last executing test programs: 5.077352138s ago: executing program 1 (id=3457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0xfab16000) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}, [{{0x254, 0x1, {{0x0, 0x8}, 0x6, 0x7, 0xff, 0x8, 0x18, 'syz0\x00', "86bca39346212f86291651efda89f97eae0791a8937518b16a2af4d30592156d", "8a75bdacf9205e94b1affc4118e64c993c59ca1f8ac4bbb9fd263d6a7335d3e8", [{0x4, 0x8, {0xc14503c25b476f23, 0x3}}, {0x85, 0xd6, {0x1, 0x7}}, {0x3, 0x6, {0x3, 0x3}}, {0x40, 0x1, {0x2, 0x9}}, {0x1a9b, 0x4, {0x2, 0x4000000}}, {0xff, 0x6, {0x3, 0x6}}, {0xe7cd, 0x0, {0x2, 0x100}}, {0x2, 0x1, {0x3, 0x1000}}, {0x3, 0x3, {0x3, 0x401}}, {0xb5, 0x4, {0x0, 0x5}}, {0x8001, 0x80, {0x3, 0x3}}, {0x5, 0x0, {0x1}}, {0x0, 0x5, {0x1, 0x7f}}, {0x9, 0x7932, {0x1, 0x6}}, {0x1f8, 0x4, {0x1, 0x40}}, {0x7, 0x7, {0x1, 0x8001}}, {0x1, 0xead, {0x3, 0x7}}, {0x1, 0xfdf1, {0x2, 0x5}}, {0x9, 0x3, {0x1, 0x6}}, {0x1, 0xfff8, {0x1, 0xc68c}}, {0x4, 0x0, {0x3, 0xd9a}}, {0x7f, 0x6, {0x1, 0x9}}, {0x40, 0x3, {0x0, 0x8}}, {0x2, 0x4, {0x3, 0x3}}, {0xf3a2, 0x3f, {0x1, 0x7}}, {0x6, 0x7, {0x3, 0x4}}, {0x140, 0x45df, {0x0, 0x8}}, {0x5, 0xa, {0x0, 0x3}}, {0x40, 0x4, {0x2, 0x9}}, {0x0, 0xc5b, {0x1, 0x5}}, {0xd, 0x81d3, {0x2, 0xffffffc8}}, {0x7, 0xb0a, {0x1, 0x4}}, {0x0, 0x3, {0x0, 0x7}}, {0x1, 0x8, {0x2, 0xa}}, {0x0, 0x315, {0x3, 0x10}}, {0x8, 0x7, {0x2, 0x2}}, {0x7, 0x1, {0x3, 0x10000}}, {0xe4, 0x6, {0x1, 0x2}}, {0xffff, 0x7, {0xe8d95239bae06a34, 0x5}}, {0x6, 0x3, {0x1, 0x2821}}]}}}]}, 0x268}}, 0x840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) getsockopt(r0, 0xffff, 0x5, &(0x7f00000002c0), &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) syz_emit_ethernet(0x10b, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x38, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}, {@multicast2, 0x8}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x8, [{@local}, {@rand_addr=0x64010102, 0x6}]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x4, 0x46, 0x0, 0x1}]}}, "bc"}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="018042000001bbbbbbbbbbbb86dd6001044800203afffe800000000000000000000000000043fe8000000000000000000000000000aa8800907800000000fe8000000000000000000000000000bb020136dad83aea8d"], 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) shutdown(r5, 0x0) 4.797929505s ago: executing program 1 (id=3463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=r2, @ANYBLOB="cbc6f9379c53efcb65c4050000000018f784c51a221cd7b1686579b4b0832985491e328a3d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c085}, 0x8040) 4.437303913s ago: executing program 1 (id=3470): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_llcp(r0, &(0x7f0000000080)={0x27, r1, 0xffffffffffffffff, 0x3, 0x1, 0xfd, "57760d5682795d281e89a69b74e115ccee951abb610b920784191955e709bbbca0567f96c0655795eabd91f253334f9d89f393a4a5c640dde9f984c6f4d3ef", 0x3a}, 0x60) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r2) socket$inet6(0xa, 0x5, 0x81) (async) r3 = socket$inet6(0xa, 0x5, 0x81) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000001c0)={0x8, 0x1e, '\x00', [@generic={0x9, 0xa9, "df0a56390d22ca369c9b506d9f0bde9522830c242dfd1ef2163fff546a8a3c4a1b5e25e80e58b62496ca468fa4b93acd8c6257a0dfab015b5a11a1a54938c5e4bc2e5f2fabb528a9897c44d71b96e7a486cbe7a1c30c4b6482919444efb28aab45f835be5ec782c673572bbb1e9236a41da6eb7f8e6caac94dcb26a39ea4b9dc5a1488387d126d8bb31ea662fe84ada60aba47056c27f255fc8801c8a2f3bfc577f5e37fca947752b4"}, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x8, {0x3, 0x0, 0x40, 0x7}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x6, 0xa25c, [0x8000000000000000, 0x5]}}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x3a}, @pad1, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x5}]}, 0x100) ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f00000002c0)={0x80}) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f00000003c0)={&(0x7f0000000380)=[{0x1, 0x2, 0x0, {0x88, 0x80e1, 0x2}}, {0x4, 0x2, 0x0, {0xffffffff00000000, 0x1000, 0x1}}], 0x2, 0x20, 0x8}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) sendmsg$SEG6_CMD_DUMPHMAC(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xaa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000021) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000840)={0xf, {{0xa, 0x4e24, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, {{0xa, 0x4e21, 0x1000, @private2, 0x1ff}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000840)={0xf, {{0xa, 0x4e24, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, {{0xa, 0x4e21, 0x1000, @private2, 0x1ff}}}, 0x108) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000980)=@req={0x4, 0x9, 0x852, 0xffffffff}, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r6) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000840) (async) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008005}, 0x20000840) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000c80)={'pimreg1\x00', @ifru_map={0x0, 0x4, 0x8, 0x8, 0x5, 0x1}}) sendmsg$NFT_BATCH(r6, &(0x7f0000001200)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x6c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9100}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xfc, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xe5, 0x6, "1c10644e4eb7296a420bfe645ea049073a2f24e31ea11dcff8b9d9e7ba1bd93cf8d795127348ad2e66c70f32a0871472eb09b30dfd2ce286c1e4fe87eda5007198287013587c54f126351d4932f984057bb789009cd335ae209ba84468ad4fa0c21f0dd6180cd12c4dcffc64d256c6c6931f6121460231a5dc85a8504c387b0938d9b7b8051478131f6fcd36e0e0e33e72c8923b361ef73e5862ccc976f60f0276231dc1531697765716f43afe367538bd4654f9036224ecd1459bd88f8d7dd50b23d8cdaa85c968d82ee8451abdbeea0df12a0f0d01ed0ade6135b6222fd2e16a"}]}, @NFT_MSG_NEWCHAIN={0xf0, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x408}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3c0a5fd}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe59}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x539}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x1c4, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8001}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_USERDATA={0xb2, 0xd, 0x1, 0x0, "7d461b1a6dace563d8b8b81dd3544045793ea4682e0f74658f8c1cee13da7a100070e46c4e46ea089ce8ea99f03196764cb0a29503f5708eb7834962fd79d8e5159c87e8c9e3973292c0a94bd5623f83d41de8cf0f0743138ce8dbbaf848b470369d9c7a1f7d4b0acac0cc20738b71799b8939921c75f3444c116adab15389f1d09272e9de70b8f85a6f038702f6bed14dca36866343ff9f8c794d1e0864f26527349d19de435641f7aa545eb905"}, @NFTA_SET_USERDATA={0xbe, 0xd, 0x1, 0x0, "79420877f40e18c4164ba1f692b1ee03e2c1335fb3e5a4c1c5fa48f1c076dbe2ccb614fb6a370dfbbd8781b4025f6591d068754080730b8deb0cea6753668da0b44192a13ee7946b519e117872f4db1161b49f0ded6a8e6b6297b2f4e86b1212747266f3c5339d5ed3f9636d9a035e5771d0291eb6939dabafa030921449304015c38a9bd9a7216b5d12bf6640f1abb57f873c233b7c1af238841fe527a25a45d07619434569de6db00a09d205f65746077ef1c0627948a7b375"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x48c}, 0x1, 0x0, 0x0, 0x10}, 0x4090) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000001200)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELRULE={0x6c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9100}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xfc, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xe5, 0x6, "1c10644e4eb7296a420bfe645ea049073a2f24e31ea11dcff8b9d9e7ba1bd93cf8d795127348ad2e66c70f32a0871472eb09b30dfd2ce286c1e4fe87eda5007198287013587c54f126351d4932f984057bb789009cd335ae209ba84468ad4fa0c21f0dd6180cd12c4dcffc64d256c6c6931f6121460231a5dc85a8504c387b0938d9b7b8051478131f6fcd36e0e0e33e72c8923b361ef73e5862ccc976f60f0276231dc1531697765716f43afe367538bd4654f9036224ecd1459bd88f8d7dd50b23d8cdaa85c968d82ee8451abdbeea0df12a0f0d01ed0ade6135b6222fd2e16a"}]}, @NFT_MSG_NEWCHAIN={0xf0, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x408}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3c0a5fd}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe59}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x539}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x1c4, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8001}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x30}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_USERDATA={0xb2, 0xd, 0x1, 0x0, "7d461b1a6dace563d8b8b81dd3544045793ea4682e0f74658f8c1cee13da7a100070e46c4e46ea089ce8ea99f03196764cb0a29503f5708eb7834962fd79d8e5159c87e8c9e3973292c0a94bd5623f83d41de8cf0f0743138ce8dbbaf848b470369d9c7a1f7d4b0acac0cc20738b71799b8939921c75f3444c116adab15389f1d09272e9de70b8f85a6f038702f6bed14dca36866343ff9f8c794d1e0864f26527349d19de435641f7aa545eb905"}, @NFTA_SET_USERDATA={0xbe, 0xd, 0x1, 0x0, "79420877f40e18c4164ba1f692b1ee03e2c1335fb3e5a4c1c5fa48f1c076dbe2ccb614fb6a370dfbbd8781b4025f6591d068754080730b8deb0cea6753668da0b44192a13ee7946b519e117872f4db1161b49f0ded6a8e6b6297b2f4e86b1212747266f3c5339d5ed3f9636d9a035e5771d0291eb6939dabafa030921449304015c38a9bd9a7216b5d12bf6640f1abb57f873c233b7c1af238841fe527a25a45d07619434569de6db00a09d205f65746077ef1c0627948a7b375"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x48c}, 0x1, 0x0, 0x0, 0x10}, 0x4090) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r6, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001280)=0x14) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000013c0)={r6, &(0x7f00000012c0)='syz1\x00', 0x240, &(0x7f0000001300)={@align=0x9, {0x8, 0x6, 0x3000, 0x6}}, 0x5, &(0x7f0000001340), &(0x7f0000001380)=0x3ff}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f00000013c0)={r6, &(0x7f00000012c0)='syz1\x00', 0x240, &(0x7f0000001300)={@align=0x9, {0x8, 0x6, 0x3000, 0x6}}, 0x5, &(0x7f0000001340), &(0x7f0000001380)=0x3ff}) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f00000014c0)={{[0x4, 0x32, 0x10, 0x6]}, 0x0, 0x1, 0x3, 0x0, &(0x7f0000001400)=[{{@_ha_fsid={[0xa1d0]}, {0xfffc, 0x3, 0x45, 0x5}}, 0x7, 0x0, 'syz0\x00'}, {{@_ha_fsid={[0xfffffff9, 0x10001]}, {0x0, 0x8, 0x1, 0x9}}, 0x2d, 0x0, ')-+\x00'}, {{@align=0x2, {0x8, 0x4, 0x4, 0x401}}, 0xfff, 0x0, 'syz1\x00'}, {{@align=0x1, {0x6, 0xfffc, 0x88c3, 0x9bfd}}, 0x56f, 0x0, 'syz1\x00'}]}) syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r4) 4.211909391s ago: executing program 1 (id=3475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 4.068817629s ago: executing program 1 (id=3478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000009def2455480e352c40a935d8df90a8af07a314fe33b7096a981551b30c455f745a235912b5800100ae7d8371ddd5373984a8d7eb10a7aededc86c29dcb616bb973ba8dc6c3137b9bb3f62fb1c2043046436f3b1f04c64e070000003acbeb1eeba5e0e8e1a833fb4de15e44641cd048f25d970555d963fe1b84d7850df27427bbf0775d7fd88f494406", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010024010000340200000200000008000100", @ANYRES32=r5, @ANYBLOB="28421490445f165cc7374538c640156f679bb7338d6667bf352630407dda8d4d1974fd"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=0x0) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r12, &(0x7f00000000c0)={0x27, r11, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r15) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) r18 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r18, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r17], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="81340e471ba0522cde6a00", @ANYRES16=r2, @ANYBLOB="000627bd7000fbdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20008080) r19 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r19, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r19, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) 3.430958721s ago: executing program 4 (id=3490): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socket$inet6(0xa, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff4f}]}]}]}, 0x30}}, 0x4000890) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) 3.236556726s ago: executing program 2 (id=3494): r0 = socket(0x2a, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000700)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x88001) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x12000, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x6, 0x6, 0x180000000000, 0x8, 0x5]}, &(0x7f0000000080)=0x78) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000002e0000be7a7a5f5bf1aabbca6ea973a3def18827b5a029f25ffd0671dbc45e86383a0e334d7a1118fc7922b23082f930bd4fdda8e6009e775d841606e7ea07aca413ad286567e4a11a31f53d3662e7dcab3b39217943d2c412a0c1118646ed37b36deac908091b353afc3b910f97b9ff2c44408a29b6ab8d7be2afd8ecc21d25f6ef189c44c0191bdb1395e675c95f927a55a63c3b1e3a464781bfe76392ad52feffac59cb0dd7cbff9fbec230e2831d70171c9804e55d14157e03ee6f8b2cb3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000008c0)={0x9, {{0x2, 0x4e20, @empty}}, 0x1, 0x2, [{{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e21, @multicast1}}]}, 0x190) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000001800000828bd7000fedbdf2502108002fc07fd0100000000180016801400010000000000000000000f000000000008001900", @ANYRES32=r7, @ANYBLOB="080001006401010205001b000600000008001000001000000c000900ff0f2000", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 3.158617593s ago: executing program 2 (id=3495): socket$inet(0x2, 0x4000000000000001, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 941.308469ms ago: executing program 0 (id=3496): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 908.129167ms ago: executing program 3 (id=3497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 838.501193ms ago: executing program 4 (id=3498): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x20008805) 837.746953ms ago: executing program 2 (id=3499): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 830.984828ms ago: executing program 1 (id=3500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r1, 0x11, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) writev(r0, &(0x7f0000000580)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f0000000180)="b8265f0ab9aa258f97233617eb13d534619ce9c4b55aae647fc8c4a73ecf5594974f294e49866c4f9ce8dec543f039b3aae7b34be3681ae4593ac9996360c9c065a6c3be32c5b2de76fc9e1261074270135a784c0a64a7a386e2f1b8adfd274ba736bc221a8e49a9adbddce09d886cd97c4116dffb255fa45fab9e77b9815b2a2fce265438", 0x85}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000240)="c314c6218ba9ccb5c1aaf8d0294d386f6fda500ad5b6476e30b607887631d07d5a3090f2c7757db213006fb34be258ef5c74909c4e4d23d344c7782eff3ca6020950f3eae40b26b822ad98bdb76e1c9b49626925f7059c31d885", 0x5a}, {&(0x7f00000002c0)="29bb1276f5ef07abb97f7aab5ed41a31d871912b7b5361da30f4d99a12dd2c5046689cae27574075b4c975cccd29463483094917e3a53fc27b44e0fed716233b36eaccbb6d6c2e73d6ed90200d74d617f3c316a3cbca5827", 0x58}, {&(0x7f0000000340)="b534c2986e81f9334f412592024ee5024709a5ae795a1ec3f2ff8d7b40c67b17ff0746cf6b77d050f219d7553a7daeae1ff2dda0fe9c7f9b45a3df3e3f3b5d9d148385ecebcfb9e86f86307c9255ef644073fd52b32eb12eab162c7b967306b118bbaaa100ee815581184f584daf4519d5b6be", 0x73}, {&(0x7f00000003c0)="604aeb46db209cb168ede3abb687a9e2a0009ad6451c2aceecebc556694dc2929399643578b94bf6f3df2e2adfb014e43d9ce8231724d2ef56d845c896f917257478a75d5d6ab2b809dea6b1a54106ad3ed9ac", 0x53}, {&(0x7f0000000440)}, {&(0x7f0000000480)="0f687efacdcbad120d41d70ae19ad4326a19eab810b7c28338290cad4c33e34e1aee5261e8eaa9815ec5fecac8d67227ee910bdab6cabcf5de3dfedaa48c8fad13b4624cd0c997e42bd7a13775d90d79dab76c6e48bb9eb820c581c883d7b2e69226783631182cba83f698dcf1f2a15277a1d7cb314b33b2ceb9095ea9a31338c4f82b9ef90b1d11511bc80e8656b22551c67702bc76d84377f95aebeb82770214ef1b9da00c88080b4a6c081434af1528d02b8085caa31333db40aae95ff2c001fbb05c6dc5837221859f", 0xcb}], 0x9) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004880}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xf, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='c$9']}]}, 0x28}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000440)={0x1, 0x5}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008010100ac14140034000800047834b31f9aa1b7804af0495f13b8c6ad994e646f98bbf1a2dff1f805c3be1987e079d3d3635cf1d5bc4b60"], 0x2c}}, 0x80) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000640)={'batadv0\x00'}) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x9, 0x0, &(0x7f0000001580)) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 817.340208ms ago: executing program 0 (id=3501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2856dd00000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030f73797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00038006"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 667.391879ms ago: executing program 4 (id=3502): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) r1 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x6, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 662.028541ms ago: executing program 3 (id=3503): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x43c, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0x2, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0xd, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x0, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x2, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x7, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0xc058}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 588.796841ms ago: executing program 2 (id=3504): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8000}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048800}, 0x4040000) (async) r2 = accept(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000040)=0x80) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6e3fe9d7}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}]}, 0x30}, 0x1, 0x0, 0x0, 0x8012}, 0x40044) 583.602395ms ago: executing program 0 (id=3505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x240200c1}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20000005, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000003c0)=""/15, 0xf, 0x0, &(0x7f0000000500)=""/195, 0xc3}}, 0x10) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4000, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000040000000000000002000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000100000000000b7020000000010008500000086000000a5285000ffffffff18470000020000000000000000000000180100002069282500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702004008000000b703000000000000850000000600000000ff03000000000000040000001849000002000000000000001c642980d8c59e2828a66acd000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001580)=""/4096, 0x41000, 0x2a, '\x00', r5, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r9, 0x0, &(0x7f00000006c0)=[r3], 0x0, 0x10, 0x4}, 0x94) sendto$packet(r2, &(0x7f00000002c0)="40c33b69ebc9e05e9bde800088a8", 0xe, 0x171346df250871c7, &(0x7f0000000440)={0x11, 0x3, r5, 0x1, 0x2, 0x6, @broadcast}, 0x14) 472.400089ms ago: executing program 4 (id=3506): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000001c0)={0x70000000}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000001c0)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000100)=""/102) ioctl$SIOCSIFMTU(r5, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x20) 470.965065ms ago: executing program 2 (id=3507): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0x2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x2005, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES16=r2, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x20000480}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000010}, 0x40000) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x44}}, 0x800) 410.6321ms ago: executing program 0 (id=3508): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="81b8000000000000300012800b00010069703667726500002000028004001200080005000d0000000600020009000000080014006706000104000012e37b35c03c52a59945913924557e8db6206063b84da2f0281332e239b5439e74aa38da7b0e75e4810670c786ebfa1da58b84d198d711dce96879f24ffa003903750447"], 0x50}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 408.764281ms ago: executing program 3 (id=3509): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x2f, 0x20000067, 0x7, 0x0, 0x0, 0x10}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000152c0005800c0001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x34}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0}, 0x94) 360.326636ms ago: executing program 3 (id=3510): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3a6168654", 0x6}, {&(0x7f0000000a80)='\x00\x00\x00egS!\x00', 0x8}], 0x2) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, 0x0, 0x52) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x27, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @alu={0x4, 0x1, 0x4, 0x9, 0x6, 0x100}, @exit, @ldst={0x1, 0x1, 0x1, 0x6, 0xb, 0x30, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf911, 0x0, 0x0, 0x0, 0x3ff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x72}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc44e}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], &(0x7f00000002c0)='GPL\x00', 0x80, 0xb0, &(0x7f00000007c0)=""/176, 0x41100, 0x40, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x6, 0x480}, 0x10, 0xea27, r4, 0x4, &(0x7f0000000380)=[r6, r4, r4, r6, r4, r7, r6], &(0x7f0000000640)=[{0xfffffffe, 0x4, 0x2, 0x1}, {0x3, 0x4, 0x6, 0x8}, {0x2, 0x1, 0x2, 0x1}, {0x4, 0x5, 0xf, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0xc8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) (async) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x545888abe803ce4d) 319.316165ms ago: executing program 2 (id=3511): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="23e0e260532b7c101f6f70dadadbf4492544434e61e09319f6351f1265e144958629069fda60e338487857a5ab4a6cc56716be432a9b8e77004fb0ed2b7faff53ab7d1f0322422cf52dc5b0d57e01b15006ee37c4d60fd3ad0ae0d206ff13227c4697367f78d2353a87b178c7e386168f4274a61e567cfdb2a0a535365ccba8d", 0x80}, {&(0x7f00000003c0)="51a4aa83aef73ddabf337e42eff8ecdcd48e3f54967c0eaf2e92e759ae41cf0bf2eb2c3e9e8b8e76e69442ce11c2f25bc406a75358ee0dc72f40503373afe8a12ad537fdf4938ab63a9f3ac4576e7ae24174494039d839c345a67849a7babce8e27bda7e6df88f8ada790f3af4d0c92a617272039fdb66203704347f0cd71785ca951503b1314c1aa19ac1ba9d5be23655f0113fd476e6553de9a8a5cafab7de2371a8da304d86041bd88723afff11221cbfc3639407ac23101d5a3d2aa393c1691a7f8fc1", 0xc5}], 0x2, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0xfffffff3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xe28}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000000}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xa8}, 0x40) 245.889282ms ago: executing program 4 (id=3512): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'geneve0\x00', 0x8}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getpeername$tipc(r3, &(0x7f0000000140)=@id, &(0x7f0000000200)=0x10) getsockopt$inet6_mreq(r0, 0x29, 0x9, &(0x7f0000000380)={@mcast1}, &(0x7f00000003c0)=0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x9, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@RTM_DELMDB={0xd8, 0x55, 0x10, 0x70bd27, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x4, {@ip4=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x2, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x4, {@in6_addr=@local, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)={0x14, 0x0, 0x5, 0x3, 0x0, 0x0, {0x3}}, 0x14}}, 0x840) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r11 = socket(0x1d, 0xa, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0xfc) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4010, r2, 0x96804000) 241.2627ms ago: executing program 0 (id=3513): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)={0x14, 0x34, 0x9, 0x70bd29, 0x25dfdbfd, {0x5}}, 0x14}}, 0x20008090) 153.220517ms ago: executing program 3 (id=3514): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x1404, 0x300, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x8084) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x160, 0x13, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}, {0x5, 0x1, '@'}, {0x6, 0x1, ':{'}, {0xa, 0x1, 'wpan1\x00'}, {0x5, 0x1, ','}, {0x7, 0x1, '}!{'}]}, {0x3c, 0x0, 0x0, 0x1, [{0xc, 0x1, '\xb7.)%]%-\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}, {0x8, 0x1, '].]^'}, {0x4}, {0x6, 0x1, '+}'}, {0x6, 0x1, '@('}]}, {0x10, 0x0, 0x0, 0x1, [{0x9, 0x1, '(]#-{'}]}, {0x38, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x4}]}, {0x1c, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x64, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, '+$@),.'}, {0xa, 0x1, 'wpan1\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x8, 0x1, '@}+*'}, {0xf, 0x1, '#**(!!@]@]+'}]}, {0x1c, 0x0, 0x0, 0x1, [{0x6, 0x1, '+#'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x48, 0x13, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [{0xb, 0x1, '-$!^)}^'}, {0x11, 0x1, '@!!&$#@[.\x87^\xb2:'}, {0x6, 0x1, '\f]'}]}, {0x18, 0x0, 0x0, 0x1, [{0x12, 0x1, '--:^-!),-,(\xec.!'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x40040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0xc8, 0x3, &(0x7f0000000640)="d0fbda7e72bf32d58ce2d38760cabe5c1a0903446245e2acd4d63e160b4bef447fd06c8fb7a78920f8d43898ed69052d58e6ea81ac8f8cc0c169e0ccdaec2b46e6ff993fd6b4e1a6af51415e81f2650bb07338561e7153fdd75f504fdb2b691b11b0088cf94b86e1463b3da8ba3c189fbae7012257288026ae9e55657b77080ac89a8523fb708a4b65107aef434dcd251e62e03c8bd74c599260038ea2030fa017c1662460ab26a9b5d82d43d20fd4471ebe3242db25b3227570dc22c57b056d5c02c4db0108f684", &(0x7f0000000740)=""/3, 0x189, 0x0, 0x59, 0x53, &(0x7f0000000780)="922bea251a8dad5cdfbb6dbf713e6487510d0753efd663121786617bc5715ece16d2b8adfbeed56cf438ff9dc7854092db23918d1cad0aab9ee38f0f4980e820a26690052ca63c297cc7c2f91bfd07064317f47008166dc2e4", &(0x7f0000000800)="a72de36679aa566309e6d5fde01011137ece698206c4f2c4cbaf42f80cd1c63b8b38ca9d717d7ae489e5f692a10f318596dc327610691b2c11e3c33722e03678a5c5ec66a44d5ae78f2bee628121e43f5541ed", 0x4, 0x0, 0x9}, 0x50) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1d8, 0x2, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT={0x188, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x62}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xef4d37c24a5fadc7}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x1d8}}, 0x20008040) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c80)=@generic={&(0x7f0000000bc0)='./file0\x00', r5}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000dc0)={r5, &(0x7f0000000cc0)='\f]', 0x11102, &(0x7f0000000d00)={@_ha_fsid={[0xcd, 0x9]}, {0x3, 0xc1, 0x5e28e04e, 0x4}}, 0x8547, &(0x7f0000000d40)={@_ha_fsid}, &(0x7f0000000d80)=0x4}) write$nci(r6, &(0x7f0000000e00)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0xa, {0x1, 0x1}}, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x120, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x120}}, 0x88c0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x120, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x120}}, 0x88c0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001140)={'gretap0\x00', &(0x7f0000001100)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x1, 0x400, {{0x7, 0x4, 0x1, 0x5, 0x1c, 0x64, 0x0, 0x10, 0x29, 0x0, @broadcast, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x4, 0x4c6, 0x56, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x10, 0x0, 0x3ff}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001200)={'ip6tnl0\x00', &(0x7f0000001180)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x4, 0x4c6, 0x56, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x10, 0x0, 0x3ff}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001300)={'tunl0\x00', &(0x7f0000001240)={'gre0\x00', 0x0, 0x700, 0x40, 0x9, 0x2, {{0x1b, 0x4, 0x2, 0x2f, 0x6c, 0x65, 0x0, 0xa, 0x0, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x1c, 0x4, [{0x0, 0x7, "a47e334198"}, {0x7, 0x6, "ff7f866c"}, {0x5, 0x9, "8ccab96c24e24a"}]}, @cipso={0x86, 0x2f, 0x3, [{0x1, 0xe, "edb7c2ce7a43a327aa35f67b"}, {0x4, 0xe, "d3426eb669b9c2b0f2b5adc8"}, {0x0, 0x8, "b4ab09291ae8"}, {0x0, 0x5, "cb48dc"}]}, @noop, @generic={0x89, 0xa, "e6c60a83a7adc597"}]}}}}}) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000001340)={@multicast2, @loopback}, &(0x7f0000001380)=0xc) (async) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000001340)={@multicast2, @loopback, 0x0}, &(0x7f0000001380)=0xc) getpeername$packet(r6, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001400)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000001640)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001440)={0x1b4, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x84}, 0x84) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000018c0)={&(0x7f0000001780), 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x48, r15, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6a}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{0x1}, &(0x7f0000001900), &(0x7f0000001940)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{0x1, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3, 0x10000, r16, 0x0, '\x00', r10, r6, 0x2, 0x4, 0x3, 0x2, @void, @value, @value=r0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x3, 0x10000, r16, 0x0, '\x00', r10, r6, 0x2, 0x4, 0x3, 0x2, @void, @value, @value=r0}, 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) 73.312723ms ago: executing program 0 (id=3515): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) 63.940283ms ago: executing program 4 (id=3516): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x0, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="900000001000031e040000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280280001006873720048000280050003004dc80000050003000500000005000300fd00000008000200a64568e79c8e35268f9eb8c6b49aeeb0a226f5c672af5a60a11e4aaf8488d45ecdd2b3beb5100e00004f87a13874dc8e34236502d029c214fd699b29fcc86a1f113bbc8f137776a6433e0c304cfdec8c293d103c2e9c92b6232b596f12579358430ffff15044cbf9", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) 0s ago: executing program 3 (id=3517): ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000000)={0x9, 0x1}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000140)={0x0, 0x400, 0x1, [0xff, 0x0, 0x32546860, 0x80000000, 0x9], [0x52ed1f0e, 0x4, 0x80, 0x39d, 0xc, 0x100000000, 0x36800000000, 0x0, 0x101, 0x4, 0x5, 0x10000, 0x0, 0x7fffffff, 0x8, 0x8, 0xffffffff, 0x1, 0x81, 0x3, 0x8, 0x5, 0xfffffffffffffffb, 0x3, 0x8, 0x3, 0x7, 0xfffffffffffffffe, 0x2, 0x1, 0x8000, 0x5, 0x8, 0x3, 0x1, 0x5, 0x1ed6, 0x4, 0x10000, 0x8, 0x6, 0xcc5, 0xf, 0x1000, 0x3, 0x1, 0x5, 0x8, 0x10000, 0x7, 0x10b7, 0x7, 0xfffffffffffffffb, 0xffff, 0x5, 0x8, 0x1, 0x3b, 0x4, 0x9, 0x2, 0xffffffffffff7fff, 0x81f1, 0x9, 0x4e5, 0x2, 0x3b7, 0x8, 0x3, 0x4, 0x6, 0x2b, 0x5, 0x4d0, 0x6, 0x9, 0x7ff, 0xce6, 0xbc65, 0x100, 0x100, 0x8000, 0xf, 0x10000, 0x101, 0x8, 0x9f, 0x7, 0x9, 0x2, 0x10000, 0x0, 0x36, 0x3, 0x2, 0x1, 0x10000, 0x0, 0xde3, 0x10000, 0x1c, 0x8, 0x80000001, 0xee12, 0x8, 0x5, 0xd, 0x7fff, 0x1, 0xfffffffffffffff9, 0x3ff, 0x1, 0x5, 0xffffffffffffff37, 0x5, 0xfffffffffffffffd, 0x4, 0x9e, 0x9, 0x874, 0x5]}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000580)={0xbe6a, 0x1, 0x3, 0x3, 0x9, 0x0, [{0x0, 0x10, 0xbd}, {0x8, 0xfffffffffffffff9, 0x7, '\x00', 0x1885}, {0x2, 0x401, 0x3ff, '\x00', 0x1302}, {0xa, 0x2, 0xb, '\x00', 0x2}, {0x7, 0xffffffff00000000, 0x3, '\x00', 0x2000}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x2, 0x0, 0x9d5, '\x00', 0x404}, {0x7, 0xc, 0x3d60, '\x00', 0x200}, {0x101, 0xffffffffffffffff, 0x2, '\x00', 0x100}]}) bind$ax25(0xffffffffffffffff, &(0x7f00000007c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, 0x0, 0x108, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048014}, 0x0) r2 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x800) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f00000009c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000a00)={0x0, 0x0, 0x8, 0x3, 0x4, 0x200, 0xfffc, 0x10000, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x3ff, 0x9, 0x7, 0x6}}, &(0x7f0000000ac0)=0xb0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000b00)={r3, 0x56, "eeb4790246b56e8da1a9251e06041e71a5cf2cb2d795666af40189f983fd0e0e4776d7f73c4dadee858011620c8971bd1b7066e93f69db24fc710245f48a050ba63764223ac65c108142aac06d4c3597d12d16f3356b"}, &(0x7f0000000b80)=0x5e) syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r1) r4 = accept4(r2, &(0x7f0000000c00)=@generic, &(0x7f0000000c80)=0x80, 0x80000) sendto$rose(r4, &(0x7f0000000cc0)="54b38834e91f5f06321f0ca2bbc5228a53393f968353a360055ff3e515f1c22a7605", 0x22, 0x80, &(0x7f0000000d00)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x40) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r1) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000e80), &(0x7f0000000ec0)=0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000f00), &(0x7f0000000f40)=0xc) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000f80)) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000fc0)='wg1\x00', 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r6, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4008800) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000001b40)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001180)={0x964, 0x1, 0x5, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7f}, 0x7, 0x5, 0xffff, 0xd, 0x26, 'syz0\x00', "afa999409a36b57cd0936519ef214eecbbd67703f5c3fbdacd768871a83b8de1", "438b4d2bc91d7d972988d501ac8d1f097826c0e6028bd93549bafddf91efbdd9", [{0x2, 0x101, {0x3, 0x2}}, {0x1, 0xdea7, {0x2, 0x672}}, {0xfffc, 0x0, {0x1, 0x10001}}, {0xfffc, 0x9, {0x3, 0xf}}, {0x54, 0x2, {0x0, 0x80000001}}, {0x800, 0x3ff, {0x3, 0x80000001}}, {0x1, 0x4, {0x3, 0xff}}, {0x8, 0x6, {0x2, 0x10}}, {0xfffb, 0x5, {0x3, 0xad}}, {0x9, 0xfc01, {0x0, 0xd2}}, {0x9, 0x3, {0x3, 0xfffffffa}}, {0x7, 0x81, {0x2, 0x7}}, {0x1, 0x228e, {0x2, 0xd}}, {0x8, 0xffff, {0x2, 0x1}}, {0x9, 0x1, {0x1, 0x84}}, {0x0, 0x1ff, {0x0, 0xfffffffe}}, {0x0, 0x400, {0x2, 0x3}}, {0x2, 0x4fc, {0x2, 0x269f}}, {0x8, 0x8, {0x0, 0x4}}, {0x6, 0xfff8, {0x0, 0x1000}}, {0x4, 0xff22, {0x3, 0x5}}, {0x0, 0xff, {0x2}}, {0x100, 0xc, {0x1, 0x7}}, {0x800, 0x6, {0x3, 0xd6}}, {0x2, 0x2, {0x0, 0x3}}, {0x6, 0x6, {0x0, 0x43}}, {0x1, 0x200, {0x2, 0x644}}, {0x101, 0x3, {0x1, 0x5}}, {0x3ff, 0x81, {0x0, 0xffffffff}}, {0x5, 0x9, {0x0, 0x8}}, {0x2, 0xa, {0x2, 0xfffffff8}}, {0x89, 0x3, {0x2, 0x6dbede4}}, {0xfffc, 0xff, {0x1, 0x4f8}}, {0x8000, 0x2, {0x2}}, {0x3, 0x1, {0x2, 0x6}}, {0x0, 0x8, {0x0, 0x4}}, {0x9, 0x9, {0x2, 0x7}}, {0x734, 0x3, {0x1, 0x4fe}}, {0x7, 0x9, {0x3, 0x44}}, {0x1, 0xcff1, {0x2, 0x3983}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x9, 0x9, 0x401, 0x5, 0x16, 'syz0\x00', "5d47d6c5d31e225a6955f31245936141f7b8acd54a2c479da74fd41862b50b4f", "2bed83be714b032205063f0fbd737657e20cfdd1ca02e66d6e8cf836f1d8c85d", [{0x1800, 0x8001, {0x3, 0x7}}, {0xfffd, 0x4, {0x2, 0x9}}, {0x9, 0xd, {0x2, 0xffffffff}}, {0x6, 0xfff7, {0x3, 0xad62}}, {0x40, 0x5, {0x3, 0x4}}, {0xff66, 0x6, {0x1, 0x9b6b}}, {0x3, 0x9, {0x0, 0x6}}, {0x800, 0x3, {0x0, 0x5}}, {0x4, 0x6, {0x2, 0x7}}, {0x5, 0x9, {0x0, 0x3ff}}, {0x400, 0x2928, {0x0, 0x8}}, {0xe, 0x0, {0x2, 0x967da69}}, {0x101, 0x2, {0x3, 0x5c32}}, {0x1a, 0x42, {0x5dd544e0ed6a5fbd, 0x7fffffff}}, {0x7, 0xc358, {0x2, 0x1}}, {0x6, 0xff81, {0x1, 0x100}}, {0x3, 0xff, {0x1, 0x9}}, {0x5, 0xc5, {0x2, 0x4}}, {0x7, 0x101, {0x1, 0x6}}, {0x7a, 0xfff, {0x0, 0x2}}, {0x125, 0x9, {0x3, 0x4}}, {0x101, 0x6, {0x2, 0x1}}, {0x3, 0x3, {0x3, 0x7f}}, {0xa, 0x3, {0x1, 0x1}}, {0x7ff, 0x5, {0x2, 0xd2}}, {0x2, 0x8, {0x3}}, {0x5, 0xdc85, {0x1, 0xf15}}, {0x2, 0x2671, {0x2, 0xffff}}, {0x2, 0xfff, {0x1, 0x4}}, {0x1, 0xb7, {0x2, 0x10000}}, {0xfff1, 0x7, {0x3, 0x6}}, {0x8, 0x9, {0x0, 0x7}}, {0x2, 0x401, {0x0, 0x8}}, {0x63a2, 0x22, {0x3, 0x999d}}, {0x101, 0xffff, {0x3, 0x1f2}}, {0x1, 0x0, {0x1, 0x2}}, {0x5, 0x2, {0x0, 0x1}}, {0x7, 0xb1, {0x3, 0xaaa6065}}, {0x0, 0x9, {0x2, 0x80000001}}, {0xeeb9, 0x819, {0x48a0945577ddfc49, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x7, 0x3, 0x1, 0x7db, 0x19, 'syz0\x00', "1f67cff2425a5b178b6ddada06a15a2159ff0ac68714ab131f7b58b4c3517b37", "147f8bdd54158508e247001c6de1965c48424e5df2d9dc835b4df70b8f897ec4", [{0x5b, 0x2, {0x0, 0xa9}}, {0x8f, 0x72, {0x3}}, {0x47e, 0x3, {0x0, 0x7}}, {0x6, 0x7fff, {0x2, 0x7}}, {0xfb72, 0x5, {0x3, 0x10}}, {0x1, 0x49e, {0x0, 0x3}}, {0xcf06, 0x2, {0x0, 0x6f}}, {0x5, 0x8, {0x0, 0x2}}, {0x7fff, 0xebc, {0x2}}, {0x2, 0x8, {0x1, 0x200}}, {0x2, 0xba, {0x1, 0xf}}, {0x68b9, 0x9, {0x2, 0x7ff}}, {0xfff9, 0x56, {0x2, 0x9}}, {0x100, 0xff00, {0x1, 0x8}}, {0x0, 0xa, {0x0, 0xfffffffd}}, {0x0, 0x7fff, {0x1, 0x89}}, {0x576, 0x8001, {0x1, 0x7}}, {0x40, 0x8, {0x1, 0x8000000}}, {0xc, 0xb, {0x1, 0x10000}}, {0x9, 0x8, {0x0, 0x6}}, {0x4, 0x9, {0x0, 0x84}}, {0xfff, 0x6, {0x3, 0x3}}, {0x4, 0x7, {0x3, 0x1}}, {0x8, 0x5, {0x1, 0x9}}, {0x5, 0x9, {0x0, 0x5}}, {0x40, 0xf800, {0x1, 0x8}}, {0x2a5, 0xd4, {0x2, 0x2f6}}, {0x8, 0x3, {0x3, 0x1}}, {0x10, 0x80, {0x0, 0x8}}, {0x9, 0x7, {0x3}}, {0xf77, 0x10, {0x1, 0x6}}, {0x400, 0x7, {0x2, 0x1}}, {0x0, 0xf, {0x3, 0xfffffff7}}, {0xcd, 0x3, {0x1, 0xc}}, {0x7fff, 0x0, {0x2, 0x8398}}, {0x7a09, 0x1, {0x2, 0x3}}, {0xb, 0x8000, {0x0, 0x2}}, {0x1, 0x800, {0x1, 0x3}}, {0x27e, 0x6, {0x3, 0x6}}, {0xfff0, 0x3, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x8, 0xfe, 0x32, 0xfffb, 0xa, 'syz1\x00', "bbb7c22aef3a2b9d76c6438ce61e6d0b405fa7ce3f4546983878a7beab880671", "b1812d10cb98199913c14d515a8a53c57ea7edb61438ef70eefb4174e4a9e8eb", [{0x8, 0x2, {0x3, 0x3}}, {0xf3, 0x1, {0x1, 0x4}}, {0x2, 0x2, {0x1, 0x9e15}}, {0x8001, 0x6, {0x2, 0x6}}, {0x290c, 0xfffa, {0x3, 0x8}}, {0x8, 0x800, {0x0, 0x1}}, {0x811, 0x2, {0x0, 0xe423}}, {0x1, 0xda5b, {0x3, 0x7}}, {0x1, 0xfffd, {0x0, 0xb}}, {0x5, 0xfffd, {0x2, 0x4a1a}}, {0x4, 0xc, {0x3, 0x3}}, {0xffff, 0x2d, {0x0, 0xffffd230}}, {0x4, 0x5, {0x1}}, {0x2, 0x2, {0x2, 0x554c}}, {0x7, 0x5, {0x3, 0x7}}, {0xa4b, 0xfffc, {0x1, 0x5e3de220}}, {0x1, 0x9, {0x1, 0xffffffd7}}, {0x4, 0x5, {0x1, 0x4}}, {0x7b, 0x0, {0x2, 0xfffffe00}}, {0xb002, 0xa49, {0x3, 0xa4}}, {0x8, 0x10, {0x2, 0x1000}}, {0x100, 0x4, {0x1, 0x5}}, {0xc, 0x6, {0x0, 0x2}}, {0x10, 0xfff, {0x2}}, {0x5, 0xdbe, {0x1}}, {0x1, 0x6, {0x1, 0x10000}}, {0x4, 0x6, {0x1, 0x7fff}}, {0x4, 0x0, {0x2, 0x8}}, {0x101, 0xfff9, {0x1, 0xf8}}, {0x7, 0x1000, {0x2, 0x2}}, {0x7, 0xb, {0x1, 0x9c}}, {0xfffc, 0x3, {0x1, 0xf4}}, {0x9, 0x0, {0x0, 0x7}}, {0x9, 0x7, {0x3, 0x1}}, {0xc, 0xb4, {0x2, 0x712bcd71}}, {0x1, 0xb06, {0x3, 0xffff}}, {0xd5, 0x2, {0x1, 0x8}}, {0xe8, 0x9, {0x3, 0x40}}, {0x6, 0xd, {0x2, 0x2}}, {0x6, 0x44, {0x0, 0x800}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x880}, 0x40804) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000001b80)={'syz_tun\x00', 0x3d9c0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48044) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x20008800) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) kernel console output (not intermixed with test programs): d already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 251.874413][T13193] syzkaller1: entered promiscuous mode [ 251.880361][T13193] syzkaller1: entered allmulticast mode [ 252.107976][T13206] sch_tbf: peakrate 6 is lower than or equals to rate 9234422770554123778 ! [ 252.283228][T13220] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 252.411420][T13225] xt_ecn: cannot match TCP bits for non-tcp packets [ 252.420220][T13226] xt_ecn: cannot match TCP bits for non-tcp packets [ 252.558312][T13228] syzkaller0: entered promiscuous mode [ 252.563877][T13228] syzkaller0: entered allmulticast mode [ 252.572712][T13230] xt_TCPMSS: Only works on TCP SYN packets [ 252.600122][T13232] : entered promiscuous mode [ 253.035346][T13252] batman_adv: batadv0: Interface deactivated: dummy0 [ 253.292479][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.307519][T13252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.436248][T13288] __nla_validate_parse: 4 callbacks suppressed [ 253.436268][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'. [ 253.453018][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'. [ 253.603165][T13263] veth1_macvtap: renamed from veth0_vlan [ 253.628889][ T7501] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.640084][ T7501] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.697123][T13280] syzkaller0: entered promiscuous mode [ 253.702697][T13280] syzkaller0: entered allmulticast mode [ 253.724811][ T7501] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.734746][ T7501] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.875462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6370 ms [ 254.883777][ C1] lec:lec_tx_timeout: lec0 [ 254.888941][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.639452][ T7501] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.648644][ T7501] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.659082][ T7501] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.668615][ T7501] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.838481][T13339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2066'. [ 255.858089][T13341] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2065'. [ 255.875767][T13339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2066'. [ 255.899633][T13341] ip6gre4: entered promiscuous mode [ 255.910646][T13341] ip6gre4: entered allmulticast mode [ 255.979859][T13347] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2068'. [ 256.106443][T13351] tc_dump_action: action bad kind [ 256.151761][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.188363][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 256.215970][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 256.336918][T13372] netlink: 'syz.0.2075': attribute type 3 has an invalid length. [ 256.343493][T13368] Bluetooth: MGMT ver 1.23 [ 256.540444][T13385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2078'. [ 256.783679][T13395] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 256.964263][T13408] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20004 [ 257.150121][ T5487] veth1_macvtap: left promiscuous mode [ 257.217787][ T5487] veth1_macvtap: entered promiscuous mode [ 257.312328][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2089'. [ 257.894741][T13462] bond5: option mode: unable to set because the bond device has slaves [ 257.927410][T13462] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 258.026248][T13471] syzkaller1: entered promiscuous mode [ 258.042094][T13471] syzkaller1: entered allmulticast mode [ 258.333392][T13483] syzkaller1: entered promiscuous mode [ 258.352659][T13483] syzkaller1: entered allmulticast mode [ 258.630216][T13495] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 258.656399][T13495] __nla_validate_parse: 4 callbacks suppressed [ 258.656419][T13495] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2107'. [ 259.059552][T13525] netlink: 'syz.2.2119': attribute type 2 has an invalid length. [ 259.068334][T13525] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2119'. [ 259.178576][T13534] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2121'. [ 259.460782][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2127'. [ 259.476180][T13555] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2127'. [ 259.579943][T13564] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2130'. [ 259.608379][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2129'. [ 259.712005][T13572] syzkaller0: entered promiscuous mode [ 259.718735][T13572] syzkaller0: entered allmulticast mode [ 259.910507][T13580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2137'. [ 259.921182][T13580] openvswitch: netlink: Flow key attr not present in new flow. [ 260.091859][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 260.117728][T13601] syzkaller0: entered promiscuous mode [ 260.123624][T13601] syzkaller0: entered allmulticast mode [ 260.635430][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 260.644167][ C1] lec:lec_tx_timeout: lec0 [ 260.650905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 261.908095][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 90 seconds [ 261.919948][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 90 seconds [ 261.931594][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 90 seconds [ 261.943179][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 90 seconds [ 262.964764][T13588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.121482][T13618] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.269366][T13618] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 263.323157][T13618] bond9 (unregistering): Released all slaves [ 263.346456][T13635] tipc: Can't bind to reserved service type 0 [ 263.383294][T13622] tipc: Started in network mode [ 263.388784][T13622] tipc: Node identity faf1952447ed, cluster identity 4711 [ 263.413920][T13622] tipc: Enabled bearer , priority 0 [ 263.551564][T13630] syzkaller0: entered promiscuous mode [ 263.558697][T13630] syzkaller0: entered allmulticast mode [ 263.565138][T13630] tipc: Resetting bearer [ 263.628107][T13620] tipc: Resetting bearer [ 265.520452][T13620] tipc: Disabling bearer [ 265.552245][ T10] tipc: Node number set to 3172767012 [ 265.676616][T13681] bond0: Caught tx_queue_len zero misconfig [ 266.148519][T13704] TC_ACT_REPEAT abuse ? [ 266.385669][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 266.393745][ C1] lec:lec_tx_timeout: lec0 [ 266.399185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 266.507699][T13648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.549234][T13698] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2167'. [ 266.566039][T13699] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2167'. [ 266.871141][T13707] tipc: Failed to remove unknown binding: 66,0,0/0:4091709913/4091709915 [ 266.881028][T13707] tipc: Failed to remove unknown binding: 66,0,0/0:4091709913/4091709914 [ 266.890417][T13707] tipc: Failed to remove unknown binding: 66,0,0/0:4091709913/4091709915 [ 266.900582][T13707] tipc: Failed to remove unknown binding: 66,0,0/0:4091709913/4091709914 [ 267.027315][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.029845][T13711] syzkaller0: entered promiscuous mode [ 267.037114][T10088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.048005][T13711] syzkaller0: entered allmulticast mode [ 267.564225][T13749] sctp: [Deprecated]: syz.0.2180 (pid 13749) Use of int in maxseg socket option. [ 267.564225][T13749] Use struct sctp_assoc_value instead [ 267.598065][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.609198][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.619930][T10088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.637582][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.668030][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 30 seconds [ 267.680241][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 30 seconds [ 267.691912][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 30 seconds [ 267.704632][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 30 seconds [ 268.068369][ T7514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.064755][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 270.262911][ T5192] udevd[5192]: worker [5841] /devices/virtual/block/nbd0 is taking a long time [ 270.516103][T13745] tipc: Enabling of bearer rejected, failed to enable media [ 270.717207][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.736500][T13763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.746274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.818170][T13763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.829258][ T7502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.850282][T13762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.859563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.247255][T13792] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 271.405778][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 271.423049][ C1] lec:lec_tx_timeout: lec0 [ 271.428427][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 272.159806][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.426519][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.434892][ T7521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.800756][T13768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.096040][T13838] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.172747][T13844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.185959][T13844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.197686][T13850] xt_ipcomp: unknown flags 1D [ 274.221755][T13846] ipt_REJECT: ECHOREPLY no longer supported. [ 274.239605][T13846] netlink: 'syz.2.2200': attribute type 10 has an invalid length. [ 274.251998][T13846] batman_adv: batadv0: Removing interface: dummy0 [ 274.257747][T13855] netlink: 'syz.4.2202': attribute type 1 has an invalid length. [ 274.282609][T13846] team0: Port device dummy0 added [ 274.293379][T13846] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 274.309297][T13846] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2200'. [ 274.336164][T13846] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2200'. [ 274.345172][T13846] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 274.362991][T13846] netlink: 'syz.2.2200': attribute type 8 has an invalid length. [ 274.372507][T13846] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2200'. [ 274.507475][T13871] netlink: 'syz.0.2206': attribute type 1 has an invalid length. [ 274.516744][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2206'. [ 274.587588][T13875] syzkaller0: entered promiscuous mode [ 274.593452][T13875] syzkaller0: entered allmulticast mode [ 274.603140][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2207'. [ 274.713473][T13877] netlink: 'syz.0.2208': attribute type 1 has an invalid length. [ 274.736877][T13877] bond7: entered promiscuous mode [ 274.742528][T13877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.763555][T13877] bond7: (slave bridge3): making interface the new active one [ 274.771874][T13877] bridge3: entered promiscuous mode [ 274.779003][T13877] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 274.833673][T13881] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 275.033677][T13894] netlink: 'syz.0.2210': attribute type 14 has an invalid length. [ 275.064075][T13894] batman_adv: batadv0: Adding interface: dummy0 [ 275.090500][T13894] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 275.151533][T13894] batman_adv: batadv0: Interface activated: dummy0 [ 275.716713][T13937] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2224'. [ 275.749720][T13937] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2224'. [ 275.892571][T13954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2228'. [ 276.435578][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 276.444376][ C1] lec:lec_tx_timeout: lec0 [ 276.449602][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.640920][T13946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.119477][T13992] pim6reg1: entered promiscuous mode [ 277.125328][T13992] pim6reg1: entered allmulticast mode [ 277.308765][T14000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2246'. [ 277.548416][T14015] net_ratelimit: 4 callbacks suppressed [ 277.548438][T14015] openvswitch: netlink: IP tunnel TTL not specified. [ 277.566642][T14013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 277.587452][T14013] syzkaller1: entered promiscuous mode [ 277.593799][T14013] syzkaller1: entered allmulticast mode [ 277.997570][T14039] syzkaller0: entered promiscuous mode [ 278.006419][T14039] syzkaller0: entered allmulticast mode [ 278.809016][T14049] pim6reg: entered allmulticast mode [ 278.821331][T14053] netlink: 'syz.1.2263': attribute type 26 has an invalid length. [ 278.832508][T14053] netlink: 'syz.1.2263': attribute type 26 has an invalid length. [ 278.855282][T14049] pim6reg: left allmulticast mode [ 278.891091][T14053] vlan2: entered promiscuous mode [ 279.370903][T14095] syzkaller0: entered promiscuous mode [ 279.378001][T14095] syzkaller0: entered allmulticast mode [ 280.020563][T14128] __nla_validate_parse: 9 callbacks suppressed [ 280.020581][T14128] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2286'. [ 280.089606][T14132] xt_l2tp: wrong L2TP version: 0 [ 280.219534][T14137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 280.233773][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2290'. [ 280.301716][T14142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2292'. [ 280.646991][T14158] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.681874][T14154] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 280.720942][T14161] syzkaller0: entered promiscuous mode [ 280.737074][T14161] syzkaller0: entered allmulticast mode [ 281.164271][T14178] syzkaller0: entered promiscuous mode [ 281.310730][T14196] validate_nla: 1 callbacks suppressed [ 281.310750][T14196] netlink: 'syz.0.2306': attribute type 2 has an invalid length. [ 281.327189][T14196] netlink: 'syz.0.2306': attribute type 2 has an invalid length. [ 281.465456][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 281.473928][ C1] lec:lec_tx_timeout: lec0 [ 281.479105][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.601257][T14198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.735112][T14221] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 281.753974][T14221] vxcan1: entered allmulticast mode [ 281.778450][T14224] syzkaller0: entered promiscuous mode [ 281.791372][T14224] syzkaller0: entered allmulticast mode [ 281.916794][T14228] syzkaller0: entered promiscuous mode [ 281.922483][T14228] syzkaller0: entered allmulticast mode [ 281.941149][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2316'. [ 282.153691][T14238] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 282.522688][T14275] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.2328'. [ 282.542243][T14275] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2328'. [ 282.636287][T14281] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2330'. [ 282.651109][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2330'. [ 282.737450][T14285] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 282.758215][T14285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2334'. [ 283.738471][T14339] bond0: option ad_select: unable to set because the bond device is up [ 283.794847][T14339] netlink: 'syz.0.2354': attribute type 10 has an invalid length. [ 283.822770][T10090] IPVS: starting estimator thread 0... [ 283.828993][T14348] IPVS: ip_vs_add_dest(): server weight less than zero [ 283.929651][T14349] IPVS: using max 41 ests per chain, 98400 per kthread [ 284.138747][T14371] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 284.214583][T14371] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.069318][T14441] __nla_validate_parse: 10 callbacks suppressed [ 285.069348][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 285.114608][T14434] bond10: entered promiscuous mode [ 285.155300][T14434] bond10: entered allmulticast mode [ 285.169942][T14434] 8021q: adding VLAN 0 to HW filter on device bond10 [ 285.219408][T14451] netlink: 'syz.0.2389': attribute type 4 has an invalid length. [ 285.232431][T14451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2389'. [ 285.314023][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2391'. [ 285.468206][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 285.477765][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2393'. [ 285.558581][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2393'. [ 285.574645][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2393'. [ 285.614754][T14472] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 285.673045][T14472] netlink: 'syz.3.2397': attribute type 32 has an invalid length. [ 285.698773][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 285.750750][T14477] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2399'. [ 285.799566][T14472] bond9: option coupled_control: invalid value (52) [ 285.818143][T14472] bond9 (unregistering): Released all slaves [ 286.039054][T14497] netlink: 4636 bytes leftover after parsing attributes in process `syz.2.2404'. [ 286.088406][T14498] netlink: 'syz.3.2403': attribute type 4 has an invalid length. [ 286.407201][T14521] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.485576][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 286.493871][ C1] lec:lec_tx_timeout: lec0 [ 286.498492][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 286.580022][T14529] mac80211_hwsim hwsim11 : renamed from wlan1 [ 286.648584][T14489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.831221][T14539] syzkaller0: entered promiscuous mode [ 286.852746][T14539] syzkaller0: entered allmulticast mode [ 286.900882][T14542] syzkaller0: entered promiscuous mode [ 286.920445][T14542] syzkaller0: entered allmulticast mode [ 287.041946][T14549] syzkaller0: entered promiscuous mode [ 287.048489][T14549] syzkaller0: entered allmulticast mode [ 287.070516][T14552] bond0: Error: Cannot enslave bond to itself. [ 287.212017][T14556] syzkaller0: entered promiscuous mode [ 287.232297][T14556] syzkaller0: entered allmulticast mode [ 287.246848][T14560] netlink: 'syz.0.2424': attribute type 14 has an invalid length. [ 287.340978][T14565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.392040][T14567] syzkaller0: entered promiscuous mode [ 287.397811][T14567] syzkaller0: entered allmulticast mode [ 287.413115][T14567] netlink: 'syz.2.2427': attribute type 7 has an invalid length. [ 287.424616][T14567] netlink: 'syz.2.2427': attribute type 4 has an invalid length. [ 287.459735][T14567] bond8: (slave bridge0): Releasing active interface [ 287.662894][T14589] netlink: 'syz.0.2434': attribute type 32 has an invalid length. [ 287.697044][T14584] syzkaller0: entered promiscuous mode [ 287.706702][T14584] syzkaller0: entered allmulticast mode [ 287.716039][T14587] syzkaller0: entered promiscuous mode [ 287.722287][T14587] syzkaller0: entered allmulticast mode [ 287.830438][T14595] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 287.860985][T14598] FAULT_INJECTION: forcing a failure. [ 287.860985][T14598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.875288][T14598] CPU: 1 UID: 0 PID: 14598 Comm: syz.4.2437 Not tainted syzkaller #0 PREEMPT(full) [ 287.875328][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.875344][T14598] Call Trace: [ 287.875351][T14598] [ 287.875359][T14598] dump_stack_lvl+0xe8/0x150 [ 287.875392][T14598] should_fail_ex+0x412/0x560 [ 287.875416][T14598] _copy_from_iter+0x1d3/0x1670 [ 287.875442][T14598] ? rcu_is_watching+0x15/0xb0 [ 287.875471][T14598] ? __pfx__copy_from_iter+0x10/0x10 [ 287.875502][T14598] ? netlink_sendmsg+0x650/0xb40 [ 287.875525][T14598] ? skb_put+0x11b/0x210 [ 287.875553][T14598] netlink_sendmsg+0x6c0/0xb40 [ 287.875583][T14598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.875609][T14598] ? aa_sock_msg_perm+0xf1/0x1b0 [ 287.875633][T14598] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.875656][T14598] ____sys_sendmsg+0x972/0x9f0 [ 287.875682][T14598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.875707][T14598] ? import_iovec+0x73/0xa0 [ 287.875736][T14598] ___sys_sendmsg+0x2a5/0x360 [ 287.875758][T14598] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.875808][T14598] ? __fget_files+0x2a/0x420 [ 287.875832][T14598] ? __fget_files+0x3a0/0x420 [ 287.875862][T14598] __x64_sys_sendmsg+0x1bd/0x2a0 [ 287.875881][T14598] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.875905][T14598] ? __pfx_ksys_write+0x10/0x10 [ 287.875935][T14598] do_syscall_64+0x14d/0xf80 [ 287.875952][T14598] ? trace_irq_disable+0x3b/0x150 [ 287.875976][T14598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.875994][T14598] ? clear_bhb_loop+0x40/0x90 [ 287.876016][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.876031][T14598] RIP: 0033:0x7f4214b9c799 [ 287.876049][T14598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.876065][T14598] RSP: 002b:00007f4215a20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.876084][T14598] RAX: ffffffffffffffda RBX: 00007f4214e15fa0 RCX: 00007f4214b9c799 [ 287.876105][T14598] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 287.876116][T14598] RBP: 00007f4215a20090 R08: 0000000000000000 R09: 0000000000000000 [ 287.876127][T14598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.876137][T14598] R13: 00007f4214e16038 R14: 00007f4214e15fa0 R15: 00007ffca92b8ae8 [ 287.876167][T14598] [ 288.472035][T14618] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 288.553363][T14631] syzkaller0: entered promiscuous mode [ 288.624998][T14631] syzkaller0: entered allmulticast mode [ 289.141897][T14667] syzkaller0: entered promiscuous mode [ 289.161372][T14667] syzkaller0: entered allmulticast mode [ 289.281997][T14674] syzkaller0: entered promiscuous mode [ 289.287639][T14674] syzkaller0: entered allmulticast mode [ 289.313985][T14679] vcan1: entered promiscuous mode [ 289.344377][T14679] vcan1: entered allmulticast mode [ 289.513305][T14683] vxcan0: entered allmulticast mode [ 289.541959][T14693] netlink: 'syz.3.2461': attribute type 1 has an invalid length. [ 289.561431][T14694] syzkaller1: entered promiscuous mode [ 289.599751][T14694] syzkaller1: entered allmulticast mode [ 289.678539][T14698] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.688093][T14698] bond9: (slave bond10): making interface the new active one [ 289.697892][T14698] bond9: (slave bond10): Enslaving as an active interface with an up link [ 289.778947][T14693] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 289.791267][T14698] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.969209][T14713] syzkaller0: entered promiscuous mode [ 289.986272][T14713] syzkaller0: entered allmulticast mode [ 289.998488][T14715] syzkaller0: entered promiscuous mode [ 290.012469][T14715] syzkaller0: entered allmulticast mode [ 290.038212][T14713] simple: basic_1 [ 290.042276][T14713] simple: basic_2 [ 290.046153][T14713] simple: basic_3 [ 290.049893][T14713] simple: basic_4 [ 290.053617][T14713] simple: basic_5 [ 290.057344][T14713] simple: basic_6 [ 290.061082][T14713] simple: basic_7 [ 290.064837][T14713] simple: basic_8 [ 290.068653][T14713] simple: basic_9 [ 290.072411][T14713] simple: basic_10 [ 290.076271][T14713] simple: basic_11 [ 290.080333][T14713] simple: basic_12 [ 290.084318][T14713] simple: basic_13 [ 290.088493][T14713] simple: basic_14 [ 290.092517][T14713] simple: basic_15 [ 290.096326][T14713] simple: basic_16 [ 290.100329][T14713] simple: basic_17 [ 290.104155][T14713] 0: reclassify loop, rule prio 0, protocol 800 [ 290.482943][T14753] __nla_validate_parse: 18 callbacks suppressed [ 290.482963][T14753] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2474'. [ 290.530657][T14735] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 290.539183][T14735] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 290.712594][T10088] IPVS: starting estimator thread 0... [ 290.762525][T14767] netlink: 'syz.4.2479': attribute type 20 has an invalid length. [ 290.787445][T14767] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.815738][T14762] IPVS: using max 41 ests per chain, 98400 per kthread [ 291.164310][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2487'. [ 291.988709][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 120 seconds [ 292.000124][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 120 seconds [ 292.013065][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 120 seconds [ 292.024680][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 120 seconds [ 292.625646][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 292.634172][ C1] lec:lec_tx_timeout: lec0 [ 292.639553][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.770834][T14799] veth0: entered promiscuous mode [ 292.831037][T14799] veth0: left promiscuous mode [ 293.177842][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2498'. [ 293.265314][T14841] syzkaller0: entered promiscuous mode [ 293.274538][T14841] syzkaller0: entered allmulticast mode [ 293.374174][T14846] xt_addrtype: ipv6 does not support BROADCAST matching [ 293.647791][T14863] pim6reg: entered allmulticast mode [ 293.654806][T14863] pim6reg: left allmulticast mode [ 293.663041][T14865] netlink: 'syz.2.2509': attribute type 33 has an invalid length. [ 293.952733][T14873] syzkaller0: entered promiscuous mode [ 293.959610][T14873] syzkaller0: entered allmulticast mode [ 294.071917][T14877] pimreg: entered allmulticast mode [ 295.923240][T14812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.944986][T14821] netlink: 'syz.3.2492': attribute type 1 has an invalid length. [ 295.981261][T14821] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2492'. [ 296.004970][T14821] netlink: 'syz.3.2492': attribute type 1 has an invalid length. [ 296.013380][T14821] netlink: 'syz.3.2492': attribute type 8 has an invalid length. [ 296.022224][T14821] netlink: 582 bytes leftover after parsing attributes in process `syz.3.2492'. [ 296.032714][T14821] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2492'. [ 296.053095][T14884] netlink: 'syz.0.2515': attribute type 10 has an invalid length. [ 296.072632][T14884] netlink: 396 bytes leftover after parsing attributes in process `syz.0.2515'. [ 296.256613][T14892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2519'. [ 296.274373][T14892] netlink: 'syz.4.2519': attribute type 7 has an invalid length. [ 296.314357][T14892] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 296.356773][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 296.716803][T14924] syzkaller0: entered promiscuous mode [ 296.738154][T14924] syzkaller0: entered allmulticast mode [ 296.846549][T14934] netlink: 'syz.0.2526': attribute type 2 has an invalid length. [ 296.854809][T14930] netlink: 'syz.0.2526': attribute type 2 has an invalid length. [ 297.092295][T14949] bridge0: port 3(veth0_to_bridge) entered blocking state [ 297.101722][T14949] bridge0: port 3(veth0_to_bridge) entered disabled state [ 297.127589][T14949] veth0_to_bridge: entered allmulticast mode [ 297.135307][T14949] veth0_to_bridge: entered promiscuous mode [ 297.173690][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'. [ 297.462682][T14980] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2535'. [ 297.513706][T14980] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2535'. [ 297.544216][T14980] netlink: 7896 bytes leftover after parsing attributes in process `syz.2.2535'. [ 297.756115][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 60 seconds [ 297.767488][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 60 seconds [ 297.779432][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 60 seconds [ 297.791410][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 60 seconds [ 297.866455][T14998] syzkaller0: entered promiscuous mode [ 297.883553][T14998] syzkaller0: entered allmulticast mode [ 297.910214][T14999] syzkaller0: entered promiscuous mode [ 297.924535][T14999] syzkaller0: entered allmulticast mode [ 298.306448][T15027] netlink: 'syz.4.2546': attribute type 9 has an invalid length. [ 298.320837][T15021] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.385426][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 298.393485][ C1] lec:lec_tx_timeout: lec0 [ 298.400401][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.548223][T15042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.598274][T15042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.678594][T15049] syzkaller0: entered promiscuous mode [ 298.685184][T15049] syzkaller0: entered allmulticast mode [ 298.767184][T15054] syzkaller0: entered promiscuous mode [ 298.773139][T15054] syzkaller0: entered allmulticast mode [ 299.169252][T15072] block nbd2: Unsupported socket: should be TCP or UNIX. [ 299.398496][T15094] syzkaller0: entered promiscuous mode [ 299.412850][T15094] syzkaller0: entered allmulticast mode [ 299.539161][T15096] geneve2: entered promiscuous mode [ 299.561206][T15103] pim6reg: entered allmulticast mode [ 299.577164][ T7501] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 51119 - 0 [ 299.592544][ T7501] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 51119 - 0 [ 299.644455][T15110] xt_TCPMSS: Only works on TCP SYN packets [ 299.710709][T15096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.724999][T15096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.493373][ T7501] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 51119 - 0 [ 300.630164][T15126] validate_nla: 2 callbacks suppressed [ 300.630183][T15126] netlink: 'syz.4.2578': attribute type 1 has an invalid length. [ 300.666582][T15126] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.926130][T15096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.937631][T15096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.950004][T15096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51119 - 0 [ 302.018030][T15096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.029081][T15096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.040335][T15096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51119 - 0 [ 302.118589][T15096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.129621][T15096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.140668][T15096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51119 - 0 [ 302.225036][ T7514] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.234976][ T7514] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51119 - 0 [ 302.244434][ T7514] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.260384][ T7514] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.270127][ T7514] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51119 - 0 [ 302.279413][ T7514] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.293937][ T7514] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.302626][ T7514] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51119 - 0 [ 302.311936][ T7514] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 302.328877][ T55] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.338176][ T55] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51119 - 0 [ 302.348442][ T55] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 303.415546][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.424196][ C1] lec:lec_tx_timeout: lec0 [ 303.430216][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.394257][ T5192] udevd[5192]: worker [5840] /devices/virtual/block/nbd1 is taking a long time [ 308.445517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.455224][ C1] lec:lec_tx_timeout: lec0 [ 308.460548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.475566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.484316][ C1] lec:lec_tx_timeout: lec0 [ 313.489064][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.590434][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.265511][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 319.274011][ C1] lec:lec_tx_timeout: lec0 [ 319.279353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.076918][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 150 seconds [ 322.088644][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 150 seconds [ 322.100426][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 150 seconds [ 322.112097][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 150 seconds [ 324.305537][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 324.314121][ C1] lec:lec_tx_timeout: lec0 [ 324.319380][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.831648][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 90 seconds [ 327.843112][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 90 seconds [ 327.855959][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 90 seconds [ 327.868202][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 90 seconds [ 329.325517][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.334080][ C1] lec:lec_tx_timeout: lec0 [ 329.339194][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.345507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.355304][ C1] lec:lec_tx_timeout: lec0 [ 334.360928][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.375828][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.384758][ C1] lec:lec_tx_timeout: lec0 [ 339.390240][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.406195][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.414863][ C1] lec:lec_tx_timeout: lec0 [ 344.421073][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.435904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 349.445364][ C1] lec:lec_tx_timeout: lec0 [ 349.451464][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 352.148005][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 180 seconds [ 352.159689][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 180 seconds [ 352.171119][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 180 seconds [ 352.182554][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 180 seconds [ 353.460390][ T5192] udevd[5192]: worker [5841] /devices/virtual/block/nbd0 timeout; kill it [ 353.469929][ T5192] udevd[5192]: seq 14581 '/devices/virtual/block/nbd0' killed [ 354.465519][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 354.475368][ C1] lec:lec_tx_timeout: lec0 [ 354.481187][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 357.906095][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 120 seconds [ 357.917751][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 120 seconds [ 357.929894][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 120 seconds [ 357.942332][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 120 seconds [ 360.305694][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 360.315137][ C1] lec:lec_tx_timeout: lec0 [ 360.320364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.438465][T15141] bond0: (slave rose0): Error: Device can not be enslaved while up [ 362.518769][T15151] __nla_validate_parse: 6 callbacks suppressed [ 362.518806][T15151] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2581'. [ 362.558606][T15147] syzkaller0: entered promiscuous mode [ 362.564796][T15147] syzkaller0: entered allmulticast mode [ 362.621233][T15156] netlink: 'syz.0.2585': attribute type 1 has an invalid length. [ 362.651350][T15156] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2585'. [ 362.690478][T15166] bond12: (slave vlan0): Opening slave failed [ 362.698186][T15156] netlink: 'syz.0.2585': attribute type 1 has an invalid length. [ 362.714706][T15156] netlink: 'syz.0.2585': attribute type 8 has an invalid length. [ 362.732109][T15168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2587'. [ 362.741946][T15156] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2585'. [ 362.751848][T15156] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2585'. [ 362.753931][T15169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2587'. [ 362.850493][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'. [ 363.007844][T15179] veth0_to_bond: left allmulticast mode [ 363.353205][T15203] netlink: 'syz.1.2598': attribute type 12 has an invalid length. [ 363.431458][T15211] netlink: 'syz.2.2601': attribute type 1 has an invalid length. [ 363.603363][T15211] 8021q: adding VLAN 0 to HW filter on device bond11 [ 363.655070][T15217] bond11: entered allmulticast mode [ 363.947619][T15235] vlan2: entered promiscuous mode [ 363.953333][T15235] bridge0: entered promiscuous mode [ 364.011498][T15232] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2604'. [ 364.198451][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2609'. [ 364.230385][T15251] tipc: Enabling of bearer rejected, failed to enable media [ 364.249455][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 364.723117][T15273] bond11: (slave vcan1): refused to change device type [ 365.058663][T15292] syzkaller0: entered promiscuous mode [ 365.065244][T15292] syzkaller0: entered allmulticast mode [ 365.078190][T15294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.335471][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.343968][ C1] lec:lec_tx_timeout: lec0 [ 365.348566][T15304] tipc: Started in network mode [ 365.348915][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.354305][T15304] tipc: Node identity ac14140f, cluster identity 4711 [ 365.370945][T15304] tipc: New replicast peer: 255.255.255.255 [ 365.381198][T15304] tipc: Enabled bearer , priority 10 [ 365.395100][T15304] tipc: Enabled bearer , priority 0 [ 365.472595][T15304] syzkaller0: entered promiscuous mode [ 365.480924][T15304] syzkaller0: entered allmulticast mode [ 365.489703][T15311] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 365.490050][T15304] tipc: Resetting bearer [ 365.504841][T15311] dummy0: entered promiscuous mode [ 365.519168][T15311] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 365.555130][T15303] tipc: Resetting bearer [ 365.581414][T15314] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 365.611372][T15314] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 367.667933][T15303] tipc: Disabling bearer [ 367.854978][T10088] tipc: Node number set to 2886997007 [ 367.906457][T15342] __nla_validate_parse: 7 callbacks suppressed [ 367.906476][T15342] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2635'. [ 368.121214][T15360] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2639'. [ 368.138386][T15360] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.2639'. [ 368.288529][T15371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2640'. [ 368.495187][T15386] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 368.604614][T15388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2647'. [ 368.802480][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 369.083827][T15413] syzkaller0: entered promiscuous mode [ 369.091268][T15413] syzkaller0: entered allmulticast mode [ 369.188576][T15420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2660'. [ 369.326337][T15432] sctp: [Deprecated]: syz.3.2661 (pid 15432) Use of int in maxseg socket option. [ 369.326337][T15432] Use struct sctp_assoc_value instead [ 369.542358][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.584577][T15440] lo: Caught tx_queue_len zero misconfig [ 369.680149][T15450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2668'. [ 369.691089][T15452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 369.906101][T15464] veth0_to_team: Caught tx_queue_len zero misconfig [ 370.018895][T15477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2676'. [ 370.306807][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 370.360135][T15493] gre0: left promiscuous mode [ 370.365134][T15493] gre0: left allmulticast mode [ 370.370121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.370197][ C1] lec:lec_tx_timeout: lec0 [ 370.379616][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.411213][T15493] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 370.416419][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 370.457239][T15503] netlink: 'syz.2.2680': attribute type 2 has an invalid length. [ 370.586515][T15509] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 370.609667][T15509] bond8: (slave lo): Enslaving as an active interface with an up link [ 370.624186][T15509] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 370.846772][T15523] netlink: 'syz.4.2692': attribute type 7 has an invalid length. [ 370.864218][T15523] netlink: 'syz.4.2692': attribute type 8 has an invalid length. [ 372.173815][T15604] syzkaller0: entered promiscuous mode [ 372.190460][T15604] syzkaller0: entered allmulticast mode [ 372.788132][T15637] bridge_slave_0: entered promiscuous mode [ 372.979863][T15645] __nla_validate_parse: 12 callbacks suppressed [ 372.979885][T15645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 373.069225][T15646] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 373.131803][T15646] bond9 (unregistering): Released all slaves [ 373.211348][T15658] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002 [ 373.278304][T15661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2734'. [ 373.330790][T15663] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 373.357315][T15663] bond12 (unregistering): Released all slaves [ 373.371018][T15669] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2735'. [ 373.454318][T15669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.474702][T15669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.510467][T15669] bond0 (unregistering): Released all slaves [ 373.571327][T15681] syzkaller0: entered promiscuous mode [ 373.626058][T15681] syzkaller0: entered allmulticast mode [ 373.934823][T15699] nft_compat: unsupported protocol 0 [ 374.263267][T15703] syzkaller0: entered promiscuous mode [ 374.271537][T15703] syzkaller0: entered allmulticast mode [ 375.388891][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.399131][ C1] lec:lec_tx_timeout: lec0 [ 375.404819][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.718708][T15736] syzkaller0: entered promiscuous mode [ 376.725153][T15736] syzkaller0: entered allmulticast mode [ 376.822599][T15740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2753'. [ 376.857892][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2754'. [ 376.861330][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 376.908362][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 376.966599][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2753'. [ 377.026783][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 377.046260][T15750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2753'. [ 377.265208][T15773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.300743][T15773] : (slave batadv0): Releasing backup interface [ 377.338099][T15773] batadv0: left promiscuous mode [ 377.366146][T15759] tipc: Enabling of bearer rejected, failed to enable media [ 377.728566][T15794] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 377.955652][T15810] x_tables: unsorted entry at hook 2 [ 378.359785][T15829] __nla_validate_parse: 2 callbacks suppressed [ 378.359806][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2775'. [ 378.889270][T15856] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2782'. [ 378.997192][T15861] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2784'. [ 379.033065][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.113686][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 379.127043][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2781'. [ 379.130422][T15871] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 379.154142][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2781'. [ 379.166094][T15851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2781'. [ 379.290423][T15878] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 379.349497][T15878] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 379.389983][T15883] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 379.471339][T15878] netlink: 512 bytes leftover after parsing attributes in process `syz.4.2788'. [ 380.415470][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.430128][ C1] lec:lec_tx_timeout: lec0 [ 380.438550][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.501187][T15936] netlink: 'syz.3.2798': attribute type 4 has an invalid length. [ 380.743888][T15945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2802'. [ 380.817325][T15950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.105832][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 381.134729][T15967] bond5: option mode: unable to set because the bond device has slaves [ 381.182592][T15967] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 381.381057][T15973] tipc: New replicast peer: 100.1.1.0 [ 381.395674][T15973] tipc: Enabled bearer , priority 10 [ 381.638312][T15996] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 382.078258][T16018] netlink: 'syz.4.2823': attribute type 22 has an invalid length. [ 382.096697][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 382.227126][T16018] netlink: 'syz.4.2823': attribute type 22 has an invalid length. [ 382.228883][ T7514] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.238163][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 210 seconds [ 382.267871][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 210 seconds [ 382.282260][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 210 seconds [ 382.296997][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 210 seconds [ 382.328589][ T7514] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.378001][T16031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.423139][ T7514] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.485259][ T7514] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.671937][T16043] syzkaller0: entered promiscuous mode [ 382.702060][T16043] syzkaller0: entered allmulticast mode [ 382.834382][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.854309][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.868124][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.883154][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.897092][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.387223][ T5835] syz_tun (unregistering): left promiscuous mode [ 383.752332][T16083] bond12: Removing last ns target with arp_interval on [ 384.051180][T16100] netlink: 'syz.1.2847': attribute type 83 has an invalid length. [ 384.060933][T16097] syzkaller0: entered promiscuous mode [ 384.090302][T16097] syzkaller0: entered allmulticast mode [ 384.214234][T16111] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 384.380772][T16048] chnl_net:caif_netlink_parms(): no params data found [ 384.574748][T16133] __nla_validate_parse: 2 callbacks suppressed [ 384.574766][T16133] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2852'. [ 384.591392][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.604633][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.613165][T16048] bridge_slave_0: entered allmulticast mode [ 384.622038][T16048] bridge_slave_0: entered promiscuous mode [ 384.633409][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.641277][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.649359][T16048] bridge_slave_1: entered allmulticast mode [ 384.663227][T16048] bridge_slave_1: entered promiscuous mode [ 384.716663][T16048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.740558][T16048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.777083][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2856'. [ 384.795327][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2856'. [ 384.818775][T16048] team0: Port device team_slave_0 added [ 384.840110][T16146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2857'. [ 384.841768][T16048] team0: Port device team_slave_1 added [ 384.853455][T16146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2857'. [ 384.911029][T16048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.935853][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.966263][ T5833] Bluetooth: hci5: command tx timeout [ 384.979440][T16146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2857'. [ 384.987954][T16048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.990357][T16146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2857'. [ 385.002637][T16048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.019386][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.047508][T16048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.117189][T16048] hsr_slave_0: entered promiscuous mode [ 385.131645][T16048] hsr_slave_1: entered promiscuous mode [ 385.156960][T16146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2857'. [ 385.175703][T16146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2857'. [ 385.373480][T16048] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.385865][T16048] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.465433][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 385.473761][ C1] lec:lec_tx_timeout: lec0 [ 385.479658][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.514686][T16048] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.537321][T16048] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.762518][T16048] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.794874][T16048] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.017866][T16048] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.038274][T16048] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.121378][T16201] bond0: (slave rose0): Error: Device can not be enslaved while up [ 386.143719][T16200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.290326][T16206] netlink: 'syz.1.2873': attribute type 32 has an invalid length. [ 386.310493][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'. [ 386.356618][T16209] netlink: 'syz.1.2873': attribute type 2 has an invalid length. [ 386.364657][T16209] netlink: 'syz.1.2873': attribute type 1 has an invalid length. [ 386.490605][T16206] bond14: option coupled_control: invalid value (52) [ 386.517411][T16206] bond14 (unregistering): Released all slaves [ 386.723400][T16227] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 386.823133][T16227] 8021q: adding VLAN 0 to HW filter on device bond14 [ 386.850565][T16227] netlink: 'syz.1.2880': attribute type 1 has an invalid length. [ 386.973801][T16048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 387.017020][T16048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.025773][ T5833] Bluetooth: hci5: command tx timeout [ 387.041440][T16048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.050635][T16235] netlink: 'syz.1.2882': attribute type 13 has an invalid length. [ 387.073395][T16048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.117818][T16235] gretap0: refused to change device tx_queue_len [ 387.124676][T16235] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 387.511383][T16252] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 387.518356][T16250] vxcan0: entered allmulticast mode [ 387.597625][T16048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.652072][T16048] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.850681][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.858447][ T7514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.882617][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.890025][ T7514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.986502][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 150 seconds [ 388.005098][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 150 seconds [ 388.018496][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 150 seconds [ 388.031502][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 150 seconds [ 388.070539][T16048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.512712][T16048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.107498][ T5833] Bluetooth: hci5: command tx timeout [ 389.467539][T16048] veth0_vlan: entered promiscuous mode [ 389.504914][T16048] veth1_vlan: entered promiscuous mode [ 389.598685][T16315] netlink: 'syz.3.2904': attribute type 12 has an invalid length. [ 389.610284][T16048] veth0_macvtap: entered promiscuous mode [ 389.630911][T16317] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 389.641919][T16048] veth1_macvtap: entered promiscuous mode [ 389.684634][T16315] bond12: option primary_reselect: invalid value (255) [ 389.701188][T16315] bond12 (unregistering): Released all slaves [ 389.740826][T16326] __nla_validate_parse: 6 callbacks suppressed [ 389.740847][T16326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2906'. [ 389.777338][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2906'. [ 389.800887][T16048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.840472][T16048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.904521][ T7502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.929223][ T7502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.992401][ T7502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.013051][ T7502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.259011][ T7502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.271605][ T7502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.571452][T16340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2910'. [ 390.638002][T16341] Cannot find set identified by id 3 to match [ 390.656334][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 390.666085][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 390.755988][T16340] bridge5: port 1(veth0_to_bond) entered blocking state [ 390.768171][T16340] bridge5: port 1(veth0_to_bond) entered disabled state [ 390.787057][T16340] veth0_to_bond: entered allmulticast mode [ 390.800551][T16340] veth0_to_bond: entered promiscuous mode [ 390.827420][ T7502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.839743][ T7502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.882590][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 390.917805][T16348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2912'. [ 391.012305][T16356] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2915'. [ 391.187629][ T5833] Bluetooth: hci5: command tx timeout [ 391.265429][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 391.274273][ C1] lec:lec_tx_timeout: lec0 [ 391.280663][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.360948][T16381] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 391.371616][T16383] bridge0: Device is already in use. [ 391.374972][T16377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'. [ 391.570287][T16393] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 391.864471][T16359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.305683][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 396.314007][ C1] lec:lec_tx_timeout: lec0 [ 396.319207][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.335956][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 401.345934][ C1] lec:lec_tx_timeout: lec0 [ 401.351466][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.365738][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.373785][ C1] lec:lec_tx_timeout: lec0 [ 406.379311][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.386016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 411.394453][ C1] lec:lec_tx_timeout: lec0 [ 411.399500][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 412.307521][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 240 seconds [ 412.319526][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 240 seconds [ 412.331360][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 240 seconds [ 412.344617][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 240 seconds [ 416.415628][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.423925][ C1] lec:lec_tx_timeout: lec0 [ 416.428973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 418.067822][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 180 seconds [ 418.079510][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 180 seconds [ 418.090834][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 180 seconds [ 418.102444][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 180 seconds [ 418.840629][ T5192] udevd[5192]: worker [5840] /devices/virtual/block/nbd1 timeout; kill it [ 418.850949][ T5192] udevd[5192]: seq 17954 '/devices/virtual/block/nbd1' killed [ 421.435567][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 421.444123][ C1] lec:lec_tx_timeout: lec0 [ 421.448908][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.455522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 426.464145][ C1] lec:lec_tx_timeout: lec0 [ 426.468829][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.475826][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 431.483958][ C1] lec:lec_tx_timeout: lec0 [ 440.468587][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.476977][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 442.396053][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 270 seconds [ 442.407919][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 270 seconds [ 442.419965][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 270 seconds [ 442.431189][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 270 seconds [ 445.485696][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.493836][ C1] lec:lec_tx_timeout: lec0 [ 448.146969][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 210 seconds [ 448.158562][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 210 seconds [ 448.170752][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 210 seconds [ 448.183111][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 210 seconds [ 453.298383][T16420] netlink: zone id is out of range [ 453.305348][T16420] netlink: zone id is out of range [ 453.312099][T16420] netlink: zone id is out of range [ 453.318221][T16420] netlink: zone id is out of range [ 453.323717][T16420] netlink: zone id is out of range [ 453.346841][T16420] netlink: zone id is out of range [ 453.375672][T16420] netlink: zone id is out of range [ 453.391197][T16430] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2926'. [ 453.439268][T16420] netlink: zone id is out of range [ 453.500093][T16420] netlink: zone id is out of range [ 453.554315][T16420] netlink: zone id is out of range [ 453.671609][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'. [ 453.963210][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2934'. [ 454.142010][T16422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.238446][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'. [ 454.329250][T16468] tap0: tun_chr_ioctl cmd 1074025678 [ 454.334868][T16468] tap0: group set to 0 [ 454.371825][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 454.401094][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.412208][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.422876][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.433923][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.445702][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.509451][T16481] netlink: 'syz.4.2943': attribute type 4 has an invalid length. [ 454.518338][T16481] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2943'. [ 454.578060][T16485] netlink: 'syz.4.2943': attribute type 4 has an invalid length. [ 454.602427][T16485] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2943'. [ 454.970693][ T5830] syz_tun (unregistering): left promiscuous mode [ 455.414455][T16532] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 455.554645][T16538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2961'. [ 455.628835][T16478] chnl_net:caif_netlink_parms(): no params data found [ 455.651533][T16544] vcan0: Caught tx_queue_len zero misconfig [ 455.703981][T16543] batadv_slave_0: entered promiscuous mode [ 455.793042][T16548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2964'. [ 455.813669][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 455.936614][T16478] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.945032][T16478] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.960350][T16478] bridge_slave_0: entered allmulticast mode [ 455.969530][T16478] bridge_slave_0: entered promiscuous mode [ 455.978705][T16542] batadv_slave_0: left promiscuous mode [ 455.986818][T16478] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.994539][T16478] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.031795][T16478] bridge_slave_1: entered allmulticast mode [ 456.045994][T16564] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 456.050980][T16478] bridge_slave_1: entered promiscuous mode [ 456.096905][T16564] netlink: 'syz.4.2968': attribute type 7 has an invalid length. [ 456.122421][T16564] netlink: 'syz.4.2968': attribute type 8 has an invalid length. [ 456.156597][T16570] netlink: 'syz.2.2970': attribute type 58 has an invalid length. [ 456.221734][T16478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.254859][T16478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.383863][T16576] sctp: [Deprecated]: syz.4.2974 (pid 16576) Use of int in maxseg socket option. [ 456.383863][T16576] Use struct sctp_assoc_value instead [ 456.451182][T16478] team0: Port device team_slave_0 added [ 456.482754][T16478] team0: Port device team_slave_1 added [ 456.549177][ T5833] Bluetooth: hci4: command tx timeout [ 456.663323][T16478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.686837][T16478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.781188][T16478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.791886][T16601] netlink: 'syz.4.2981': attribute type 1 has an invalid length. [ 456.838419][T16478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.856768][T16478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.886303][T16478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.072488][T16620] netlink: 'syz.0.2985': attribute type 83 has an invalid length. [ 457.087559][T16623] netlink: 'syz.0.2985': attribute type 83 has an invalid length. [ 457.101208][T16478] hsr_slave_0: entered promiscuous mode [ 457.114527][T16478] hsr_slave_1: entered promiscuous mode [ 457.167781][T16478] debugfs: 'hsr0' already exists in 'hsr' [ 457.173554][T16478] Cannot create hsr debugfs directory [ 457.362953][T16622] syzkaller0: entered promiscuous mode [ 457.368912][T16622] syzkaller0: entered allmulticast mode [ 457.493329][T11200] lec:lec_start_xmit: lec0:No lecd attached [ 457.919220][T16666] netlink: 'syz.1.2992': attribute type 10 has an invalid length. [ 458.628665][ T5833] Bluetooth: hci4: command tx timeout [ 459.592218][T16478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.608097][T16478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.681500][T16478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.693100][T16478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.776271][T16478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.788212][T16478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.849732][T16478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.860566][T16478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.707238][ T5833] Bluetooth: hci4: command tx timeout [ 460.733544][T16660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.768188][T16478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.900070][T16478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.939163][T16478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.986281][T16478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.224132][T16478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.259737][T16478] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.334844][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.342334][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.348002][T16736] netlink: 'syz.1.3007': attribute type 1 has an invalid length. [ 461.359333][T16736] __nla_validate_parse: 3 callbacks suppressed [ 461.359348][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3007'. [ 461.381709][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3006'. [ 461.416677][T16736] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3007'. [ 461.444188][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.452101][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.452661][T16736] netlink: 'syz.1.3007': attribute type 1 has an invalid length. [ 461.682482][T16753] netlink: 'syz.0.3012': attribute type 14 has an invalid length. [ 461.719139][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 461.976045][T16771] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 462.109034][T16478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.136979][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3019'. [ 462.318608][T16478] veth0_vlan: entered promiscuous mode [ 462.393310][T16478] veth1_vlan: entered promiscuous mode [ 462.402500][T16789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3023'. [ 462.499202][T16478] veth0_macvtap: entered promiscuous mode [ 462.527073][T16478] veth1_macvtap: entered promiscuous mode [ 462.600395][T16478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.682209][T16478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.761675][T16803] bridge_slave_0: left allmulticast mode [ 462.769271][T16803] bridge_slave_0: left promiscuous mode [ 462.775449][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.786200][ T5833] Bluetooth: hci4: command tx timeout [ 462.796708][T16803] bridge_slave_1: left allmulticast mode [ 462.803055][T16803] bridge_slave_1: left promiscuous mode [ 462.810031][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.831147][T16803] bond0: (slave bond_slave_0): Releasing backup interface [ 462.846457][T16803] bond0: (slave bond_slave_1): Releasing backup interface [ 462.865347][T16803] team0: Port device team_slave_0 removed [ 462.878596][T16803] team0: Port device team_slave_1 removed [ 462.886405][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.895189][T16803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.909673][T16810] xt_policy: too many policy elements [ 462.922139][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.932694][T16803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.946615][ T30] audit: type=1804 audit(1773934418.349:5): pid=16810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3027" name="/newroot/619/cgroup.controllers" dev="tmpfs" ino=3164 res=1 errno=0 [ 462.971890][ T30] audit: type=1800 audit(1773934418.349:6): pid=16810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3027" name="cgroup.controllers" dev="tmpfs" ino=3164 res=0 errno=0 [ 463.013451][T16803] net_ratelimit: 47 callbacks suppressed [ 463.013543][T16803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.094071][ T152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.141989][ T152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.204580][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.218344][ T152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.265742][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 463.274095][ C1] lec:lec_tx_timeout: lec0 [ 463.477181][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.499044][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.583243][T16841] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3037'. [ 463.606243][ T7510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.621023][ T7510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.844751][T16861] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3040'. [ 463.881749][T16861] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3040'. [ 463.902603][T16861] netlink: 'syz.0.3040': attribute type 5 has an invalid length. [ 463.924823][T16861] netlink: 'syz.0.3040': attribute type 6 has an invalid length. [ 463.975759][T16861] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3040'. [ 464.254081][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.266260][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.293586][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.303981][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.319740][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.560891][T16899] x_tables: unsorted underflow at hook 2 [ 465.045903][T16918] netlink: 'syz.2.3057': attribute type 1 has an invalid length. [ 465.096924][T16918] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 465.111215][T16918] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 465.122222][T16918] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 465.251191][T16920] bond13: (slave vcan0): The slave device specified does not support setting the MAC address [ 465.282284][T16920] bond13: (slave vcan0): making interface the new active one [ 465.291455][T16920] bond13: (slave vcan0): Enslaving as an active interface with an up link [ 465.316545][T16884] chnl_net:caif_netlink_parms(): no params data found [ 465.495359][T16884] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.504113][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.518194][T16884] bridge_slave_0: entered allmulticast mode [ 465.527041][T16884] bridge_slave_0: entered promiscuous mode [ 465.537083][T16928] tipc: Started in network mode [ 465.542168][T16928] tipc: Node identity 668dba4f6ebd, cluster identity 4711 [ 465.551067][T16928] tipc: Enabled bearer , priority 0 [ 465.593449][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.617273][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.624830][T16884] bridge_slave_1: entered allmulticast mode [ 465.656549][T16884] bridge_slave_1: entered promiscuous mode [ 465.686163][T16924] tipc: Disabling bearer [ 465.720795][T16935] netlink: 'syz.4.3061': attribute type 21 has an invalid length. [ 465.840822][T16884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.875183][T16884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.026172][T16884] team0: Port device team_slave_0 added [ 466.044005][T16884] team0: Port device team_slave_1 added [ 466.157484][T16884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.164618][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.193076][T16884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.216181][T16884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.223412][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.251677][T16967] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 466.267022][T16884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.308078][T16967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.373898][T16976] __nla_validate_parse: 3 callbacks suppressed [ 466.373916][T16976] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3073'. [ 466.391568][ T5833] Bluetooth: hci3: command tx timeout [ 466.443631][T16884] hsr_slave_0: entered promiscuous mode [ 466.458983][T16884] hsr_slave_1: entered promiscuous mode [ 466.468850][T16884] debugfs: 'hsr0' already exists in 'hsr' [ 466.474744][T16884] Cannot create hsr debugfs directory [ 466.484696][T16979] x_tables: duplicate underflow at hook 1 [ 466.491606][T16980] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 466.507420][T16979] sctp: [Deprecated]: syz.2.3074 (pid 16979) Use of int in max_burst socket option deprecated. [ 466.507420][T16979] Use struct sctp_assoc_value instead [ 466.732939][T16993] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3078'. [ 466.845285][T16998] ipvlan2: entered allmulticast mode [ 466.855281][T16998] batadv_slave_1: entered allmulticast mode [ 466.864049][T16998] batman_adv: batadv0: Adding interface: ipvlan2 [ 466.871935][T16998] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.898815][T16998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.910780][T16998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.923430][T16998] batman_adv: batadv0: Interface activated: ipvlan2 [ 466.999734][T16884] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.020371][T16884] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.114000][T16884] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.126048][T16884] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.252290][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'. [ 467.263170][T17014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.273431][T16884] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.273484][T16884] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.315274][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 467.316600][T17017] syzkaller0: entered promiscuous mode [ 467.331217][T17017] syzkaller0: entered allmulticast mode [ 467.436282][T16884] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.447477][T16884] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 467.550242][T17020] tipc: Enabled bearer , priority 0 [ 467.587458][T17020] syzkaller0: entered promiscuous mode [ 467.593068][T17020] syzkaller0: entered allmulticast mode [ 467.736506][T17035] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3091'. [ 467.768340][T17020] tipc: Resetting bearer [ 467.834457][T17019] tipc: Resetting bearer [ 467.883403][T17019] tipc: Disabling bearer [ 467.949860][T16884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 467.990138][T16884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 468.034730][T16884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 468.044420][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 468.068736][T16884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 468.085365][T17056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 468.119373][T17054] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 468.131326][T17054] bridge0: entered allmulticast mode [ 468.298091][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3101'. [ 468.309850][T17073] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3101'. [ 468.330542][T16884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.392695][T16884] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.407094][ T7521] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.414381][ T7521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.447786][ T7521] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.455771][ T7521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.468634][ T5833] Bluetooth: hci3: command tx timeout [ 468.679601][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 468.847270][T17093] netlink: 'syz.4.3113': attribute type 1 has an invalid length. [ 468.892242][T17099] : renamed from geneve0 [ 469.061716][T16884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.264619][T16884] veth0_vlan: entered promiscuous mode [ 469.289533][T16884] veth1_vlan: entered promiscuous mode [ 469.340907][T16884] veth0_macvtap: entered promiscuous mode [ 469.368244][T16884] veth1_macvtap: entered promiscuous mode [ 469.443663][T16884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.476601][T16884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.500062][ T7514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.535936][ T7514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.619974][ T7514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.660693][ T7514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.546114][ T5833] Bluetooth: hci3: command tx timeout [ 472.422947][T17134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.468966][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 300 seconds [ 472.481229][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 300 seconds [ 472.492874][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 300 seconds [ 472.504811][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 300 seconds [ 472.557351][ T7521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.566080][ T7521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.621507][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.630941][ T5833] Bluetooth: hci3: command tx timeout [ 472.650098][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.202056][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.214930][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.225486][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.233496][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.242962][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.351122][T17192] __nla_validate_parse: 3 callbacks suppressed [ 473.351150][T17192] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3138'. [ 473.852913][T17208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3143'. [ 473.880595][T17208] netlink: 'syz.1.3143': attribute type 7 has an invalid length. [ 473.898669][T17208] netlink: 'syz.1.3143': attribute type 8 has an invalid length. [ 473.920535][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3143'. [ 473.975231][T17208] syz_tun: entered promiscuous mode [ 473.988164][T17208] gretap0: entered promiscuous mode [ 473.998539][T17208] erspan0: entered promiscuous mode [ 474.007622][T17208] debugfs: 'hsr1' already exists in 'hsr' [ 474.013631][T17208] Cannot create hsr debugfs directory [ 474.074753][T17211] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.082435][T17211] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.144410][T17211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.161615][T17211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.258705][ T7514] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.320484][ T7517] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.345580][ T7517] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.371027][T17218] netlink: 'syz.1.3146': attribute type 4 has an invalid length. [ 474.378975][ T7517] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.436473][T17223] netlink: 'syz.1.3146': attribute type 4 has an invalid length. [ 474.538039][T17233] netlink: 'syz.4.3149': attribute type 10 has an invalid length. [ 474.561388][T17218] geneve2: entered promiscuous mode [ 474.568373][T17218] geneve2: entered allmulticast mode [ 474.592051][ T7510] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.602827][ T7510] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.630042][T17233] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 474.668288][ T7521] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.697466][ T7521] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 474.812625][T17184] chnl_net:caif_netlink_parms(): no params data found [ 475.172718][T17252] netlink: 'syz.3.3153': attribute type 5 has an invalid length. [ 475.200450][T17184] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.209041][T17184] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.217648][T17184] bridge_slave_0: entered allmulticast mode [ 475.225857][T17184] bridge_slave_0: entered promiscuous mode [ 475.235374][T17184] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.243109][T17184] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.250694][T17184] bridge_slave_1: entered allmulticast mode [ 475.259183][T17184] bridge_slave_1: entered promiscuous mode [ 475.297847][T17184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.312332][T17184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.353038][ T5833] Bluetooth: hci1: command tx timeout [ 475.357544][T17267] netlink: 'syz.3.3157': attribute type 10 has an invalid length. [ 475.394966][T17267] team0: Port device dummy0 added [ 475.403641][T17184] team0: Port device team_slave_0 added [ 475.432127][T17184] team0: Port device team_slave_1 added [ 475.469114][T17184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.476862][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.525368][T17184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.539718][T17184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.548173][T17184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.582424][T17184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.661909][T17184] hsr_slave_0: entered promiscuous mode [ 475.698481][T17184] hsr_slave_1: entered promiscuous mode [ 475.705062][T17184] debugfs: 'hsr0' already exists in 'hsr' [ 475.720086][T17184] Cannot create hsr debugfs directory [ 475.868149][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 476.065583][T17298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3168'. [ 476.388857][T17305] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3170'. [ 476.430030][T17310] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 476.617468][T17321] openvswitch: netlink: IP tunnel dst address not specified [ 476.798803][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3179'. [ 477.230203][T17355] tc_dump_action: action bad kind [ 477.263517][T17184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.294506][T17184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.329039][T17366] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3187'. [ 477.359684][T17184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.375800][T17366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3187'. [ 477.410611][T17184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.425904][ T5833] Bluetooth: hci1: command tx timeout [ 477.495006][T17379] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 477.663968][T17389] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 477.723096][T17184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.786807][T17184] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.814419][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.822073][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.863918][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.871167][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.941970][ T5487] veth0_vlan: left promiscuous mode [ 477.967505][ T5487] veth0_vlan: entered promiscuous mode [ 478.012580][T17184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.229351][ T11] block nbd1: Possible stuck request ffff888026b18000: control (read@0,1024B). Runtime 240 seconds [ 478.242036][ T11] block nbd1: Possible stuck request ffff888026b18200: control (read@1024,1024B). Runtime 240 seconds [ 478.258633][ T11] block nbd1: Possible stuck request ffff888026b18400: control (read@2048,1024B). Runtime 240 seconds [ 478.271240][ T11] block nbd1: Possible stuck request ffff888026b18600: control (read@3072,1024B). Runtime 240 seconds [ 478.366041][T17399] bond0: entered promiscuous mode [ 478.371128][T17399] bond_slave_0: entered promiscuous mode [ 478.388879][T17399] bond_slave_1: entered promiscuous mode [ 478.484481][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3195'. [ 478.513730][T17409] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 478.548870][T17407] syzkaller0: entered promiscuous mode [ 478.555108][T17407] syzkaller0: entered allmulticast mode [ 478.568999][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 478.622019][T17409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.668605][T17411] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 478.698502][T17411] bond1: entered allmulticast mode [ 478.836504][T17417] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 478.877620][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3197'. [ 478.899636][T17184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.971577][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3197'. [ 478.981676][ T7517] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.042940][ T7517] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.101078][ T7517] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.199571][T17448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3200'. [ 479.209639][ T7517] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.353526][T17184] veth0_vlan: entered promiscuous mode [ 479.394509][T17184] veth1_vlan: entered promiscuous mode [ 479.506288][ T5833] Bluetooth: hci1: command tx timeout [ 479.541937][T17184] veth0_macvtap: entered promiscuous mode [ 479.554237][T17184] veth1_macvtap: entered promiscuous mode [ 479.576358][T17184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.589678][T17184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.715985][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.740699][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.760754][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.804101][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.819676][T17476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3210'. [ 479.846926][T17476] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3210'. [ 479.857684][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 480.034200][ T7521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.106622][ T7521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.210002][ T7514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.248988][ T7514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.510149][T17502] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 480.654834][T17519] xt_socket: unknown flags 0xe4 [ 480.721104][T17519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.848036][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.860240][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.871848][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.882437][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.893521][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.933615][T17533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3223'. [ 481.586122][ T51] Bluetooth: hci1: command tx timeout [ 481.933069][T17525] chnl_net:caif_netlink_parms(): no params data found [ 481.942233][T17570] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3235'. [ 482.092328][T17574] block nbd0: reconnected socket [ 482.093018][ T5833] block nbd0: Receive control failed (result -107) [ 482.164725][T17584] netlink: 'syz.2.3239': attribute type 1 has an invalid length. [ 482.266748][T17525] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.277858][T17525] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.316938][T17525] bridge_slave_0: entered allmulticast mode [ 482.355042][T17525] bridge_slave_0: entered promiscuous mode [ 482.377055][T17525] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.394417][T17525] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.411003][T17525] bridge_slave_1: entered allmulticast mode [ 482.420358][T17525] bridge_slave_1: entered promiscuous mode [ 482.474039][T17525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.522007][T17525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.617338][T17525] team0: Port device team_slave_0 added [ 482.769075][T17598] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.776763][T17598] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.890888][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.918295][T17598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.946999][ T5833] Bluetooth: hci2: command tx timeout [ 483.033451][T17525] team0: Port device team_slave_1 added [ 483.127345][T17611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 483.148646][T17611] team0: Device macvlan2 is already an upper device of the team interface [ 483.184238][T17619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.198713][ T7517] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.210163][ T7517] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.221000][T17525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.228992][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.257728][T17525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.270381][ T7517] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.280176][ T7517] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.291879][T17525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.300090][T17525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.327440][T17525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.464811][T17525] hsr_slave_0: entered promiscuous mode [ 483.490990][T17525] hsr_slave_1: entered promiscuous mode [ 483.498508][T17525] debugfs: 'hsr0' already exists in 'hsr' [ 483.504535][T17525] Cannot create hsr debugfs directory [ 483.511855][T17627] __nla_validate_parse: 2 callbacks suppressed [ 483.511872][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 483.532588][T17629] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3253'. [ 483.716886][T17633] ipt_REJECT: TCP_RESET invalid for non-tcp [ 483.782917][T17525] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.800543][T17525] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51119 - 0 [ 483.821043][T17525] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 483.961826][T17525] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.973729][T17525] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51119 - 0 [ 483.997403][T17525] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.058756][T17651] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3261'. [ 484.137819][T17525] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.169497][T17525] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51119 - 0 [ 484.191739][T17525] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.277135][T17663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3264'. [ 484.294220][T17663] netlink: 'syz.2.3264': attribute type 7 has an invalid length. [ 484.315067][T17663] netlink: 'syz.2.3264': attribute type 8 has an invalid length. [ 484.338427][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3264'. [ 484.421757][T17667] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3267'. [ 484.432818][T17667] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 484.488757][T17663] syz_tun: entered promiscuous mode [ 484.500443][T17663] gretap0: entered promiscuous mode [ 484.508681][T17663] erspan0: entered promiscuous mode [ 484.515861][T17663] debugfs: 'hsr1' already exists in 'hsr' [ 484.522718][T17663] Cannot create hsr debugfs directory [ 484.529920][T17663] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 484.541352][T17663] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 484.553229][T17663] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 484.567649][T17525] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.579028][T17525] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51119 - 0 [ 484.607657][T17525] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.872536][T17688] netlink: 'syz.1.3274': attribute type 2 has an invalid length. [ 484.930277][T17688] 9: entered promiscuous mode [ 485.028750][ T5833] Bluetooth: hci2: command tx timeout [ 485.037823][T17525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 485.061014][T17696] syzkaller0: entered promiscuous mode [ 485.068255][T17696] syzkaller0: entered allmulticast mode [ 485.073177][T17698] ieee802154 phy1 wpan1: encryption failed: -22 [ 485.095609][T17525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 485.111790][T17525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 485.131597][T17525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 485.330383][T17525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.342394][T17718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3282'. [ 485.369692][T17525] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.377247][T17718] netlink: 'syz.4.3282': attribute type 7 has an invalid length. [ 485.395051][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.396244][T17718] netlink: 'syz.4.3282': attribute type 8 has an invalid length. [ 485.402623][ T7510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.410910][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'. [ 485.454118][T17718] syz_tun: entered promiscuous mode [ 485.461583][T17718] gretap0: entered promiscuous mode [ 485.469408][T17718] erspan0: entered promiscuous mode [ 485.477427][T17718] debugfs: 'hsr1' already exists in 'hsr' [ 485.483239][T17718] Cannot create hsr debugfs directory [ 485.493204][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.500982][ T7510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.890785][T17746] netlink: 'syz.4.3290': attribute type 1 has an invalid length. [ 485.905212][T17746] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3290'. [ 485.927734][T17749] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3291'. [ 485.979867][T17525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.099218][T17759] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 486.168981][T17525] veth0_vlan: entered promiscuous mode [ 486.215228][T17525] veth1_vlan: entered promiscuous mode [ 486.359734][T17773] FAULT_INJECTION: forcing a failure. [ 486.359734][T17773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.364628][T17525] veth0_macvtap: entered promiscuous mode [ 486.405319][T17773] CPU: 1 UID: 0 PID: 17773 Comm: syz.4.3298 Not tainted syzkaller #0 PREEMPT(full) [ 486.405345][T17773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.405361][T17773] Call Trace: [ 486.405438][T17773] [ 486.405455][T17773] dump_stack_lvl+0xe8/0x150 [ 486.405586][T17773] should_fail_ex+0x412/0x560 [ 486.405692][T17773] _copy_from_user+0x2d/0xb0 [ 486.405778][T17773] ___sys_sendmsg+0x1c6/0x360 [ 486.405890][T17773] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.405966][T17773] ? __fget_files+0x2a/0x420 [ 486.406012][T17773] ? __fget_files+0x3a0/0x420 [ 486.406045][T17773] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.406066][T17773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.406089][T17773] ? __pfx_ksys_write+0x10/0x10 [ 486.406125][T17773] do_syscall_64+0x14d/0xf80 [ 486.406197][T17773] ? trace_irq_disable+0x3b/0x150 [ 486.406244][T17773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.406275][T17773] ? clear_bhb_loop+0x40/0x90 [ 486.406297][T17773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.406324][T17773] RIP: 0033:0x7ff99019c799 [ 486.406371][T17773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.406387][T17773] RSP: 002b:00007ff991115028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.406436][T17773] RAX: ffffffffffffffda RBX: 00007ff990415fa0 RCX: 00007ff99019c799 [ 486.406450][T17773] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 486.406461][T17773] RBP: 00007ff991115090 R08: 0000000000000000 R09: 0000000000000000 [ 486.406473][T17773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.406483][T17773] R13: 00007ff990416038 R14: 00007ff990415fa0 R15: 00007fff4110d088 [ 486.406514][T17773] [ 486.422333][T17525] veth1_macvtap: entered promiscuous mode [ 486.891252][T17525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.914036][T17525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.035319][ T7501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.053950][T17811] macsec1: entered promiscuous mode [ 487.084544][ T7501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.087277][T17812] openvswitch: netlink: Message has 4 unknown bytes. [ 487.110095][ T5833] Bluetooth: hci2: command tx timeout [ 487.154177][ T7501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.173772][ T7501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.355001][ T7521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.359227][T17820] syzkaller0: entered promiscuous mode [ 487.386868][T17820] syzkaller0: entered allmulticast mode [ 487.390869][ T7521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.601903][ T7514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.616880][ T7514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.739701][T17843] Cannot find set identified by id 0 to match [ 487.832287][T17848] netlink: 'syz.4.3319': attribute type 2 has an invalid length. [ 487.845490][T17848] netlink: 'syz.4.3319': attribute type 3 has an invalid length. [ 488.039029][T17861] xt_HMARK: proto mask must be zero with L3 mode [ 488.316612][T17874] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 488.551584][T17886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.710409][T17900] __nla_validate_parse: 6 callbacks suppressed [ 488.710431][T17900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3337'. [ 488.734457][T17900] netlink: 372 bytes leftover after parsing attributes in process `syz.1.3337'. [ 489.030332][T17917] syzkaller0: entered promiscuous mode [ 489.045876][T17917] syzkaller0: entered allmulticast mode [ 489.186589][ T5833] Bluetooth: hci2: command tx timeout [ 489.293613][T17936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3347'. [ 489.326046][T17936] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3347'. [ 489.335356][T17936] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3347'. [ 489.350086][T17942] netlink: 'syz.1.3348': attribute type 1 has an invalid length. [ 489.435865][T17942] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.502020][T17955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3352'. [ 489.518327][T17955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3352'. [ 489.617979][T17950] bond2: (slave geneve3): making interface the new active one [ 489.628217][T17950] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 489.650737][T17965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3356'. [ 489.675052][T17953] dvmrp0: entered allmulticast mode [ 489.675812][T17965] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 489.690248][T17967] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3355'. [ 489.699537][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3355'. [ 490.973743][T18043] FAULT_INJECTION: forcing a failure. [ 490.973743][T18043] name failslab, interval 1, probability 0, space 0, times 0 [ 491.005546][T18043] CPU: 1 UID: 0 PID: 18043 Comm: syz.2.3380 Not tainted syzkaller #0 PREEMPT(full) [ 491.005573][T18043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.005585][T18043] Call Trace: [ 491.005593][T18043] [ 491.005601][T18043] dump_stack_lvl+0xe8/0x150 [ 491.005632][T18043] should_fail_ex+0x412/0x560 [ 491.005661][T18043] should_failslab+0xa8/0x100 [ 491.005732][T18043] __kmalloc_noprof+0xe8/0x760 [ 491.005753][T18043] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 491.005863][T18043] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 491.005889][T18043] genl_family_rcv_msg_doit+0xd9/0x330 [ 491.005908][T18043] ? __asan_memcpy+0x40/0x70 [ 491.005927][T18043] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 491.005951][T18043] ? apparmor_capable+0x126/0x170 [ 491.006046][T18043] ? bpf_lsm_capable+0x9/0x20 [ 491.006079][T18043] ? security_capable+0x7e/0x2c0 [ 491.006138][T18043] genl_rcv_msg+0x61c/0x7a0 [ 491.006162][T18043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.006180][T18043] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 491.006232][T18043] ? __lock_acquire+0x6b5/0x2cf0 [ 491.006280][T18043] netlink_rcv_skb+0x232/0x4b0 [ 491.006344][T18043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.006363][T18043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.006412][T18043] ? down_read+0x272/0x2e0 [ 491.006460][T18043] ? genl_rcv+0xd/0x40 [ 491.006476][T18043] genl_rcv+0x28/0x40 [ 491.006491][T18043] netlink_unicast+0x80f/0x9b0 [ 491.006520][T18043] ? __pfx_netlink_unicast+0x10/0x10 [ 491.006539][T18043] ? netlink_sendmsg+0x650/0xb40 [ 491.006558][T18043] ? skb_put+0x11b/0x210 [ 491.006613][T18043] netlink_sendmsg+0x813/0xb40 [ 491.006642][T18043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.006668][T18043] ? aa_sock_msg_perm+0xf1/0x1b0 [ 491.006719][T18043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.006741][T18043] ____sys_sendmsg+0x972/0x9f0 [ 491.006767][T18043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.006793][T18043] ? import_iovec+0x73/0xa0 [ 491.006836][T18043] ___sys_sendmsg+0x2a5/0x360 [ 491.006857][T18043] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.006905][T18043] ? __fget_files+0x2a/0x420 [ 491.006927][T18043] ? __fget_files+0x3a0/0x420 [ 491.006962][T18043] __x64_sys_sendmsg+0x1bd/0x2a0 [ 491.006983][T18043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.007022][T18043] ? __pfx_ksys_write+0x10/0x10 [ 491.007054][T18043] do_syscall_64+0x14d/0xf80 [ 491.007070][T18043] ? trace_irq_disable+0x3b/0x150 [ 491.007094][T18043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.007113][T18043] ? clear_bhb_loop+0x40/0x90 [ 491.007135][T18043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.007152][T18043] RIP: 0033:0x7f379bd9c799 [ 491.007170][T18043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.007186][T18043] RSP: 002b:00007f379cce8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.007205][T18043] RAX: ffffffffffffffda RBX: 00007f379c015fa0 RCX: 00007f379bd9c799 [ 491.007218][T18043] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 491.007230][T18043] RBP: 00007f379cce8090 R08: 0000000000000000 R09: 0000000000000000 [ 491.007241][T18043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.007251][T18043] R13: 00007f379c016038 R14: 00007f379c015fa0 R15: 00007ffe2a968f78 [ 491.007279][T18043] [ 491.367911][T18045] netlink: 'syz.1.3381': attribute type 11 has an invalid length. [ 491.412980][T18052] x_tables: duplicate underflow at hook 1 [ 491.434399][T18048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.689502][T18069] ksmbd: Unknown IPC event: 3, ignore. [ 491.984039][T10088] IPVS: starting estimator thread 0... [ 492.053493][T18100] netlink: 'syz.0.3394': attribute type 21 has an invalid length. [ 492.073598][T18100] netlink: 'syz.0.3394': attribute type 6 has an invalid length. [ 492.087009][T18097] IPVS: using max 34 ests per chain, 81600 per kthread [ 492.453082][T18116] syzkaller0: entered promiscuous mode [ 492.462089][T18116] syzkaller0: entered allmulticast mode [ 494.300418][T18128] vcan0: entered allmulticast mode [ 494.307719][T18128] vcan0: left allmulticast mode [ 494.314729][T18137] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 494.315888][T18139] tipc: Failed to obtain node identity [ 494.346109][T18139] tipc: Enabling of bearer rejected, failed to enable media [ 494.457184][T18147] ipt_REJECT: ECHOREPLY no longer supported. [ 494.495195][T18149] __nla_validate_parse: 19 callbacks suppressed [ 494.495214][T18149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3408'. [ 494.634970][T18165] netlink: 'syz.3.3410': attribute type 1 has an invalid length. [ 495.078321][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3418'. [ 495.169343][T18199] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 495.372388][T18208] netlink: 'syz.1.3423': attribute type 12 has an invalid length. [ 495.642998][T18227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.656172][T18228] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 495.687316][T18227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.744589][T18234] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3428'. [ 495.760975][T18237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3429'. [ 495.788792][T18228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 495.804415][T18232] vlan2: entered promiscuous mode [ 495.810612][T18232] bond5: entered promiscuous mode [ 495.816972][T18232] vlan2: entered allmulticast mode [ 495.822302][T18232] bond5: entered allmulticast mode [ 496.013717][T18246] openvswitch: netlink: Flow actions attr not present in new flow. [ 496.044667][T18249] netlink: 'syz.1.3433': attribute type 1 has an invalid length. [ 496.157407][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 496.188300][T18255] netlink: 'syz.3.3435': attribute type 2 has an invalid length. [ 496.197800][T18255] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3435'. [ 496.566748][T18278] netlink: 'syz.2.3441': attribute type 21 has an invalid length. [ 496.619158][T18278] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 496.642396][T18278] bond1 (unregistering): Released all slaves [ 496.655112][T18280] netlink: 'syz.2.3441': attribute type 21 has an invalid length. [ 496.730521][T18280] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 496.773443][T18280] bond1 (unregistering): Released all slaves [ 496.950186][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3444'. [ 497.167123][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3449'. [ 497.205360][T18303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3449'. [ 497.329174][T18318] team0: Mode changed to "broadcast" [ 497.429767][T18323] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 497.455315][T18325] veth1_to_team: entered promiscuous mode [ 497.463644][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'. [ 497.504305][T18322] veth1_to_team: left promiscuous mode [ 497.761997][T18345] netlink: 'syz.1.3463': attribute type 21 has an invalid length. [ 498.254376][T18385] netlink: 'syz.3.3473': attribute type 2 has an invalid length. [ 501.484677][T18398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.719111][T18481] __nla_validate_parse: 10 callbacks suppressed [ 501.719130][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 501.747681][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3499'. [ 501.759214][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 501.771272][T18488] netlink: 'syz.0.3501': attribute type 3 has an invalid length. [ 501.882904][T18491] netlink: 'syz.4.3502': attribute type 10 has an invalid length. [ 501.913194][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.922206][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 501.932230][T18491] team0: Port device dummy0 added [ 501.951137][T18496] netlink: 'syz.2.3504': attribute type 12 has an invalid length. [ 501.991766][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'. [ 502.099149][T18506] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3507'. [ 502.137728][T18507] x9: renamed from bridge_slave_0 (while UP) [ 502.237752][T18518] netlink: 'syz.4.3512': attribute type 3 has an invalid length. [ 502.250619][T18518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.267750][T18517] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 502.281274][T18520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3512'. [ 502.291596][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3512'. [ 502.310294][T18520] netlink: 'syz.4.3512': attribute type 2 has an invalid length. [ 502.332344][T18517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.341654][T18518] netlink: 'syz.4.3512': attribute type 2 has an invalid length. [ 502.393289][T18524] bond1: (slave gretap1): making interface the new active one [ 502.434273][T18524] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 502.450377][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3516'. [ 502.458135][T18530] netlink: 'syz.0.3515': attribute type 1 has an invalid length. [ 502.460170][T18532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3516'. [ 502.538939][T18530] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 502.547107][ T31] INFO: task udevd:5841 blocked for more than 143 seconds. [ 502.552021][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3515'. [ 502.565735][T18530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.579567][ T7501] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 502.597145][ T5157] block nbd0: Possible stuck request ffff888026aa0000: control (read@0,1024B). Runtime 330 seconds [ 502.610970][ T5157] block nbd0: Possible stuck request ffff888026aa0200: control (read@1024,1024B). Runtime 330 seconds [ 502.623342][T16407] block nbd0: Dead connection, failed to find a fallback [ 502.630975][T16407] block nbd0: shutting down sockets [ 502.636556][ T31] Not tainted syzkaller #0 [ 502.638516][T16407] blk_print_req_error: 137 callbacks suppressed [ 502.638532][T16407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.659544][ T5157] block nbd0: Possible stuck request ffff888026aa0400: control (read@2048,1024B). Runtime 330 seconds [ 502.673244][ T5157] block nbd0: Possible stuck request ffff888026aa0600: control (read@3072,1024B). Runtime 330 seconds [ 502.673739][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.685348][T16407] buffer_io_error: 138 callbacks suppressed [ 502.685363][T16407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 502.708408][T16407] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.718059][T16407] Buffer I/O error on dev nbd0, logical block 3, async page read [ 502.726878][T16407] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.736990][T16407] Buffer I/O error on dev nbd0, logical block 2, async page read [ 502.745065][T16407] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.755327][T16407] Buffer I/O error on dev nbd0, logical block 1, async page read [ 502.765022][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.775557][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 502.783542][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.794168][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read [ 502.802088][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.811687][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read [ 502.820312][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.830096][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read [ 502.838471][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.838526][ T7514] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 502.848485][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read [ 502.869051][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 502.871192][ T31] task:udevd state:R [ 502.879387][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read [ 502.880064][ T5841] ldm_validate_partition_table(): Disk read failed. [ 502.900556][ T5841] Dev nbd0: unable to read RDB block 0 [ 502.907090][ T5841] nbd0: unable to read partition table [ 502.910036][ T31] running task stack:22200 pid:5841 tgid:5841 ppid:5192 task_flags:0x40054c flags:0x00080002 [ 502.932943][ T31] Call Trace: [ 502.934121][ T5192] udevd[5192]: worker [5841] terminated by signal 9 (Killed) [ 502.950217][ T31] [ 502.952155][ T5192] udevd[5192]: worker [5841] failed while handling '/devices/virtual/block/nbd0' [ 502.953407][ T31] __schedule+0x15dd/0x52d0 [ 502.968498][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 502.973958][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.981040][ T31] ? __pfx___schedule+0x10/0x10 [ 502.986238][ T31] ? do_task_dead+0x39/0xe0 [ 502.991099][ T31] ? do_task_dead+0x39/0xe0 [ 502.995675][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 503.001610][ T31] ? do_task_dead+0x39/0xe0 [ 503.006477][ T31] ? do_task_dead+0x39/0xe0 [ 503.011119][ T31] do_task_dead+0xc6/0xe0 [ 503.015849][ T31] do_exit+0x1b2a/0x23c0 [ 503.020429][ T31] ? __kasan_slab_free+0x5c/0x80 [ 503.026323][ T31] ? kmem_cache_free+0x187/0x630 [ 503.031602][ T31] ? __pfx_do_exit+0x10/0x10 [ 503.036447][ T31] do_group_exit+0x21b/0x2d0 [ 503.041159][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 503.046850][ T31] get_signal+0x1284/0x1330 [ 503.051900][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 503.057840][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 503.064904][ T31] ? do_sys_openat2+0x14c/0x200 [ 503.069893][ T31] exit_to_user_mode_loop+0x86/0x480 [ 503.075733][ T31] ? rcu_is_watching+0x15/0xb0 [ 503.080702][ T31] do_syscall_64+0x32d/0xf80 [ 503.086137][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.092332][ T31] ? clear_bhb_loop+0x40/0x90 [ 503.097168][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.103162][ T31] RIP: 0033:0x7f5f0fea7407 [ 503.107994][ T31] RSP: 002b:00007ffe77572390 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 503.116675][ T31] RAX: 0000000000000008 RBX: 00007f5f1057f880 RCX: 00007f5f0fea7407 [ 503.124916][ T31] RDX: 00000000000a0800 RSI: 00005586af89c500 RDI: ffffffffffffff9c [ 503.133053][ T31] RBP: 00005586af887910 R08: 0000000000000000 R09: 0000000000000000 [ 503.141589][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005586af89bba0 [ 503.149633][ T31] R13: 00005586af895190 R14: 0000000000000000 R15: 00005586af89bba0 [ 503.157704][ T31] [ 503.161064][ T31] [ 503.161064][ T31] Showing all locks held in the system: [ 503.169966][ T31] 1 lock held by khungtaskd/31: [ 503.174888][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 503.185267][ T31] 2 locks held by getty/5583: [ 503.190076][ T31] #0: ffff888036d420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 503.200209][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 503.210445][ T31] 1 lock held by udevd/5840: [ 503.215222][ T31] #0: ffff888026ac3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 503.224942][ T31] 3 locks held by kworker/u8:10/7499: [ 503.230666][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 503.242464][ T31] #1: ffffc90002e67c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 503.253652][ T31] #2: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 503.263176][ T31] 2 locks held by syz.2.3518/18537: [ 503.269218][ T31] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 503.278565][ T31] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 503.289875][ T31] [ 503.292412][ T31] ============================================= [ 503.292412][ T31] [ 503.302912][ T31] NMI backtrace for cpu 1 [ 503.302932][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 503.302952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.302963][ T31] Call Trace: [ 503.302971][ T31] [ 503.302980][ T31] dump_stack_lvl+0xe8/0x150 [ 503.303011][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 503.303107][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.303144][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 503.303169][ T31] sys_info+0x135/0x170 [ 503.303216][ T31] watchdog+0xfd9/0x1030 [ 503.303246][ T31] ? watchdog+0x21a/0x1030 [ 503.303288][ T31] kthread+0x388/0x470 [ 503.303305][ T31] ? __pfx_watchdog+0x10/0x10 [ 503.303327][ T31] ? __pfx_kthread+0x10/0x10 [ 503.303346][ T31] ret_from_fork+0x51e/0xb90 [ 503.303370][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 503.303391][ T31] ? __switch_to+0xc7d/0x1450 [ 503.303414][ T31] ? __pfx_kthread+0x10/0x10 [ 503.303432][ T31] ret_from_fork_asm+0x1a/0x30 [ 503.303472][ T31] [ 503.303478][ T31] Sending NMI from CPU 1 to CPUs 0: [ 503.419133][ C0] NMI backtrace for cpu 0 [ 503.419158][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 503.419179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.419189][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 503.419223][ C0] Code: ee 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 62 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 503.419237][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 503.419251][ C0] RAX: 000000000022e1db RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 503.419261][ C0] RDX: 0000000000000001 RSI: ffffffff8def5566 RDI: ffffffff8c27b580 [ 503.419272][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 503.419282][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901196b0 [ 503.419293][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 503.419303][ C0] FS: 0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 503.419315][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.419325][ C0] CR2: 00005586af89e520 CR3: 0000000075f44000 CR4: 00000000003526f0 [ 503.419338][ C0] Call Trace: [ 503.419344][ C0] [ 503.419350][ C0] default_idle+0x9/0x20 [ 503.419365][ C0] default_idle_call+0x72/0xb0 [ 503.419395][ C0] do_idle+0x1bd/0x500 [ 503.419449][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 503.419472][ C0] ? __pfx_do_idle+0x10/0x10 [ 503.419495][ C0] cpu_startup_entry+0x43/0x60 [ 503.419513][ C0] rest_init+0x2de/0x300 [ 503.419531][ C0] start_kernel+0x385/0x3d0 [ 503.419586][ C0] x86_64_start_reservations+0x24/0x30 [ 503.419683][ C0] x86_64_start_kernel+0x143/0x1c0 [ 503.419698][ C0] common_startup_64+0x13e/0x147 [ 503.419721][ C0] [ 503.612543][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 503.620741][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 503.630472][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.640837][ T31] Call Trace: [ 503.644402][ T31] [ 503.647360][ T31] vpanic+0x56c/0xa60 [ 503.651377][ T31] ? __pfx___schedule+0x10/0x10 [ 503.656245][ T31] ? __pfx_vpanic+0x10/0x10 [ 503.660992][ T31] ? __pfx_console_unlock+0x10/0x10 [ 503.666286][ T31] panic+0xc5/0xd0 [ 503.670027][ T31] ? __pfx_panic+0x10/0x10 [ 503.674634][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 503.680418][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 503.686730][ T31] watchdog+0x1023/0x1030 [ 503.691202][ T31] ? watchdog+0x21a/0x1030 [ 503.695651][ T31] kthread+0x388/0x470 [ 503.699922][ T31] ? __pfx_watchdog+0x10/0x10 [ 503.704637][ T31] ? __pfx_kthread+0x10/0x10 [ 503.709350][ T31] ret_from_fork+0x51e/0xb90 [ 503.713981][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 503.719285][ T31] ? __switch_to+0xc7d/0x1450 [ 503.724142][ T31] ? __pfx_kthread+0x10/0x10 [ 503.729011][ T31] ret_from_fork_asm+0x1a/0x30 [ 503.733897][ T31] [ 503.737538][ T31] Kernel Offset: disabled [ 503.742056][ T31] Rebooting in 86400 seconds..