode [ 771.114305][T28716] veth1_vlan: entered promiscuous mode [ 771.243053][T28716] veth0_macvtap: entered promiscuous mode [ 771.279495][T28716] veth1_macvtap: entered promiscuous mode [ 771.306153][T29378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6055'. [ 771.363121][T29378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6055'. [ 771.388111][T28716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.424053][T28716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.464356][T20798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.490512][T20798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.542525][T20798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.557226][T20798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.687844][T29390] xt_hashlimit: size too large, truncated to 1048576 [ 771.864821][T20798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.897840][T20798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.991931][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.005388][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.267179][T29403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6063'. [ 772.785217][T29418] nbd: must specify a size in bytes for the device [ 772.794762][T29418] netlink: 'syz.4.6066': attribute type 3 has an invalid length. [ 772.832333][T29423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6067'. [ 773.689386][T29438] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.727779][T29444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6076'. [ 773.746583][T29444] block nbd2: Unsupported socket: should be TCP or UNIX. [ 774.408207][T29475] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 775.122372][T21287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 775.143470][T21287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 775.161177][T21287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 775.176970][T21287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 775.190829][T21287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 775.357695][T29503] Cannot find del_set index 3 as target [ 775.847968][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6097'. [ 775.895123][T29516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6095'. [ 775.993449][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6097'. [ 776.278916][T20798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.291719][T20798] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.321956][T29528] gre0: Master is either lo or non-ether device [ 776.435903][T29541] netlink: 'syz.1.6103': attribute type 1 has an invalid length. [ 776.554595][T20798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.567839][T20798] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.623848][T29548] netdevsim netdevsim4: Direct firmware load for .. failed with error -2 [ 776.644268][T29497] lo speed is unknown, defaulting to 1000 [ 776.660437][T29548] netdevsim netdevsim4: Falling back to sysfs fallback for: .. [ 776.724402][T29554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6107'. [ 776.757732][T29555] xt_cluster: node mask cannot exceed total number of nodes [ 776.794173][T20798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.813021][T29558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6107'. [ 776.828631][T20798] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.848153][T29557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6107'. [ 777.034378][T20798] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.046268][T20798] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.296740][T23499] Bluetooth: hci5: command tx timeout [ 777.346331][T29568] bond7: option min_links: invalid value (18446744073709551614) [ 777.354210][T29568] bond7: option min_links: allowed values 0 - 2147483647 [ 777.363742][T29571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6111'. [ 777.374436][T29568] bond7 (unregistering): Released all slaves [ 777.584661][T29583] bridge0: left allmulticast mode [ 777.630204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 777.647227][T29583] bridge4: left allmulticast mode [ 777.681085][T29583] gre2: left allmulticast mode [ 777.693357][T29586] wg2: Caught tx_queue_len zero misconfig [ 777.720868][T20793] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.866181][T10989] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.950247][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6117'. [ 778.002445][ T1027] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.055998][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.094381][T29604] tipc: Enabling of bearer rejected, failed to enable media [ 778.130374][ T1027] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.703373][T29638] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6124'. [ 778.721038][T29645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6126'. [ 778.754704][T29647] netlink: 'syz.1.6129': attribute type 1 has an invalid length. [ 779.053226][T20798] bond1 (unregistering): (slave gretap1): Releasing active interface [ 779.233078][T20798] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 779.253749][T20798] bridge3 (unregistering): left promiscuous mode [ 779.260519][T20798] bridge3 (unregistering): left allmulticast mode [ 779.306309][T20798] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 779.315131][T20798] bridge7 (unregistering): left promiscuous mode [ 779.327045][T20798] bridge7 (unregistering): left allmulticast mode [ 779.339726][T20798] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 779.348542][T20798] bridge8 (unregistering): left promiscuous mode [ 779.361797][T20798] bond10 (unregistering): (slave bridge0): Releasing backup interface [ 779.376072][T23499] Bluetooth: hci5: command tx timeout [ 779.384075][T20798] team0: Port device bridge9 removed [ 779.403470][T20798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.415651][T20798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.428412][T20798] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 779.440023][T20798] bond0 (unregistering): Released all slaves [ 779.455146][T20798] bond1 (unregistering): Released all slaves [ 779.473356][T20798] bond2 (unregistering): Released all slaves [ 779.491511][T20798] bond3 (unregistering): Released all slaves [ 779.517633][T20798] bond4 (unregistering): Released all slaves [ 779.535698][T20798] bond5 (unregistering): Released all slaves [ 779.561401][T20798] bond6 (unregistering): Released all slaves [ 779.582984][T20798] bond7 (unregistering): Released all slaves [ 779.600878][T20798] bond8 (unregistering): Released all slaves [ 779.625960][T20798] bond9 (unregistering): Released all slaves [ 779.642940][T20798] bond10 (unregistering): Released all slaves [ 779.988560][T20798] tipc: Left network mode [ 780.349800][T29677] bridge0: port 3(ipvlan2) entered blocking state [ 780.380291][T29677] bridge0: port 3(ipvlan2) entered disabled state [ 780.433597][T29677] ipvlan2: entered allmulticast mode [ 780.449999][T29677] bridge0: entered allmulticast mode [ 780.486299][T29677] ipvlan2: left allmulticast mode [ 780.514038][T29677] bridge0: left allmulticast mode [ 780.991899][T29708] __nla_validate_parse: 1 callbacks suppressed [ 780.991921][T29708] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6142'. [ 781.327566][T29497] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.343294][T29497] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.366080][T29497] bridge_slave_0: entered allmulticast mode [ 781.374357][T29497] bridge_slave_0: entered promiscuous mode [ 781.435308][T29497] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.458719][T23499] Bluetooth: hci5: command tx timeout [ 781.464958][T29497] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.494279][T29497] bridge_slave_1: entered allmulticast mode [ 781.533778][T29497] bridge_slave_1: entered promiscuous mode [ 781.570365][T29711] netlink: 'syz.0.6143': attribute type 1 has an invalid length. [ 781.799904][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 781.836170][T29497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.891143][T29497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.051796][T29497] team0: Port device team_slave_0 added [ 782.093400][T29497] team0: Port device team_slave_1 added [ 782.191068][T29754] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6153'. [ 782.251327][T29758] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6153'. [ 782.273824][T29497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.295718][T29497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.371965][T29497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.423278][T29497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.465538][T29497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.508063][T29497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.561773][T29767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6155'. [ 782.695075][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6158'. [ 782.922483][T29784] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6159'. [ 783.023595][T29786] netlink: 'syz.3.6159': attribute type 1 has an invalid length. [ 783.161914][T29786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6159'. [ 783.211194][T29497] hsr_slave_0: entered promiscuous mode [ 783.232986][T29497] hsr_slave_1: entered promiscuous mode [ 783.263356][T29497] debugfs: 'hsr0' already exists in 'hsr' [ 783.294052][T29497] Cannot create hsr debugfs directory [ 783.537477][T23499] Bluetooth: hci5: command tx timeout [ 783.704173][T20798] hsr_slave_0: left promiscuous mode [ 783.713646][T20798] hsr_slave_1: left promiscuous mode [ 783.724286][T20798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.740057][T20798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.330041][T20798] team0 (unregistering): Port device team_slave_1 removed [ 784.370690][T20798] team0 (unregistering): Port device team_slave_0 removed [ 784.636029][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 785.240131][T29832] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 785.290838][T20793] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.298088][T20793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.469219][T29851] syzkaller0: entered promiscuous mode [ 785.491145][T29851] syzkaller0: entered allmulticast mode [ 785.569448][T20798] IPVS: stop unused estimator thread 0... [ 786.023894][T29875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6178'. [ 786.163030][T29497] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.258780][T29883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6179'. [ 786.570713][T29883] syzkaller0: entered promiscuous mode [ 786.595602][T29883] syzkaller0: entered allmulticast mode [ 786.701126][T29497] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.577017][T29916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6189'. [ 791.113444][T29908] veth0_to_bond: mtu less than device minimum [ 791.311829][T29497] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.504926][T29497] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.892910][T29497] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 791.923140][T29497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.940885][T29497] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 791.973181][T29497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.989125][T29497] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 792.001347][T29497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 792.012664][T29497] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 792.030207][T29497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 792.273300][T29497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.339205][T29497] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.394871][T29979] netlink: 'syz.3.6202': attribute type 18 has an invalid length. [ 792.422942][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.430233][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.457372][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.464682][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.742770][T29982] syzkaller0: entered promiscuous mode [ 792.759658][T29982] syzkaller0: entered allmulticast mode [ 792.931813][T29982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6203'. [ 792.979236][T29982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6203'. [ 793.016378][T29982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6203'. [ 793.138245][T30003] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6208'. [ 793.163242][T30003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6208'. [ 793.454466][T30009] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 793.519969][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.527321][T10989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.872439][T30038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6216'. [ 794.116685][T30043] lo speed is unknown, defaulting to 1000 [ 794.240320][T30054] netlink: 'syz.4.6219': attribute type 16 has an invalid length. [ 794.262693][T30054] netlink: 'syz.4.6219': attribute type 17 has an invalid length. [ 794.402932][T30052] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.441746][T30052] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.773015][T30054] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.780351][T30054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.839020][T30054] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.846542][T30054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.137543][T30054] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 795.207215][T30095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6227'. [ 795.236832][T29497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.248515][T30095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6227'. [ 795.732393][T29497] veth0_vlan: entered promiscuous mode [ 795.782815][T29497] veth1_vlan: entered promiscuous mode [ 795.961244][T29497] veth0_macvtap: entered promiscuous mode [ 796.020472][T29497] veth1_macvtap: entered promiscuous mode [ 796.120824][T29497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.188851][T29497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.247483][T20798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.304515][T20798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.340136][T20798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.379182][T20798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.439201][T30136] x_tables: duplicate underflow at hook 1 [ 796.463752][T30136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6235'. [ 796.486984][T30136] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6235'. [ 796.501537][T30136] netlink: 'syz.3.6235': attribute type 5 has an invalid length. [ 796.711347][T20795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.742738][T20795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.920416][T20798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.959043][T20798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.162213][T30158] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 797.183146][T30158] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 797.256003][T30168] tipc: Started in network mode [ 797.271314][T30168] tipc: Node identity aaaaaaaaaa22, cluster identity 4711 [ 797.280537][T30168] tipc: Enabled bearer , priority 10 [ 797.583775][T30176] syzkaller0: entered promiscuous mode [ 797.614060][T30176] syzkaller0: entered allmulticast mode [ 797.731938][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807a4dc000: rx timeout, send abort [ 797.740913][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807a4dc000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 797.855367][T30191] netlink: 'syz.4.6248': attribute type 1 has an invalid length. [ 797.989094][T30204] Cannot find map_set index 135 as target [ 798.023224][T30191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 798.123858][T30216] __nla_validate_parse: 4 callbacks suppressed [ 798.123880][T30216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6254'. [ 798.156328][T30216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.286602][T10911] tipc: Node number set to 8956586 [ 798.561980][T30231] syzkaller0: entered promiscuous mode [ 798.582493][T30231] syzkaller0: entered allmulticast mode [ 798.600388][T30235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6262'. [ 798.651862][T30238] netlink: 'syz.3.6262': attribute type 21 has an invalid length. [ 798.661371][T30238] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6262'. [ 798.887848][T30216] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6254'. [ 798.915698][T30216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6254'. [ 798.925296][T30244] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6264'. [ 799.320119][T30262] netlink: 'syz.4.6269': attribute type 1 has an invalid length. [ 799.815307][T30288] netlink: 'syz.4.6279': attribute type 2 has an invalid length. [ 799.877775][T30295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6278'. [ 799.888599][T30288] : entered promiscuous mode [ 799.895551][T30295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6278'. [ 799.927839][T30288] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 799.931108][T30297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6278'. [ 799.956329][T30297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6278'. [ 799.990831][T30288] batman_adv: batadv0: Adding interface: gretap1 [ 800.008947][T30288] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.039855][T30288] batman_adv: batadv0: Interface activated: gretap1 [ 800.150703][T30314] bond0: ARP target 8.4.0.0 is already present [ 800.184511][T30314] bond0: option arp_ip_target: invalid value (1032) [ 800.489859][T16804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 800.513532][T21287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 800.531440][T21287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 800.541740][T21287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 800.550384][T21287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 800.567436][T21287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 800.607596][T30139] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 800.616519][T16804] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 800.779236][T30336] tcf_pedit_act: 7 callbacks suppressed [ 800.779261][T30336] tc action pedit 'at' offset 9 out of bounds [ 800.992650][ T5764] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 801.206331][ T5764] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 801.361192][T30365] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 801.441017][T20795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.667540][T20795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.682641][T30382] IPVS: length: 134 != 8 [ 801.914275][T20795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.972721][T30329] lo speed is unknown, defaulting to 1000 [ 802.080735][T20795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.284799][T30404] gretap2: entered promiscuous mode [ 802.306615][T30404] batman_adv: batadv0: Adding interface: gretap2 [ 802.316664][T30404] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 802.542435][T20798] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.578974][T30411] netlink: 'syz.4.6310': attribute type 1 has an invalid length. [ 802.656273][T21287] Bluetooth: hci1: command tx timeout [ 802.700795][ T1027] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.821776][T20798] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.830575][T20798] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.395393][T21287] block nbd2: Receive control failed (result -1) [ 803.424281][T21287] [ 803.426685][T21287] ====================================================== [ 803.433740][T21287] WARNING: possible circular locking dependency detected [ 803.440810][T21287] syzkaller #0 Not tainted [ 803.445350][T21287] ------------------------------------------------------ [ 803.452420][T21287] kworker/u9:1/21287 is trying to acquire lock: [ 803.458682][T21287] ffff88807feec5e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 803.468249][T21287] [ 803.468249][T21287] but task is already holding lock: [ 803.475631][T21287] ffff888029b65468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 803.484617][T21287] [ 803.484617][T21287] which lock already depends on the new lock. [ 803.484617][T21287] [ 803.495048][T21287] [ 803.495048][T21287] the existing dependency chain (in reverse order) is: [ 803.504105][T21287] [ 803.504105][T21287] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 803.511797][T21287] __mutex_lock+0x19d/0x1550 [ 803.517215][T21287] nbd_queue_rq+0x373/0x1150 [ 803.522399][T21287] blk_mq_dispatch_rq_list+0x499/0x1990 [ 803.528733][T21287] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 803.535947][T21287] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 803.542486][T21287] blk_mq_run_work_fn+0x16c/0x300 [ 803.548143][T21287] process_scheduled_works+0xa8e/0x14e0 [ 803.554235][T21287] worker_thread+0xa47/0xfb0 [ 803.559381][T21287] kthread+0x388/0x470 [ 803.563994][T21287] ret_from_fork+0x514/0xb70 [ 803.569254][T21287] ret_from_fork_asm+0x1a/0x30 [ 803.574576][T21287] [ 803.574576][T21287] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 803.581818][T21287] __mutex_lock+0x19d/0x1550 [ 803.586957][T21287] nbd_queue_rq+0xc1/0x1150 [ 803.592007][T21287] blk_mq_dispatch_rq_list+0x499/0x1990 [ 803.598122][T21287] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 803.604995][T21287] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 803.611520][T21287] blk_mq_run_work_fn+0x16c/0x300 [ 803.617088][T21287] process_scheduled_works+0xa8e/0x14e0 [ 803.623184][T21287] worker_thread+0xa47/0xfb0 [ 803.628319][T21287] kthread+0x388/0x470 [ 803.632934][T21287] ret_from_fork+0x514/0xb70 [ 803.638066][T21287] ret_from_fork_asm+0x1a/0x30 [ 803.643458][T21287] [ 803.643458][T21287] -> #4 (set->srcu){.+.+}-{0:0}: [ 803.650604][T21287] __synchronize_srcu+0xc9/0x2f0 [ 803.656082][T21287] elevator_switch+0x1e8/0x7b0 [ 803.661517][T21287] elevator_change+0x2fa/0x480 [ 803.666833][T21287] elevator_set_default+0x375/0x440 [ 803.672578][T21287] blk_register_queue+0x3f3/0x4e0 [ 803.678282][T21287] __add_disk+0x6cb/0xe30 [ 803.683186][T21287] add_disk_fwnode+0xfb/0x4b0 [ 803.688405][T21287] nbd_dev_add+0x733/0xb60 [ 803.693367][T21287] nbd_init+0x15f/0x1e0 [ 803.698151][T21287] do_one_initcall+0x250/0x870 [ 803.703477][T21287] do_initcall_level+0x10a/0x1a0 [ 803.709086][T21287] do_initcalls+0x59/0xa0 [ 803.713963][T21287] kernel_init_freeable+0x29d/0x3e0 [ 803.719708][T21287] kernel_init+0x1d/0x1d0 [ 803.724614][T21287] ret_from_fork+0x514/0xb70 [ 803.729752][T21287] ret_from_fork_asm+0x1a/0x30 [ 803.735086][T21287] [ 803.735086][T21287] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 803.742946][T21287] __mutex_lock+0x19d/0x1550 [ 803.748081][T21287] elevator_change+0x1af/0x480 [ 803.753404][T21287] elevator_set_none+0xb5/0x140 [ 803.758802][T21287] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 803.765147][T21287] nbd_start_device+0x189/0xb30 [ 803.770538][T21287] nbd_genl_connect+0x1597/0x1c10 [ 803.776106][T21287] genl_family_rcv_msg_doit+0x233/0x340 [ 803.782235][T21287] genl_rcv_msg+0x614/0x7a0 [ 803.787289][T21287] netlink_rcv_skb+0x226/0x4a0 [ 803.792596][T21287] genl_rcv+0x28/0x40 [ 803.797126][T21287] netlink_unicast+0x7bb/0x940 [ 803.802425][T21287] netlink_sendmsg+0x813/0xb40 [ 803.807731][T21287] sock_sendmsg_nosec+0x13a/0x180 [ 803.813303][T21287] ____sys_sendmsg+0x54e/0x850 [ 803.818605][T21287] ___sys_sendmsg+0x2a5/0x360 [ 803.823822][T21287] __x64_sys_sendmsg+0x1b1/0x290 [ 803.829299][T21287] do_syscall_64+0x174/0x580 [ 803.834426][T21287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.840858][T21287] [ 803.840858][T21287] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 803.849497][T21287] blk_alloc_queue+0x544/0x690 [ 803.854808][T21287] __blk_mq_alloc_disk+0x194/0x390 [ 803.860458][T21287] nbd_dev_add+0x494/0xb60 [ 803.865419][T21287] nbd_init+0x15f/0x1e0 [ 803.870119][T21287] do_one_initcall+0x250/0x870 [ 803.875430][T21287] do_initcall_level+0x10a/0x1a0 [ 803.880947][T21287] do_initcalls+0x59/0xa0 [ 803.885868][T21287] kernel_init_freeable+0x29d/0x3e0 [ 803.891635][T21287] kernel_init+0x1d/0x1d0 [ 803.896509][T21287] ret_from_fork+0x514/0xb70 [ 803.901642][T21287] ret_from_fork_asm+0x1a/0x30 [ 803.906954][T21287] [ 803.906954][T21287] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 803.914181][T21287] fs_reclaim_acquire+0x71/0x100 [ 803.919676][T21287] __kmalloc_noprof+0xbc/0x720 [ 803.925018][T21287] tls_sw_sendmsg+0x599/0x2860 [ 803.930443][T21287] sock_sendmsg_nosec+0x90/0x180 [ 803.935933][T21287] sock_sendmsg+0x1ca/0x2d0 [ 803.940982][T21287] splice_to_socket+0xb5e/0x12a0 [ 803.946491][T21287] direct_splice_actor+0x101/0x160 [ 803.952147][T21287] splice_direct_to_actor+0x57b/0xcb0 [ 803.958065][T21287] do_splice_direct+0x195/0x290 [ 803.963553][T21287] do_sendfile+0x52e/0x7c0 [ 803.968624][T21287] __se_sys_sendfile64+0x144/0x1a0 [ 803.974290][T21287] do_syscall_64+0x174/0x580 [ 803.979433][T21287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.985896][T21287] [ 803.985896][T21287] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 803.994005][T21287] __lock_acquire+0x1520/0x2cf0 [ 803.999397][T21287] lock_acquire+0x106/0x350 [ 804.004439][T21287] lock_sock_nested+0x41/0x100 [ 804.009749][T21287] inet_shutdown+0x6a/0x390 [ 804.014801][T21287] nbd_mark_nsock_dead+0x2cb/0x550 [ 804.020459][T21287] recv_work+0x1cee/0x1e10 [ 804.025428][T21287] process_scheduled_works+0xa8e/0x14e0 [ 804.031532][T21287] worker_thread+0xa47/0xfb0 [ 804.036671][T21287] kthread+0x388/0x470 [ 804.041279][T21287] ret_from_fork+0x514/0xb70 [ 804.046412][T21287] ret_from_fork_asm+0x1a/0x30 [ 804.051725][T21287] [ 804.051725][T21287] other info that might help us debug this: [ 804.051725][T21287] [ 804.061970][T21287] Chain exists of: [ 804.061970][T21287] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 804.061970][T21287] [ 804.075031][T21287] Possible unsafe locking scenario: [ 804.075031][T21287] [ 804.082496][T21287] CPU0 CPU1 [ 804.087878][T21287] ---- ---- [ 804.093260][T21287] lock(&nsock->tx_lock); [ 804.097698][T21287] lock(&cmd->lock); [ 804.104304][T21287] lock(&nsock->tx_lock); [ 804.111258][T21287] lock(sk_lock-AF_INET6-NBD); [ 804.116133][T21287] [ 804.116133][T21287] *** DEADLOCK *** [ 804.116133][T21287] [ 804.124294][T21287] 3 locks held by kworker/u9:1/21287: [ 804.129715][T21287] #0: ffff88802737b940 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 804.141093][T21287] #1: ffffc900069dfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 804.152885][T21287] #2: ffff888029b65468 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 804.162238][T21287] [ 804.162238][T21287] stack backtrace: [ 804.168145][T21287] CPU: 0 UID: 0 PID: 21287 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 804.168167][T21287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 804.168181][T21287] Workqueue: nbd2-recv recv_work [ 804.168205][T21287] Call Trace: [ 804.168214][T21287] [ 804.168222][T21287] dump_stack_lvl+0xe8/0x150 [ 804.168243][T21287] print_circular_bug+0x2e1/0x300 [ 804.168268][T21287] check_noncircular+0x12e/0x150 [ 804.168294][T21287] __lock_acquire+0x1520/0x2cf0 [ 804.168318][T21287] ? irqentry_exit+0x218/0x8f0 [ 804.168347][T21287] ? lockdep_hardirqs_on+0x7a/0x110 [ 804.168375][T21287] ? inet_shutdown+0x6a/0x390 [ 804.168401][T21287] lock_acquire+0x106/0x350 [ 804.168417][T21287] ? inet_shutdown+0x6a/0x390 [ 804.168449][T21287] lock_sock_nested+0x41/0x100 [ 804.168473][T21287] ? inet_shutdown+0x6a/0x390 [ 804.168500][T21287] inet_shutdown+0x6a/0x390 [ 804.168527][T21287] nbd_mark_nsock_dead+0x2cb/0x550 [ 804.168549][T21287] recv_work+0x1cee/0x1e10 [ 804.168577][T21287] ? lockdep_unlock+0x5d/0xd0 [ 804.168591][T21287] ? __lock_acquire+0x13e8/0x2cf0 [ 804.168612][T21287] ? __pfx_recv_work+0x10/0x10 [ 804.168636][T21287] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 804.168662][T21287] ? process_scheduled_works+0xa20/0x14e0 [ 804.168692][T21287] ? rcu_is_watching+0x15/0xb0 [ 804.168714][T21287] ? process_scheduled_works+0xa20/0x14e0 [ 804.168738][T21287] process_scheduled_works+0xa8e/0x14e0 [ 804.168774][T21287] ? __pfx_process_scheduled_works+0x10/0x10 [ 804.168802][T21287] ? assign_work+0x3cf/0x5d0 [ 804.168827][T21287] worker_thread+0xa47/0xfb0 [ 804.168858][T21287] ? __kthread_parkme+0x71/0x1f0 [ 804.168894][T21287] kthread+0x388/0x470 [ 804.168913][T21287] ? __pfx_worker_thread+0x10/0x10 [ 804.168937][T21287] ? __pfx_kthread+0x10/0x10 [ 804.168955][T21287] ret_from_fork+0x514/0xb70 [ 804.168975][T21287] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 804.168994][T21287] ? __switch_to+0xc89/0x1420 [ 804.169022][T21287] ? __pfx_kthread+0x10/0x10 [ 804.169041][T21287] ret_from_fork_asm+0x1a/0x30 [ 804.169069][T21287] [ 804.388289][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 804.417087][T20795] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 804.428623][T20795] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 804.475125][T20795] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 46:0b:6e:88:0e:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 804.735530][T21287] Bluetooth: hci1: command tx timeout [ 804.763085][T20795] bond3 (unregistering): (slave bridge2): Releasing active interface [ 804.789292][T20795] bridge2 (unregistering): left allmulticast mode [ 804.801829][T20795] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 804.821667][T20795] bridge3 (unregistering): left promiscuous mode [ 804.882697][T20795] bond1 (unregistering): Released all slaves [ 804.899642][T20795] bond2 (unregistering): Released all slaves [ 804.912494][T20795] bond3 (unregistering): Released all slaves [ 804.923564][T20795] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 804.933158][T20795] bond4 (unregistering): Released all slaves [ 804.949493][T20795] bond5 (unregistering): Released all slaves [ 804.961655][T20795] bond0 (unregistering): Released all slaves [ 804.973976][T20795] bond6 (unregistering): (slave veth5): Releasing backup interface [ 804.983385][T20795] bond6 (unregistering): Released all slaves [ 805.008490][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 805.145259][T20795] tipc: Left network mode [ 805.744580][T20795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.774487][T20795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.061153][T20795] team0 (unregistering): Port device team_slave_1 removed [ 806.073583][T20795] team0 (unregistering): Port device team_slave_0 removed [ 806.117301][T20795] smc: removing net device team0 with user defined pnetid SYZ2 [ 806.133766][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 806.407652][T20795] IPVS: stop unused estimator thread 0... [ 806.479471][T20795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.490145][T20795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.542441][T20795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.552990][T20795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.590879][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 806.604811][T20795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.615801][T20795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.741615][T20798] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.757684][T20798] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.777942][T10989] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.800400][T20790] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.823067][T20795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.889198][T20795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.944992][T20795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.991405][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 807.008203][T20795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.084921][T20790] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.112441][T20790] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.142639][T20790] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.160859][T20790] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.180455][T20795] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.222656][T20795] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.324424][T20795] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.362615][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 807.425347][T20795] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.502497][T10989] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.527657][T20792] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.554604][T20790] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.574542][T20790] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.585664][T20795] geneve0: left allmulticast mode [ 807.591193][T20795] geneve0: left promiscuous mode [ 807.598485][T20795] bridge0: port 3(geneve0) entered disabled state [ 807.607550][T20795] bridge_slave_1: left allmulticast mode [ 807.613337][T20795] bridge_slave_1: left promiscuous mode [ 807.621981][T20795] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.631276][T20795] bridge_slave_0: left allmulticast mode [ 807.637864][T20795] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.659265][T20795] bridge_slave_1: left allmulticast mode [ 807.665036][T20795] bridge_slave_1: left promiscuous mode [ 807.671230][T20795] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.680597][T20795] bridge_slave_0: left allmulticast mode [ 807.694848][T20795] bridge_slave_0: left promiscuous mode [ 807.704580][T20795] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.718228][T20795] bridge_slave_1: left allmulticast mode [ 807.723976][T20795] bridge_slave_1: left promiscuous mode [ 807.730344][T20795] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.740037][T20795] bridge_slave_0: left allmulticast mode [ 807.752833][T20795] bridge_slave_0: left promiscuous mode [ 807.759148][T20795] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.774521][T20795] batman_adv: batadv0: Interface deactivated: gretap1 [ 807.930647][T20795] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 807.940206][T20795] ip6gre1 (unregistering): left promiscuous mode [ 808.058853][T20795] bond2 (unregistering): (slave geneve2): Releasing active interface [ 808.112749][T20795]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.123943][T20795]  (unregistering): (slave team0): Releasing backup interface [ 808.133277][T20795]  (unregistering): Released all slaves [ 808.142804][T20795] bond1 (unregistering): Released all slaves [ 808.154175][T20795] bond2 (unregistering): Released all slaves [ 808.169638][T20795] bond3 (unregistering): Released all slaves [ 808.180555][T20795] bond4 (unregistering): Released all slaves [ 808.193706][T20795] bond5 (unregistering): Released all slaves [ 808.206489][T20795] bond6 (unregistering): Released all slaves [ 808.217499][T20795] bond7 (unregistering): Released all slaves [ 808.230052][T20795] bond8 (unregistering): Released all slaves [ 808.241217][T20795] bond9 (unregistering): Released all slaves [ 808.254124][T20795] bond0 (unregistering): (slave veth3): Releasing active interface [ 808.264888][T20795] bond0 (unregistering): Released all slaves [ 808.276807][T20795] bond10 (unregistering): Released all slaves [ 808.314181][T20795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.324966][T20795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.334935][T20795] bond0 (unregistering): Released all slaves [ 808.390351][T20795] batman_adv: batadv0: Removing interface: gretap1 [ 808.416444][T20795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.427736][T20795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.437718][T20795] bond0 (unregistering): Released all slaves [ 808.446448][T20795] bond1 (unregistering): Released all slaves [ 808.484121][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 808.653604][T20795] : left promiscuous mode [ 808.753163][T20795] tipc: Disabling bearer [ 808.759782][T20795] tipc: Left network mode [ 808.764654][T20795] tipc: Disabling bearer [ 808.771241][T20795] tipc: Left network mode [ 808.942861][ T5288] 8021q: adding VLAN 0 to HW filter on device eth7 [ 808.988091][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 809.345351][ T5288] 8021q: adding VLAN 0 to HW filter on device eth8 [ 809.742183][T20795] hsr_slave_0: left promiscuous mode [ 809.748271][T20795] hsr_slave_1: left promiscuous mode [ 809.757657][T20795] hsr_slave_0: left promiscuous mode [ 809.764340][T20795] hsr_slave_1: left promiscuous mode [ 809.770767][T20795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.778740][T20795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.788210][T20795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.796132][T20795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.806724][T20795] hsr_slave_0: left promiscuous mode [ 809.812719][T20795] hsr_slave_1: left promiscuous mode [ 809.818797][T20795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.826623][T20795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.834491][T20795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.842380][T20795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.859960][T20795] veth1_vlan: left promiscuous mode [ 809.865273][T20795] veth0_vlan: left promiscuous mode [ 809.871641][T20795] veth1_macvtap: left promiscuous mode [ 809.877348][T20795] veth0_macvtap: left promiscuous mode [ 809.882915][T20795] veth1_vlan: left promiscuous mode [ 809.888648][T20795] veth0_vlan: left promiscuous mode [ 809.894708][T20795] veth1_macvtap: left promiscuous mode [ 809.900441][T20795] veth0_macvtap: left promiscuous mode [ 809.906266][T20795] veth1_vlan: left promiscuous mode [ 809.911513][T20795] veth0_vlan: left promiscuous mode [ 810.149022][T20795] team0 (unregistering): Port device team_slave_1 removed [ 810.166498][T20795] team0 (unregistering): Port device team_slave_0 removed [ 810.313191][T20795] team0 (unregistering): Port device team_slave_1 removed [ 810.327099][T20795] team0 (unregistering): Port device team_slave_0 removed [ 810.450097][T20795] team0 (unregistering): Port device team_slave_1 removed [ 810.461915][T20795] team0 (unregistering): Port device team_slave_0 removed [ 810.533273][ T5288] 8021q: adding VLAN 0 to HW filter on device eth9 [ 811.056433][ T5288] 8021q: adding VLAN 0 to HW filter on device eth10 [ 811.189953][T20795] IPVS: stop unused estimator thread 0... [ 811.415246][ T5288] 8021q: adding VLAN 0 to HW filter on device eth11 [ 811.687487][ T5288] 8021q: adding VLAN 0 to HW filter on device eth12 [ 811.956808][ T5288] 8021q: adding VLAN 0 to HW filter on device eth13 [ 812.175624][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 812.235029][ T5288] 8021q: adding VLAN 0 to HW filter on device eth14 [ 812.505125][ T5288] 8021q: adding VLAN 0 to HW filter on device eth15 [ 812.800257][ T5288] 8021q: adding VLAN 0 to HW filter on device eth16